$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9946c4c-e399-41df-9a79-a969df79e7c4.roa File: a9946c4c-e399-41df-9a79-a969df79e7c4.roa (raw, json) Hash identifier: CeLHSGKPsO1HI/FSJdccTe9/7dVh8l3CCIaufp9WQxU= Subject key identifier: 9A:B2:8C:89:7C:2D:9A:B6:3B:8D:FE:38:08:1C:76:35:5D:4F:6F:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03FD6CA9CDCF7F02BED807BB75C1125FC04D32D4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9946c4c-e399-41df-9a79-a969df79e7c4.roa Signing time: Tue 26 Aug 2025 15:52:08 +0000 ROA not before: Tue 26 Aug 2025 15:52:08 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fd:6c:a9:cd:cf:7f:02:be:d8:07:bb:75:c1:12:5f:c0:4d:32:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:52:08 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=294897ed05327257060701b3b33259b6b5f4d9dbac0cc1925bf7af3ed5367745, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:4e:31:30:7c:7b:93:3c:5d:54:9b:ee:67: 16:8f:f0:b2:6d:66:15:56:79:22:75:b8:c4:e0:94: 3e:13:25:6a:c1:d0:08:b3:e5:ab:61:c0:82:85:c0: 58:a4:88:69:67:ff:39:75:58:39:f8:59:29:4f:bf: 48:c7:57:3d:a1:b9:34:b0:cb:22:99:27:b8:82:a7: fd:0f:c7:62:81:ba:9f:1a:6b:52:2a:1a:67:c7:79: d8:ce:7d:92:5f:75:ed:4e:e6:a4:99:9d:39:50:2b: 4d:bb:e8:fe:f3:a3:4e:77:65:70:32:d7:e1:ab:4e: b3:38:ae:ba:56:70:71:37:c3:6b:d4:d5:65:8a:77: eb:a4:ef:46:0e:bc:04:ce:e1:d9:7a:83:9b:fd:6f: 81:01:a8:b3:4d:f6:63:b2:48:f4:18:40:7d:6a:4b: af:7a:59:2d:f2:96:6f:0b:1c:d2:4b:a8:e0:b5:8e: 56:4c:40:67:d9:8f:d4:71:3d:83:53:41:fd:2d:80: b5:12:a7:48:f9:33:35:76:d6:e0:7e:de:a6:7e:c3: 4d:21:4c:cc:3d:23:7e:6f:62:40:d0:78:0a:78:17: 2c:13:bd:5f:b3:6d:f1:ae:9e:26:74:ff:1b:fb:9e: 14:cf:98:b3:ed:15:91:fc:11:b7:38:32:da:9a:b8: 88:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B2:8C:89:7C:2D:9A:B6:3B:8D:FE:38:08:1C:76:35:5D:4F:6F:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9946c4c-e399-41df-9a79-a969df79e7c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 56:aa:61:57:63:a4:74:fa:c1:39:f9:e7:66:98:94:8b:46:d1: 84:77:73:59:82:0f:10:84:b6:b5:50:11:17:44:81:2f:59:8e: b1:95:29:74:a2:12:74:ad:09:bb:03:92:8b:c7:b6:ac:38:48: 36:48:e4:2d:45:6d:3b:30:50:37:a0:3d:f4:a4:6c:4e:67:37: f9:8d:01:67:40:2f:ae:37:a0:f0:93:ea:9b:a2:54:50:47:d2: bd:cc:6f:d8:66:d4:57:28:8f:03:9c:ac:22:50:10:42:c3:30: 60:9a:f2:a4:6a:17:87:15:72:4e:69:8c:2d:a8:ab:a7:16:29: 38:a4:03:ac:54:a9:8d:73:e9:37:c1:75:ea:d8:ec:06:6e:b3: 2f:7d:b2:58:f2:38:f0:a9:3e:43:f7:4c:62:f6:59:87:7c:40: aa:0f:c7:7e:28:0f:e2:eb:92:41:ef:8b:9d:64:8d:38:c9:78: 7d:f5:b8:ac:c2:94:c0:43:e4:07:63:ce:d5:fc:36:b3:59:db: 2d:96:97:5d:bc:c7:e3:bf:94:60:cf:8a:9e:9d:9e:8f:4a:fb: 24:16:d0:23:b2:6f:01:67:b0:6d:8a:6c:60:4f:5c:54:5a:f6: 22:19:60:7b:84:54:8f:13:9f:ef:67:7d:83:83:53:f9:00:55: e0:c2:12:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUA/1sqc3PfwK+2Ae7dcESX8BNMtQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTU1MjA4WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTQ4OTdlZDA1MzI3MjU3MDYwNzAxYjNiMzMyNTliNmI1 ZjRkOWRiYWMwY2MxOTI1YmY3YWYzZWQ1MzY3NzQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAM04xMHx7kzxdVJvuZxaP8LJtZhVWeSJ1uMTglD4TJWrB 0Aiz5athwIKFwFikiGln/zl1WDn4WSlPv0jHVz2huTSwyyKZJ7iCp/0Px2KBup8a a1IqGmfHedjOfZJfde1O5qSZnTlQK0276P7zo053ZXAy1+GrTrM4rrpWcHE3w2vU 1WWKd+uk70YOvATO4dl6g5v9b4EBqLNN9mOySPQYQH1qS696WS3ylm8LHNJLqOC1 jlZMQGfZj9RxPYNTQf0tgLUSp0j5MzV21uB+3qZ+w00hTMw9I35vYkDQeAp4FywT vV+zbfGuniZ0/xv7nhTPmLPtFZH8Ebc4MtqauIgXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmrKMiXwtmrY7jf44CBx2NV1Pb9YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E5OTQ2YzRjLWUzOTktNDFkZi05YTc5LWE5NjlkZjc5ZTdjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AIMAwDQYJKoZIhvcNAQELBQADggEBAFaqYVdjpHT6wTn552aYlItG 0YR3c1mCDxCEtrVQERdEgS9ZjrGVKXSiEnStCbsDkovHtqw4SDZI5C1FbTswUDeg PfSkbE5nN/mNAWdAL643oPCT6puiVFBH0r3Mb9hm1FcojwOcrCJQEELDMGCa8qRq F4cVck5pjC2oq6cWKTikA6xUqY1z6TfBderY7AZusy99sljyOPCpPkP3TGL2WYd8 QKoPx34oD+LrkkHvi51kjTjJeH31uKzClMBD5AdjztX8NrNZ2y2Wl128x+O/lGDP ip6dno9K+yQW0COybwFnsG2KbGBPXFRa9iIZYHuEVI8Tn+9nfYODU/kAVeDCEvU= -----END CERTIFICATE-----Generated at Sat Sep 6 16:25:51 2025 by rpki-client