$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f40aa3f-2702-44df-96d3-c95e3159f70c.roa File: 2f40aa3f-2702-44df-96d3-c95e3159f70c.roa (raw, json) Hash identifier: MF5Pd8diL3udINMQ592spsvMN+ddhOQEr+bdnFR+R/E= Subject key identifier: DB:E5:00:40:8D:B5:3A:96:C9:51:0C:17:C7:3C:90:95:46:E2:44:86 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D16771D511D97D45D1DB09ED11F883E7FDFA091 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f40aa3f-2702-44df-96d3-c95e3159f70c.roa Signing time: Fri 29 Aug 2025 15:10:19 +0000 ROA not before: Fri 29 Aug 2025 15:10:19 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f61:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:16:77:1d:51:1d:97:d4:5d:1d:b0:9e:d1:1f:88:3e:7f:df:a0:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 15:10:19 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=86c2c648784351b568d0bf62b93c531a5d4886cb3646b7b70d69b80d5c366870, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:eb:0d:a6:ef:bb:78:99:3a:b8:75:0b:64:8b: 64:00:a2:2e:d1:bc:8d:73:14:05:49:e3:dd:7d:17: e7:90:f9:ca:14:db:68:17:24:09:67:f0:30:ab:24: 96:48:fd:69:b1:6b:0b:50:8d:8f:9f:01:f5:97:88: 23:e2:77:cb:df:3b:d4:38:dd:d7:81:bb:16:07:84: 8b:69:b6:b8:75:32:86:ea:20:ec:1a:52:a6:90:18: de:0d:a2:ec:c7:50:ce:ad:1d:c3:6f:9d:db:4e:f0: fa:a9:5c:d6:32:4c:d2:f5:4f:6b:66:56:c0:14:f8: b2:c6:9b:a4:0d:c6:89:bc:49:af:6e:c1:f4:68:c4: 25:74:11:79:5c:59:a1:39:bf:b6:f0:18:f9:e5:74: 9d:c5:1f:68:f3:20:0d:6f:d0:7f:02:9b:a3:ed:f8: 50:22:b8:36:ef:01:fd:3a:cc:09:6e:f3:7e:a1:35: 6c:e3:1a:e3:83:bc:5d:30:1c:15:ff:e7:d0:dc:fa: ee:37:fa:6e:74:8b:dc:f1:f2:80:23:1c:7a:2a:4f: 6e:c6:cc:be:90:f5:40:9e:f1:b1:2f:0b:35:94:e2: 9d:da:3c:a4:ad:bb:21:06:71:ad:ce:30:fd:f7:20: e7:b8:65:5c:df:b3:d0:94:36:ad:61:49:90:8f:ee: e4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E5:00:40:8D:B5:3A:96:C9:51:0C:17:C7:3C:90:95:46:E2:44:86 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f40aa3f-2702-44df-96d3-c95e3159f70c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:5000::/40 Signature Algorithm: sha256WithRSAEncryption 07:c7:34:46:9d:90:e3:1a:07:4c:af:de:15:ea:15:c3:89:0f: 82:56:6d:a3:52:1b:2e:b8:69:d0:96:18:d7:5e:84:b4:08:2e: 92:41:92:0f:0a:3c:0d:d0:7d:8b:f6:db:0e:2d:2d:05:1d:0e: b6:02:27:7c:b5:fa:78:36:1e:ab:e2:42:b1:1e:a1:95:3c:e0: 9d:37:f9:5d:3a:49:e7:7a:12:0f:83:ca:6b:6b:2e:95:a3:8b: 95:96:01:5a:eb:66:b6:b0:e3:87:dc:7c:8d:b9:e0:ee:bf:b4: 47:21:49:eb:85:59:e0:eb:84:56:a6:f3:29:d4:80:b6:33:15: 0e:83:cc:d5:af:c3:20:79:4f:5e:32:d0:a7:96:84:43:f4:3b: fa:a7:cb:d3:e6:06:b5:d2:8e:6e:07:2e:01:76:2c:8b:19:e5: 6f:3f:a0:38:b1:fd:cb:48:e8:f9:af:f9:4c:72:54:b3:c4:04: 11:72:28:c3:3f:b7:39:c3:b4:36:07:99:dd:58:84:fa:5f:a7: 92:d9:47:45:7e:16:44:43:c1:98:44:cf:10:c2:03:19:36:bb: 45:f9:4c:9d:fc:f2:32:02:58:9a:ed:f6:79:31:60:78:7f:35: 40:df:9c:ea:bd:5b:7d:a3:de:58:94:4c:5a:9d:40:df:e3:6b: 2b:1d:40:e2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXRZ3HVEdl9RdHbCe0R+IPn/foJEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTUxMDE5WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmMyYzY0ODc4NDM1MWI1NjhkMGJmNjJiOTNjNTMxYTVk NDg4NmNiMzY0NmI3YjcwZDY5YjgwZDVjMzY2ODcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm6w2m77t4mTq4dQtki2QAoi7RvI1zFAVJ4919F+eQ+coU 22gXJAln8DCrJJZI/WmxawtQjY+fAfWXiCPid8vfO9Q43deBuxYHhItptrh1Mobq IOwaUqaQGN4NouzHUM6tHcNvndtO8PqpXNYyTNL1T2tmVsAU+LLGm6QNxom8Sa9u wfRoxCV0EXlcWaE5v7bwGPnldJ3FH2jzIA1v0H8Cm6Pt+FAiuDbvAf06zAlu836h NWzjGuODvF0wHBX/59Dc+u43+m50i9zx8oAjHHoqT27GzL6Q9UCe8bEvCzWU4p3a PKStuyEGca3OMP33IOe4ZVzfs9CUNq1hSZCP7uRFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2+UAQI21OpbJUQwXxzyQlUbiRIYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmNDBhYTNmLTI3MDItNDRkZi05NmQzLWM5NWUzMTU5ZjcwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9hUDANBgkqhkiG9w0BAQsFAAOCAQEAB8c0Rp2Q4xoHTK/eFeoVw4kP glZto1IbLrhp0JYY116EtAgukkGSDwo8DdB9i/bbDi0tBR0OtgInfLX6eDYeq+JC sR6hlTzgnTf5XTpJ53oSD4PKa2sulaOLlZYBWutmtrDjh9x8jbng7r+0RyFJ64VZ 4OuEVqbzKdSAtjMVDoPM1a/DIHlPXjLQp5aEQ/Q7+qfL0+YGtdKObgcuAXYsixnl bz+gOLH9y0jo+a/5THJUs8QEEXIowz+3OcO0NgeZ3ViE+l+nktlHRX4WREPBmETP EMIDGTa7RflMnfzyMgJYmu32eTFgeH81QN+c6r1bfaPeWJRMWp1A3+NrKx1A4g== -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:27 2025 by rpki-client