$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/954fe8c8-f86c-46da-9ad1-2cb75fee8130.roa File: 954fe8c8-f86c-46da-9ad1-2cb75fee8130.roa (raw, json) Hash identifier: XPff/27dcfcfGQnPL8y8hE74/+3Fm11EOPU5tGHsljk= Subject key identifier: 48:1D:32:17:1B:54:C0:66:75:8C:46:A2:AB:28:91:28:1E:1E:B3:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30CB0A5AF02CEC4F5736A03DF3E4D4A6E92AF2DD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/954fe8c8-f86c-46da-9ad1-2cb75fee8130.roa Signing time: Tue 26 Aug 2025 16:11:24 +0000 ROA not before: Tue 26 Aug 2025 16:11:24 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:cb:0a:5a:f0:2c:ec:4f:57:36:a0:3d:f3:e4:d4:a6:e9:2a:f2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:11:24 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=fbb8aa1977d61e071f8d9bbb0ffa3ae470e3655e97ecff108bebbf7011e260ec, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:77:a4:2e:de:c5:cf:0e:20:8c:42:17:78: 1a:4b:50:67:ff:11:2b:9e:d0:49:94:31:10:6f:e0: 6b:53:d7:de:aa:e3:82:18:7a:b0:34:9c:86:17:af: 6f:7b:a1:6f:55:22:4b:f3:c2:15:2c:f5:a3:6b:b5: 86:13:0d:3b:06:fd:38:fc:5a:bd:ad:51:de:b8:91: b6:ea:7b:75:2b:f1:5b:05:a0:70:0c:7c:94:ac:db: 7e:26:36:86:23:49:21:0c:47:ed:63:1b:77:70:58: c8:38:a7:9a:7f:db:7e:1c:9a:d9:51:6b:10:3f:71: 21:31:9f:07:df:df:64:84:b0:95:3d:d1:cd:46:03: 5d:f4:a1:6c:29:13:2c:bd:f9:ad:d3:66:a4:97:5b: c2:a3:b2:21:1d:5d:c9:bd:e0:42:87:64:b4:a0:7e: a0:65:b8:e6:f1:5e:2a:96:f4:76:45:91:af:91:26: 24:65:c4:b5:bb:4b:10:c5:4e:13:8d:0d:b3:32:b6: 8e:4d:de:2a:51:2b:93:da:be:e1:94:4e:4b:d7:72: b3:7b:ce:72:90:68:06:54:3a:27:9b:e5:48:4b:ea: 79:50:96:67:77:fb:8e:5c:15:45:05:14:f0:9f:08: 6e:56:e9:80:c2:b2:be:57:29:f4:22:51:b9:25:f2: 21:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1D:32:17:1B:54:C0:66:75:8C:46:A2:AB:28:91:28:1E:1E:B3:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/954fe8c8-f86c-46da-9ad1-2cb75fee8130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:4020::/48 Signature Algorithm: sha256WithRSAEncryption 04:35:72:b2:e1:2a:ad:02:14:34:53:32:32:38:0c:94:1c:a4: 3a:9b:a8:a9:16:fc:02:e4:4e:26:d0:24:13:a5:6f:a2:22:f8: a0:00:62:e3:56:d9:ae:e3:06:7d:5b:cd:2d:40:29:be:b4:f2: 36:3f:45:a9:01:b3:76:98:8d:b0:df:f7:47:83:a1:5d:fc:22: f9:1a:41:6d:69:ee:bd:0b:cc:f7:fa:05:72:6c:6d:cf:0a:1e: 76:db:ab:3a:ac:34:72:d4:f7:67:3a:2b:b8:d5:35:b4:18:34: 77:e7:8b:1d:1b:52:ce:f8:26:2a:88:ee:33:64:ca:b9:9c:7c: 6a:7a:38:12:d6:e5:8a:4f:ac:59:61:25:30:e8:20:8a:35:3e: 0b:64:82:36:ae:63:78:cf:9f:4e:b4:ad:3e:76:d6:ea:cd:b7: ce:69:7f:9a:47:de:1f:d4:a1:4b:eb:75:13:4d:51:ef:99:ae: 95:e4:59:c3:0b:0a:c4:76:4d:3b:d7:78:5f:11:fc:c4:80:92: e0:80:7c:b5:f7:37:65:c2:aa:22:d5:e7:26:60:61:b8:81:15: 02:55:f1:51:e0:83:93:66:21:c2:cd:3b:82:96:e7:83:4b:84: 18:7f:21:2a:f3:18:58:cc:20:ae:72:60:b2:d1:04:be:8c:e9: 6a:f7:57:3a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMMsKWvAs7E9XNqA98+TUpukq8t0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTYxMTI0WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYmI4YWExOTc3ZDYxZTA3MWY4ZDliYmIwZmZhM2FlNDcw ZTM2NTVlOTdlY2ZmMTA4YmViYmY3MDExZTI2MGVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtY3ekLt7Fzw4gjEIXeBpLUGf/ESue0EmUMRBv4GtT196q 44IYerA0nIYXr297oW9VIkvzwhUs9aNrtYYTDTsG/Tj8Wr2tUd64kbbqe3Ur8VsF oHAMfJSs234mNoYjSSEMR+1jG3dwWMg4p5p/234cmtlRaxA/cSExnwff32SEsJU9 0c1GA130oWwpEyy9+a3TZqSXW8KjsiEdXcm94EKHZLSgfqBluObxXiqW9HZFka+R JiRlxLW7SxDFThONDbMyto5N3ipRK5PavuGUTkvXcrN7znKQaAZUOieb5UhL6nlQ lmd3+45cFUUFFPCfCG5W6YDCsr5XKfQiUbkl8iH1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSB0yFxtUwGZ1jEaiqyiRKB4esxQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1NGZlOGM4LWY4NmMtNDZkYS05YWQxLTJjYjc1ZmVlODEzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hQCAwDQYJKoZIhvcNAQELBQADggEBAAQ1crLhKq0CFDRTMjI4DJQc pDqbqKkW/ALkTibQJBOlb6Ii+KAAYuNW2a7jBn1bzS1AKb608jY/RakBs3aYjbDf 90eDoV38IvkaQW1p7r0LzPf6BXJsbc8KHnbbqzqsNHLU92c6K7jVNbQYNHfnix0b Us74JiqI7jNkyrmcfGp6OBLW5YpPrFlhJTDoIIo1PgtkgjauY3jPn060rT521urN t85pf5pH3h/UoUvrdRNNUe+ZrpXkWcMLCsR2TTvXeF8R/MSAkuCAfLX3N2XCqiLV 5yZgYbiBFQJV8VHgg5NmIcLNO4KW54NLhBh/ISrzGFjMIK5yYLLRBL6M6Wr3Vzo= -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:33 2025 by rpki-client