$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30cbe1b6-baaa-49f5-a6dd-5e4a1e626cb5.roa File: 30cbe1b6-baaa-49f5-a6dd-5e4a1e626cb5.roa (raw, json) Hash identifier: plhMFI/Zggp9ijyhOBwi9Ur5HBmqhl10y6+msXIILcI= Subject key identifier: A9:E1:88:56:8B:61:F8:FD:07:7E:D4:94:F7:4C:A4:68:00:28:F8:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3471A6466378DB6EC3246511443DD85C5FF61F29 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30cbe1b6-baaa-49f5-a6dd-5e4a1e626cb5.roa Signing time: Sat 06 Sep 2025 00:10:48 +0000 ROA not before: Sat 06 Sep 2025 00:10:48 +0000 ROA not after: Sat 11 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:71:a6:46:63:78:db:6e:c3:24:65:11:44:3d:d8:5c:5f:f6:1f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 6 00:10:48 2025 GMT Not After : Oct 11 23:59:59 2025 GMT Subject: serialNumber=3dca7f20064a8ce97891f5fcfcb83f8f73e00f2325bffd6c3f84e35ce853471b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:41:dd:a6:1f:f3:fb:3d:9e:54:e0:95:95: 98:98:d1:5b:ed:b8:53:a8:b2:2b:50:4d:1e:ad:0e: 60:c0:81:17:67:67:54:e1:b8:2b:06:a5:da:49:87: 24:72:a7:0e:67:f8:46:4b:b0:ef:be:a5:f7:c9:85: 48:0c:31:3d:10:3f:07:70:da:bb:8f:45:32:96:16: fb:d7:fe:9e:3c:d8:3c:33:d6:c8:d7:ad:32:51:37: 3e:73:64:4d:17:e4:5f:5b:8c:29:90:6d:03:a3:e6: b3:84:4e:37:ed:94:c3:da:7e:4a:fb:ae:5a:a9:6e: 22:5c:31:6d:1f:1e:ce:a6:b7:1d:4e:5f:4b:fb:57: 93:b0:63:7f:04:13:3a:06:97:e1:f1:62:bd:14:97: 46:38:ca:8b:79:f6:9e:16:be:18:03:96:f8:32:bb: ac:13:fc:d1:32:fc:a9:66:da:d4:a7:ac:ea:79:9a: 59:45:8f:3b:03:2c:f8:ae:1d:14:f6:33:19:62:81: 81:29:b0:5e:05:dc:c3:f5:a7:4d:35:ed:f4:3c:b8: 20:8d:41:0b:33:cf:f5:b1:22:05:36:da:1c:51:da: 5b:ed:a9:24:f6:5b:2f:2c:c0:19:51:bd:ad:60:75: 31:1a:3c:fa:29:74:18:e5:22:d6:55:1f:8f:33:d0: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E1:88:56:8B:61:F8:FD:07:7E:D4:94:F7:4C:A4:68:00:28:F8:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30cbe1b6-baaa-49f5-a6dd-5e4a1e626cb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01::/32 Signature Algorithm: sha256WithRSAEncryption 27:e2:38:e0:c4:5b:9b:af:f0:be:1c:04:d7:82:41:12:3b:ae: b2:8e:ea:1f:4d:d4:64:7e:54:03:9b:fa:ec:03:8b:d3:c3:c4: 1e:40:03:35:b8:3d:a7:b2:cc:1b:88:fe:9c:53:76:40:bb:37: b3:f6:db:2f:3f:2e:7b:8c:7d:67:0a:7b:34:aa:15:5f:ea:01: ce:dc:d5:63:3b:8b:07:b7:75:02:b7:63:12:07:4e:d4:73:5e: 6c:a4:3a:c3:2d:92:cd:fc:56:b6:c2:26:dd:7a:4c:ee:fc:9c: 88:0d:a0:55:cb:be:6a:90:f9:49:b4:85:fe:d5:c4:4b:0c:e4: 89:91:a8:5d:61:25:72:8f:5e:7d:d1:2f:fa:70:7a:04:be:0a: f5:71:92:42:ba:e6:31:9a:09:4c:4f:6f:ed:2f:f2:8a:f3:7c: 25:10:81:14:ac:46:a6:5f:3b:a7:16:0d:aa:f5:07:0f:f7:7e: c1:1a:7d:60:aa:ed:bb:c8:30:d2:a8:2a:19:8e:0d:0b:23:08: 34:32:27:aa:b4:15:4f:71:3c:cc:69:c4:b3:d7:57:4f:42:11: 32:97:e3:83:0b:a6:39:12:a5:e4:79:f0:e2:df:eb:55:35:0b: f0:2b:bb:01:ee:32:41:2a:da:ce:05:4e:32:ce:35:4b:d5:3a: 86:1b:49:e5 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUNHGmRmN4227DJGURRD3YXF/2HykwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA2MDAxMDQ4WhcNMjUxMDExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZGNhN2YyMDA2NGE4Y2U5Nzg5MWY1ZmNmY2I4M2Y4Zjcz ZTAwZjIzMjViZmZkNmMzZjg0ZTM1Y2U4NTM0NzFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWYUHdph/z+z2eVOCVlZiY0VvtuFOositQTR6tDmDAgRdn Z1ThuCsGpdpJhyRypw5n+EZLsO++pffJhUgMMT0QPwdw2ruPRTKWFvvX/p482Dwz 1sjXrTJRNz5zZE0X5F9bjCmQbQOj5rOETjftlMPafkr7rlqpbiJcMW0fHs6mtx1O X0v7V5OwY38EEzoGl+HxYr0Ul0Y4yot59p4WvhgDlvgyu6wT/NEy/Klm2tSnrOp5 mllFjzsDLPiuHRT2MxligYEpsF4F3MP1p0017fQ8uCCNQQszz/WxIgU22hxR2lvt qST2Wy8swBlRva1gdTEaPPopdBjlItZVH48z0EE5AgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUqeGIVoth+P0HftSU90ykaAAo+DcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwY2JlMWI2LWJhYWEtNDlmNS1hNmRkLTVlNGExZTYyNmNiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB8BMA0GCSqGSIb3DQEBCwUAA4IBAQAn4jjgxFubr/C+HATXgkESO66y juofTdRkflQDm/rsA4vTw8QeQAM1uD2nsswbiP6cU3ZAuzez9tsvPy57jH1nCns0 qhVf6gHO3NVjO4sHt3UCt2MSB07Uc15spDrDLZLN/Fa2wibdekzu/JyIDaBVy75q kPlJtIX+1cRLDOSJkahdYSVyj1590S/6cHoEvgr1cZJCuuYxmglMT2/tL/KK83wl EIEUrEamXzunFg2q9QcP937BGn1gqu27yDDSqCoZjg0LIwg0MieqtBVPcTzMacSz 11dPQhEyl+ODC6Y5EqXkefDi3+tVNQvwK7sB7jJBKtrOBU4yzjVL1TqGG0nl -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:06 2025 by rpki-client