$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa File: aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa (raw, json) Hash identifier: ctd2HVIhvKHHlPRa9R2VwteTSIWedtPlQxBtrnEIi/g= Subject key identifier: F3:05:E4:79:B1:31:12:E8:BD:AA:E7:68:32:07:25:97:89:DE:45:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 157AFD7250965D4106C8CF0FF803A4005D288902 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa Signing time: Tue 26 Aug 2025 16:42:03 +0000 ROA not before: Tue 26 Aug 2025 16:42:03 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 7224 IP address blocks: 2600:1ffd:1008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7a:fd:72:50:96:5d:41:06:c8:cf:0f:f8:03:a4:00:5d:28:89:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:42:03 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=9d66e3eb312107aaaec2f93d3fe1f9765dd6edab7c625e7cde80f9daaa336791, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:74:0c:93:b6:d6:05:8b:e8:cb:90:80:35:82: 09:71:db:54:50:65:a0:c2:6e:4e:ef:e5:d5:dc:1b: a0:c2:06:4d:6f:e0:b8:aa:6d:ae:9f:bc:ff:ee:c2: 6f:0a:1b:1f:a9:a2:dd:c8:a3:46:43:07:d3:3b:fe: 2a:f9:4a:e0:9c:0d:3f:cd:56:11:f8:b2:79:73:a3: c5:90:83:49:15:68:a0:5f:4a:04:53:20:22:58:48: 1d:4e:37:d0:3d:e8:75:53:c6:e3:bf:c4:14:41:fb: 43:b0:b4:6f:3e:32:fa:2a:44:d9:3c:0f:76:c7:b4: 96:d1:f7:4e:e3:d7:10:05:eb:e7:5d:d3:bf:29:78: 1e:00:96:2d:34:5a:a8:94:ba:db:0e:7d:29:a2:b7: 82:8c:cf:f5:68:0c:82:3a:11:a3:0a:40:7f:ec:9f: 90:bc:18:a3:25:0c:d7:cb:6b:4c:df:02:7c:9a:5b: 64:45:3a:15:2d:17:73:6f:25:64:39:63:c6:df:03: 0f:22:ad:83:8f:26:bc:ae:7a:b4:e1:8a:82:df:53: 72:27:3c:13:78:1b:a7:f5:16:57:85:a7:62:78:20: ab:89:a3:eb:7e:fa:12:d5:7f:35:e3:24:b9:5e:94: f7:4d:c0:ab:d1:e4:f1:70:40:ff:77:fe:63:c6:3d: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:05:E4:79:B1:31:12:E8:BD:AA:E7:68:32:07:25:97:89:DE:45:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:1008::/48 Signature Algorithm: sha256WithRSAEncryption ab:00:54:77:ca:21:2a:94:f0:95:1c:0b:c9:cf:e4:5e:82:de: aa:76:8f:9d:e4:8e:fa:2d:b8:87:2f:fe:dc:e8:3b:87:b7:33: 6f:31:ba:a1:e0:49:76:14:dd:cb:77:da:d6:61:d7:0b:15:10: 1c:16:5e:b9:c8:d8:a2:b1:6f:3d:85:ee:6e:79:25:47:51:53: d7:e2:76:d8:53:b0:2a:ac:8f:c9:0b:f6:7d:b7:b4:bb:b8:60: f0:28:5f:c2:78:f8:75:5b:24:e2:f0:47:ec:1b:a9:97:f2:e1: 91:52:54:88:fe:7f:ef:1b:34:89:40:9c:df:3f:b2:ab:82:29: 78:68:cd:68:1c:28:0c:2b:32:a0:9e:39:20:4a:17:76:d0:b3: f8:72:9f:4a:b0:f2:b1:6f:fc:08:08:57:16:07:d8:21:9f:95: 88:b3:4d:dd:b2:05:e6:61:d4:bc:d9:a1:52:aa:b6:f4:f0:33: 83:98:62:fc:b9:0d:10:3e:55:11:67:4a:54:9e:61:47:99:14: 45:57:90:08:17:38:02:49:b8:0f:ce:52:77:aa:7e:05:63:3a: 83:61:50:68:4b:6c:93:b8:6e:4e:f6:e4:1b:b6:78:be:ac:d3: b6:1f:4d:99:bd:0e:5c:d2:e9:36:d0:e4:e5:fa:5c:fd:fd:b6: c5:5c:b2:d5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFXr9clCWXUEGyM8P+AOkAF0oiQIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTY0MjAzWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDY2ZTNlYjMxMjEwN2FhYWVjMmY5M2QzZmUxZjk3NjVk ZDZlZGFiN2M2MjVlN2NkZTgwZjlkYWFhMzM2NzkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXdAyTttYFi+jLkIA1gglx21RQZaDCbk7v5dXcG6DCBk1v 4Liqba6fvP/uwm8KGx+pot3Io0ZDB9M7/ir5SuCcDT/NVhH4snlzo8WQg0kVaKBf SgRTICJYSB1ON9A96HVTxuO/xBRB+0OwtG8+MvoqRNk8D3bHtJbR907j1xAF6+dd 078peB4Ali00WqiUutsOfSmit4KMz/VoDII6EaMKQH/sn5C8GKMlDNfLa0zfAnya W2RFOhUtF3NvJWQ5Y8bfAw8irYOPJryuerThioLfU3InPBN4G6f1FleFp2J4IKuJ o+t++hLVfzXjJLlelPdNwKvR5PFwQP93/mPGPVCpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8wXkebExEui9qudoMgcll4neRbwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhNGI5M2M0LTUxMjMtNGQyZi1hMmU0LWRkOThhYmMxOWU3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9EAgwDQYJKoZIhvcNAQELBQADggEBAKsAVHfKISqU8JUcC8nP5F6C 3qp2j53kjvotuIcv/tzoO4e3M28xuqHgSXYU3ct32tZh1wsVEBwWXrnI2KKxbz2F 7m55JUdRU9fidthTsCqsj8kL9n23tLu4YPAoX8J4+HVbJOLwR+wbqZfy4ZFSVIj+ f+8bNIlAnN8/squCKXhozWgcKAwrMqCeOSBKF3bQs/hyn0qw8rFv/AgIVxYH2CGf lYizTd2yBeZh1LzZoVKqtvTwM4OYYvy5DRA+VRFnSlSeYUeZFEVXkAgXOAJJuA/O UneqfgVjOoNhUGhLbJO4bk725Bu2eL6s07YfTZm9DlzS6TbQ5OX6XP39tsVcstU= -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:17 2025 by rpki-client