$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a152fc40-a444-4cdd-97b2-9a2e70a778e9.roa File: a152fc40-a444-4cdd-97b2-9a2e70a778e9.roa (raw, json) Hash identifier: Wn0x/zBhI2v1Sai95NKSHJjMS7JmhieHVd7ZVf98Z3M= Subject key identifier: 07:5F:8F:5B:B7:1D:73:EB:FE:62:63:90:4D:72:FA:D7:41:00:69:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3841C8E2B61B11124D2F46DA8E405B2CCC093C3C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a152fc40-a444-4cdd-97b2-9a2e70a778e9.roa Signing time: Fri 29 Aug 2025 15:41:39 +0000 ROA not before: Fri 29 Aug 2025 15:41:39 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2c:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:41:c8:e2:b6:1b:11:12:4d:2f:46:da:8e:40:5b:2c:cc:09:3c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 15:41:39 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=21d0a83536560813c7fa68724e2848484a98c2445f1c6abd3f515cb18eafa81f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b0:e3:0a:0f:6b:ca:2c:9f:ce:34:0c:51:4e: 13:8f:58:b8:e6:da:86:db:de:ce:9f:57:2c:75:e0: 86:7b:91:e5:46:6f:20:8f:1f:2a:e0:9e:c6:dc:8a: 0f:41:af:a7:b5:61:7f:38:0c:d3:1d:89:6c:ef:13: 5c:eb:35:be:d5:84:66:67:36:a0:d4:87:9f:12:ae: 49:36:a4:af:ee:d3:15:1b:70:bb:0e:57:42:ce:37: f2:0e:0b:e1:f0:24:a1:c0:6b:3f:fd:52:15:8f:c9: 74:06:87:b1:97:6a:fe:09:46:d3:fe:1f:3f:75:e6: 57:0f:32:8a:85:74:ae:1d:12:32:fd:31:d3:fd:a0: 44:e0:70:77:ec:aa:74:73:ad:a6:34:bb:0c:06:dd: b6:ec:3b:13:41:b2:ea:d8:56:21:02:12:71:4f:95: ee:a6:18:c2:80:d3:66:0c:83:0f:6f:e4:63:5c:98: d3:df:f1:9b:f8:b9:ed:25:6d:fa:25:6d:c7:27:30: 29:6b:f0:8c:46:f3:b8:70:31:8f:e7:34:d9:cc:4a: 01:23:b7:a1:38:b4:97:d3:64:36:46:bb:8b:d7:93: df:26:75:cb:f7:4b:54:4f:a8:68:2a:99:e2:5e:6d: a9:2d:e0:20:de:15:6c:3e:63:7a:04:f4:3c:44:99: 08:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5F:8F:5B:B7:1D:73:EB:FE:62:63:90:4D:72:FA:D7:41:00:69:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a152fc40-a444-4cdd-97b2-9a2e70a778e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2c:c800::/37 Signature Algorithm: sha256WithRSAEncryption 39:a4:d1:91:c1:af:78:ac:46:34:bd:11:30:a5:f9:39:06:75: 37:b0:ad:3c:52:50:f4:e4:9d:df:e4:a8:23:80:29:9f:82:25: fd:67:78:9e:83:49:14:b7:69:23:d7:96:bd:45:31:87:8d:8c: e3:5e:12:c1:c9:61:40:30:f6:e8:c4:20:3c:d2:fe:41:e2:be: 07:0f:86:1c:0f:f7:d8:5a:e1:c8:62:f0:d3:50:f1:c9:b6:c6: f4:1d:53:7e:6e:79:76:79:dd:5e:88:e5:cc:9a:c2:7c:80:fd: ba:1d:8b:53:db:47:28:a4:cb:8a:c1:e9:96:8b:20:b4:f4:87: c1:2a:00:16:69:88:37:da:81:a3:ba:d6:84:27:a6:d8:ee:e0: b4:18:43:a5:3e:82:d3:e8:89:f0:d0:51:3c:fd:5f:ab:6f:fd: bd:bc:d7:ea:e2:9a:7f:cc:09:54:c0:dc:b6:97:e2:6b:ba:eb: 72:5c:08:7c:95:a2:3e:2d:fe:1d:df:ae:79:0d:35:7e:55:90: 75:2c:78:d3:7f:3b:8c:b7:53:cb:d5:96:6f:48:09:bc:93:66: 6e:ed:cc:d3:02:02:c9:5d:56:8c:1d:65:d9:18:bc:66:65:bd: 4e:c1:cc:4c:51:78:a2:37:46:96:34:b9:9f:03:eb:b0:af:96: a9:ad:0e:ca -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOEHI4rYbERJNL0bajkBbLMwJPDwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTU0MTM5WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMWQwYTgzNTM2NTYwODEzYzdmYTY4NzI0ZTI4NDg0ODRh OThjMjQ0NWYxYzZhYmQzZjUxNWNiMThlYWZhODFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZsOMKD2vKLJ/ONAxRThOPWLjm2obb3s6fVyx14IZ7keVG byCPHyrgnsbcig9Br6e1YX84DNMdiWzvE1zrNb7VhGZnNqDUh58Srkk2pK/u0xUb cLsOV0LON/IOC+HwJKHAaz/9UhWPyXQGh7GXav4JRtP+Hz915lcPMoqFdK4dEjL9 MdP9oETgcHfsqnRzraY0uwwG3bbsOxNBsurYViECEnFPle6mGMKA02YMgw9v5GNc mNPf8Zv4ue0lbfolbccnMClr8IxG87hwMY/nNNnMSgEjt6E4tJfTZDZGu4vXk98m dcv3S1RPqGgqmeJebakt4CDeFWw+Y3oE9DxEmQhtAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUB1+PW7cdc+v+YmOQTXL610EAafowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ExNTJmYzQwLWE0NDQtNGNkZC05N2IyLTlhMmU3MGE3NzhlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8syDANBgkqhkiG9w0BAQsFAAOCAQEAOaTRkcGveKxGNL0RMKX5OQZ1 N7CtPFJQ9OSd3+SoI4Apn4Il/Wd4noNJFLdpI9eWvUUxh42M414SwclhQDD26MQg PNL+QeK+Bw+GHA/32FrhyGLw01DxybbG9B1Tfm55dnndXojlzJrCfID9uh2LU9tH KKTLisHplosgtPSHwSoAFmmIN9qBo7rWhCem2O7gtBhDpT6C0+iJ8NBRPP1fq2/9 vbzX6uKaf8wJVMDctpfia7rrclwIfJWiPi3+Hd+ueQ01flWQdSx40387jLdTy9WW b0gJvJNmbu3M0wICyV1WjB1l2Ri8ZmW9TsHMTFF4ojdGljS5nwPrsK+Wqa0Oyg== -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:05 2025 by rpki-client