$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93cfa8a3-70c9-4ee0-967e-2a7a8ef0edb9.roa File: 93cfa8a3-70c9-4ee0-967e-2a7a8ef0edb9.roa (raw, json) Hash identifier: JT/1LiBP0QY6GJUNv3xVrveRfbi6HVB7GGOs3MkD55Q= Subject key identifier: 8F:0A:8D:79:D7:A1:49:C0:C2:10:BC:FC:79:18:48:CC:A3:5E:45:E7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0691D818C21565B30A1DD3D255F9700E44B9FA6C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93cfa8a3-70c9-4ee0-967e-2a7a8ef0edb9.roa Signing time: Mon 08 Sep 2025 15:20:17 +0000 ROA not before: Mon 08 Sep 2025 15:20:17 +0000 ROA not after: Mon 13 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:4000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:91:d8:18:c2:15:65:b3:0a:1d:d3:d2:55:f9:70:0e:44:b9:fa:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 8 15:20:17 2025 GMT Not After : Oct 13 23:59:59 2025 GMT Subject: serialNumber=3dcde04a3eeb3c2ff33fb3609bd0cd576abcc6d0c2045d5522731b1c3dbd35f4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:82:c5:90:24:50:84:91:37:90:ed:24:d2:71: 09:8f:99:34:56:5d:04:cf:2c:14:29:e4:f1:4c:cc: 0b:f4:45:d2:86:95:ab:ea:15:d5:29:2b:51:cf:d8: 9d:96:e9:58:da:3a:f3:52:ba:fb:33:7b:44:e7:ca: e4:5d:fd:c3:de:db:8e:80:d5:34:bd:7d:f5:19:bf: 67:f7:a9:84:6b:c1:a8:27:48:7c:dd:83:4e:3d:54: fb:2b:51:58:48:b7:85:d6:3f:b6:26:46:8e:3b:64: 59:d9:55:15:25:fc:6a:f7:81:39:7b:8f:82:fa:62: bd:f4:2e:28:84:38:f1:55:81:44:a3:7e:af:24:84: 15:67:6a:39:16:c5:bc:1b:11:6d:e8:19:9b:ed:93: ed:12:ef:0c:e6:11:47:61:e4:18:fe:55:53:c6:d7: 09:70:24:4c:a9:fd:07:c5:6d:b0:c6:ad:6d:b1:e9: 8a:5f:e0:50:3e:5c:52:7e:59:cb:51:51:33:ac:12: ae:4a:dd:f5:e9:52:e9:39:cf:0f:6d:82:2e:e7:3b: 3e:ee:9f:b6:15:f5:aa:55:76:a2:03:ad:ab:c9:78: 5e:d3:ab:6e:4a:54:3c:04:16:b6:1b:b1:fc:8f:19: 4a:83:58:91:d9:53:8c:04:0c:4f:4f:34:a4:4a:2a: 38:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0A:8D:79:D7:A1:49:C0:C2:10:BC:FC:79:18:48:CC:A3:5E:45:E7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93cfa8a3-70c9-4ee0-967e-2a7a8ef0edb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:4000::/39 Signature Algorithm: sha256WithRSAEncryption 30:3c:ab:e3:f8:a1:00:13:bc:73:06:48:75:ee:2c:88:9e:9d: 25:53:7d:3c:80:ec:4a:62:00:52:fb:b4:f4:56:24:1d:93:1a: c3:35:b2:f4:4a:6e:cf:49:32:25:eb:6b:12:29:0e:a3:e2:7f: b4:ce:17:e8:6b:2b:97:5e:9b:1b:3f:12:4c:d2:46:6f:8f:73: 87:52:7d:1a:9f:5a:8c:f2:3e:8c:0d:21:81:e7:9a:92:77:49: cd:6b:32:ea:9f:18:c3:88:eb:f3:dc:e7:5a:55:af:56:a4:35: 7c:cb:fd:18:32:bd:d2:fa:af:d7:ac:13:2e:74:0d:c2:9e:17: 2a:40:dd:b8:d1:1a:7d:2e:dc:e6:0b:69:10:41:e8:99:94:f9: b5:e9:63:20:81:e1:ba:53:7c:9b:5e:57:22:62:0e:84:5c:00: a9:8a:fe:77:9e:6e:24:fb:76:c6:96:e7:80:e5:81:22:34:5c: 85:fa:4d:1f:61:80:8d:2e:10:a7:4f:2a:1a:a0:4e:03:e9:28: cc:9b:2d:b3:e8:4c:c2:aa:c2:16:63:f5:36:56:49:77:f4:9a: 5b:e3:8a:6f:f4:e0:75:8d:9b:28:ad:ab:a3:51:02:5e:c7:85: 46:5f:b0:3b:12:8b:70:d1:fd:8f:84:4f:89:6c:6e:45:ea:d3: 72:a1:a4:54 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBpHYGMIVZbMKHdPSVflwDkS5+mwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA4MTUyMDE3WhcNMjUxMDEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZGNkZTA0YTNlZWIzYzJmZjMzZmIzNjA5YmQwY2Q1NzZh YmNjNmQwYzIwNDVkNTUyMjczMWIxYzNkYmQzNWY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVgsWQJFCEkTeQ7STScQmPmTRWXQTPLBQp5PFMzAv0RdKG lavqFdUpK1HP2J2W6VjaOvNSuvsze0TnyuRd/cPe246A1TS9ffUZv2f3qYRrwagn SHzdg049VPsrUVhIt4XWP7YmRo47ZFnZVRUl/Gr3gTl7j4L6Yr30LiiEOPFVgUSj fq8khBVnajkWxbwbEW3oGZvtk+0S7wzmEUdh5Bj+VVPG1wlwJEyp/QfFbbDGrW2x 6Ypf4FA+XFJ+WctRUTOsEq5K3fXpUuk5zw9tgi7nOz7un7YV9apVdqIDravJeF7T q25KVDwEFrYbsfyPGUqDWJHZU4wEDE9PNKRKKjjXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUjwqNedehScDCELz8eRhIzKNeRecwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkzY2ZhOGEzLTcwYzktNGVlMC05NjdlLTJhN2E4ZWYwZWRiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/7QDANBgkqhkiG9w0BAQsFAAOCAQEAMDyr4/ihABO8cwZIde4siJ6d JVN9PIDsSmIAUvu09FYkHZMawzWy9Epuz0kyJetrEikOo+J/tM4X6Gsrl16bGz8S TNJGb49zh1J9Gp9ajPI+jA0hgeeakndJzWsy6p8Yw4jr89znWlWvVqQ1fMv9GDK9 0vqv16wTLnQNwp4XKkDduNEafS7c5gtpEEHomZT5teljIIHhulN8m15XImIOhFwA qYr+d55uJPt2xpbngOWBIjRchfpNH2GAjS4Qp08qGqBOA+kozJsts+hMwqrCFmP1 NlZJd/SaW+OKb/TgdY2bKK2ro1ECXseFRl+wOxKLcNH9j4RPiWxuRerTcqGkVA== -----END CERTIFICATE-----Generated at Tue Sep 16 15:35:11 2025 by rpki-client