$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89344d0a-b23d-41c9-97cf-93cb233458c4.roa File: 89344d0a-b23d-41c9-97cf-93cb233458c4.roa (raw, json) Hash identifier: SM+Ra0z9rQGuYdg6LVLtjnppcRri2RzzwphAb6BJrpc= Subject key identifier: 58:7B:4D:16:CD:C6:1A:74:19:20:C9:26:7D:83:CF:82:1C:62:7F:D5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 370F921DE6B6A934B242A3C1970172616FBB22F0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89344d0a-b23d-41c9-97cf-93cb233458c4.roa Signing time: Tue 26 Aug 2025 16:00:17 +0000 ROA not before: Tue 26 Aug 2025 16:00:17 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0f:92:1d:e6:b6:a9:34:b2:42:a3:c1:97:01:72:61:6f:bb:22:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:00:17 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=6118dbe24dde063e511cc649fd7ba5fbdceffe5337b5f8c7b81a1e69dc722d02, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:47:09:47:26:b1:ff:c2:83:dc:45:74:e0:fe: 98:02:55:6d:ec:7c:8a:8a:16:ac:f8:35:3a:22:34: f0:8e:a3:84:66:ad:c3:4d:a5:65:a7:50:99:b2:c8: c3:3c:c9:f2:36:d5:97:81:c2:a0:76:45:a8:ba:8d: da:e8:da:e3:53:7a:31:d9:1c:25:a5:e0:96:8f:50: 41:c9:9c:21:2e:99:f9:22:27:f1:34:fd:3b:c9:09: f3:45:8f:c4:dc:b6:a9:da:bb:2e:02:ab:fd:76:03: fd:66:4a:63:11:09:16:f8:bf:40:9b:e8:44:25:65: 43:d6:65:5d:d7:52:b0:62:2c:48:9c:70:b2:66:89: de:92:80:3e:81:c5:da:54:d3:14:f1:e8:2a:1c:82: ee:9f:59:90:79:b9:e1:a8:59:63:25:82:a2:21:7d: e1:ea:3a:c1:81:71:3c:2c:60:5e:8d:b5:88:8c:c6: 5f:c3:3c:07:13:ab:e0:d2:df:c6:a6:b8:ff:78:d3: 22:85:51:fe:0e:24:ce:70:ba:da:ba:8f:e1:3b:e6: 07:6f:17:35:bc:42:5e:df:6c:82:6b:0d:84:87:6e: b7:54:93:77:59:e7:f2:d3:e8:30:3e:55:f3:d9:3a: de:8c:e0:9f:b8:6d:57:70:ef:c4:67:88:1f:26:8b: cc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7B:4D:16:CD:C6:1A:74:19:20:C9:26:7D:83:CF:82:1C:62:7F:D5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89344d0a-b23d-41c9-97cf-93cb233458c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:80a0::/48 Signature Algorithm: sha256WithRSAEncryption 94:11:a3:1e:08:fc:fe:41:d8:09:25:d9:00:b0:96:37:b7:43: 50:65:4d:1a:18:02:1c:c9:1b:f9:b1:a1:7b:f6:d0:02:4e:19: 29:ed:dd:b1:c5:96:6f:d6:2e:67:f4:5e:8c:f8:b7:c7:02:30: 2d:f1:ea:35:2a:41:6a:3a:a9:bd:48:81:f3:b4:a0:77:04:c5: f8:fe:c0:eb:45:f6:01:81:f9:62:79:e2:e3:58:72:33:c9:f2: c5:9a:70:e9:c0:11:0b:de:8f:71:b7:e5:15:71:07:f5:89:43: d0:45:eb:54:d1:42:8d:11:2e:eb:b7:b1:76:47:64:f9:28:a8: 1c:a8:3f:c1:ad:ee:27:e9:84:68:79:7e:f4:54:43:d8:36:27: e2:55:df:88:53:7d:77:c0:77:0f:56:74:92:31:dc:8f:2a:ad: ad:ef:b9:fc:a5:1f:f8:bd:f2:1f:11:b2:d9:6a:5d:ca:e4:61: 19:b1:5d:bc:bb:2b:d3:89:38:bb:45:32:a0:92:e4:9a:fa:53: f1:18:d1:3b:21:94:a8:42:04:91:65:81:6c:47:78:df:55:38: ac:86:60:3f:77:d1:08:39:5a:dd:d8:68:d4:95:8a:e3:b1:8e: 75:50:fe:e4:8f:35:e4:0b:5c:4a:88:de:e0:3c:f7:cb:f0:e3: ee:56:29:9a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNw+SHea2qTSyQqPBlwFyYW+7IvAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTYwMDE3WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTE4ZGJlMjRkZGUwNjNlNTExY2M2NDlmZDdiYTVmYmRj ZWZmZTUzMzdiNWY4YzdiODFhMWU2OWRjNzIyZDAyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChRwlHJrH/woPcRXTg/pgCVW3sfIqKFqz4NToiNPCOo4Rm rcNNpWWnUJmyyMM8yfI21ZeBwqB2Rai6jdro2uNTejHZHCWl4JaPUEHJnCEumfki J/E0/TvJCfNFj8Tctqnauy4Cq/12A/1mSmMRCRb4v0Cb6EQlZUPWZV3XUrBiLEic cLJmid6SgD6BxdpU0xTx6Cocgu6fWZB5ueGoWWMlgqIhfeHqOsGBcTwsYF6NtYiM xl/DPAcTq+DS38amuP940yKFUf4OJM5wutq6j+E75gdvFzW8Ql7fbIJrDYSHbrdU k3dZ5/LT6DA+VfPZOt6M4J+4bVdw78RniB8mi8yxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWHtNFs3GGnQZIMkmfYPPghxif9UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5MzQ0ZDBhLWIyM2QtNDFjOS05N2NmLTkzY2IyMzM0NThjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ygKAwDQYJKoZIhvcNAQELBQADggEBAJQRox4I/P5B2Akl2QCwlje3 Q1BlTRoYAhzJG/mxoXv20AJOGSnt3bHFlm/WLmf0Xoz4t8cCMC3x6jUqQWo6qb1I gfO0oHcExfj+wOtF9gGB+WJ54uNYcjPJ8sWacOnAEQvej3G35RVxB/WJQ9BF61TR Qo0RLuu3sXZHZPkoqByoP8Gt7ifphGh5fvRUQ9g2J+JV34hTfXfAdw9WdJIx3I8q ra3vufylH/i98h8RstlqXcrkYRmxXby7K9OJOLtFMqCS5Jr6U/EY0TshlKhCBJFl gWxHeN9VOKyGYD930Qg5Wt3YaNSViuOxjnVQ/uSPNeQLXEqI3uA898vw4+5WKZo= -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:36 2025 by rpki-client