$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc03b0b8-dc48-442a-b40c-185ce689ee9e.roa File: dc03b0b8-dc48-442a-b40c-185ce689ee9e.roa (raw, json) Hash identifier: vZvARKWbN7lGIaBMatA7TPChk7W9yDrxhCJK7Jix7hg= Subject key identifier: 8E:D5:34:2A:3C:33:91:D7:DA:04:10:87:C5:48:91:BF:7A:4A:4E:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5462F42BCB8C4311874E1FCBB2BDBFDE35C7F296 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc03b0b8-dc48-442a-b40c-185ce689ee9e.roa Signing time: Tue 26 Aug 2025 16:32:06 +0000 ROA not before: Tue 26 Aug 2025 16:32:06 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f38:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:62:f4:2b:cb:8c:43:11:87:4e:1f:cb:b2:bd:bf:de:35:c7:f2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:32:06 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=27c5b56d27dc662cfd826bebddc37aba76b273996f4e606af230a62748c8f25f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:3f:83:5c:29:2f:36:0a:6d:83:8c:3f:71: 51:a6:28:9e:22:db:c0:63:6a:87:8b:17:61:03:7c: 51:29:d2:15:47:18:0e:23:55:66:b3:11:5f:d9:2b: ff:ae:56:eb:13:7a:47:28:07:1e:1c:d9:e1:31:20: d3:e5:e3:9c:0d:f6:69:68:63:28:f6:c9:ed:5b:62: ea:44:3b:64:86:46:6e:da:a1:9a:9d:57:6e:26:9b: 8e:39:c8:b8:b3:8b:bd:12:20:49:43:d0:0b:10:be: 1d:25:cf:bd:08:8b:06:11:e4:6a:2c:86:1b:e4:d4: 99:83:d2:fe:08:fd:90:65:52:58:0c:3a:02:fb:85: 90:73:26:dd:a0:bb:3f:c6:f9:54:22:37:6a:7b:13: 9e:47:2c:03:a2:f9:e4:a6:0b:ad:df:be:5b:d3:02: 89:f6:05:d6:34:e9:5a:49:9b:bc:83:95:d5:3f:9d: 43:65:88:fa:b6:65:b4:8a:5a:6e:63:14:d7:9c:83: 1b:87:a1:b8:4d:b0:cf:b4:29:70:78:fe:35:e5:ec: 52:d1:c2:dd:06:74:10:b4:1f:ad:b1:21:45:a9:2e: e8:2b:f0:d1:a1:a8:18:ab:3e:13:16:e9:ea:80:2a: 04:11:c7:8d:a3:b9:11:9e:39:20:14:0b:f6:5a:74: 1d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D5:34:2A:3C:33:91:D7:DA:04:10:87:C5:48:91:BF:7A:4A:4E:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc03b0b8-dc48-442a-b40c-185ce689ee9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:2000::/40 Signature Algorithm: sha256WithRSAEncryption c4:2d:7e:be:39:c1:30:84:68:07:8d:e8:31:e0:4b:ae:3b:2d: fe:6d:e0:64:26:22:99:b2:c6:67:c3:8d:a4:9c:84:c6:76:58: 93:e5:6e:0b:95:dd:b4:c5:99:ff:a9:f0:77:e8:f5:c3:5f:9f: 6a:49:85:37:0f:65:78:b0:b9:8b:50:55:f8:38:59:e4:b6:d0: a2:7a:92:b3:5f:04:2d:3f:e0:26:07:6f:0a:69:3b:a6:72:4d: f2:f9:ab:d2:35:12:47:43:00:75:be:43:39:80:a3:02:8c:c6: 9a:2c:b8:2c:26:96:9f:50:bc:99:8a:da:99:fe:37:73:d1:b4: 99:10:23:1b:24:bd:b1:01:cd:31:24:98:4f:2b:17:a0:c5:ab: d7:b2:da:f8:66:24:c1:0e:0c:09:56:40:48:6c:f3:9a:fc:cd: ce:78:88:49:70:5a:8b:cd:82:6c:92:46:e0:b9:e6:2d:0b:79: ee:70:c0:10:17:3b:6b:9d:c1:8d:26:6c:05:0d:da:c9:31:2e: 7d:5a:74:f6:2a:ea:cf:ba:e7:67:a0:ba:0e:f4:2d:d1:65:be: 2a:32:5e:41:2d:48:ec:a6:70:e8:d6:dc:22:78:32:58:b4:8b: 22:bf:da:f9:e7:55:14:b1:94:f8:d2:aa:f9:09:56:43:db:51: 8e:3a:a7:fd -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVGL0K8uMQxGHTh/Lsr2/3jXH8pYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTYzMjA2WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyN2M1YjU2ZDI3ZGM2NjJjZmQ4MjZiZWJkZGMzN2FiYTc2 YjI3Mzk5NmY0ZTYwNmFmMjMwYTYyNzQ4YzhmMjVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0YD+DXCkvNgptg4w/cVGmKJ4i28BjaoeLF2EDfFEp0hVH GA4jVWazEV/ZK/+uVusTekcoBx4c2eExINPl45wN9mloYyj2ye1bYupEO2SGRm7a oZqdV24mm445yLizi70SIElD0AsQvh0lz70IiwYR5Goshhvk1JmD0v4I/ZBlUlgM OgL7hZBzJt2guz/G+VQiN2p7E55HLAOi+eSmC63fvlvTAon2BdY06VpJm7yDldU/ nUNliPq2ZbSKWm5jFNecgxuHobhNsM+0KXB4/jXl7FLRwt0GdBC0H62xIUWpLugr 8NGhqBirPhMW6eqAKgQRx42juRGeOSAUC/ZadB19AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUjtU0KjwzkdfaBBCHxUiRv3pKTlMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjMDNiMGI4LWRjNDgtNDQyYS1iNDBjLTE4NWNlNjg5ZWU5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB84IDANBgkqhkiG9w0BAQsFAAOCAQEAxC1+vjnBMIRoB43oMeBLrjst /m3gZCYimbLGZ8ONpJyExnZYk+VuC5XdtMWZ/6nwd+j1w1+fakmFNw9leLC5i1BV +DhZ5LbQonqSs18ELT/gJgdvCmk7pnJN8vmr0jUSR0MAdb5DOYCjAozGmiy4LCaW n1C8mYramf43c9G0mRAjGyS9sQHNMSSYTysXoMWr17La+GYkwQ4MCVZASGzzmvzN zniISXBai82CbJJG4LnmLQt57nDAEBc7a53BjSZsBQ3ayTEufVp09irqz7rnZ6C6 DvQt0WW+KjJeQS1I7KZw6NbcIngyWLSLIr/a+edVFLGU+NKq+QlWQ9tRjjqn/Q== -----END CERTIFICATE-----Generated at Tue Sep 16 07:09:18 2025 by rpki-client