$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a449135-c516-4aaa-b067-5bec206a74d0.roa File: 1a449135-c516-4aaa-b067-5bec206a74d0.roa (raw, json) Hash identifier: OfD6/E8J5qEtnk/lymZCz18npzqxVil/WcimORx3Lio= Subject key identifier: B2:F4:A3:63:E6:8D:68:B3:AA:C4:6C:2C:94:90:C6:02:52:D3:20:AB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D4B7A5747F568DF56DFA392BD04ADFAD4AB1A74 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a449135-c516-4aaa-b067-5bec206a74d0.roa Signing time: Mon 07 Jul 2025 16:20:33 +0000 ROA not before: Mon 07 Jul 2025 16:20:33 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f38:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4b:7a:57:47:f5:68:df:56:df:a3:92:bd:04:ad:fa:d4:ab:1a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:20:33 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=a7b2016dce4d7e79e9091e971f533b0b3e5124f2b27dba0afce9c2703825b082, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:04:f7:7f:a6:5a:be:ea:2b:7c:02:10:21: 30:2d:22:99:56:c5:25:07:54:cd:08:1a:c6:54:37: 25:43:e2:0e:9c:f4:c5:33:af:c4:0d:fc:60:c6:b2: 93:3b:e3:fc:ca:54:fc:6b:53:31:27:59:f0:fe:9f: 72:de:e9:97:28:5c:a0:73:be:6f:71:e5:91:4a:3b: ac:e0:43:b9:b7:aa:80:ac:52:be:d4:08:80:26:bd: b1:ea:79:d2:d3:ae:0e:10:b4:09:c5:ed:88:b0:ea: cf:13:a7:f6:8c:a0:c7:8d:0c:21:c4:3e:67:42:c6: 63:d9:df:97:0f:40:a9:4b:ad:f9:3c:65:65:40:83: bf:b5:6f:71:1a:ee:c2:05:bd:21:e3:a9:31:46:43: 16:41:22:a9:3a:f4:7e:ae:23:8f:26:47:1e:9b:4e: e4:3f:c7:db:d3:08:40:7b:4c:05:a1:9f:56:bc:24: 51:fb:a6:f5:3a:f3:33:fc:c6:34:4a:98:43:34:e1: f5:29:72:e6:58:13:13:26:07:f5:ca:d8:9e:87:7e: 0e:38:db:b7:3b:2a:4e:e0:88:ce:be:a7:35:9c:29: db:f7:b4:b4:ae:70:23:ee:9c:45:12:9f:17:7d:a1: 36:94:a1:c2:7c:a3:4c:35:0e:de:ea:c2:86:04:63: 2f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F4:A3:63:E6:8D:68:B3:AA:C4:6C:2C:94:90:C6:02:52:D3:20:AB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a449135-c516-4aaa-b067-5bec206a74d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:8080::/48 Signature Algorithm: sha256WithRSAEncryption 91:31:8e:e6:cd:d9:42:f9:65:50:ee:e9:58:07:cd:02:a0:75: 13:ea:e6:ac:ee:0a:fe:58:da:67:ac:65:80:dd:11:a6:6a:53: 7f:d2:97:b6:eb:07:80:e7:e2:3e:3a:ee:b1:4f:6b:8b:35:4d: 92:4c:0c:33:c0:c5:21:ee:31:94:b6:74:58:15:02:1a:af:56: 3e:18:3e:3c:a8:b3:73:40:55:d5:ae:20:4a:03:a0:43:67:2e: 03:d6:90:8e:6d:94:a4:a8:86:57:7d:ac:b0:e0:5e:fe:1c:64: ae:59:2b:df:7f:be:42:8b:9e:ad:45:cc:55:f0:0d:2f:c6:7e: 9a:fe:78:66:57:21:49:0e:5b:38:e5:8f:66:99:52:15:28:92: 3d:72:65:74:10:f5:bc:cb:86:6d:90:45:52:8c:65:85:52:8e: b9:38:97:77:5e:82:9b:66:3d:88:8b:96:fd:f0:71:f5:c4:ab: ac:20:b0:75:a4:29:b2:57:f1:3b:45:63:40:31:d6:0f:fc:e2: 52:58:17:69:cf:e9:21:e3:5a:b8:18:81:ea:45:ee:79:89:82: b3:1a:1b:a5:ed:81:78:1d:c8:1f:7e:2e:2e:c9:2d:fe:e1:01: e4:75:52:ff:df:9e:06:b8:f5:8a:31:93:7a:2a:29:4b:e9:05: fc:3c:1e:2c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXUt6V0f1aN9W36OSvQSt+tSrGnQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYyMDMzWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BhN2IyMDE2ZGNlNGQ3ZTc5ZTkwOTFlOTcxZjUzM2IwYjNl NTEyNGYyYjI3ZGJhMGFmY2U5YzI3MDM4MjViMDgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5/AT3f6ZavuorfAIQITAtIplWxSUHVM0IGsZUNyVD4g6c 9MUzr8QN/GDGspM74/zKVPxrUzEnWfD+n3Le6ZcoXKBzvm9x5ZFKO6zgQ7m3qoCs Ur7UCIAmvbHqedLTrg4QtAnF7Yiw6s8Tp/aMoMeNDCHEPmdCxmPZ35cPQKlLrfk8 ZWVAg7+1b3Ea7sIFvSHjqTFGQxZBIqk69H6uI48mRx6bTuQ/x9vTCEB7TAWhn1a8 JFH7pvU68zP8xjRKmEM04fUpcuZYExMmB/XK2J6Hfg4427c7Kk7giM6+pzWcKdv3 tLSucCPunEUSnxd9oTaUocJ8o0w1Dt7qwoYEYy8/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsvSjY+aNaLOqxGwslJDGAlLTIKswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhNDQ5MTM1LWM1MTYtNGFhYS1iMDY3LTViZWMyMDZhNzRkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84gIAwDQYJKoZIhvcNAQELBQADggEBAJExjubN2UL5ZVDu6VgHzQKg dRPq5qzuCv5Y2mesZYDdEaZqU3/Sl7brB4Dn4j467rFPa4s1TZJMDDPAxSHuMZS2 dFgVAhqvVj4YPjyos3NAVdWuIEoDoENnLgPWkI5tlKSohld9rLDgXv4cZK5ZK99/ vkKLnq1FzFXwDS/Gfpr+eGZXIUkOWzjlj2aZUhUokj1yZXQQ9bzLhm2QRVKMZYVS jrk4l3degptmPYiLlv3wcfXEq6wgsHWkKbJX8TtFY0Ax1g/84lJYF2nP6SHjWrgY gepF7nmJgrMaG6XtgXgdyB9+Li7JLf7hAeR1Uv/fnga49Yoxk3oqKUvpBfw8Hiw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:48 2025 by rpki-client