$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c003343e-41bf-42ba-98b5-5121f5202310.roa File: c003343e-41bf-42ba-98b5-5121f5202310.roa (raw, json) Hash identifier: MitOK9iNNcw9+LkRmPfun9x5w8LYR/cXukPDKB//y5Y= Subject key identifier: D9:F2:91:53:CD:58:7E:E4:52:F8:D3:17:D1:DC:D4:71:DE:F7:B8:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 159D3A103891B4058E7F891C65EACDDC83E6591A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c003343e-41bf-42ba-98b5-5121f5202310.roa Signing time: Fri 29 Aug 2025 15:51:24 +0000 ROA not before: Fri 29 Aug 2025 15:51:24 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f2d:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:9d:3a:10:38:91:b4:05:8e:7f:89:1c:65:ea:cd:dc:83:e6:59:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 15:51:24 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=8928ad9c7cc48eb6445c4661ca40b51de9138ca3d050f278c9c0203b937cd1b2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cc:f6:87:70:72:ee:c7:76:74:88:55:de:15: 20:83:54:b9:5e:c2:7d:34:f5:b5:56:ac:61:98:19: fa:3c:84:8b:03:1c:95:52:25:15:89:68:89:2c:e4: f8:51:4f:ca:64:dc:4c:ee:5d:f1:0e:b8:01:4e:7a: 80:3e:9c:a7:dd:c8:ab:53:8b:4d:0f:36:4f:b9:52: b4:71:f4:77:57:e9:18:e1:c9:bb:12:95:d5:14:63: d9:d0:7f:07:c6:b9:56:43:00:07:84:0f:9b:1b:57: 2c:2f:cf:06:65:84:1c:da:bf:4b:a0:0e:61:73:42: f0:a5:6a:3e:01:bd:2b:7e:74:2b:52:d2:cb:ab:d4: 2c:d1:ec:2f:c3:00:88:03:7e:88:75:ce:e8:d1:85: 45:4c:2d:5f:a2:03:46:f7:85:ee:4a:64:b7:22:4d: d6:d3:c6:27:fd:cc:07:00:ef:25:02:17:7d:07:8f: 79:25:13:13:5c:b1:f7:60:0d:28:0a:43:f1:17:0f: f2:70:71:bd:48:26:cf:f3:56:9b:55:37:b5:53:d7: 91:7c:9e:a4:2e:f1:c0:2e:9c:85:e0:e3:1f:88:27: 3b:59:55:1e:65:65:dc:3d:85:19:ff:e6:46:6d:8c: 74:bb:3b:9b:44:e8:e3:db:15:67:3f:41:97:01:47: 07:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F2:91:53:CD:58:7E:E4:52:F8:D3:17:D1:DC:D4:71:DE:F7:B8:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c003343e-41bf-42ba-98b5-5121f5202310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2d:4000::/36 Signature Algorithm: sha256WithRSAEncryption 70:d8:13:ad:2a:c9:96:95:2b:2b:9b:f4:b5:3e:87:5e:0d:17: 9b:44:4b:81:09:1a:00:5b:75:4b:4f:6e:2b:b2:b3:1c:e8:69: 2d:20:40:c3:c6:68:96:a6:30:a8:dc:9e:8c:10:d0:47:bf:85: c0:02:fa:fd:d7:48:c4:12:01:25:3b:5d:3d:0e:c8:ec:df:1d: 8d:e2:4a:6d:25:50:6c:01:9b:03:49:23:f9:8e:0c:9b:0e:ba: 31:77:af:f0:d2:93:70:bc:61:29:bb:37:5d:b2:53:bf:f0:29: a3:36:a9:b8:dc:fc:dc:df:11:27:fc:c6:92:2d:1e:06:ef:47: 4c:e7:94:2c:9e:f2:2a:7a:01:fd:2b:a8:86:20:e9:a7:a4:e0: 94:3e:32:6b:5f:05:43:1e:89:dd:bc:7e:c1:fa:d7:4b:21:79: 98:46:b3:1a:29:83:88:f8:4b:c9:5f:6d:a2:14:07:11:23:6e: 57:8a:e4:6f:10:9f:f9:c8:4d:6d:f5:53:c7:3d:72:75:14:61: cf:36:de:53:c1:33:f3:e4:d2:df:d5:62:e9:3f:ff:65:88:6f: fc:6a:60:f2:3f:92:0c:07:f7:4c:d0:db:64:ae:be:13:e9:13: d8:84:e0:2d:e9:4b:e6:71:f4:e7:e9:18:00:c4:cf:dd:87:0f: 34:d3:99:17 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFZ06EDiRtAWOf4kcZerN3IPmWRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTU1MTI0WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTI4YWQ5YzdjYzQ4ZWI2NDQ1YzQ2NjFjYTQwYjUxZGU5 MTM4Y2EzZDA1MGYyNzhjOWMwMjAzYjkzN2NkMWIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUzPaHcHLux3Z0iFXeFSCDVLlewn009bVWrGGYGfo8hIsD HJVSJRWJaIks5PhRT8pk3EzuXfEOuAFOeoA+nKfdyKtTi00PNk+5UrRx9HdX6Rjh ybsSldUUY9nQfwfGuVZDAAeED5sbVywvzwZlhBzav0ugDmFzQvClaj4BvSt+dCtS 0sur1CzR7C/DAIgDfoh1zujRhUVMLV+iA0b3he5KZLciTdbTxif9zAcA7yUCF30H j3klExNcsfdgDSgKQ/EXD/Jwcb1IJs/zVptVN7VT15F8nqQu8cAunIXg4x+IJztZ VR5lZdw9hRn/5kZtjHS7O5tE6OPbFWc/QZcBRweZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2fKRU81YfuRS+NMX0dzUcd73uC4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwMDMzNDNlLTQxYmYtNDJiYS05OGI1LTUxMjFmNTIwMjMxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8tQDANBgkqhkiG9w0BAQsFAAOCAQEAcNgTrSrJlpUrK5v0tT6HXg0X m0RLgQkaAFt1S09uK7KzHOhpLSBAw8ZolqYwqNyejBDQR7+FwAL6/ddIxBIBJTtd PQ7I7N8djeJKbSVQbAGbA0kj+Y4Mmw66MXev8NKTcLxhKbs3XbJTv/ApozapuNz8 3N8RJ/zGki0eBu9HTOeULJ7yKnoB/SuohiDpp6TglD4ya18FQx6J3bx+wfrXSyF5 mEazGimDiPhLyV9tohQHESNuV4rkbxCf+chNbfVTxz1ydRRhzzbeU8Ez8+TS39Vi 6T//ZYhv/Gpg8j+SDAf3TNDbZK6+E+kT2ITgLelL5nH05+kYAMTP3YcPNNOZFw== -----END CERTIFICATE-----Generated at Sat Sep 6 14:13:53 2025 by rpki-client