$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a3256e1-07c1-45cc-9223-db5bf08f2539.roa File: 1a3256e1-07c1-45cc-9223-db5bf08f2539.roa (raw, json) Hash identifier: uCjYfe25N7x81IOfQBdpOWbPJRIIUJYbt6ByIW3IJ0I= Subject key identifier: 4A:C8:79:F1:D1:15:BA:91:18:A8:E2:F0:3E:0B:1F:0E:3C:62:0A:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 29D66E3256F00F7F6DFD71B7ED701424FE847303 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a3256e1-07c1-45cc-9223-db5bf08f2539.roa Signing time: Tue 08 Jul 2025 17:21:04 +0000 ROA not before: Tue 08 Jul 2025 17:21:04 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f28:c000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d6:6e:32:56:f0:0f:7f:6d:fd:71:b7:ed:70:14:24:fe:84:73:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:21:04 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=cfc9967d2034c78c9f0038f4865ee79bff90a51cbc6e47d1c5428c2faae24c7b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:5a:c4:e6:06:70:a4:51:92:20:e2:74:3b: 57:49:cf:ac:fd:99:c5:83:a5:56:9f:8f:ad:4e:d2: ca:11:68:46:7f:cd:2c:a7:cb:a9:0c:38:28:ad:19: dd:9c:e4:cb:ad:b2:1f:fe:cb:27:0a:06:be:f2:1c: 45:58:f0:2b:ac:20:dc:dc:c4:28:5f:6f:ba:b4:fd: a3:31:27:a1:7a:76:e8:25:36:9e:e8:95:a6:9f:f1: 04:91:48:c5:4b:d2:c2:14:48:3d:2f:b4:87:5e:2c: 52:26:fa:c2:c3:74:12:5d:8b:41:30:54:00:c6:34: e2:6f:fc:73:65:46:86:5d:e8:6b:0c:e2:05:b8:f2: 8a:69:4e:31:2d:43:e3:d4:df:2f:ea:61:92:ff:1e: bf:eb:a0:3f:9d:96:bf:55:c5:40:c0:84:c0:51:96: f3:55:8a:9b:9a:38:38:a2:1c:33:95:8b:af:b4:c2: c3:38:51:9a:69:82:16:40:6e:49:9a:c2:26:33:2f: ca:8c:0b:be:dd:75:7d:b8:fa:dc:c6:d6:d3:89:bc: 56:6e:26:3f:09:4d:03:36:21:c6:f5:1d:63:b0:58: 07:00:c1:5a:bb:40:cf:40:9c:7c:09:1c:5b:5c:f4: 49:cb:e0:1c:eb:82:77:bc:79:73:9a:a1:c5:b1:e0: 7e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C8:79:F1:D1:15:BA:91:18:A8:E2:F0:3E:0B:1F:0E:3C:62:0A:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a3256e1-07c1-45cc-9223-db5bf08f2539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f28:c000::/37 Signature Algorithm: sha256WithRSAEncryption b9:bb:c6:53:30:98:fc:8e:25:c5:0b:d0:de:93:dc:2e:46:f8: 5b:82:60:4b:39:46:49:85:59:94:61:d3:c4:0f:25:5f:04:24: a7:f7:2e:31:f0:ef:21:26:55:0b:9c:1b:b8:d8:63:ca:c8:76: 31:17:4d:f4:22:1d:cf:6c:e0:39:ec:74:bf:91:88:f2:47:38: 0e:ce:95:7f:20:86:fa:dc:96:1c:5c:11:4b:76:d4:cd:c2:79: 64:e4:4f:74:a0:a5:a0:ee:58:24:09:74:fa:74:02:dc:54:27: 76:f3:8b:51:e5:47:d5:97:6f:42:c4:10:26:02:42:f1:85:3f: e0:54:56:c4:e8:ba:47:dc:0e:4c:b3:a1:28:db:e5:5d:48:f6: 62:df:b5:63:a7:93:75:00:42:a5:b2:c2:0f:91:a4:fe:fb:04: b5:dd:b7:c6:cf:8e:b7:57:a2:0d:63:92:d2:13:77:92:6e:c1: b5:94:dd:49:cb:62:d6:65:64:be:25:48:fc:28:e6:9e:87:46: 38:6e:2e:55:70:76:92:1a:e1:c1:64:e5:51:39:61:8c:20:22: ee:a2:7e:3d:f7:a2:36:0e:be:e6:31:78:7d:a0:45:64:87:60: b0:68:ad:b7:8b:dd:a3:49:37:79:d1:dc:68:2b:f6:01:61:26: 4b:07:09:33 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKdZuMlbwD39t/XG37XAUJP6EcwMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTcyMTA0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZmM5OTY3ZDIwMzRjNzhjOWYwMDM4ZjQ4NjVlZTc5YmZm OTBhNTFjYmM2ZTQ3ZDFjNTQyOGMyZmFhZTI0YzdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz4VrE5gZwpFGSIOJ0O1dJz6z9mcWDpVafj61O0soRaEZ/ zSyny6kMOCitGd2c5Mutsh/+yycKBr7yHEVY8CusINzcxChfb7q0/aMxJ6F6dugl Np7olaaf8QSRSMVL0sIUSD0vtIdeLFIm+sLDdBJdi0EwVADGNOJv/HNlRoZd6GsM 4gW48oppTjEtQ+PU3y/qYZL/Hr/roD+dlr9VxUDAhMBRlvNVipuaODiiHDOVi6+0 wsM4UZppghZAbkmawiYzL8qMC77ddX24+tzG1tOJvFZuJj8JTQM2Icb1HWOwWAcA wVq7QM9AnHwJHFtc9EnL4Bzrgne8eXOaocWx4H4fAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSsh58dEVupEYqOLwPgsfDjxiCuwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhMzI1NmUxLTA3YzEtNDVjYy05MjIzLWRiNWJmMDhmMjUzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8owDANBgkqhkiG9w0BAQsFAAOCAQEAubvGUzCY/I4lxQvQ3pPcLkb4 W4JgSzlGSYVZlGHTxA8lXwQkp/cuMfDvISZVC5wbuNhjysh2MRdN9CIdz2zgOex0 v5GI8kc4Ds6VfyCG+tyWHFwRS3bUzcJ5ZORPdKCloO5YJAl0+nQC3FQndvOLUeVH 1ZdvQsQQJgJC8YU/4FRWxOi6R9wOTLOhKNvlXUj2Yt+1Y6eTdQBCpbLCD5Gk/vsE td23xs+Ot1eiDWOS0hN3km7BtZTdScti1mVkviVI/CjmnodGOG4uVXB2khrhwWTl UTlhjCAi7qJ+PfeiNg6+5jF4faBFZIdgsGitt4vdo0k3edHcaCv2AWEmSwcJMw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:18 2025 by rpki-client