$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa File: 9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa (raw, json) Hash identifier: WexgBKfvDhITIjax2pA4hwtBVM5oAzWnBthCEPuOIjY= Subject key identifier: 40:1E:BC:55:77:A4:00:01:C8:FE:1F:1D:73:06:55:A7:1E:08:B9:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 402B0620C79CD9A303825328760187AD149A599B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa Signing time: Fri 29 Aug 2025 00:51:53 +0000 ROA not before: Fri 29 Aug 2025 00:51:53 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1:4000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2b:06:20:c7:9c:d9:a3:03:82:53:28:76:01:87:ad:14:9a:59:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 00:51:53 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=294b431bba81428c098991db971b2ebdd5b89e0da10f1d1650ad54350ea9bc70, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:45:38:34:85:da:9e:34:9b:9f:42:73:43:a2: bf:05:db:11:25:ab:ac:d9:a8:23:61:82:6c:2d:2f: 59:95:70:2d:a0:c6:c0:07:79:64:95:fb:51:64:be: 2b:0d:83:cf:26:de:f9:d9:f6:9e:65:19:10:7a:3d: 88:ed:63:2f:ce:b3:0f:9c:ea:03:b6:45:51:4b:1a: 4e:40:a8:5e:1e:0e:16:8d:4c:82:76:41:e1:56:8c: 00:d8:7d:06:61:81:5f:4c:b2:77:20:44:ce:73:66: ba:f2:26:2c:bf:a8:9c:db:f1:be:4e:96:4b:31:10: 11:ec:4f:a6:51:19:d2:e6:1a:07:25:fe:38:f1:5b: 6c:ad:a6:60:95:ba:80:48:81:bd:46:aa:21:b7:a2: 23:42:6f:81:7f:1d:1a:df:5d:86:18:c7:c1:b3:21: ff:98:1a:b2:21:5d:85:d8:7e:88:e8:1b:8b:ff:70: a5:6a:e9:11:ec:e0:61:7d:e6:15:0b:58:81:21:6f: ca:20:f5:b0:a9:ed:76:23:01:ee:dd:52:96:2d:34: b9:aa:4e:1b:61:b0:ff:b9:11:9f:3e:30:5f:0d:72: 82:fa:a1:28:ff:df:ae:57:9b:f7:4b:93:08:bc:ca: 2d:c0:43:79:c1:67:81:f8:a8:11:49:b3:30:a8:9b: ad:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1E:BC:55:77:A4:00:01:C8:FE:1F:1D:73:06:55:A7:1E:08:B9:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:4000::/39 Signature Algorithm: sha256WithRSAEncryption 1e:af:73:f0:49:25:78:79:0f:d2:65:96:c7:d8:e2:df:a4:c5: 9f:c3:4a:ea:f0:b7:0f:6b:1a:94:c4:81:db:7a:a3:d1:3b:c9: 86:a6:f4:29:12:2b:b2:35:8e:9b:d7:8d:d1:32:1d:af:d5:67: ff:7c:0b:53:76:1e:e2:8d:21:a9:81:af:4c:e7:02:fe:7b:d1: ad:03:53:da:c6:d7:1f:04:4a:73:d7:ee:41:f8:1f:13:9a:cf: 6d:fa:a4:a8:a6:7e:b0:69:af:6e:8f:11:32:50:4c:75:fc:48: 79:16:ca:ea:e0:7f:c9:a5:0c:e5:73:92:fc:24:3a:4a:9b:99: e9:a9:cb:01:44:ef:bc:c8:c5:86:3f:ac:66:c2:5e:dd:27:f2: 15:d3:6f:5c:ba:da:7e:b5:7b:60:6d:88:9e:b7:25:c9:a4:83: fa:68:04:3f:d7:a1:81:aa:1a:a3:f9:f7:a3:4a:10:cf:bc:a5: fb:70:b5:61:81:3b:76:0f:4b:4b:a7:d2:2b:4c:a5:88:a9:95: 0f:b9:33:0d:62:1b:cd:eb:8e:32:98:5c:00:e7:8f:ae:06:fd: e9:51:92:57:b2:00:2d:34:fc:cb:95:df:99:6f:77:7a:3c:ad: f8:d7:94:ca:11:57:a5:4f:14:8b:d5:a3:6a:8c:9f:c2:ae:ce: bc:71:13:7b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQCsGIMec2aMDglModgGHrRSaWZswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MDA1MTUzWhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTRiNDMxYmJhODE0MjhjMDk4OTkxZGI5NzFiMmViZGQ1 Yjg5ZTBkYTEwZjFkMTY1MGFkNTQzNTBlYTliYzcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCURTg0hdqeNJufQnNDor8F2xElq6zZqCNhgmwtL1mVcC2g xsAHeWSV+1FkvisNg88m3vnZ9p5lGRB6PYjtYy/Osw+c6gO2RVFLGk5AqF4eDhaN TIJ2QeFWjADYfQZhgV9MsncgRM5zZrryJiy/qJzb8b5OlksxEBHsT6ZRGdLmGgcl /jjxW2ytpmCVuoBIgb1GqiG3oiNCb4F/HRrfXYYYx8GzIf+YGrIhXYXYfojoG4v/ cKVq6RHs4GF95hULWIEhb8og9bCp7XYjAe7dUpYtNLmqThthsP+5EZ8+MF8NcoL6 oSj/365Xm/dLkwi8yi3AQ3nBZ4H4qBFJszCom63vAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQB68VXekAAHI/h8dcwZVpx4IuVMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliYjViM2ZmLWQ3ZjAtNDA5Ni1hZmIwLTc2YTRjYWFjMjIzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/xQDANBgkqhkiG9w0BAQsFAAOCAQEAHq9z8EkleHkP0mWWx9ji36TF n8NK6vC3D2salMSB23qj0TvJhqb0KRIrsjWOm9eN0TIdr9Vn/3wLU3Ye4o0hqYGv TOcC/nvRrQNT2sbXHwRKc9fuQfgfE5rPbfqkqKZ+sGmvbo8RMlBMdfxIeRbK6uB/ yaUM5XOS/CQ6SpuZ6anLAUTvvMjFhj+sZsJe3SfyFdNvXLrafrV7YG2InrclyaSD +mgEP9ehgaoao/n3o0oQz7yl+3C1YYE7dg9LS6fSK0yliKmVD7kzDWIbzeuOMphc AOePrgb96VGSV7IALTT8y5XfmW93ejyt+NeUyhFXpU8Ui9Wjaoyfwq7OvHETew== -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:34 2025 by rpki-client