$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a449135-c516-4aaa-b067-5bec206a74d0.roa File: 1a449135-c516-4aaa-b067-5bec206a74d0.roa (raw, json) Hash identifier: c7MPd8NTf7YoCpHvOkJhTjUSglrzO6T6vGKW2b9SxcM= Subject key identifier: 47:2C:D2:10:89:10:0E:07:60:C4:07:02:97:43:B7:C7:E1:67:81:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 381121367254EFFF601A805145BD20C9DBBA6620 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a449135-c516-4aaa-b067-5bec206a74d0.roa Signing time: Tue 26 Aug 2025 15:21:18 +0000 ROA not before: Tue 26 Aug 2025 15:21:18 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f38:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:11:21:36:72:54:ef:ff:60:1a:80:51:45:bd:20:c9:db:ba:66:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:21:18 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=e76faf34ec09ca09f386889ce2b1276d580c866c0a876e175d33a2fc870e02ff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:36:f6:7c:d8:f8:9a:34:a7:26:10:ac:16:b2: 75:84:57:6f:61:00:3b:b7:28:3f:3e:ee:cb:0f:2a: 41:7b:46:cd:93:e1:67:b3:ef:f1:47:27:b6:5d:6a: 25:2a:ad:c5:dd:10:db:8c:15:19:5e:66:c9:21:a0: 2b:88:62:a9:b3:5e:d9:3f:5a:ef:9b:28:72:56:73: a9:d2:4c:f4:34:d9:6c:36:c0:6e:63:fc:1a:11:67: 51:34:79:8c:c2:59:c3:52:f5:39:a7:78:61:5c:fd: 5d:78:3e:00:c9:e0:56:64:9c:14:17:55:3d:9f:dc: c3:23:a4:02:3a:42:ed:ab:bd:e0:1e:48:4d:3c:17: ea:86:ca:8f:e2:55:cc:ca:61:a5:1a:db:2f:c0:c0: 44:28:f1:48:d1:f7:ef:a0:6b:01:39:3b:b7:23:fa: eb:2e:92:a9:eb:e5:fc:f0:de:08:91:ac:0a:a0:26: 2b:49:5d:47:10:66:3d:a5:52:18:d1:45:3a:c5:72: c6:28:43:bf:b5:ce:b8:df:b9:fa:fe:b2:b2:05:2a: e4:13:b2:36:89:27:af:a2:ef:f3:1d:a1:db:45:58: 41:ac:b4:30:31:f2:26:59:4b:00:45:b7:74:84:0c: 73:8d:8f:44:79:93:83:7b:73:94:9a:cf:49:e4:ac: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2C:D2:10:89:10:0E:07:60:C4:07:02:97:43:B7:C7:E1:67:81:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a449135-c516-4aaa-b067-5bec206a74d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:8080::/48 Signature Algorithm: sha256WithRSAEncryption 37:22:ff:c1:4f:b6:08:e3:c1:29:14:da:73:3c:3c:10:06:89: 4a:b9:85:a0:ae:cf:78:33:c1:1a:21:30:85:f7:fa:8b:e0:23: 2e:54:44:a5:f7:1b:08:1a:37:c6:52:69:8f:29:b5:2b:21:8a: 8f:41:ab:6a:aa:a0:9f:81:8b:82:44:33:15:f5:4e:cc:25:5b: dd:61:5c:d5:ae:68:f8:4c:dd:17:62:7f:8a:fa:bc:f1:d4:23: 01:23:56:8f:74:15:85:6b:2f:11:42:26:54:7a:ae:63:cb:67: 94:47:13:13:d6:ef:a3:35:53:45:f3:f7:7a:5d:c8:fe:e5:6f: 49:c4:47:c3:13:98:70:30:0e:75:7a:51:19:99:a2:c4:0c:22: 61:92:88:aa:fd:c3:5f:68:95:4f:47:4c:34:f5:1d:29:89:6f: ce:41:fa:8e:78:8f:44:9d:7b:d8:cc:4a:fa:8a:34:d0:52:27: 40:bf:93:63:ca:8c:12:6c:ad:10:1f:1f:2e:99:53:67:6a:20: cf:d4:f8:de:c1:d5:2a:cd:e6:d4:11:f4:e6:66:48:b2:46:ae: 62:38:0a:79:46:79:81:b6:31:03:93:c6:2c:ee:0e:67:5f:e8: f1:aa:f1:9e:94:af:52:f0:e7:64:33:bc:fe:74:bf:58:db:bc: 9c:d7:1c:52 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOBEhNnJU7/9gGoBRRb0gydu6ZiAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUyMTE4WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzZmYWYzNGVjMDljYTA5ZjM4Njg4OWNlMmIxMjc2ZDU4 MGM4NjZjMGE4NzZlMTc1ZDMzYTJmYzg3MGUwMmZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbNvZ82PiaNKcmEKwWsnWEV29hADu3KD8+7ssPKkF7Rs2T 4Wez7/FHJ7ZdaiUqrcXdENuMFRleZskhoCuIYqmzXtk/Wu+bKHJWc6nSTPQ02Ww2 wG5j/BoRZ1E0eYzCWcNS9TmneGFc/V14PgDJ4FZknBQXVT2f3MMjpAI6Qu2rveAe SE08F+qGyo/iVczKYaUa2y/AwEQo8UjR9++gawE5O7cj+usukqnr5fzw3giRrAqg JitJXUcQZj2lUhjRRTrFcsYoQ7+1zrjfufr+srIFKuQTsjaJJ6+i7/MdodtFWEGs tDAx8iZZSwBFt3SEDHONj0R5k4N7c5Saz0nkrGBVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURyzSEIkQDgdgxAcCl0O3x+FngekwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhNDQ5MTM1LWM1MTYtNGFhYS1iMDY3LTViZWMyMDZhNzRkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84gIAwDQYJKoZIhvcNAQELBQADggEBADci/8FPtgjjwSkU2nM8PBAG iUq5haCuz3gzwRohMIX3+ovgIy5URKX3GwgaN8ZSaY8ptSshio9Bq2qqoJ+Bi4JE MxX1TswlW91hXNWuaPhM3Rdif4r6vPHUIwEjVo90FYVrLxFCJlR6rmPLZ5RHExPW 76M1U0Xz93pdyP7lb0nER8MTmHAwDnV6URmZosQMImGSiKr9w19olU9HTDT1HSmJ b85B+o54j0Sde9jMSvqKNNBSJ0C/k2PKjBJsrRAfHy6ZU2dqIM/U+N7B1SrN5tQR 9OZmSLJGrmI4CnlGeYG2MQOTxizuDmdf6PGq8Z6Ur1Lw52QzvP50v1jbvJzXHFI= -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:09 2025 by rpki-client