$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa File: dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa (raw, json) Hash identifier: vLPhr+/DSeDjWIGHnOEID0WUiFukrV8Vq4giIrEEvKE= Subject key identifier: BA:D9:63:8C:08:16:C2:70:D8:B9:F3:5A:A9:0C:22:27:BC:0F:F7:3F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47DE6ABC4BEABDEFEEF8BAA276ADBF4795AF92B5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa Signing time: Sat 06 Sep 2025 00:21:19 +0000 ROA not before: Sat 06 Sep 2025 00:21:19 +0000 ROA not after: Sat 11 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:de:6a:bc:4b:ea:bd:ef:ee:f8:ba:a2:76:ad:bf:47:95:af:92:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 6 00:21:19 2025 GMT Not After : Oct 11 23:59:59 2025 GMT Subject: serialNumber=f0639614e3a2158cc3b8871c45c2a9f3fc5dd47ba8e0fef170d607c95eadfae5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:01:4e:eb:f1:75:c8:bb:93:02:70:ec:f8: a9:db:0e:bd:41:d8:60:af:e0:64:f4:32:ae:7b:27: 4d:b0:e6:1a:11:82:67:cd:b1:a8:6b:b9:b9:a5:9b: 31:c6:0c:30:a0:69:20:df:57:57:6d:37:80:c7:57: ca:f0:db:57:e4:66:b3:73:7b:f0:ab:b8:c8:18:1c: 5c:6b:04:07:e4:54:f4:63:13:b3:0f:69:67:4a:ed: a3:5a:b1:36:9d:41:ca:6d:27:24:2e:4c:3e:93:a4: 68:69:8e:e3:32:7f:2e:e3:2c:12:ac:55:81:e2:48: 55:28:e5:ba:f3:82:c7:f8:0b:c8:ce:df:5e:fe:92: 80:f7:20:da:6e:a3:b6:dc:f5:8f:77:4e:bc:2e:55: c8:44:a8:5d:ce:b5:08:e6:79:db:63:da:a2:97:9c: 76:5e:e8:a7:b3:c2:25:b5:9c:67:50:1f:73:3b:a5: 92:67:3f:96:15:10:86:54:42:b9:ca:9b:0d:7c:15: 32:4e:f2:90:34:85:57:e6:dd:9a:cd:69:8a:3e:1e: ab:5f:3a:aa:43:a8:f0:fa:5d:6f:08:a6:5d:3f:66: 96:97:61:94:0e:a0:d5:22:18:25:35:93:d0:9c:f0: 74:48:dd:b1:5a:28:9e:8a:b5:60:5b:3d:4a:98:15: b6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D9:63:8C:08:16:C2:70:D8:B9:F3:5A:A9:0C:22:27:BC:0F:F7:3F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:a400::/40 Signature Algorithm: sha256WithRSAEncryption c5:bf:c4:c6:b6:1b:0e:5d:15:79:85:d6:6c:8b:c0:76:1a:75: 42:a4:80:3e:94:2b:95:6a:1e:7f:0c:46:5a:8a:c5:7d:88:19: 1e:57:21:14:00:99:d7:c8:e4:82:df:a7:17:b8:2e:49:93:d4: 62:a9:7b:0d:4f:18:63:33:03:92:0e:19:91:c9:ef:0a:39:42: 40:46:42:ba:75:18:93:f0:15:4d:0a:69:b2:f7:f8:ec:c8:aa: d7:f6:49:ec:c0:73:e6:90:7f:42:46:a8:22:3b:f5:2e:03:25: e1:8f:0a:ab:c7:03:d6:88:bc:eb:9b:d4:f2:05:e6:70:98:4c: e2:f0:6c:45:0c:40:d5:10:86:e6:3e:2b:53:ff:0b:03:2b:cf: 2d:bc:b9:26:f0:2e:1f:4f:fa:a2:7b:a1:89:b9:0c:71:6a:94: c6:4d:6c:e1:2b:66:a7:c9:73:63:3e:42:26:8c:f5:0f:e7:2f: e7:ed:cf:76:d4:82:20:d6:28:f5:72:57:56:78:26:70:9f:bf: 2c:bc:ab:67:81:74:b6:ce:b0:4f:59:a1:45:74:f5:89:f6:50: 33:3b:06:15:72:f1:1c:05:e3:d1:c4:47:58:e8:1b:cb:c3:11: 24:dd:d4:7b:ec:b4:45:b2:46:c7:10:e1:34:3e:8b:98:6b:3f: 4a:86:79:93 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUR95qvEvqve/u+Lqidq2/R5WvkrUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTA2MDAyMTE5WhcNMjUxMDExMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDYzOTYxNGUzYTIxNThjYzNiODg3MWM0NWMyYTlmM2Zj NWRkNDdiYThlMGZlZjE3MGQ2MDdjOTVlYWRmYWU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpPAFO6/F1yLuTAnDs+KnbDr1B2GCv4GT0Mq57J02w5hoR gmfNsahrubmlmzHGDDCgaSDfV1dtN4DHV8rw21fkZrNze/CruMgYHFxrBAfkVPRj E7MPaWdK7aNasTadQcptJyQuTD6TpGhpjuMyfy7jLBKsVYHiSFUo5brzgsf4C8jO 317+koD3INpuo7bc9Y93TrwuVchEqF3OtQjmedtj2qKXnHZe6KezwiW1nGdQH3M7 pZJnP5YVEIZUQrnKmw18FTJO8pA0hVfm3ZrNaYo+HqtfOqpDqPD6XW8Ipl0/ZpaX YZQOoNUiGCU1k9Cc8HRI3bFaKJ6KtWBbPUqYFbaVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUutljjAgWwnDYufNaqQwiJ7wP9z8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmZmU3YzQxLTkxZjEtNGFkMy1hMzc1LTRjNDNkN2IzYWRlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gpDANBgkqhkiG9w0BAQsFAAOCAQEAxb/ExrYbDl0VeYXWbIvAdhp1 QqSAPpQrlWoefwxGWorFfYgZHlchFACZ18jkgt+nF7guSZPUYql7DU8YYzMDkg4Z kcnvCjlCQEZCunUYk/AVTQppsvf47Miq1/ZJ7MBz5pB/QkaoIjv1LgMl4Y8Kq8cD 1oi865vU8gXmcJhM4vBsRQxA1RCG5j4rU/8LAyvPLby5JvAuH0/6onuhibkMcWqU xk1s4Stmp8lzYz5CJoz1D+cv5+3PdtSCINYo9XJXVngmcJ+/LLyrZ4F0ts6wT1mh RXT1ifZQMzsGFXLxHAXj0cRHWOgby8MRJN3Ue+y0RbJGxxDhND6LmGs/SoZ5kw== -----END CERTIFICATE-----Generated at Mon Sep 15 21:33:26 2025 by rpki-client