$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad7f6d19-fa41-466c-b2f1-2e0a3dbfea13.roa File: ad7f6d19-fa41-466c-b2f1-2e0a3dbfea13.roa (raw, json) Hash identifier: U+CxZ4RQ3Z3DU2/m6l8F4UFfvATYH2+LTUtkIjx8Jvg= Subject key identifier: 4E:34:9D:B6:61:79:41:50:08:7A:FE:69:7B:D3:C8:E9:B5:E2:F8:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 687243373493F1EDF25D05FB193C844285804BB1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad7f6d19-fa41-466c-b2f1-2e0a3dbfea13.roa Signing time: Mon 01 Sep 2025 15:31:31 +0000 ROA not before: Mon 01 Sep 2025 15:31:31 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fef:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:72:43:37:34:93:f1:ed:f2:5d:05:fb:19:3c:84:42:85:80:4b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:31:31 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=d39757d92f7f955402a03d9050cb542c63a558a775b6ad4d528225e8ee27a31e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:df:6f:38:a1:29:ed:ee:4a:18:25:f9:c1: 7a:8b:0f:d2:d8:f5:2e:79:b3:3c:eb:2a:7e:41:27: 83:e2:85:85:99:8a:84:b4:b6:d5:06:d9:f3:8f:f8: fe:59:fe:9a:16:70:74:cb:5d:ab:85:3e:1d:83:ad: 6d:70:82:bc:3a:75:db:fb:08:31:c0:26:21:61:75: 16:d1:d3:2f:90:21:ba:ad:c6:5b:6a:92:62:6f:a6: 2c:f4:05:05:05:39:5e:76:c5:89:cb:4e:68:0b:60: b8:eb:07:84:04:12:76:4c:f9:7f:6a:0b:b5:95:62: c4:00:1f:e7:a4:1e:aa:28:54:d8:18:73:70:2d:98: a5:ea:14:4b:b3:91:be:3e:9f:77:ba:d4:6b:c9:61: 7f:ab:2d:cd:79:c6:d7:9c:65:1f:d2:42:bb:e6:14: a2:12:08:79:d3:11:db:59:c4:e4:6f:2f:24:9e:0f: f3:c0:20:b2:51:4a:19:02:d5:bc:60:11:7e:13:78: 66:c5:6c:50:8a:d9:86:51:24:8e:de:d6:02:99:fd: 8a:62:fa:e6:3b:cf:23:6d:62:b6:72:58:06:c5:60: 13:c3:40:ca:de:61:31:bb:4c:be:38:ca:54:b3:1b: d0:0a:0e:d3:5e:ae:df:ea:cd:3c:a7:0f:5a:ff:cc: 38:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:34:9D:B6:61:79:41:50:08:7A:FE:69:7B:D3:C8:E9:B5:E2:F8:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad7f6d19-fa41-466c-b2f1-2e0a3dbfea13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:8000::/39 Signature Algorithm: sha256WithRSAEncryption c8:86:42:34:d7:47:7f:00:ab:c8:f5:a9:41:89:9f:e0:97:68: a6:f7:ea:7e:97:4c:aa:ef:3f:00:3f:ee:35:c8:20:c1:c6:35: 7b:61:32:71:93:17:df:a9:f5:ee:97:40:d2:da:11:99:3b:e3: 3d:8c:4f:c3:13:63:af:f5:53:c5:ed:69:6d:3c:fe:c0:78:c6: 45:3b:c8:2e:0a:7c:31:2b:ee:af:6d:86:54:05:a7:85:52:23: 94:55:d2:b6:b8:cf:06:64:fe:75:19:53:c3:43:8f:81:7f:0f: 38:c4:6f:7b:af:c2:55:1e:2e:22:e4:c0:7e:68:87:f9:71:d5: fd:d3:12:76:2c:e0:52:23:ac:f4:d4:7a:c5:5d:fc:4a:a6:74: df:1d:3c:69:ab:1d:7d:39:40:ed:a0:40:4c:b1:0e:2c:78:f6: 8f:7c:56:8b:19:c4:e8:a3:40:ea:a5:c4:0d:0a:ea:94:8c:6e: 9b:dd:34:5e:2f:eb:47:7e:97:bd:bf:20:64:b1:1b:6b:cf:ed: 76:df:2c:22:81:0e:53:2d:29:13:e7:e5:09:ee:c0:72:76:4a: 5c:93:9e:63:9f:0f:21:10:41:4f:eb:7e:cd:fc:fb:89:ef:47: 5a:57:45:56:46:0e:e9:da:a8:a2:e2:4f:bc:49:29:22:23:11: 4c:f4:3a:f3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaHJDNzST8e3yXQX7GTyEQoWAS7EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTUzMTMxWhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzk3NTdkOTJmN2Y5NTU0MDJhMDNkOTA1MGNiNTQyYzYz YTU1OGE3NzViNmFkNGQ1MjgyMjVlOGVlMjdhMzFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCui99vOKEp7e5KGCX5wXqLD9LY9S55szzrKn5BJ4PihYWZ ioS0ttUG2fOP+P5Z/poWcHTLXauFPh2DrW1wgrw6ddv7CDHAJiFhdRbR0y+QIbqt xltqkmJvpiz0BQUFOV52xYnLTmgLYLjrB4QEEnZM+X9qC7WVYsQAH+ekHqooVNgY c3AtmKXqFEuzkb4+n3e61GvJYX+rLc15xtecZR/SQrvmFKISCHnTEdtZxORvLySe D/PAILJRShkC1bxgEX4TeGbFbFCK2YZRJI7e1gKZ/Ypi+uY7zyNtYrZyWAbFYBPD QMreYTG7TL44ylSzG9AKDtNert/qzTynD1r/zDhrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUTjSdtmF5QVAIev5pe9PI6bXi+A0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FkN2Y2ZDE5LWZhNDEtNDY2Yy1iMmYxLTJlMGEzZGJmZWExMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/vgDANBgkqhkiG9w0BAQsFAAOCAQEAyIZCNNdHfwCryPWpQYmf4Jdo pvfqfpdMqu8/AD/uNcggwcY1e2EycZMX36n17pdA0toRmTvjPYxPwxNjr/VTxe1p bTz+wHjGRTvILgp8MSvur22GVAWnhVIjlFXStrjPBmT+dRlTw0OPgX8POMRve6/C VR4uIuTAfmiH+XHV/dMSdizgUiOs9NR6xV38SqZ03x08aasdfTlA7aBATLEOLHj2 j3xWixnE6KNA6qXEDQrqlIxum900Xi/rR36Xvb8gZLEba8/tdt8sIoEOUy0pE+fl Ce7AcnZKXJOeY58PIRBBT+t+zfz7ie9HWldFVkYO6dqoouJPvEkpIiMRTPQ68w== -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:07 2025 by rpki-client