$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a3256e1-07c1-45cc-9223-db5bf08f2539.roa File: 1a3256e1-07c1-45cc-9223-db5bf08f2539.roa (raw, json) Hash identifier: YsnzvhS+071VFr/ybIFmQZJ8ku9uJigkeWRHua0ldNo= Subject key identifier: 3F:95:D6:0D:B9:FB:DD:FC:D5:28:C8:BB:E6:A7:22:3D:78:1B:E8:BF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07A8DB0573D8443E56ECB9831B81FB21B66148E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a3256e1-07c1-45cc-9223-db5bf08f2539.roa Signing time: Fri 29 Aug 2025 16:11:51 +0000 ROA not before: Fri 29 Aug 2025 16:11:51 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f28:c000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a8:db:05:73:d8:44:3e:56:ec:b9:83:1b:81:fb:21:b6:61:48:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:11:51 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=51b390d5818e7ec07ad099b50543f536c4aecab3e7659476a5f130a109cb6a2e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:af:eb:9d:23:79:28:8a:dd:d6:c8:2e:0f: 45:c5:55:6f:24:52:b4:bd:82:09:8c:f7:a0:02:79: db:58:11:81:c8:c2:bb:9b:37:c8:4d:3e:75:37:5c: 41:4b:f5:15:a4:74:bd:f0:1b:2f:9a:29:4f:f0:4c: 9d:22:31:16:c7:af:fe:3b:db:17:f1:e3:cf:56:fb: 39:da:49:da:69:ad:ec:7c:45:6d:98:59:11:ef:87: af:b5:43:de:d3:57:00:09:b1:20:2c:88:1c:93:f0: 0b:27:f2:f3:53:bf:f1:92:0c:e0:c3:1c:32:77:fa: d2:0c:c7:4f:7e:8f:32:a9:fa:4f:91:fe:e1:0d:0b: 82:c9:f2:54:04:e1:1e:67:b0:6d:aa:a9:c1:3b:02: 84:eb:e2:f6:ea:50:23:9a:e6:a1:6b:7a:e6:48:a3: c9:88:25:70:45:d7:5c:67:25:1e:08:e1:67:78:72: 54:9c:b7:0b:0e:b6:6b:76:f5:69:78:eb:b0:13:39: a8:aa:88:70:64:f5:82:7a:5f:d7:47:ca:27:e9:70: b5:fa:6c:70:91:b6:01:94:7c:44:08:24:b1:6c:43: d5:c0:40:f9:bd:da:dc:1c:db:ea:48:5b:7f:aa:22: c1:9d:19:02:63:ff:93:78:5e:03:bd:fb:78:e1:b6: 93:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:95:D6:0D:B9:FB:DD:FC:D5:28:C8:BB:E6:A7:22:3D:78:1B:E8:BF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a3256e1-07c1-45cc-9223-db5bf08f2539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f28:c000::/37 Signature Algorithm: sha256WithRSAEncryption 19:af:a6:8e:f1:ac:f0:13:5a:f7:63:a9:86:00:41:43:ad:56: 7f:9c:30:e3:5a:81:2a:5d:db:f4:63:23:1e:ef:c0:7e:c8:e1: b0:d0:f2:d5:0b:24:6c:76:b5:06:c7:d9:1d:88:bd:b3:cd:17: 85:8f:69:5c:d0:41:ef:0f:b2:75:f8:21:9d:cc:a2:4a:e2:11: 36:9f:ef:bf:5f:a2:df:75:24:01:77:79:51:bc:30:4d:30:93: a4:0e:be:2d:27:19:48:61:1a:63:3e:17:69:32:ba:97:ac:56: 77:43:3c:03:25:57:7a:f7:0d:1d:5c:48:bb:6a:8f:93:82:fe: f5:9e:b1:9e:b2:24:13:a0:d6:0a:f7:2f:3b:88:04:eb:a1:6d: be:3e:87:de:2f:ec:8f:86:a5:eb:e2:93:fc:dc:d6:1d:d7:6c: d4:89:4b:1d:94:d8:89:43:50:18:c1:1a:7f:df:a9:25:fd:92: 5c:ec:5d:1c:31:f5:f0:10:e3:b4:33:5d:34:a6:be:98:79:63: d5:3e:96:9d:fa:e1:00:16:5d:92:bb:ee:8d:d4:65:bb:c3:5d: d6:68:4d:e5:f9:b0:ca:a7:5d:7b:86:49:59:55:ff:f1:6c:68: 21:75:ac:77:0e:d8:6a:19:75:ab:f4:2c:d3:1b:e2:3f:2f:80: 64:f4:88:be -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUB6jbBXPYRD5W7LmDG4H7IbZhSOkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYxMTUxWhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWIzOTBkNTgxOGU3ZWMwN2FkMDk5YjUwNTQzZjUzNmM0 YWVjYWIzZTc2NTk0NzZhNWYxMzBhMTA5Y2I2YTJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGQa/rnSN5KIrd1sguD0XFVW8kUrS9ggmM96ACedtYEYHI wrubN8hNPnU3XEFL9RWkdL3wGy+aKU/wTJ0iMRbHr/472xfx489W+znaSdpprex8 RW2YWRHvh6+1Q97TVwAJsSAsiByT8Asn8vNTv/GSDODDHDJ3+tIMx09+jzKp+k+R /uENC4LJ8lQE4R5nsG2qqcE7AoTr4vbqUCOa5qFreuZIo8mIJXBF11xnJR4I4Wd4 clSctwsOtmt29Wl467ATOaiqiHBk9YJ6X9dHyifpcLX6bHCRtgGUfEQIJLFsQ9XA QPm92twc2+pIW3+qIsGdGQJj/5N4XgO9+3jhtpNpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUP5XWDbn73fzVKMi75qciPXgb6L8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhMzI1NmUxLTA3YzEtNDVjYy05MjIzLWRiNWJmMDhmMjUzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8owDANBgkqhkiG9w0BAQsFAAOCAQEAGa+mjvGs8BNa92OphgBBQ61W f5ww41qBKl3b9GMjHu/AfsjhsNDy1QskbHa1BsfZHYi9s80XhY9pXNBB7w+ydfgh ncyiSuIRNp/vv1+i33UkAXd5UbwwTTCTpA6+LScZSGEaYz4XaTK6l6xWd0M8AyVX evcNHVxIu2qPk4L+9Z6xnrIkE6DWCvcvO4gE66Ftvj6H3i/sj4al6+KT/NzWHdds 1IlLHZTYiUNQGMEaf9+pJf2SXOxdHDH18BDjtDNdNKa+mHlj1T6WnfrhABZdkrvu jdRlu8Nd1mhN5fmwyqdde4ZJWVX/8WxoIXWsdw7Yahl1q/Qs0xviPy+AZPSIvg== -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:49 2025 by rpki-client