$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e2c9df8-ffeb-4b6e-819e-9aeb6cb51bf9.roa File: 3e2c9df8-ffeb-4b6e-819e-9aeb6cb51bf9.roa (raw, json) Hash identifier: nCP4B8iLgT2j0WMGoVlwe4ckLkp1mgDfOutfnK5nzJ8= Subject key identifier: 68:BB:F0:B4:D9:FC:6F:09:AF:12:9F:AF:5D:C7:76:42:4A:D3:67:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2DAF35684066E4D4BB16A0F1E326CF5437A0EF52 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e2c9df8-ffeb-4b6e-819e-9aeb6cb51bf9.roa Signing time: Mon 25 Aug 2025 16:52:16 +0000 ROA not before: Mon 25 Aug 2025 16:52:16 +0000 ROA not after: Mon 29 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:2800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:af:35:68:40:66:e4:d4:bb:16:a0:f1:e3:26:cf:54:37:a0:ef:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 16:52:16 2025 GMT Not After : Sep 29 23:59:59 2025 GMT Subject: serialNumber=ea1bc657a85e44c7eee7b0689630dec5d489e0fae4d753ae8c121505a78cca50, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c9:ed:e3:a2:42:05:9c:60:35:2e:f6:7e:b9: 07:66:dc:e0:42:cb:94:ca:70:e4:51:92:86:d9:bd: ea:1e:b4:c7:8e:36:d6:ae:7f:88:e6:65:01:8c:67: a1:61:53:19:04:56:46:5a:8e:4a:fd:48:b1:71:6f: 44:3a:42:75:07:d0:ac:e7:c7:0c:ac:4a:50:cc:08: e2:31:76:eb:1e:99:46:e5:8e:be:c8:61:22:3b:de: 89:f0:c7:16:78:01:53:00:47:5e:f6:84:0a:58:83: dc:91:c4:1d:ae:98:5a:19:f5:61:5a:87:56:4f:4d: 11:32:e0:be:4a:3d:2d:e3:37:01:98:9d:75:83:15: 84:a5:7e:0e:54:0a:94:8e:05:4b:f4:5b:f6:eb:33: 49:e7:a9:29:cc:52:c5:1c:3e:9c:f3:9e:23:21:97: 25:33:3b:1c:c6:7a:67:fe:6e:55:5f:f8:75:ae:7e: a8:c4:f8:35:28:f4:ea:78:bf:de:ad:a7:30:8f:38: 2f:9f:96:0d:aa:12:09:e2:90:f2:ba:85:ac:73:b5: 2f:10:6d:89:ba:32:60:dd:5c:ea:8b:01:c4:ff:94: 4e:ca:a8:f3:a9:4d:de:c1:ec:0e:a0:ee:48:a5:86: 63:75:c0:e4:80:3c:51:6c:44:0b:ce:3e:7a:b4:a5: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BB:F0:B4:D9:FC:6F:09:AF:12:9F:AF:5D:C7:76:42:4A:D3:67:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e2c9df8-ffeb-4b6e-819e-9aeb6cb51bf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:2800::/48 Signature Algorithm: sha256WithRSAEncryption 61:6e:94:f7:dd:db:ab:23:9b:6b:77:95:41:fe:1b:94:24:4a: 36:5f:25:63:5a:d3:a6:c3:4b:52:1e:6e:98:23:20:74:1d:d8: f9:f3:89:f4:01:79:4a:49:83:94:90:f9:3d:8a:33:b2:f2:b4: 17:c7:e6:90:05:22:eb:fb:41:bf:e2:ee:9f:cd:f0:cb:ba:50: aa:76:36:7f:0b:1b:e7:1e:79:b8:2f:24:95:64:ab:0e:94:de: c1:ef:58:71:fb:49:85:6f:15:13:ce:dc:1b:a4:fd:9b:52:44: e3:ff:13:93:f9:2b:5a:8c:61:94:76:94:a7:2b:be:e5:f0:ad: 5c:72:2a:35:60:6f:ed:72:10:e4:cc:c4:4e:d9:05:a7:1f:e6: cc:d5:93:8d:4c:c8:f5:93:4d:c5:51:49:75:0a:4a:e8:f2:13: 9a:a0:52:b1:97:a3:91:91:b9:1a:01:3b:df:0a:14:a1:12:6b: 9d:bf:e7:3e:13:8d:da:9e:8e:ed:ba:3a:78:05:c7:ab:df:45: 11:2c:93:5f:8a:d8:4b:a7:8d:b8:15:21:fa:aa:3e:13:af:f4: 44:ff:38:c6:8e:4a:88:6c:08:1c:20:90:d7:9b:71:41:f8:f3: d1:27:21:3f:47:6c:10:96:6c:e3:6f:bb:ca:6e:3a:bf:cb:ee: 6b:5f:a5:a6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULa81aEBm5NS7FqDx4ybPVDeg71IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI1MTY1MjE2WhcNMjUwOTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTFiYzY1N2E4NWU0NGM3ZWVlN2IwNjg5NjMwZGVjNWQ0 ODllMGZhZTRkNzUzYWU4YzEyMTUwNWE3OGNjYTUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlye3jokIFnGA1LvZ+uQdm3OBCy5TKcORRkobZveoetMeO Ntauf4jmZQGMZ6FhUxkEVkZajkr9SLFxb0Q6QnUH0KznxwysSlDMCOIxdusemUbl jr7IYSI73onwxxZ4AVMAR172hApYg9yRxB2umFoZ9WFah1ZPTREy4L5KPS3jNwGY nXWDFYSlfg5UCpSOBUv0W/brM0nnqSnMUsUcPpzzniMhlyUzOxzGemf+blVf+HWu fqjE+DUo9Op4v96tpzCPOC+flg2qEgnikPK6haxztS8QbYm6MmDdXOqLAcT/lE7K qPOpTd7B7A6g7kilhmN1wOSAPFFsRAvOPnq0paqPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaLvwtNn8bwmvEp+vXcd2QkrTZ6owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlMmM5ZGY4LWZmZWItNGI2ZS04MTllLTlhZWI2Y2I1MWJmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sKAAwDQYJKoZIhvcNAQELBQADggEBAGFulPfd26sjm2t3lUH+G5Qk SjZfJWNa06bDS1IebpgjIHQd2PnzifQBeUpJg5SQ+T2KM7LytBfH5pAFIuv7Qb/i 7p/N8Mu6UKp2Nn8LG+ceebgvJJVkqw6U3sHvWHH7SYVvFRPO3Buk/ZtSROP/E5P5 K1qMYZR2lKcrvuXwrVxyKjVgb+1yEOTMxE7ZBacf5szVk41MyPWTTcVRSXUKSujy E5qgUrGXo5GRuRoBO98KFKESa52/5z4Tjdqeju26OngFx6vfRREsk1+K2EunjbgV IfqqPhOv9ET/OMaOSohsCBwgkNebcUH489EnIT9HbBCWbONvu8puOr/L7mtfpaY= -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:10 2025 by rpki-client