$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92e75e42-9181-44e4-81e5-602f1a539fe4.roa File: 92e75e42-9181-44e4-81e5-602f1a539fe4.roa (raw, json) Hash identifier: k3goxEH7lc88v7gRe/vR5B8ymwfXRkiUI/a9PIxWn5s= Subject key identifier: DB:03:8F:BA:4F:C0:35:CB:48:71:4B:28:E3:D6:04:62:05:A0:3C:FE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D46B26F61C5FEFF28A14A41D0853F3525E87FC1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92e75e42-9181-44e4-81e5-602f1a539fe4.roa Signing time: Fri 29 Aug 2025 15:11:48 +0000 ROA not before: Fri 29 Aug 2025 15:11:48 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f70:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:46:b2:6f:61:c5:fe:ff:28:a1:4a:41:d0:85:3f:35:25:e8:7f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 15:11:48 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=556f6832602c32b663e1432f9f400576154f9b71acd7bda6d5be4261fff45386, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b9:ae:cb:1d:8c:5e:9e:c0:31:10:06:e3:3f: d8:3c:85:37:33:35:cc:dc:2a:34:bb:86:59:83:d6: 60:e4:da:88:af:3d:3d:de:bc:50:34:ef:8f:33:01: 03:2a:82:03:b3:14:52:9a:10:a7:02:46:ce:79:10: a9:8d:e3:af:be:ed:03:c8:fd:2c:c6:b7:bf:be:ef: fe:5d:e3:ce:00:7e:87:98:7a:a6:94:4c:80:a3:2d: d9:dc:78:44:f6:f0:79:ac:a5:e9:73:d8:61:1a:21: a1:3e:b4:57:c6:b0:ea:76:e7:1a:78:4f:af:1e:7a: fd:11:30:1e:d4:6a:33:26:54:65:5e:d4:ce:a4:85: 8c:cc:f3:50:4d:44:cb:16:06:23:6f:6e:35:3e:1a: 7b:e1:5c:e1:0b:4b:96:95:9d:eb:8d:22:d0:bb:be: f2:54:d6:66:7a:d2:60:ca:8d:50:16:8b:fa:6a:44: 3b:89:2b:03:c7:68:26:44:1d:f2:3b:db:02:3c:ba: 9e:2c:80:87:1a:26:5e:bc:7c:cd:63:d1:ab:89:cb: a7:93:f9:80:49:1d:93:c3:7d:35:4f:79:72:fc:47: cb:8e:38:eb:b6:27:4f:b5:ed:83:a2:79:82:5d:5a: ad:fc:dc:40:7b:ae:d7:12:f6:ee:11:74:ad:8f:6d: 52:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:03:8F:BA:4F:C0:35:CB:48:71:4B:28:E3:D6:04:62:05:A0:3C:FE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92e75e42-9181-44e4-81e5-602f1a539fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f70:8000::/39 Signature Algorithm: sha256WithRSAEncryption 12:5e:49:ba:31:05:f1:b2:eb:07:50:20:e1:ce:e5:dd:e9:3b: 58:5d:cc:d0:25:98:56:94:29:da:ba:aa:50:ff:0b:9b:e5:89: ad:57:b4:eb:8f:97:74:72:44:63:8a:fa:e5:ae:77:73:93:20: d6:80:04:af:85:4e:4c:40:41:cb:b0:ee:a8:89:04:66:68:96: af:4a:58:9e:0d:47:f0:da:62:c1:bf:77:f1:f4:5e:f4:6b:08: 39:42:dc:5d:dc:d3:90:63:80:6b:cf:e5:9f:7d:f5:d0:98:f4: e8:46:58:de:ee:0a:53:6e:cc:94:06:9d:ed:c9:2c:55:c4:65: 56:1b:2d:b7:01:7c:18:2b:10:e1:f2:80:92:af:ec:2e:15:e7: 1e:ae:41:fd:c1:55:f2:6f:bc:c5:5c:7c:d6:7b:c9:40:0d:3b: e8:17:b0:81:01:59:03:4b:9c:c4:96:83:18:6b:a1:2b:2e:1c: 7d:4d:45:49:11:8d:9c:33:7d:ab:c5:11:d9:9f:fa:61:8e:aa: 2f:9b:39:03:f7:0a:a9:99:2b:fe:fc:77:7e:8a:c0:08:70:0a: 0b:ee:16:d8:e3:d6:9e:f5:5e:8e:5b:e8:d5:8e:a6:1c:0e:16: a2:ea:87:88:af:79:c9:ee:3a:9f:bf:5b:a9:49:82:ea:c4:ca: 5e:dd:ef:c5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPUayb2HF/v8ooUpB0IU/NSXof8EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTUxMTQ4WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTZmNjgzMjYwMmMzMmI2NjNlMTQzMmY5ZjQwMDU3NjE1 NGY5YjcxYWNkN2JkYTZkNWJlNDI2MWZmZjQ1Mzg2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUua7LHYxensAxEAbjP9g8hTczNczcKjS7hlmD1mDk2oiv PT3evFA0748zAQMqggOzFFKaEKcCRs55EKmN46++7QPI/SzGt7++7/5d484AfoeY eqaUTICjLdnceET28Hmspelz2GEaIaE+tFfGsOp25xp4T68eev0RMB7UajMmVGVe 1M6khYzM81BNRMsWBiNvbjU+GnvhXOELS5aVneuNItC7vvJU1mZ60mDKjVAWi/pq RDuJKwPHaCZEHfI72wI8up4sgIcaJl68fM1j0auJy6eT+YBJHZPDfTVPeXL8R8uO OOu2J0+17YOieYJdWq383EB7rtcS9u4RdK2PbVLrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2wOPuk/ANctIcUso49YEYgWgPP4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyZTc1ZTQyLTkxODEtNDRlNC04MWU1LTYwMmYxYTUzOWZlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB9wgDANBgkqhkiG9w0BAQsFAAOCAQEAEl5JujEF8bLrB1Ag4c7l3ek7 WF3M0CWYVpQp2rqqUP8Lm+WJrVe064+XdHJEY4r65a53c5Mg1oAEr4VOTEBBy7Du qIkEZmiWr0pYng1H8Npiwb938fRe9GsIOULcXdzTkGOAa8/ln3310Jj06EZY3u4K U27MlAad7cksVcRlVhsttwF8GCsQ4fKAkq/sLhXnHq5B/cFV8m+8xVx81nvJQA07 6BewgQFZA0ucxJaDGGuhKy4cfU1FSRGNnDN9q8UR2Z/6YY6qL5s5A/cKqZkr/vx3 forACHAKC+4W2OPWnvVejlvo1Y6mHA4WouqHiK95ye46n79bqUmC6sTKXt3vxQ== -----END CERTIFICATE-----Generated at Sat Sep 6 14:13:49 2025 by rpki-client