$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae0e29cd-5167-4fb3-9444-3bbf67950b96.roa File: ae0e29cd-5167-4fb3-9444-3bbf67950b96.roa (raw, json) Hash identifier: gWPwyIcwP/mWuxxLBLfirmlwL4iuNLf3eSqkPs5S4R8= Subject key identifier: BB:04:3D:B7:C8:F9:72:E6:40:4F:A3:07:84:F2:68:1D:A5:41:CF:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 74CE0FF99C75CE66A5CD9956D25E740040F2FE9D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae0e29cd-5167-4fb3-9444-3bbf67950b96.roa Signing time: Mon 01 Sep 2025 15:21:19 +0000 ROA not before: Mon 01 Sep 2025 15:21:19 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fef:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ce:0f:f9:9c:75:ce:66:a5:cd:99:56:d2:5e:74:00:40:f2:fe:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 1 15:21:19 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=91b8f0f6ff0112168196ddc443621d6f2c8b1d49edb117110ccaa36c06416ee6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:be:97:e9:c6:f1:b7:90:5c:f5:02:a9:c6: 3d:15:36:f8:df:30:93:8c:c8:b6:8f:80:87:6a:f8: ca:cd:8f:46:46:fb:88:5a:b3:f7:b8:45:57:7d:87: 79:3a:7b:a8:0d:e7:05:2b:46:7d:8c:6f:ea:6f:49: ea:09:0f:7a:47:ce:fd:94:73:7a:ee:5d:fc:e3:c9: 5f:79:76:dc:c1:1c:c4:49:ef:c2:cd:cb:d9:3c:68: 70:dd:66:60:f8:0a:5e:99:f1:52:18:d5:54:f5:43: a5:72:e1:25:c9:1e:eb:f7:fc:f4:4a:43:8e:be:6e: 07:03:4d:be:4e:28:07:d1:ad:8a:00:6f:69:d8:bf: 13:0c:db:ab:15:09:91:87:cf:e3:5b:fe:89:56:30: 10:8f:9a:25:0e:e9:2d:4f:ec:cd:4d:8c:8a:4a:4a: 84:e7:09:0d:49:8f:ca:2b:a2:eb:fe:32:5c:52:b3: 67:d5:8c:ea:a3:53:ce:e6:70:72:11:fc:de:21:aa: e7:f1:a1:6a:df:e2:16:13:f3:89:e2:f0:53:de:99: 87:da:20:c0:f3:f2:0d:16:ae:a0:4c:52:38:d4:e4: c0:17:8d:87:91:5b:9a:a9:9f:e5:39:36:1a:42:c0: 6a:ec:fd:4d:63:47:88:2c:25:c3:37:3d:96:f1:37: 06:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:04:3D:B7:C8:F9:72:E6:40:4F:A3:07:84:F2:68:1D:A5:41:CF:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae0e29cd-5167-4fb3-9444-3bbf67950b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:5000::/40 Signature Algorithm: sha256WithRSAEncryption c9:63:dd:f7:d1:d0:21:61:18:df:9f:a6:fc:2c:84:0f:fe:43: 70:8f:71:6f:05:2a:c5:9b:1b:39:7d:37:ac:89:d3:f7:81:02: c2:ac:b5:86:34:fe:b0:a8:7e:9f:26:06:b6:41:8a:e8:a1:b0: a8:55:7a:2b:b9:c0:50:8c:5a:ee:6a:24:51:78:f7:50:24:8c: 78:cc:e4:22:cd:86:44:c1:3f:d4:14:20:8b:1b:a5:15:03:2c: 47:32:86:70:87:2b:90:8a:67:0c:a3:7b:7a:54:17:fa:ba:d7: 04:a7:b4:a4:a0:c9:06:d5:d1:54:7c:a5:22:f1:04:9e:c8:1f: 62:7d:2e:1c:04:18:8a:17:c8:ff:82:71:d0:c9:b9:d4:00:40: d1:61:b0:b2:cf:42:fe:a6:1e:4a:c7:64:d3:bb:05:8c:11:5a: 80:78:d3:8a:67:ac:a5:61:da:40:a6:ab:0e:89:58:17:7f:4a: 70:21:db:57:5b:d6:ca:f5:13:12:a6:a1:a3:8d:ac:4f:11:37: 6e:b6:74:0f:0f:dc:3a:88:8d:83:a4:c8:b3:24:ad:ee:2e:2e: 12:93:8f:58:46:fa:11:4b:92:63:56:fb:eb:d9:4e:50:87:0d: ac:de:5a:ff:e6:6b:7d:c0:b9:e4:0e:81:67:6a:18:2e:96:16: 22:28:b8:61 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdM4P+Zx1zmalzZlW0l50AEDy/p0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTAxMTUyMTE5WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MWI4ZjBmNmZmMDExMjE2ODE5NmRkYzQ0MzYyMWQ2ZjJj OGIxZDQ5ZWRiMTE3MTEwY2NhYTM2YzA2NDE2ZWU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLF76X6cbxt5Bc9QKpxj0VNvjfMJOMyLaPgIdq+MrNj0ZG +4has/e4RVd9h3k6e6gN5wUrRn2Mb+pvSeoJD3pHzv2Uc3ruXfzjyV95dtzBHMRJ 78LNy9k8aHDdZmD4Cl6Z8VIY1VT1Q6Vy4SXJHuv3/PRKQ46+bgcDTb5OKAfRrYoA b2nYvxMM26sVCZGHz+Nb/olWMBCPmiUO6S1P7M1NjIpKSoTnCQ1Jj8orouv+MlxS s2fVjOqjU87mcHIR/N4hqufxoWrf4hYT84ni8FPemYfaIMDz8g0WrqBMUjjU5MAX jYeRW5qpn+U5NhpCwGrs/U1jR4gsJcM3PZbxNwaRAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUuwQ9t8j5cuZAT6MHhPJoHaVBz/gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlMGUyOWNkLTUxNjctNGZiMy05NDQ0LTNiYmY2Nzk1MGI5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vUDANBgkqhkiG9w0BAQsFAAOCAQEAyWPd99HQIWEY35+m/CyED/5D cI9xbwUqxZsbOX03rInT94ECwqy1hjT+sKh+nyYGtkGK6KGwqFV6K7nAUIxa7mok UXj3UCSMeMzkIs2GRME/1BQgixulFQMsRzKGcIcrkIpnDKN7elQX+rrXBKe0pKDJ BtXRVHylIvEEnsgfYn0uHAQYihfI/4Jx0Mm51ABA0WGwss9C/qYeSsdk07sFjBFa gHjTimespWHaQKarDolYF39KcCHbV1vWyvUTEqaho42sTxE3brZ0Dw/cOoiNg6TI sySt7i4uEpOPWEb6EUuSY1b769lOUIcNrN5a/+ZrfcC55A6BZ2oYLpYWIii4YQ== -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:52 2025 by rpki-client