$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c463e88-0f7c-4897-ac99-34b8567b1dc9.roa File: 4c463e88-0f7c-4897-ac99-34b8567b1dc9.roa (raw, json) Hash identifier: mGAGS+s18KfvzY36ASitY37JZIXLqaJITrm2qCKhH+k= Subject key identifier: 27:0A:1C:54:E9:C3:EA:BF:C3:96:66:79:1A:FB:B7:F9:F8:54:48:6C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7A4C852353E2B83F89CF74D627E6F4C1DA4AC613 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c463e88-0f7c-4897-ac99-34b8567b1dc9.roa Signing time: Tue 08 Jul 2025 15:32:00 +0000 ROA not before: Tue 08 Jul 2025 15:32:00 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4c:85:23:53:e2:b8:3f:89:cf:74:d6:27:e6:f4:c1:da:4a:c6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:32:00 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=83d3ebb429b78a45c459939ec15abfc01deffff005062413d197b2133d332ec0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:24:64:01:08:61:10:0d:31:96:98:19:19: 0b:d6:38:e4:67:d6:31:86:06:b2:85:f0:54:1e:91: a3:88:a6:28:d9:a0:82:8e:9d:29:77:53:28:31:00: e7:96:82:19:0f:2f:b5:60:e6:3d:ce:69:1c:bc:be: ef:a5:46:ce:ca:d6:29:78:74:e2:67:fe:ad:aa:e9: 9b:17:64:f0:a3:f9:34:b0:f7:ae:68:1d:fd:4a:68: 4d:ab:11:f5:59:52:af:ae:4e:87:d9:30:c7:66:f6: 87:95:ba:b3:fb:99:0a:16:19:04:f6:5b:33:8f:e9: f5:86:38:44:80:1f:5d:ec:1b:7c:a8:34:bd:7e:0d: 09:30:a7:76:15:bb:46:48:ab:18:ee:04:26:76:c1: 93:7a:1f:3c:de:a0:09:d0:90:d6:7e:99:87:bb:31: dd:5a:13:41:6d:a1:6a:0f:ec:3b:07:fa:fb:48:b2: e5:db:06:3e:9e:85:f1:5a:d7:7f:b7:3e:4c:5c:3f: 79:85:b5:05:ea:92:e9:e7:5a:0f:2d:7c:30:78:ff: 2d:e6:38:51:73:68:34:a6:12:8d:23:20:da:b1:8e: d8:76:dc:84:32:5e:e4:b6:8b:d0:61:94:ee:07:fc: ea:a8:79:4b:1a:d5:9d:03:b2:c0:5a:5a:c1:67:95: 0f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0A:1C:54:E9:C3:EA:BF:C3:96:66:79:1A:FB:B7:F9:F8:54:48:6C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c463e88-0f7c-4897-ac99-34b8567b1dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8000::/39 Signature Algorithm: sha256WithRSAEncryption 2c:b3:e1:37:4a:d1:50:55:fa:0f:80:b5:de:f6:c7:b0:ce:ae: 1c:97:0a:ee:c6:e2:21:f2:4f:e0:f2:63:c4:13:d4:5f:fb:0c: c1:f2:3e:73:08:c6:2f:cc:78:e2:37:a8:d6:7b:88:17:d0:9f: 88:4f:d0:fe:54:10:a5:3b:cf:4d:2c:17:40:02:ae:4c:93:73: dc:cd:a8:86:da:1c:3a:af:f6:ac:18:14:c9:44:7c:a0:a8:4a: 13:c4:de:bd:cf:cf:c3:6a:37:34:ba:d0:5e:f0:b0:c7:5a:a9: 4c:aa:75:3e:0b:69:57:45:d2:2a:a4:e3:1a:06:0c:49:8c:3b: b8:15:15:4e:cf:5c:46:5e:35:3e:2a:45:d2:ed:fb:c7:00:41: ae:f4:b0:95:89:b3:bc:29:38:6f:a5:d5:42:9d:71:87:31:5c: 2b:3d:f1:c9:17:58:ba:18:16:e9:1d:55:5b:fb:bf:ee:75:a3: e0:65:89:43:38:e9:88:47:f4:44:a7:1c:cf:60:d2:ac:f8:dc: b9:48:fc:2c:dc:63:72:31:47:f2:1c:f4:83:99:d6:07:4e:ca: 50:7f:a2:9b:79:1a:91:8b:db:a2:8a:38:a7:0b:78:49:bb:29: 4c:fa:3b:6b:40:58:6a:45:2a:1c:72:bd:34:01:0c:7b:51:14: ef:d5:40:0d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUekyFI1PiuD+Jz3TWJ+b0wdpKxhMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTUzMjAwWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2QzZWJiNDI5Yjc4YTQ1YzQ1OTkzOWVjMTVhYmZjMDFk ZWZmZmYwMDUwNjI0MTNkMTk3YjIxMzNkMzMyZWMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkISRkAQhhEA0xlpgZGQvWOORn1jGGBrKF8FQekaOIpijZ oIKOnSl3UygxAOeWghkPL7Vg5j3OaRy8vu+lRs7K1il4dOJn/q2q6ZsXZPCj+TSw 965oHf1KaE2rEfVZUq+uTofZMMdm9oeVurP7mQoWGQT2WzOP6fWGOESAH13sG3yo NL1+DQkwp3YVu0ZIqxjuBCZ2wZN6HzzeoAnQkNZ+mYe7Md1aE0FtoWoP7DsH+vtI suXbBj6ehfFa13+3PkxcP3mFtQXqkunnWg8tfDB4/y3mOFFzaDSmEo0jINqxjth2 3IQyXuS2i9BhlO4H/OqoeUsa1Z0DssBaWsFnlQ/xAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJwocVOnD6r/DlmZ5Gvu3+fhUSGwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjNDYzZTg4LTBmN2MtNDg5Ny1hYzk5LTM0Yjg1NjdiMWRjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB//gDANBgkqhkiG9w0BAQsFAAOCAQEALLPhN0rRUFX6D4C13vbHsM6u HJcK7sbiIfJP4PJjxBPUX/sMwfI+cwjGL8x44jeo1nuIF9CfiE/Q/lQQpTvPTSwX QAKuTJNz3M2ohtocOq/2rBgUyUR8oKhKE8Tevc/Pw2o3NLrQXvCwx1qpTKp1Pgtp V0XSKqTjGgYMSYw7uBUVTs9cRl41PipF0u37xwBBrvSwlYmzvCk4b6XVQp1xhzFc Kz3xyRdYuhgW6R1VW/u/7nWj4GWJQzjpiEf0RKccz2DSrPjcuUj8LNxjcjFH8hz0 g5nWB07KUH+im3kakYvbooo4pwt4SbspTPo7a0BYakUqHHK9NAEMe1EU79VADQ== -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:10 2025 by rpki-client