$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9ac2748-adb8-4a7b-8b7d-8b5f941f0f32.roa File: d9ac2748-adb8-4a7b-8b7d-8b5f941f0f32.roa (raw, json) Hash identifier: sAqu0Z0C1XNCNF2rjE9J7iEaZLwkobF+K/GOHkPWzLg= Subject key identifier: 58:4D:22:79:66:8F:58:BC:6F:68:E5:22:0C:EF:0B:91:DC:E6:C9:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7BDF7EE4D437C06973D87639B6E366A8EE3F5911 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9ac2748-adb8-4a7b-8b7d-8b5f941f0f32.roa Signing time: Fri 29 Aug 2025 16:21:19 +0000 ROA not before: Fri 29 Aug 2025 16:21:19 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f18:2000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:df:7e:e4:d4:37:c0:69:73:d8:76:39:b6:e3:66:a8:ee:3f:59:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:21:19 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=fa95f6a8914b1082fd55370132bee969e13564a7c5e709998d814bdcf1b5220b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:0b:b5:9c:f1:9f:1f:f9:a2:6d:0e:70:a7: 12:69:fe:59:b0:18:a9:04:0c:7c:31:40:dc:4e:64: 65:06:1d:13:34:7e:8c:83:67:a5:3d:26:a8:c5:18: 15:c6:63:21:17:6e:c0:01:39:cb:32:2b:19:8e:06: 60:98:26:4f:be:57:12:b4:b4:e4:05:a0:cd:0d:40: 2c:45:84:ea:80:f1:3f:34:b2:95:76:d3:e9:76:32: ae:4d:d6:f2:a8:a0:66:d4:02:14:22:7e:de:0d:76: ef:57:5b:d1:b9:dd:68:ff:da:b3:5c:7a:55:1a:29: 10:c1:c9:d9:2f:65:8e:1c:1f:02:7f:02:04:6f:43: 5c:86:0f:f9:3a:cd:a0:df:97:9d:82:eb:88:2a:b0: 55:d4:3a:8b:13:87:9d:2c:8c:ac:2f:b9:49:6e:3e: 60:59:29:0c:80:79:7a:db:04:a6:f3:91:06:de:37: 1b:87:4b:46:1d:75:44:c0:af:83:de:a2:1f:fe:38: db:1e:74:91:fa:7e:fe:58:d0:7d:d4:4b:2a:26:23: fa:a2:39:a8:cb:f7:09:8b:b4:96:b6:5b:ee:da:a8: 25:f8:05:de:ed:6b:5a:35:2d:4e:c3:63:e5:64:84: e0:d1:22:b1:e5:a2:55:d4:8c:d3:ee:cb:63:38:80: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4D:22:79:66:8F:58:BC:6F:68:E5:22:0C:EF:0B:91:DC:E6:C9:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9ac2748-adb8-4a7b-8b7d-8b5f941f0f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f18:2000::/35 Signature Algorithm: sha256WithRSAEncryption 3c:f7:be:50:09:15:08:b3:da:b3:4d:ab:1c:b2:71:4e:74:79: fe:4c:11:83:0c:f0:d3:3e:fa:01:c7:0c:70:07:84:6e:f5:fd: f3:f0:79:48:19:fa:5f:3c:8d:77:0a:76:ea:b7:96:7a:52:91: bb:58:32:af:bc:60:b0:9e:f4:ce:79:aa:f9:af:52:63:be:5e: 07:e6:da:ea:9c:88:ab:e1:b1:1a:b4:ed:ca:e3:af:40:d9:b2: b7:75:6e:aa:e7:da:02:c0:6c:85:04:3e:f5:c4:bd:3c:25:94: 7f:42:c3:10:65:24:7e:92:12:87:0c:33:39:8b:8d:96:ce:bf: f9:65:e2:67:00:cc:af:cc:6a:89:24:40:4b:6c:62:b4:ca:e5: 5a:53:45:48:90:7d:b7:2b:cc:0a:e9:25:9d:83:a6:fd:39:ae: 56:c3:a7:21:52:ac:15:f8:07:e8:d2:de:87:3b:83:e3:d0:ba: da:40:cc:e1:56:e4:b3:d5:81:19:c4:ed:9b:22:a5:80:5f:79: d0:95:c0:65:f2:57:d4:3a:eb:3e:5b:18:e9:f1:80:77:f8:0f: 27:db:33:dc:c5:bd:fb:be:cd:6e:4b:c2:64:7b:9e:fe:f1:aa: 25:33:0a:e9:ab:5e:ac:6f:c2:4c:ff:35:44:47:db:ba:f5:10: 6e:1c:c8:c4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUe99+5NQ3wGlz2HY5tuNmqO4/WREwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYyMTE5WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTk1ZjZhODkxNGIxMDgyZmQ1NTM3MDEzMmJlZTk2OWUx MzU2NGE3YzVlNzA5OTk4ZDgxNGJkY2YxYjUyMjBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3XQu1nPGfH/mibQ5wpxJp/lmwGKkEDHwxQNxOZGUGHRM0 foyDZ6U9JqjFGBXGYyEXbsABOcsyKxmOBmCYJk++VxK0tOQFoM0NQCxFhOqA8T80 spV20+l2Mq5N1vKooGbUAhQift4Ndu9XW9G53Wj/2rNcelUaKRDBydkvZY4cHwJ/ AgRvQ1yGD/k6zaDfl52C64gqsFXUOosTh50sjKwvuUluPmBZKQyAeXrbBKbzkQbe NxuHS0YddUTAr4Peoh/+ONsedJH6fv5Y0H3USyomI/qiOajL9wmLtJa2W+7aqCX4 Bd7ta1o1LU7DY+VkhODRIrHlolXUjNPuy2M4gC2/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUWE0ieWaPWLxvaOUiDO8LkdzmyYgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q5YWMyNzQ4LWFkYjgtNGE3Yi04YjdkLThiNWY5NDFmMGYzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgUmAB8YIDANBgkqhkiG9w0BAQsFAAOCAQEAPPe+UAkVCLPas02rHLJxTnR5 /kwRgwzw0z76AccMcAeEbvX98/B5SBn6XzyNdwp26reWelKRu1gyr7xgsJ70znmq +a9SY75eB+ba6pyIq+GxGrTtyuOvQNmyt3VuqufaAsBshQQ+9cS9PCWUf0LDEGUk fpIShwwzOYuNls6/+WXiZwDMr8xqiSRAS2xitMrlWlNFSJB9tyvMCuklnYOm/Tmu VsOnIVKsFfgH6NLehzuD49C62kDM4Vbks9WBGcTtmyKlgF950JXAZfJX1DrrPlsY 6fGAd/gPJ9sz3MW9+77NbkvCZHue/vGqJTMK6aterG/CTP81REfbuvUQbhzIxA== -----END CERTIFICATE-----Generated at Sat Sep 6 14:18:42 2025 by rpki-client