$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3356d24b-fc8c-4c45-9f79-7168e2b6ee25.roa File: 3356d24b-fc8c-4c45-9f79-7168e2b6ee25.roa (raw, json) Hash identifier: S/50iXpaEWVMhehlUFemvCzt0FkDCL0cdx5rm9vlcQI= Subject key identifier: 22:45:FE:0F:AC:2D:99:F5:3B:6F:3E:56:22:93:E4:6E:22:F7:16:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 226978F01987C276AA9961CEF0BBB04877BBD50C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3356d24b-fc8c-4c45-9f79-7168e2b6ee25.roa Signing time: Tue 26 Aug 2025 16:51:02 +0000 ROA not before: Tue 26 Aug 2025 16:51:02 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:4050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:69:78:f0:19:87:c2:76:aa:99:61:ce:f0:bb:b0:48:77:bb:d5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:51:02 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=3188b20c55897c864e593445473e35401cf0cb1982da363602976af7d2e8e2ee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:55:c7:8c:7d:d6:55:84:91:c4:62:ce:39:db: 04:c1:cd:2a:ac:4a:f6:2f:0f:57:80:a4:02:10:fe: b6:43:8c:39:23:a4:bb:5f:2f:30:36:93:7d:2f:d8: 77:dd:0d:82:fa:ec:fa:7c:35:6a:7b:5b:db:98:a1: c5:77:57:db:1f:94:05:59:e7:28:d8:1a:e3:55:34: 93:8c:c5:24:fb:59:d0:38:c6:f7:8b:ca:92:04:8d: 54:75:63:25:58:0b:94:7c:8b:f0:ea:1d:6d:96:8e: a7:d7:a8:e5:3b:d6:35:41:d4:ff:65:a8:a2:35:0b: b2:c5:99:5d:61:a8:eb:5f:1d:ee:42:43:eb:e1:b3: 54:61:5c:99:a0:2c:4d:eb:cd:ff:ce:35:a4:22:21: 8d:74:5f:5f:5c:70:60:9f:ab:c2:e8:6b:c7:77:26: 6d:f8:c9:a6:d1:be:26:f5:4a:3a:d0:8b:85:a1:fb: 0f:d8:0f:14:73:cd:68:4d:d6:11:91:67:8b:76:b4: 46:ff:c8:7a:68:cc:a8:b7:86:52:c7:52:25:22:38: ff:e8:4b:5f:e4:16:78:b8:4e:1b:13:08:43:c2:68: e9:95:67:7b:a0:6a:b6:31:ef:b4:57:c0:c3:f7:61: 21:1c:20:13:75:e9:54:60:bc:67:0a:02:03:2a:2c: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:45:FE:0F:AC:2D:99:F5:3B:6F:3E:56:22:93:E4:6E:22:F7:16:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3356d24b-fc8c-4c45-9f79-7168e2b6ee25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:4050::/48 Signature Algorithm: sha256WithRSAEncryption 36:65:31:c5:2d:2c:fd:d8:82:0f:2d:83:91:db:ee:c8:10:87: 26:4e:af:da:80:1a:39:f7:81:99:30:1c:eb:02:65:9a:d5:5e: 01:84:83:9a:08:00:cd:b9:9d:e6:83:76:3d:95:59:c2:b8:4a: 59:a1:c4:b2:c6:70:28:5b:e7:69:7e:75:77:8d:7f:ea:de:b2: cc:9b:b8:64:bb:a0:b7:42:96:aa:75:48:36:11:4f:ad:3e:b5: 11:12:35:7b:c7:7e:cf:7b:39:a1:5c:33:03:71:cb:9a:86:32: 9b:6c:66:d7:a3:dd:a8:4b:a9:ff:84:44:b8:e0:d6:93:db:48: 69:5a:4c:e9:71:55:ad:94:be:d8:49:ba:06:f5:ca:52:60:8e: 46:61:99:50:ef:cf:c8:4d:ff:dd:cb:a8:42:02:21:42:11:48: 11:7e:8b:06:04:2a:b7:58:e1:da:8f:63:7e:9c:20:96:08:0f: e9:88:6a:9c:ec:37:24:86:9a:a6:3a:66:4b:26:19:36:59:1d: 91:2a:f4:5f:d1:fd:24:35:92:2c:f8:c4:1e:cc:17:bf:90:6f: b6:b6:70:dc:d5:45:00:5f:7b:46:a4:a2:bb:82:b2:3c:7e:1d: 97:70:1d:70:0d:47:10:9f:83:48:cf:4d:1c:6a:6c:21:e1:81: 04:ca:30:88 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIml48BmHwnaqmWHO8LuwSHe71QwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTY1MTAyWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTg4YjIwYzU1ODk3Yzg2NGU1OTM0NDU0NzNlMzU0MDFj ZjBjYjE5ODJkYTM2MzYwMjk3NmFmN2QyZThlMmVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpVceMfdZVhJHEYs452wTBzSqsSvYvD1eApAIQ/rZDjDkj pLtfLzA2k30v2HfdDYL67Pp8NWp7W9uYocV3V9sflAVZ5yjYGuNVNJOMxST7WdA4 xveLypIEjVR1YyVYC5R8i/DqHW2WjqfXqOU71jVB1P9lqKI1C7LFmV1hqOtfHe5C Q+vhs1RhXJmgLE3rzf/ONaQiIY10X19ccGCfq8Loa8d3Jm34yabRvib1SjrQi4Wh +w/YDxRzzWhN1hGRZ4t2tEb/yHpozKi3hlLHUiUiOP/oS1/kFni4ThsTCEPCaOmV Z3ugarYx77RXwMP3YSEcIBN16VRgvGcKAgMqLO/NAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIkX+D6wtmfU7bz5WIpPkbiL3FoMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzNTZkMjRiLWZjOGMtNGM0NS05Zjc5LTcxNjhlMmI2ZWUyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AQFAwDQYJKoZIhvcNAQELBQADggEBADZlMcUtLP3Ygg8tg5Hb7sgQ hyZOr9qAGjn3gZkwHOsCZZrVXgGEg5oIAM25neaDdj2VWcK4SlmhxLLGcChb52l+ dXeNf+ressybuGS7oLdClqp1SDYRT60+tRESNXvHfs97OaFcMwNxy5qGMptsZtej 3ahLqf+ERLjg1pPbSGlaTOlxVa2UvthJugb1ylJgjkZhmVDvz8hN/93LqEICIUIR SBF+iwYEKrdY4dqPY36cIJYID+mIapzsNySGmqY6ZksmGTZZHZEq9F/R/SQ1kiz4 xB7MF7+Qb7a2cNzVRQBfe0akoruCsjx+HZdwHXANRxCfg0jPTRxqbCHhgQTKMIg= -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:49 2025 by rpki-client