$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dec9a0fb-2b5f-482b-b31a-fcc241027165.roa File: dec9a0fb-2b5f-482b-b31a-fcc241027165.roa (raw, json) Hash identifier: NT7rzMJKZdhcvBBpeUEcmHKqmDSVEDJVaX4mfNOjj6U= Subject key identifier: 3B:4D:9C:80:48:92:D1:03:23:1B:B0:A1:F2:08:76:0B:73:B3:C5:4D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FFFD4B6440C76AF60E4C3D37360BE4F7F3B7582 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dec9a0fb-2b5f-482b-b31a-fcc241027165.roa Signing time: Tue 26 Aug 2025 15:32:20 +0000 ROA not before: Tue 26 Aug 2025 15:32:20 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ff:d4:b6:44:0c:76:af:60:e4:c3:d3:73:60:be:4f:7f:3b:75:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:32:20 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=8d0f1a9eb3f07f3eff60c85ee3cf21c21255ad46c54349a0bb51077984868975, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:73:bb:1c:d9:48:ad:77:06:5c:e4:41:79:ee: ee:a9:11:2e:a2:91:5b:2f:cc:b0:a9:fb:ff:d7:4b: 95:c4:26:74:43:d4:96:35:12:bd:23:0b:06:7e:5c: 28:58:2a:ce:38:61:81:62:16:fb:d1:6e:bd:b4:2c: cc:10:fd:67:43:33:aa:36:d6:bb:39:36:13:4a:be: c7:fd:82:3d:ab:9e:43:3a:7d:cf:b3:fc:55:ac:46: e1:5e:9b:42:98:ed:11:a0:e9:98:e4:36:f3:4e:ec: 0f:2b:ac:42:93:69:a2:d4:fb:15:ba:8d:6c:1b:80: 9c:21:da:20:ee:a9:b2:f0:8a:43:67:83:00:7d:b3: 6d:64:05:98:bb:c0:e9:1c:8b:63:0d:b6:a0:c8:24: 85:3f:ea:6f:c8:3d:3d:2a:43:bd:27:e8:cf:ee:9c: ec:18:30:ed:e7:db:bc:8e:36:9c:9a:ea:72:26:a0: bf:f0:f0:00:7e:ae:de:82:4e:7a:ce:3b:1f:15:ab: 63:93:c2:79:77:55:07:46:05:5f:c9:8c:6e:52:73: 26:d2:2d:56:05:52:5e:64:dd:95:85:79:1b:99:e8: 5e:2c:06:34:66:9a:ce:74:05:80:ad:66:bc:91:20: 5c:98:68:c4:ca:e8:09:dc:fa:f4:72:85:ae:58:68: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4D:9C:80:48:92:D1:03:23:1B:B0:A1:F2:08:76:0B:73:B3:C5:4D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dec9a0fb-2b5f-482b-b31a-fcc241027165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:20c0::/48 Signature Algorithm: sha256WithRSAEncryption c1:f3:d6:51:81:2b:93:3f:e5:00:a6:72:b7:7c:e4:a1:cf:96: 74:72:13:5f:65:22:91:4f:d3:82:31:97:31:27:0d:2c:57:70: cf:c1:7b:f0:a2:7b:76:7a:49:87:e9:f0:54:b8:f8:bd:7b:6c: 30:38:48:a4:6f:32:a8:6f:5f:45:3e:dd:b9:d8:80:1b:4a:f7: 30:28:d1:c9:30:b2:39:3e:48:07:a1:24:0b:fe:6e:3a:42:dd: d1:af:fa:e9:e1:28:55:05:b4:43:8e:53:e8:40:1d:99:c7:b2: 16:5a:5b:d0:da:87:47:57:fc:87:aa:c4:61:72:e8:89:8c:b7: a8:96:3f:69:77:2f:e8:23:14:43:1a:18:de:59:ea:46:ba:00: 97:6e:68:36:af:59:69:11:23:be:18:fc:63:34:99:7c:65:a5: 45:af:da:91:85:88:b0:bd:0c:35:8d:d7:f1:35:ba:25:21:6f: 41:2f:3d:32:39:eb:42:e1:38:c6:b8:45:3f:fc:cd:e5:98:f7: c9:55:1e:e6:d1:37:c8:68:64:c6:c5:0e:1e:03:32:7d:2c:72: a3:10:c9:f4:c6:97:d1:54:68:41:00:26:66:30:45:1e:55:5e: 27:90:f3:54:59:5a:04:86:6e:34:e5:b5:8a:2c:6c:39:f0:7c: 6f:c7:7f:a4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUf//UtkQMdq9g5MPTc2C+T387dYIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUzMjIwWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDBmMWE5ZWIzZjA3ZjNlZmY2MGM4NWVlM2NmMjFjMjEy NTVhZDQ2YzU0MzQ5YTBiYjUxMDc3OTg0ODY4OTc1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKc7sc2UitdwZc5EF57u6pES6ikVsvzLCp+//XS5XEJnRD 1JY1Er0jCwZ+XChYKs44YYFiFvvRbr20LMwQ/WdDM6o21rs5NhNKvsf9gj2rnkM6 fc+z/FWsRuFem0KY7RGg6ZjkNvNO7A8rrEKTaaLU+xW6jWwbgJwh2iDuqbLwikNn gwB9s21kBZi7wOkci2MNtqDIJIU/6m/IPT0qQ70n6M/unOwYMO3n27yONpya6nIm oL/w8AB+rt6CTnrOOx8Vq2OTwnl3VQdGBV/JjG5ScybSLVYFUl5k3ZWFeRuZ6F4s BjRmms50BYCtZryRIFyYaMTK6Anc+vRyha5YaJbFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUO02cgEiS0QMjG7Ch8gh2C3OzxU0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RlYzlhMGZiLTJiNWYtNDgyYi1iMzFhLWZjYzI0MTAyNzE2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yIMAwDQYJKoZIhvcNAQELBQADggEBAMHz1lGBK5M/5QCmcrd85KHP lnRyE19lIpFP04IxlzEnDSxXcM/Be/Cie3Z6SYfp8FS4+L17bDA4SKRvMqhvX0U+ 3bnYgBtK9zAo0ckwsjk+SAehJAv+bjpC3dGv+unhKFUFtEOOU+hAHZnHshZaW9Da h0dX/IeqxGFy6ImMt6iWP2l3L+gjFEMaGN5Z6ka6AJduaDavWWkRI74Y/GM0mXxl pUWv2pGFiLC9DDWN1/E1uiUhb0EvPTI560LhOMa4RT/8zeWY98lVHubRN8hoZMbF Dh4DMn0scqMQyfTGl9FUaEEAJmYwRR5VXieQ81RZWgSGbjTltYosbDnwfG/Hf6Q= -----END CERTIFICATE-----Generated at Sat Sep 6 16:28:07 2025 by rpki-client