$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97657869-6c0e-4720-b04c-260b76a75f4c.roa File: 97657869-6c0e-4720-b04c-260b76a75f4c.roa (raw, json) Hash identifier: TudmC4bE4YkYHRLdZMEP2x6tfip8ktvkf59WW1K5Aak= Subject key identifier: 82:B4:51:9C:D4:BF:E6:0E:6D:08:52:32:77:2A:AA:E9:A0:67:B5:4B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B87BEC45D90BCD7138BBA52B0B925E89AD12AB4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97657869-6c0e-4720-b04c-260b76a75f4c.roa Signing time: Tue 26 Aug 2025 17:10:11 +0000 ROA not before: Tue 26 Aug 2025 17:10:11 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:8120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:87:be:c4:5d:90:bc:d7:13:8b:ba:52:b0:b9:25:e8:9a:d1:2a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 17:10:11 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=4ad335c698d2396ab63ca4e4346d0c35aeeee3ea02e9ccdc09bdb6112e2d7055, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:39:35:e0:d3:5e:93:fb:51:37:d2:1e:6a:cc: f2:4b:20:e9:f5:2c:0b:10:e0:d8:e4:92:f8:16:71: 31:1d:32:cf:e3:a3:35:ae:9d:bd:0a:b4:52:9f:dd: 1b:55:2b:e1:72:58:16:4b:0a:27:9b:fb:38:4d:16: c8:b3:95:8d:99:86:39:d7:b0:99:ac:f6:7f:80:cb: 23:df:0f:9f:62:6d:7b:b2:67:f1:20:cb:37:e3:c2: 2f:bf:55:ad:fb:8e:44:18:0f:39:7d:e7:62:56:1a: 64:7d:57:dc:9b:2a:ac:5c:37:bc:df:b7:76:27:27: 25:44:0e:fa:b3:1a:77:ec:fa:03:fe:68:3a:aa:e5: dd:6b:eb:37:8e:3e:05:a9:59:9c:d4:9b:eb:c1:5e: 8d:a9:81:22:00:8b:fa:17:22:2f:bd:f9:96:28:bf: 2e:ea:b9:47:5f:45:82:6e:e0:ac:6c:1b:aa:e6:97: df:33:c8:46:93:47:e4:d0:ba:f8:fb:b7:c8:ce:01: 43:5f:f0:2e:97:1d:bc:dd:c8:55:a8:ef:36:0f:a9: 0f:90:d5:2a:ac:4c:ef:ac:df:45:de:0b:18:6d:94: 36:ca:ca:6f:51:e8:bf:43:57:ba:7a:8a:d2:ca:77: 70:cb:87:8f:86:56:71:f6:5e:f2:ee:cc:08:54:e2: 9b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B4:51:9C:D4:BF:E6:0E:6D:08:52:32:77:2A:AA:E9:A0:67:B5:4B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97657869-6c0e-4720-b04c-260b76a75f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8120::/48 Signature Algorithm: sha256WithRSAEncryption 21:70:4a:23:9c:a9:e2:57:eb:e4:18:1f:ed:7a:72:b8:20:39: d3:ef:75:1e:6e:58:53:9d:51:63:f3:c1:c1:40:3b:a3:23:f1: 3f:cb:e2:f3:a3:e4:4a:ab:df:c3:f8:2d:96:8a:2e:f2:ee:43: 47:c0:67:d2:51:05:17:32:cc:04:fc:f6:8c:b2:a8:96:0c:a6: 32:07:35:75:af:25:92:96:a5:c2:19:18:21:bc:86:46:f2:17: 08:7e:c6:4d:3a:37:e4:59:5a:aa:4a:72:b9:06:21:b6:f2:c9: 05:52:32:4e:40:91:e2:83:23:0a:59:29:fc:d7:1b:52:73:15: 8d:56:e2:3f:f1:55:54:75:6b:80:61:30:98:ef:00:84:4b:dc: e3:f1:6e:be:aa:b5:83:26:e6:29:66:87:68:08:89:57:1f:ef: 96:ec:0b:ab:7a:a6:c1:96:12:ef:82:52:31:86:c0:d9:61:6a: d8:a3:26:2a:7a:9d:f0:54:14:72:d6:b3:a6:62:27:41:9f:71: d4:9b:54:bb:fa:d9:74:1a:64:fa:44:3d:7f:2c:09:36:0a:ef: 01:05:89:28:39:78:68:ae:0c:e8:57:c1:a9:01:78:31:f6:93: 8d:e5:6a:3f:3b:a2:3f:cd:da:ea:66:a9:46:82:fd:77:e5:6b: 5a:f1:01:1d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUG4e+xF2QvNcTi7pSsLkl6JrRKrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTcxMDExWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWQzMzVjNjk4ZDIzOTZhYjYzY2E0ZTQzNDZkMGMzNWFl ZWVlM2VhMDJlOWNjZGMwOWJkYjYxMTJlMmQ3MDU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSOTXg016T+1E30h5qzPJLIOn1LAsQ4NjkkvgWcTEdMs/j ozWunb0KtFKf3RtVK+FyWBZLCieb+zhNFsizlY2ZhjnXsJms9n+AyyPfD59ibXuy Z/Egyzfjwi+/Va37jkQYDzl952JWGmR9V9ybKqxcN7zft3YnJyVEDvqzGnfs+gP+ aDqq5d1r6zeOPgWpWZzUm+vBXo2pgSIAi/oXIi+9+ZYovy7quUdfRYJu4KxsG6rm l98zyEaTR+TQuvj7t8jOAUNf8C6XHbzdyFWo7zYPqQ+Q1SqsTO+s30XeCxhtlDbK ym9R6L9DV7p6itLKd3DLh4+GVnH2XvLuzAhU4pu9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgrRRnNS/5g5tCFIydyqq6aBntUswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk3NjU3ODY5LTZjMGUtNDcyMC1iMDRjLTI2MGI3NmE3NWY0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgSAwDQYJKoZIhvcNAQELBQADggEBACFwSiOcqeJX6+QYH+16crgg OdPvdR5uWFOdUWPzwcFAO6Mj8T/L4vOj5Eqr38P4LZaKLvLuQ0fAZ9JRBRcyzAT8 9oyyqJYMpjIHNXWvJZKWpcIZGCG8hkbyFwh+xk06N+RZWqpKcrkGIbbyyQVSMk5A keKDIwpZKfzXG1JzFY1W4j/xVVR1a4BhMJjvAIRL3OPxbr6qtYMm5ilmh2gIiVcf 75bsC6t6psGWEu+CUjGGwNlhatijJip6nfBUFHLWs6ZiJ0GfcdSbVLv62XQaZPpE PX8sCTYK7wEFiSg5eGiuDOhXwakBeDH2k43laj87oj/N2upmqUaC/Xfla1rxAR0= -----END CERTIFICATE-----Generated at Sat Sep 6 14:05:53 2025 by rpki-client