$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa File: 2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa (raw, json) Hash identifier: gB1kyE31+OBKFYYwTxQ+KhAG8HNgEDJTNc4E6Eka7CQ= Subject key identifier: 93:F9:4E:56:E5:1C:03:7E:D4:96:04:11:EE:C0:B5:65:B2:49:79:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 218AC0DB83DEF4356E51ACD0E127ADF1317D1403 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa Signing time: Mon 01 Sep 2025 15:21:20 +0000 ROA not before: Mon 01 Sep 2025 15:21:20 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fef:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8a:c0:db:83:de:f4:35:6e:51:ac:d0:e1:27:ad:f1:31:7d:14:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:21:20 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=838137d270db62e4852de11fc8ccdd1c859b32835b5296650656c6c5528c8b0a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:34:2a:c0:38:d1:52:0e:b3:a8:e2:b3:d7: 88:5d:d0:11:a5:f5:73:d8:73:1a:bf:42:57:56:e4: 45:70:da:5e:b3:e2:34:5c:88:e7:6a:93:54:d2:23: 35:f3:0d:32:6c:b2:ec:aa:7f:82:e6:17:d7:70:5f: 1f:38:12:ef:a7:90:8e:9e:ef:65:11:26:b3:8c:ec: 38:59:67:ec:1e:85:2f:20:df:6e:8e:5f:a8:ba:7e: 3b:da:d9:58:d0:ff:0b:7a:ff:56:d9:8d:5e:7d:69: 1c:4c:10:c1:bf:dc:44:3c:6e:c4:b2:6a:e7:e4:c8: 0b:d5:be:9d:6f:48:3d:7e:55:4f:76:f4:6d:62:93: b9:38:c9:d0:50:5b:ff:75:8c:8d:97:75:ce:ad:83: db:8f:f1:64:b2:85:cd:ad:8e:6a:fb:5b:7c:27:42: 1e:6f:02:d4:67:c5:a6:0e:98:60:7b:74:64:6b:9f: 7a:62:2a:b0:1b:93:d2:96:77:54:54:41:ab:14:ac: 05:54:05:64:fd:9a:cb:85:36:fe:8c:27:65:b3:06: 5a:b8:64:af:d8:02:c7:eb:0c:a9:5f:c8:55:d5:6b: 20:4f:53:91:f1:8d:60:ff:0c:28:95:42:0c:af:8b: 46:19:74:67:ee:44:9c:49:a9:cb:ca:b1:1b:8c:6c: 89:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F9:4E:56:E5:1C:03:7E:D4:96:04:11:EE:C0:B5:65:B2:49:79:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:5000::/40 Signature Algorithm: sha256WithRSAEncryption 6d:66:85:41:18:7b:42:25:d5:9a:2a:31:1f:17:eb:7c:20:80: 7d:e8:b2:9c:83:e5:2c:dc:45:05:9f:0c:27:e4:a6:b7:ac:57: 0b:05:94:8a:49:82:31:d6:80:9a:f0:b9:8d:8b:a7:fa:b0:7d: 5f:57:6d:ce:37:ec:72:05:eb:13:e2:6e:2d:24:91:14:d8:f0: ce:83:83:84:e6:37:fb:98:a9:58:4e:c3:6c:89:fe:42:4e:17: 99:c2:2d:c2:10:2d:86:88:6a:87:7e:87:02:74:f1:59:47:e4: e4:1a:f6:7d:6e:fa:ca:de:c5:3a:30:2d:1f:31:c8:28:4a:4c: 7a:57:bc:2c:fe:85:cf:99:89:83:5f:e8:5d:1e:ef:40:4b:f6: 81:5f:35:06:31:82:96:2f:c7:c1:1b:af:4e:88:8c:4b:43:51: f0:92:c0:3b:0d:98:5a:82:ac:a2:df:e5:90:de:dc:2d:44:eb: 01:65:2d:ce:d2:88:d8:0a:63:6d:ec:e9:6b:c2:7a:95:93:e7: 1f:08:0c:6b:1d:45:90:d3:0f:fc:38:b1:0a:0a:14:ff:fc:17: 68:8e:41:fc:11:a6:ea:35:3f:a0:48:cc:4e:04:e5:08:9d:33: 4b:75:bc:3d:ad:03:84:dc:a1:1e:9a:cf:bb:66:f4:56:5a:b3: 46:d8:ac:d3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUIYrA24Pe9DVuUazQ4Set8TF9FAMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTUyMTIwWhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzgxMzdkMjcwZGI2MmU0ODUyZGUxMWZjOGNjZGQxYzg1 OWIzMjgzNWI1Mjk2NjUwNjU2YzZjNTUyOGM4YjBhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8DTQqwDjRUg6zqOKz14hd0BGl9XPYcxq/QldW5EVw2l6z 4jRciOdqk1TSIzXzDTJssuyqf4LmF9dwXx84Eu+nkI6e72URJrOM7DhZZ+wehS8g 326OX6i6fjva2VjQ/wt6/1bZjV59aRxMEMG/3EQ8bsSyaufkyAvVvp1vSD1+VU92 9G1ik7k4ydBQW/91jI2Xdc6tg9uP8WSyhc2tjmr7W3wnQh5vAtRnxaYOmGB7dGRr n3piKrAbk9KWd1RUQasUrAVUBWT9msuFNv6MJ2WzBlq4ZK/YAsfrDKlfyFXVayBP U5HxjWD/DCiVQgyvi0YZdGfuRJxJqcvKsRuMbImnAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUk/lOVuUcA37UlgQR7sC1ZbJJebcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZmQyNzlkLTUzYzMtNDdkOS1hMjgyLWMxZjI0OWIyYTVmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vUDANBgkqhkiG9w0BAQsFAAOCAQEAbWaFQRh7QiXVmioxHxfrfCCA feiynIPlLNxFBZ8MJ+Smt6xXCwWUikmCMdaAmvC5jYun+rB9X1dtzjfscgXrE+Ju LSSRFNjwzoODhOY3+5ipWE7DbIn+Qk4XmcItwhAthohqh36HAnTxWUfk5Br2fW76 yt7FOjAtHzHIKEpMele8LP6Fz5mJg1/oXR7vQEv2gV81BjGCli/HwRuvToiMS0NR 8JLAOw2YWoKsot/lkN7cLUTrAWUtztKI2Apjbezpa8J6lZPnHwgMax1FkNMP/Dix CgoU//wXaI5B/BGm6jU/oEjMTgTlCJ0zS3W8Pa0DhNyhHprPu2b0VlqzRtis0w== -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:32 2025 by rpki-client