$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a43f299-a34f-4946-9b1f-2f259ed620be.roa File: 3a43f299-a34f-4946-9b1f-2f259ed620be.roa (raw, json) Hash identifier: Xe39LUQNPBNapnnvdaW0mxp56JUmH6y/jwD9h2lhN2E= Subject key identifier: 5B:8B:34:07:9D:48:C9:60:DC:10:C5:C7:80:C0:09:09:DF:F3:39:7B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 372C54D2A2630113B8F76FC7C77239A498066AFC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a43f299-a34f-4946-9b1f-2f259ed620be.roa Signing time: Mon 07 Jul 2025 17:20:54 +0000 ROA not before: Mon 07 Jul 2025 17:20:54 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2c:54:d2:a2:63:01:13:b8:f7:6f:c7:c7:72:39:a4:98:06:6a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 17:20:54 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=3a4c44df4b41967d0cdc7d4cae2663e699aa2016ea383b25529592cc08b8b712, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:95:92:34:a0:a1:2a:92:3d:67:10:72:5f: 94:d5:68:c1:d0:47:2b:85:9b:1c:d3:f5:7f:47:f9: 13:bd:8a:bb:37:23:57:cc:81:5e:8d:65:b0:da:93: 67:50:a0:be:5e:66:1d:fc:6f:b2:24:df:03:49:ba: f3:3c:0b:ca:c0:64:2a:fa:5d:f9:36:8f:d9:5c:e6: 7d:a0:b5:db:e5:a3:f3:1d:5b:19:22:c9:a9:50:1f: cf:b1:af:fc:d0:dd:90:50:77:83:c6:8a:12:a2:88: c4:13:40:02:03:e3:b4:c7:83:30:aa:b2:bc:53:37: 5f:f9:51:48:c5:5c:c1:df:aa:d9:02:7b:63:27:fb: bf:4b:e2:89:d0:31:09:ee:92:43:29:66:8c:36:fb: f4:2a:21:34:5f:d4:49:ee:e2:81:7b:18:ff:53:04: f6:86:ff:92:ab:58:00:08:71:90:13:45:a0:1b:95: e4:0b:91:62:d8:4a:fc:7e:a8:15:0d:86:6f:3a:bd: a3:c4:6a:93:77:9a:01:c3:5d:06:dc:fb:09:23:a9: 27:e8:fd:a5:45:f8:2a:7d:29:66:25:70:e1:1d:8a: ff:49:08:17:2f:e1:32:78:46:a7:e5:0a:72:5c:f7: d8:23:a3:ca:a1:e9:eb:3e:5d:b7:93:2b:67:09:59: cf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8B:34:07:9D:48:C9:60:DC:10:C5:C7:80:C0:09:09:DF:F3:39:7B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a43f299-a34f-4946-9b1f-2f259ed620be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:1080::/48 Signature Algorithm: sha256WithRSAEncryption 08:77:f4:55:80:0d:95:b0:dc:57:fb:9c:af:a5:5a:e2:31:ba: ff:ef:8e:52:e6:c1:4f:34:33:0f:69:b9:73:82:d5:15:65:a1: 62:a3:d4:86:cb:c4:c2:3e:8d:8d:32:a1:aa:47:35:78:33:27: cc:0f:45:5d:f5:44:d6:7a:6e:62:0a:b4:f5:8c:41:7e:5d:d3: bf:c0:8e:84:57:cd:23:8d:ca:77:68:14:b7:44:48:39:13:8b: 86:61:c2:9d:3b:f4:88:2b:d5:75:43:b2:99:d1:27:6c:fa:b3: e0:4f:57:a2:c2:12:b0:5c:92:80:46:4d:93:ad:19:ce:ff:6d: 54:67:92:70:67:16:77:b8:ba:87:50:b9:b6:f1:43:b1:7e:46: c7:dc:05:e3:d4:0d:1d:c6:a2:1a:74:ae:3a:95:76:bb:fe:c8: 89:ef:b9:b9:7e:a6:3c:02:76:c0:e3:1f:9f:19:a0:99:09:a3: 3b:07:09:59:09:b6:e8:02:aa:9b:34:c7:54:d9:b2:f0:09:39: 64:f0:d9:3c:39:fe:94:e1:6c:f8:48:eb:bb:70:50:a1:1b:76: 12:ef:fb:f9:6c:75:bb:4e:1a:24:ba:3a:8c:39:f2:bb:30:c8: de:09:bd:5f:44:50:a0:e0:d7:89:42:58:92:dc:c9:1a:1c:e6: ad:ea:57:63 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNyxU0qJjARO492/Hx3I5pJgGavwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTcyMDU0WhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYTRjNDRkZjRiNDE5NjdkMGNkYzdkNGNhZTI2NjNlNjk5 YWEyMDE2ZWEzODNiMjU1Mjk1OTJjYzA4YjhiNzEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8mZWSNKChKpI9ZxByX5TVaMHQRyuFmxzT9X9H+RO9irs3 I1fMgV6NZbDak2dQoL5eZh38b7Ik3wNJuvM8C8rAZCr6Xfk2j9lc5n2gtdvlo/Md WxkiyalQH8+xr/zQ3ZBQd4PGihKiiMQTQAID47THgzCqsrxTN1/5UUjFXMHfqtkC e2Mn+79L4onQMQnukkMpZow2+/QqITRf1Enu4oF7GP9TBPaG/5KrWAAIcZATRaAb leQLkWLYSvx+qBUNhm86vaPEapN3mgHDXQbc+wkjqSfo/aVF+Cp9KWYlcOEdiv9J CBcv4TJ4RqflCnJc99gjo8qh6es+XbeTK2cJWc+rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUW4s0B51IyWDcEMXHgMAJCd/zOXswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhNDNmMjk5LWEzNGYtNDk0Ni05YjFmLTJmMjU5ZWQ2MjBiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yEIAwDQYJKoZIhvcNAQELBQADggEBAAh39FWADZWw3Ff7nK+lWuIx uv/vjlLmwU80Mw9puXOC1RVloWKj1IbLxMI+jY0yoapHNXgzJ8wPRV31RNZ6bmIK tPWMQX5d07/AjoRXzSONyndoFLdESDkTi4Zhwp079Igr1XVDspnRJ2z6s+BPV6LC ErBckoBGTZOtGc7/bVRnknBnFne4uodQubbxQ7F+RsfcBePUDR3Gohp0rjqVdrv+ yInvubl+pjwCdsDjH58ZoJkJozsHCVkJtugCqps0x1TZsvAJOWTw2Tw5/pThbPhI 67twUKEbdhLv+/lsdbtOGiS6Oow58rswyN4JvV9EUKDg14lCWJLcyRoc5q3qV2M= -----END CERTIFICATE-----Generated at Mon Jul 21 23:36:56 2025 by rpki-client