$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/376c3db5-b01e-48a2-98b7-c70d1a151434.roa File: 376c3db5-b01e-48a2-98b7-c70d1a151434.roa (raw, json) Hash identifier: Kw/U4sq8hQhNTRNSs+lTPNvqDYxZZRNGmqY2dzRD89A= Subject key identifier: 1A:BF:3A:77:6E:64:C6:0E:4B:60:02:05:74:E3:07:7B:C5:30:A1:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 60EABFF858481AF0A35FD35975E6FA705FA31158 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/376c3db5-b01e-48a2-98b7-c70d1a151434.roa Signing time: Fri 29 Aug 2025 16:00:18 +0000 ROA not before: Fri 29 Aug 2025 16:00:18 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f11:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ea:bf:f8:58:48:1a:f0:a3:5f:d3:59:75:e6:fa:70:5f:a3:11:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:00:18 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=a2b01f30245ee871f1663ffa47cc1c9e3f229703edfdc77f69f7fdb0f8708e49, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:70:3f:b6:6f:89:53:1e:af:47:14:27:a3: 13:53:0c:e1:c8:c4:85:06:03:a6:c4:63:4f:9e:e5: b4:06:35:87:8c:4e:f6:b2:10:d9:5b:c7:97:bb:05: 4a:3b:90:47:a0:c8:40:0d:2d:ad:a3:ab:a6:bf:23: 9c:16:a7:cc:9b:0d:59:7e:4b:90:86:f3:6a:96:09: 8d:f9:9c:80:b2:d0:30:5f:f2:2d:4d:d2:9a:bd:40: de:4a:a0:87:4c:9d:80:19:04:72:aa:66:0d:73:24: 51:b3:81:3d:08:6f:69:d5:de:8c:04:2d:b2:6b:05: f0:61:81:35:1d:67:13:85:d5:78:e6:64:3e:9b:7a: 50:01:05:2c:63:d6:ea:ab:64:b5:d6:a2:8d:52:58: b7:b2:d1:01:44:dc:b7:39:c5:cc:29:c8:ce:27:1e: c3:a3:08:c0:35:9a:a8:cf:6d:1b:86:94:d0:e0:5a: c4:72:ad:d3:28:5c:d7:73:0a:17:42:ce:96:89:95: 17:ba:c3:53:85:3b:cf:1c:95:15:9a:7a:e0:91:f9: 3e:1f:ea:4f:c5:f6:38:4b:e6:66:03:e4:5f:b1:0f: 89:a6:b5:a0:e2:3a:4d:14:53:96:8a:df:93:61:82: f8:ac:b6:e9:2a:b9:47:08:63:e0:39:99:b9:ea:80: 10:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BF:3A:77:6E:64:C6:0E:4B:60:02:05:74:E3:07:7B:C5:30:A1:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/376c3db5-b01e-48a2-98b7-c70d1a151434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f11:4000::/36 Signature Algorithm: sha256WithRSAEncryption 68:5f:41:14:d3:27:af:ad:3b:37:52:4a:a3:c1:94:0f:45:86: e4:84:e6:80:08:f1:18:ad:2e:ea:58:16:58:34:04:0c:d8:16: d2:d3:06:fa:b2:61:36:7b:3a:a8:04:b9:c5:4f:e1:91:3b:21: 75:e5:3c:4e:d1:d3:c3:1c:0b:23:63:c1:ce:98:f8:8c:d0:d5: 2a:f3:df:11:de:73:89:1e:34:ed:64:45:09:ff:73:05:6e:0d: 36:d9:47:5b:0e:06:bd:75:0b:95:9d:34:82:0e:55:a0:91:b9: a8:74:11:a6:e2:5c:2b:b4:e3:62:8b:13:98:72:42:c6:cc:43: 00:1a:ec:a4:79:13:54:c5:3d:05:eb:08:08:bb:08:f6:38:65: 81:8b:c3:b4:6c:f1:e5:ef:b8:bc:b0:82:0e:ba:da:13:f2:37: 5e:06:62:77:96:ff:99:22:70:06:bb:27:b8:e1:ea:bc:b6:46: 73:b9:24:f4:19:f5:34:b2:90:8d:76:d2:d0:f3:ec:4b:12:19: 1b:ef:26:3d:f9:74:b9:be:2d:0b:78:f9:d4:57:79:4f:42:32: aa:c4:9c:ca:6b:bc:f0:bf:fa:3c:60:fb:e8:a1:ca:fb:50:78: 14:e6:36:e4:41:29:22:4f:23:61:ab:be:de:ac:5a:1e:77:ef: 8c:1b:2e:c9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYOq/+FhIGvCjX9NZdeb6cF+jEVgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYwMDE4WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmIwMWYzMDI0NWVlODcxZjE2NjNmZmE0N2NjMWM5ZTNm MjI5NzAzZWRmZGM3N2Y2OWY3ZmRiMGY4NzA4ZTQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrbnA/tm+JUx6vRxQnoxNTDOHIxIUGA6bEY0+e5bQGNYeM TvayENlbx5e7BUo7kEegyEANLa2jq6a/I5wWp8ybDVl+S5CG82qWCY35nICy0DBf 8i1N0pq9QN5KoIdMnYAZBHKqZg1zJFGzgT0Ib2nV3owELbJrBfBhgTUdZxOF1Xjm ZD6belABBSxj1uqrZLXWoo1SWLey0QFE3Lc5xcwpyM4nHsOjCMA1mqjPbRuGlNDg WsRyrdMoXNdzChdCzpaJlRe6w1OFO88clRWaeuCR+T4f6k/F9jhL5mYD5F+xD4mm taDiOk0UU5aK35NhgvistukquUcIY+A5mbnqgBA5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUGr86d25kxg5LYAIFdOMHe8UwoWkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM3NmMzZGI1LWIwMWUtNDhhMi05OGI3LWM3MGQxYTE1MTQzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8RQDANBgkqhkiG9w0BAQsFAAOCAQEAaF9BFNMnr607N1JKo8GUD0WG 5ITmgAjxGK0u6lgWWDQEDNgW0tMG+rJhNns6qAS5xU/hkTshdeU8TtHTwxwLI2PB zpj4jNDVKvPfEd5ziR407WRFCf9zBW4NNtlHWw4GvXULlZ00gg5VoJG5qHQRpuJc K7TjYosTmHJCxsxDABrspHkTVMU9BesICLsI9jhlgYvDtGzx5e+4vLCCDrraE/I3 XgZid5b/mSJwBrsnuOHqvLZGc7kk9Bn1NLKQjXbS0PPsSxIZG+8mPfl0ub4tC3j5 1Fd5T0IyqsScymu88L/6PGD76KHK+1B4FOY25EEpIk8jYau+3qxaHnfvjBsuyQ== -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:07 2025 by rpki-client