$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c784078-b9ac-40b3-a9b7-f77c614be8ff.roa File: 7c784078-b9ac-40b3-a9b7-f77c614be8ff.roa (raw, json) Hash identifier: w3BNdnZ49426agKOv+VTFD4U3YrG19kBSvi1PQXo+jA= Subject key identifier: C9:D3:31:E2:3F:CD:FB:B2:B6:24:CF:E8:C4:07:C5:31:84:35:81:67 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07C3EE6225038F170CF2BD81282F374545F4F399 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c784078-b9ac-40b3-a9b7-f77c614be8ff.roa Signing time: Tue 26 Aug 2025 15:51:50 +0000 ROA not before: Tue 26 Aug 2025 15:51:50 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f38:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c3:ee:62:25:03:8f:17:0c:f2:bd:81:28:2f:37:45:45:f4:f3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:51:50 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=9e6b50bab82426d30becd993bfb1006222fc250a3b028a15d35ce5278433019c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:57:1d:a2:a0:97:42:eb:66:5c:cd:6c:32:59: f2:18:42:1e:4e:43:f5:94:c0:50:cb:c1:07:5f:2e: 6f:4b:65:1e:dc:69:78:ff:32:57:e6:21:31:50:8b: 86:66:fa:cd:bd:d4:1f:99:de:dc:3b:2a:ae:9f:ac: f0:34:00:8f:f6:2f:85:f4:af:40:0a:1a:12:c6:05: 31:f6:e3:3c:26:1c:da:e4:e0:fa:c4:c6:b6:68:f5: c2:67:40:aa:8d:47:36:e4:9b:73:aa:3f:df:55:c9: 11:c5:12:49:94:65:20:c5:f5:b8:f2:c7:b6:e0:b3: 0d:ed:6c:4f:5e:85:0d:91:fb:1a:38:2b:b0:75:ed: 3d:d3:b0:79:1f:03:46:f8:fc:f0:12:cd:85:d5:aa: 99:84:c3:42:33:ec:f0:32:11:25:9d:de:d3:ec:51: c6:e1:53:5f:ea:5d:24:d7:97:96:37:b9:88:b6:2e: 5a:02:01:28:3d:2b:09:03:47:80:3e:0f:48:96:7e: 74:5b:04:c0:fb:a5:2a:53:a6:58:54:59:a2:3f:87: 14:ac:5f:54:33:33:0f:e3:00:6e:05:6f:94:f3:eb: ec:91:41:a9:4b:c7:d2:0e:4a:df:18:84:e6:a0:c2: 05:27:49:f2:d4:6a:8c:af:fe:a5:99:7f:d7:ab:cf: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D3:31:E2:3F:CD:FB:B2:B6:24:CF:E8:C4:07:C5:31:84:35:81:67 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c784078-b9ac-40b3-a9b7-f77c614be8ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 8b:5f:0e:48:ba:ce:10:fd:b7:83:84:77:48:84:5c:35:48:fd: e6:27:92:ab:fe:f1:c2:ea:f5:14:90:85:7f:e6:a1:2c:ec:3a: 84:07:45:a1:76:c3:9d:77:78:30:aa:ce:0a:11:c5:e1:52:ad: 56:59:72:d8:0c:0d:68:8e:be:06:c7:fe:6b:54:f7:04:fa:91: 33:52:75:3f:fe:69:54:c7:17:e3:7e:28:48:29:93:29:84:3a: 5c:7b:e7:b6:3a:08:dc:38:b7:6e:bb:46:1d:37:48:93:f6:4c: e2:9e:72:ee:d3:bf:5a:b0:74:40:58:5d:95:2a:e6:5e:fc:b3: 0c:74:4a:c4:4c:2e:58:29:aa:d2:e9:37:6f:ad:67:2d:08:38: 84:db:d7:72:63:d5:02:4a:6a:fc:0e:49:e5:9e:8b:a5:42:a8: 9e:17:bd:09:0f:86:77:e5:32:d4:fa:a6:ce:5b:7d:80:a1:1b: f6:95:61:40:cc:29:31:4b:e7:35:b2:1f:9c:83:c8:a0:63:c5: 61:cf:a2:a0:a0:9a:69:f5:32:fa:67:1d:9a:f8:71:43:fd:b0: be:fb:61:d8:89:21:cc:05:b0:76:44:b5:6c:71:59:85:f8:93: c0:85:66:57:fa:4d:f2:49:da:de:73:c0:94:5f:a4:1f:4d:28: eb:44:6b:99 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB8PuYiUDjxcM8r2BKC83RUX085kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTU1MTUwWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTZiNTBiYWI4MjQyNmQzMGJlY2Q5OTNiZmIxMDA2MjIy ZmMyNTBhM2IwMjhhMTVkMzVjZTUyNzg0MzMwMTljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqVx2ioJdC62ZczWwyWfIYQh5OQ/WUwFDLwQdfLm9LZR7c aXj/MlfmITFQi4Zm+s291B+Z3tw7Kq6frPA0AI/2L4X0r0AKGhLGBTH24zwmHNrk 4PrExrZo9cJnQKqNRzbkm3OqP99VyRHFEkmUZSDF9bjyx7bgsw3tbE9ehQ2R+xo4 K7B17T3TsHkfA0b4/PASzYXVqpmEw0Iz7PAyESWd3tPsUcbhU1/qXSTXl5Y3uYi2 LloCASg9KwkDR4A+D0iWfnRbBMD7pSpTplhUWaI/hxSsX1QzMw/jAG4Fb5Tz6+yR QalLx9IOSt8YhOagwgUnSfLUaoyv/qWZf9erz6cRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUydMx4j/N+7K2JM/oxAfFMYQ1gWcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjNzg0MDc4LWI5YWMtNDBiMy1hOWI3LWY3N2M2MTRiZThmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84IMAwDQYJKoZIhvcNAQELBQADggEBAItfDki6zhD9t4OEd0iEXDVI /eYnkqv+8cLq9RSQhX/moSzsOoQHRaF2w513eDCqzgoRxeFSrVZZctgMDWiOvgbH /mtU9wT6kTNSdT/+aVTHF+N+KEgpkymEOlx757Y6CNw4t267Rh03SJP2TOKecu7T v1qwdEBYXZUq5l78swx0SsRMLlgpqtLpN2+tZy0IOITb13Jj1QJKavwOSeWei6VC qJ4XvQkPhnflMtT6ps5bfYChG/aVYUDMKTFL5zWyH5yDyKBjxWHPoqCgmmn1Mvpn HZr4cUP9sL77YdiJIcwFsHZEtWxxWYX4k8CFZlf6TfJJ2t5zwJRfpB9NKOtEa5k= -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:07 2025 by rpki-client