$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e204a0b-8cbe-4a1f-81f6-d8a388364e64.roa File: 3e204a0b-8cbe-4a1f-81f6-d8a388364e64.roa (raw, json) Hash identifier: xTlUR9xEEBI6agSnVfnfUFEnsGXdU8e9z6tx5ipEb/o= Subject key identifier: 1F:16:A1:85:42:B6:B5:57:E9:31:A6:94:30:30:78:A4:B4:FD:33:DE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6796D515DD34EE3B384354981ACA4743A47371B9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e204a0b-8cbe-4a1f-81f6-d8a388364e64.roa Signing time: Fri 29 Aug 2025 16:11:08 +0000 ROA not before: Fri 29 Aug 2025 16:11:08 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2a:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:96:d5:15:dd:34:ee:3b:38:43:54:98:1a:ca:47:43:a4:73:71:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:11:08 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=628116f205f31859c546767da911fcfdb5344fab8edc1f17a82635eb46ef77b6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:dc:02:19:3c:9e:63:61:9d:51:de:ae:1e: 3d:98:f0:0d:8b:4a:8e:e9:16:50:9e:d5:c3:3e:1f: c7:f1:8b:4c:14:ac:33:b0:31:9e:3d:b8:1b:d3:76: b4:09:d4:61:ff:f7:f8:16:03:ae:18:bc:39:60:64: 56:37:bd:f5:a0:65:55:05:32:48:68:2b:d2:6f:4c: bf:a1:2f:ea:d8:9a:e6:53:bd:0c:d2:08:40:2c:4e: 51:b3:fc:9d:c5:c2:25:33:25:f4:4a:c5:39:3b:87: f2:35:b0:15:ac:98:46:17:f2:0a:9b:9e:57:a3:6d: 92:72:17:a7:4e:d5:ec:29:be:b5:c7:67:9b:69:34: 36:17:31:83:b3:3e:f3:41:af:fe:74:a4:ee:4c:65: 5f:a6:8a:3d:78:61:5a:8a:91:f3:04:ec:3f:30:ee: 57:8b:dc:47:f0:5c:4e:9c:ee:ab:02:f1:00:eb:7e: fc:d3:89:f4:57:e0:3d:e2:7f:09:12:c1:11:e6:ee: 78:ec:1a:9c:16:84:ac:a7:25:66:ec:02:6b:1f:c0: ae:70:04:23:ed:0b:6a:04:22:6d:d3:f3:87:a7:09: 9f:b9:0a:45:f5:01:59:33:7d:d5:20:97:b4:20:37: c4:d6:da:85:ca:25:21:bb:13:f0:1b:4b:48:b0:20: 21:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:16:A1:85:42:B6:B5:57:E9:31:A6:94:30:30:78:A4:B4:FD:33:DE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e204a0b-8cbe-4a1f-81f6-d8a388364e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2a:8000::/36 Signature Algorithm: sha256WithRSAEncryption 97:ff:6b:99:65:91:24:5a:a4:e6:05:60:20:9c:96:d1:94:7b: 88:c5:17:81:00:a7:67:46:cf:50:56:0f:13:81:35:4f:f8:c0: c8:4e:89:da:d7:30:78:80:0c:94:88:38:a5:1f:9d:0b:86:39: 3d:65:70:90:f3:1d:65:17:a6:21:01:d9:17:7f:23:f7:a6:68: fe:d6:b1:26:56:77:31:e2:0e:76:42:88:ff:42:f9:d0:1b:24: 05:67:bf:56:f6:36:83:34:30:9c:f1:ce:5f:39:50:1e:55:3c: 0c:12:35:40:6f:8a:81:53:53:75:d6:59:51:5a:71:f4:e3:f8: 58:b3:fb:c7:05:b6:d3:d2:f9:af:25:ab:71:a9:3a:17:a4:02: c9:4c:b6:f1:ea:9a:96:aa:09:9e:89:a9:f5:b0:54:4e:f0:22: 5e:63:56:18:97:11:e0:70:6b:fb:be:ec:09:9f:7e:66:ad:84: 8d:1f:31:03:db:53:1f:b9:e2:1e:61:cc:44:c6:d6:30:4e:6d: 70:be:ed:7c:d1:4e:ea:d3:b8:54:bf:0e:b1:c5:8c:ca:97:a6: fa:09:43:e2:e8:9c:3d:27:c5:ca:34:ac:20:8d:e6:96:d0:06: 92:fd:cb:af:2a:bf:9e:85:a8:1a:34:96:7a:f2:cc:a2:83:e7: a2:d0:d9:80 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZ5bVFd007js4Q1SYGspHQ6RzcbkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYxMTA4WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjgxMTZmMjA1ZjMxODU5YzU0Njc2N2RhOTExZmNmZGI1 MzQ0ZmFiOGVkYzFmMTdhODI2MzVlYjQ2ZWY3N2I2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo3twCGTyeY2GdUd6uHj2Y8A2LSo7pFlCe1cM+H8fxi0wU rDOwMZ49uBvTdrQJ1GH/9/gWA64YvDlgZFY3vfWgZVUFMkhoK9JvTL+hL+rYmuZT vQzSCEAsTlGz/J3FwiUzJfRKxTk7h/I1sBWsmEYX8gqbnlejbZJyF6dO1ewpvrXH Z5tpNDYXMYOzPvNBr/50pO5MZV+mij14YVqKkfME7D8w7leL3EfwXE6c7qsC8QDr fvzTifRX4D3ifwkSwRHm7njsGpwWhKynJWbsAmsfwK5wBCPtC2oEIm3T84enCZ+5 CkX1AVkzfdUgl7QgN8TW2oXKJSG7E/AbS0iwICEvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHxahhUK2tVfpMaaUMDB4pLT9M94wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlMjA0YTBiLThjYmUtNGExZi04MWY2LWQ4YTM4ODM2NGU2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8qgDANBgkqhkiG9w0BAQsFAAOCAQEAl/9rmWWRJFqk5gVgIJyW0ZR7 iMUXgQCnZ0bPUFYPE4E1T/jAyE6J2tcweIAMlIg4pR+dC4Y5PWVwkPMdZRemIQHZ F38j96Zo/taxJlZ3MeIOdkKI/0L50BskBWe/VvY2gzQwnPHOXzlQHlU8DBI1QG+K gVNTddZZUVpx9OP4WLP7xwW209L5ryWrcak6F6QCyUy28eqalqoJnomp9bBUTvAi XmNWGJcR4HBr+77sCZ9+Zq2EjR8xA9tTH7niHmHMRMbWME5tcL7tfNFO6tO4VL8O scWMypem+glD4uicPSfFyjSsII3mltAGkv3Lryq/noWoGjSWevLMooPnotDZgA== -----END CERTIFICATE-----Generated at Sat Sep 6 16:40:04 2025 by rpki-client