$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa File: a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa (raw, json) Hash identifier: hu4/QeVZw93e5D8ssW2VYELdkGC+bsY7f7EjzTIj/hQ= Subject key identifier: F0:0B:82:EC:A1:D2:1E:88:DC:2B:5F:07:F1:D7:E8:1B:FA:2B:B4:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CEA41A6F8A3B94C96C52391262D0192447784DF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa Signing time: Mon 08 Sep 2025 15:21:45 +0000 ROA not before: Mon 08 Sep 2025 15:21:45 +0000 ROA not after: Mon 13 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:4008::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ea:41:a6:f8:a3:b9:4c:96:c5:23:91:26:2d:01:92:44:77:84:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 8 15:21:45 2025 GMT Not After : Oct 13 23:59:59 2025 GMT Subject: serialNumber=a5b21cbba12e7240202bde32f4c69bba312b50de6961caefe45ad23b84fe17c9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:62:44:a2:19:89:ad:78:6f:d7:80:17:97:e8: 53:8e:ed:be:15:7f:ba:73:6b:98:7e:a4:d3:9f:cb: 89:8f:a9:1d:f2:fa:6f:7a:38:80:18:0a:03:9f:7a: 8d:0a:9a:ea:19:49:f1:d9:93:fc:90:9e:d0:89:a3: 53:23:a9:3e:04:ba:cd:d2:44:87:97:4c:17:25:34: 0c:c2:63:0e:53:da:c1:5f:36:7d:a1:e8:a1:33:9f: be:3d:99:da:69:92:fd:40:41:4a:5c:3c:f2:ee:dd: f4:bc:13:d9:bb:c5:ab:cc:ea:be:96:3a:e2:85:1f: d7:88:ea:f5:b2:2f:65:74:fb:03:a9:f8:ff:9c:bc: 3f:62:5c:97:8b:b7:3a:41:fe:32:84:5a:47:79:4b: 37:6e:53:e0:93:fd:6d:bb:9c:65:ff:bf:5b:db:b6: c9:d3:09:12:ba:39:11:b6:26:db:12:63:ad:bc:cc: f6:95:dd:76:6c:fa:1f:6e:8f:48:66:18:04:07:a3: 2e:c0:4a:7e:70:5c:51:31:ba:37:14:94:e6:fd:4c: 22:e0:c4:37:45:57:36:5a:6f:dc:f7:08:0e:77:5c: 0d:5d:95:6a:b5:11:4b:16:7e:0d:d5:a7:05:b7:74: bd:24:c1:e5:9c:80:54:e8:53:76:2d:22:09:47:51: c1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0B:82:EC:A1:D2:1E:88:DC:2B:5F:07:F1:D7:E8:1B:FA:2B:B4:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:4008::/45 Signature Algorithm: sha256WithRSAEncryption 02:b2:c9:82:aa:5d:fc:02:d5:e0:e6:5e:9e:7a:0e:e2:8f:35: 17:7e:0f:84:8a:22:54:65:b3:38:1f:99:9a:41:17:a4:0d:55: 57:bd:11:fd:20:64:b7:eb:23:0e:5b:87:ab:51:3e:12:fa:f1: a8:ba:3b:b9:3b:1a:3d:50:03:f9:52:f8:1b:dd:45:47:78:32: 8f:50:a2:4e:1f:c9:9d:a2:de:6a:65:db:44:73:1b:3a:80:ff: 16:81:47:ac:e7:fe:91:20:f4:2d:2e:c1:48:64:56:a2:8d:83: 1a:61:87:b0:4f:20:7c:78:57:5b:de:ec:2f:de:92:1b:c5:68: 11:2f:1a:5f:ff:bd:20:df:e4:44:0a:b1:63:3f:7b:e0:ee:51: 54:c8:81:76:d3:ef:d8:a5:6c:e8:87:21:d0:49:1b:d5:37:a9: a1:da:24:58:3f:56:59:00:28:6c:6b:26:f6:57:4e:bc:d0:59: d5:13:28:6a:be:40:4f:51:d7:0b:b1:43:dd:4b:df:9b:4d:8b: 1f:81:08:76:cb:40:4f:3a:8d:94:2c:df:9f:ec:c9:d6:da:41: 49:ae:c3:0e:0b:28:18:95:51:b0:8e:e1:0a:c2:5e:26:93:b5: e2:a8:ed:f5:31:df:a3:c4:45:32:b6:54:ec:c3:6f:f5:af:c9: af:75:fb:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPOpBpvijuUyWxSORJi0BkkR3hN8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA4MTUyMTQ1WhcNMjUxMDEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNWIyMWNiYmExMmU3MjQwMjAyYmRlMzJmNGM2OWJiYTMx MmI1MGRlNjk2MWNhZWZlNDVhZDIzYjg0ZmUxN2M5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRYkSiGYmteG/XgBeX6FOO7b4Vf7pza5h+pNOfy4mPqR3y +m96OIAYCgOfeo0KmuoZSfHZk/yQntCJo1MjqT4Eus3SRIeXTBclNAzCYw5T2sFf Nn2h6KEzn749mdppkv1AQUpcPPLu3fS8E9m7xavM6r6WOuKFH9eI6vWyL2V0+wOp +P+cvD9iXJeLtzpB/jKEWkd5SzduU+CT/W27nGX/v1vbtsnTCRK6ORG2JtsSY628 zPaV3XZs+h9uj0hmGAQHoy7ASn5wXFExujcUlOb9TCLgxDdFVzZab9z3CA53XA1d lWq1EUsWfg3VpwW3dL0kweWcgFToU3YtIglHUcHdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8AuC7KHSHojcK18H8dfoG/ortJ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E0OTJlODUxLWU3NGMtNDRlZC1iNGJkLTRiOTVmM2M4N2EwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmIAEHQAgwDQYJKoZIhvcNAQELBQADggEBAAKyyYKqXfwC1eDmXp56DuKP NRd+D4SKIlRlszgfmZpBF6QNVVe9Ef0gZLfrIw5bh6tRPhL68ai6O7k7Gj1QA/lS +BvdRUd4Mo9Qok4fyZ2i3mpl20RzGzqA/xaBR6zn/pEg9C0uwUhkVqKNgxphh7BP IHx4V1ve7C/ekhvFaBEvGl//vSDf5EQKsWM/e+DuUVTIgXbT79ilbOiHIdBJG9U3 qaHaJFg/VlkAKGxrJvZXTrzQWdUTKGq+QE9R1wuxQ91L35tNix+BCHbLQE86jZQs 35/sydbaQUmuww4LKBiVUbCO4QrCXiaTteKo7fUx36PERTK2VOzDb/Wvya91+z8= -----END CERTIFICATE-----Generated at Wed Sep 17 11:37:22 2025 by rpki-client