$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa File: 34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa (raw, json) Hash identifier: ZGFR4FkIZZv68PSzemhE6Nztsie5+fbr1dMk6ofAmz0= Subject key identifier: 48:55:67:00:3D:30:DD:79:72:C6:C4:96:14:3C:F1:E3:9D:4C:3A:C8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 10D992944882C9AFB20AB147EFD4DC6458518091 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa Signing time: Fri 29 Aug 2025 15:30:28 +0000 ROA not before: Fri 29 Aug 2025 15:30:28 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1c::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d9:92:94:48:82:c9:af:b2:0a:b1:47:ef:d4:dc:64:58:51:80:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 15:30:28 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=bd21d7b1a59c8f9173489f301d5b3b13f46f3d12923f3fbb36bb27e709e3c14d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:b8:09:8d:53:db:34:2d:b1:3f:6f:02:dc: 41:fb:05:08:26:89:9b:7a:a2:eb:93:17:d1:16:84: 32:7b:65:ae:7a:dc:76:44:03:2a:5f:1c:56:24:42: 81:e6:9f:a3:6e:e6:c6:bd:07:62:5f:0f:b6:b6:61: 5a:11:9a:b3:4b:2d:dc:c3:f8:64:bf:bd:40:0f:dd: 38:c9:2f:29:d0:b0:1f:c8:f8:a7:e5:89:ea:f8:3b: d4:5a:8c:b6:96:75:a2:6a:17:ce:6f:c8:2d:0b:47: 36:c6:b9:c2:1b:a7:0f:a5:93:31:92:27:5e:49:31: c8:3a:65:c9:81:c6:69:be:33:6d:1d:a3:a6:29:b5: 79:8b:3b:47:a7:57:25:e7:e4:69:4e:2c:35:06:53: 29:80:bd:ee:f7:c1:48:e0:53:7f:37:60:2f:a4:4f: 8b:fc:76:21:a5:1d:bc:75:b5:5b:66:d0:18:2f:04: bb:7e:b8:97:7c:c5:5e:b2:b1:23:83:47:87:6f:a9: a4:54:ff:92:b7:58:fa:c0:42:8c:a0:3a:86:4e:3b: 76:b9:6c:86:08:5e:fc:c4:b6:50:d5:7d:53:0e:79: 7b:32:8a:97:6d:b8:0e:27:51:75:e7:98:83:cf:20: 45:e1:f0:0d:72:bc:8d:ea:c7:2e:7c:1a:0a:01:f1: 46:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:55:67:00:3D:30:DD:79:72:C6:C4:96:14:3C:F1:E3:9D:4C:3A:C8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1c::/38 Signature Algorithm: sha256WithRSAEncryption 01:5b:e8:c4:a4:2f:e3:db:53:c8:f0:38:92:75:ff:0b:01:64: e1:50:eb:0c:23:a3:a6:96:1a:a7:c0:2a:c0:d2:6a:4e:ff:66: ac:c5:b0:74:6e:4b:6e:7b:ad:8b:d9:99:22:e4:ab:10:e1:f9: ab:e9:d4:b2:49:90:b4:3a:2b:a6:a6:18:2f:53:36:1a:7c:ec: ee:e9:32:d8:7b:25:77:bb:4c:30:a9:aa:6d:60:ed:ab:60:3d: 87:f9:4e:9c:8f:62:68:31:db:05:3e:2a:7c:43:62:e1:35:59: ca:c0:04:b5:62:56:65:93:37:ce:9d:35:0c:a8:f2:c1:59:81: a1:63:e0:e7:3f:93:d0:0a:74:a2:a1:be:76:91:13:08:a9:74: f3:e7:d1:d1:1d:43:35:ec:df:bd:e2:6c:66:8f:52:db:28:eb: 35:63:06:d9:c9:15:2f:9c:f6:33:84:3f:6c:72:c4:dd:5d:b3: e2:04:d3:c9:7c:65:17:77:8c:af:81:2c:c6:8b:20:08:2c:73: 29:0d:98:57:05:05:2e:10:6d:54:10:10:6d:ce:c2:9e:fd:40: f5:31:8b:8f:78:79:96:bb:27:4c:d2:52:68:e0:e0:cf:60:63: d1:41:d6:39:f8:18:73:c3:30:49:dd:73:ae:c3:87:55:38:ba: 69:d9:73:a0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUENmSlEiCya+yCrFH79TcZFhRgJEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTUzMDI4WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDIxZDdiMWE1OWM4ZjkxNzM0ODlmMzAxZDViM2IxM2Y0 NmYzZDEyOTIzZjNmYmIzNmJiMjdlNzA5ZTNjMTRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi87gJjVPbNC2xP28C3EH7BQgmiZt6ouuTF9EWhDJ7Za56 3HZEAypfHFYkQoHmn6Nu5sa9B2JfD7a2YVoRmrNLLdzD+GS/vUAP3TjJLynQsB/I +Kflier4O9RajLaWdaJqF85vyC0LRzbGucIbpw+lkzGSJ15JMcg6ZcmBxmm+M20d o6YptXmLO0enVyXn5GlOLDUGUymAve73wUjgU383YC+kT4v8diGlHbx1tVtm0Bgv BLt+uJd8xV6ysSODR4dvqaRU/5K3WPrAQoygOoZOO3a5bIYIXvzEtlDVfVMOeXsy ipdtuA4nUXXnmIPPIEXh8A1yvI3qxy58GgoB8UZdAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSFVnAD0w3XlyxsSWFDzx451MOsgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0YTc5ZGI2LTA4M2ItNGNjYy04YjdiLTJlMDFhNzZkZGJlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8cADANBgkqhkiG9w0BAQsFAAOCAQEAAVvoxKQv49tTyPA4knX/CwFk 4VDrDCOjppYap8AqwNJqTv9mrMWwdG5Lbnuti9mZIuSrEOH5q+nUskmQtDorpqYY L1M2Gnzs7uky2Hsld7tMMKmqbWDtq2A9h/lOnI9iaDHbBT4qfENi4TVZysAEtWJW ZZM3zp01DKjywVmBoWPg5z+T0Ap0oqG+dpETCKl08+fR0R1DNezfveJsZo9S2yjr NWMG2ckVL5z2M4Q/bHLE3V2z4gTTyXxlF3eMr4EsxosgCCxzKQ2YVwUFLhBtVBAQ bc7Cnv1A9TGLj3h5lrsnTNJSaODgz2Bj0UHWOfgYc8MwSd1zrsOHVTi6adlzoA== -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:20 2025 by rpki-client