$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b35e1422-797a-49b6-b1f5-bf9b752403e2.roa File: b35e1422-797a-49b6-b1f5-bf9b752403e2.roa (raw, json) Hash identifier: iDcTH1QV7cKMcWTqRQ0jRmOZgnCVT/TZaa+fvv9uEbE= Subject key identifier: 53:CB:3E:72:D4:57:E5:C3:17:1A:5A:E6:FC:4F:DA:49:C4:EC:08:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 129B26DDF85B0E219075A88FD53C6B85811D9A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b35e1422-797a-49b6-b1f5-bf9b752403e2.roa Signing time: Tue 26 Aug 2025 15:31:31 +0000 ROA not before: Tue 26 Aug 2025 15:31:31 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:5040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9b:26:dd:f8:5b:0e:21:90:75:a8:8f:d5:3c:6b:85:81:1d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:31:31 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=eae56b9f9c9374d26d20a97ba05d6c7a8888d30a70bb04357a122bbac735b6f9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6b:24:bb:9c:fd:2e:fa:4a:22:45:bc:c0:5f: 9a:7d:d2:9b:57:aa:4c:f5:d1:38:0d:38:06:06:8c: 15:d4:34:65:cc:d5:76:e6:bb:d5:5a:6c:d8:4a:04: a6:05:96:86:de:4a:ef:3e:eb:cb:93:e4:51:70:dd: 62:af:87:af:82:1d:25:f6:b6:72:c4:a5:5d:42:24: c5:34:8e:f1:51:93:32:03:33:eb:bc:34:c0:70:dd: c9:d1:d6:90:e5:3d:a4:6f:aa:32:15:a6:d5:b2:2e: c5:3d:f0:5b:74:a0:5c:04:5c:10:b9:e0:e9:a0:4d: 6c:26:e8:51:86:21:b6:29:f1:0e:be:04:00:de:12: 69:c3:bd:c7:15:5c:2f:5a:d4:05:22:e8:45:f2:79: 60:1d:63:39:2c:e7:14:e3:a9:1e:2b:d5:ee:51:a3: ad:75:58:e9:c9:ad:d3:be:3b:2b:c8:2c:1a:18:5d: 0b:1a:ab:8b:02:03:e9:60:ce:f7:3a:ba:29:16:ad: 37:1d:9a:da:92:f7:f8:ee:1e:d4:19:6e:1f:23:52: 18:c1:3e:5a:c3:fb:00:26:f1:79:a4:ce:f1:17:cf: e6:51:a3:1c:07:7b:b5:04:cc:81:d7:db:e6:d2:f1: cd:3e:61:ec:5a:aa:29:dc:33:8d:fe:fa:19:c1:9a: 0c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CB:3E:72:D4:57:E5:C3:17:1A:5A:E6:FC:4F:DA:49:C4:EC:08:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b35e1422-797a-49b6-b1f5-bf9b752403e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:5040::/48 Signature Algorithm: sha256WithRSAEncryption 09:ed:b4:69:f9:ce:d8:92:51:b7:1b:76:81:56:8d:d9:fa:aa: 3f:b0:34:cd:39:f4:c3:df:59:ad:e2:ee:24:31:48:b1:af:24: cf:af:7b:87:7b:44:34:44:ef:f9:f3:74:fe:cb:da:4f:b7:fa: 68:7a:29:01:5f:e7:da:be:5e:02:02:f8:09:bc:9e:da:4b:cd: fd:b1:f8:bb:d5:54:92:ae:f5:d4:2b:2a:03:4a:23:c0:8a:4c: 82:33:99:d9:e3:e5:e9:42:e7:49:6d:ae:7e:4b:20:99:06:4b: 32:24:b9:8c:00:78:c0:6c:3b:b6:78:f1:b8:e4:7d:8c:86:da: 83:c9:49:f3:32:d0:cf:57:68:9e:58:1f:cc:25:65:8c:91:63: 83:f1:87:d2:27:72:de:d3:bb:36:1b:6e:66:7b:16:7f:f1:ae: 7b:04:7f:b9:f8:d1:56:8e:32:f1:bf:14:57:e2:f6:9b:55:ea: 2b:fe:7e:b8:20:a6:b1:1b:1e:9e:2b:3c:1a:e9:6b:6b:18:9a: 83:c0:01:e2:50:0c:8e:72:4c:17:5e:9e:73:7a:9c:7c:40:56: 39:43:4b:7e:df:b3:c9:45:c6:37:61:8d:8c:f8:9a:0b:21:3d: 4b:a1:4d:e4:52:a0:d6:c8:8e:54:a6:8a:91:a8:30:c5:79:12: 63:88:34:bf -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITEpsm3fhbDiGQdaiP1TxrhYEdmjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA4MjYxNTMxMzFaFw0yNTA5MzAyMzU5NTla MHoxSTBHBgNVBAUTQGVhZTU2YjlmOWM5Mzc0ZDI2ZDIwYTk3YmEwNWQ2YzdhODg4 OGQzMGE3MGJiMDQzNTdhMTIyYmJhYzczNWI2ZjkxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAI9rJLuc/S76SiJFvMBfmn3Sm1eqTPXROA04BgaMFdQ0ZczV dua71Vps2EoEpgWWht5K7z7ry5PkUXDdYq+Hr4IdJfa2csSlXUIkxTSO8VGTMgMz 67w0wHDdydHWkOU9pG+qMhWm1bIuxT3wW3SgXARcELng6aBNbCboUYYhtinxDr4E AN4SacO9xxVcL1rUBSLoRfJ5YB1jOSznFOOpHivV7lGjrXVY6cmt0747K8gsGhhd CxqriwID6WDO9zq6KRatNx2a2pL3+O4e1BluHyNSGME+WsP7ACbxeaTO8RfP5lGj HAd7tQTMgdfb5tLxzT5h7FqqKdwzjf76GcGaDDMCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBRTyz5y1FflwxcaWub8T9pJxOwIOzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvYjM1ZTE0MjItNzk3YS00OWI2LWIxZjUtYmY5Yjc1MjQwM2UyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACYAHzhQQDANBgkqhkiG9w0BAQsFAAOCAQEACe20afnO2JJRtxt2gVaN2fqq P7A0zTn0w99ZreLuJDFIsa8kz697h3tENETv+fN0/svaT7f6aHopAV/n2r5eAgL4 Cbye2kvN/bH4u9VUkq711CsqA0ojwIpMgjOZ2ePl6ULnSW2ufksgmQZLMiS5jAB4 wGw7tnjxuOR9jIbag8lJ8zLQz1donlgfzCVljJFjg/GH0idy3tO7NhtuZnsWf/Gu ewR/ufjRVo4y8b8UV+L2m1XqK/5+uCCmsRsenis8Gulraxiag8AB4lAMjnJMF16e c3qcfEBWOUNLft+zyUXGN2GNjPiaCyE9S6FN5FKg1siOVKaKkagwxXkSY4g0vw== -----END CERTIFICATE-----Generated at Sat Sep 6 16:40:54 2025 by rpki-client