$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa File: 6c921a1b-c5be-4c53-9918-5f35190b51a3.roa (raw, json) Hash identifier: i+YonV4bFcpK+NTgrLbgIxFN9hGtoO+n8AD16EF63qA= Subject key identifier: 02:8C:F0:41:33:83:33:77:B4:EB:F1:22:C3:77:B5:8F:DE:BB:84:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3289F17E758F72F6E8078421617C458A641B41EA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa Signing time: Tue 08 Jul 2025 15:20:32 +0000 ROA not before: Tue 08 Jul 2025 15:20:32 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:89:f1:7e:75:8f:72:f6:e8:07:84:21:61:7c:45:8a:64:1b:41:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 15:20:32 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=9f9cdfc38723f84f16998d1aa0cf5513859262cb55c5a13a184acad704d47e54, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:46:b1:30:e8:bf:0e:bf:3d:ed:22:3d:a1: 31:86:fb:81:3b:41:79:f7:17:3f:b9:a2:30:fb:9d: 00:1e:d8:53:7d:e7:e3:3c:85:d8:f0:25:8f:1e:9f: 09:bb:db:27:e8:dd:bb:8b:f3:95:7a:9c:f5:59:30: 8f:7c:9c:20:b1:94:8d:27:56:56:83:51:74:13:aa: 47:5f:89:ea:25:e3:1d:17:9c:10:12:30:d0:39:50: 69:03:b0:0d:3a:bb:00:49:33:8e:25:80:02:8d:27: 1f:84:d9:9a:75:d1:5c:c6:a5:7d:bc:60:b9:f8:ba: 46:98:f9:87:d3:03:d6:10:37:be:43:9f:16:88:26: 77:19:0a:cf:9b:74:5d:24:15:e4:84:f2:75:96:cb: e8:94:f4:14:55:c5:f4:41:49:b4:1b:08:13:5c:f6: 45:11:be:d8:d6:05:ec:5b:6e:b3:71:67:4d:09:60: a9:18:b5:41:0f:8b:8e:be:d6:f8:1c:c2:f2:6c:41: a6:e7:72:15:75:df:a9:60:39:87:95:fa:70:5d:31: cf:02:fc:19:8d:00:d1:e6:0c:37:64:ee:c7:c0:02: 5f:61:1a:2b:3a:7d:c7:3d:ec:31:8d:5d:85:31:12: 63:d9:47:9a:7e:7f:ee:66:3a:71:9b:7c:46:5f:7d: b3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8C:F0:41:33:83:33:77:B4:EB:F1:22:C3:77:B5:8F:DE:BB:84:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:3400::/40 Signature Algorithm: sha256WithRSAEncryption 76:69:ad:ad:c6:b6:4f:9d:94:b3:af:37:ea:93:01:a9:a1:9d: 55:df:8d:78:f0:d4:2c:f8:fb:bb:d5:ff:6b:0b:a8:67:63:42: 80:9d:b4:24:fe:d2:e6:1e:ea:b2:95:4d:8c:2e:de:f9:ad:35: 1b:d3:98:28:1a:78:ab:2a:2b:e3:ca:92:75:62:fa:d1:93:b4: 1e:d2:e9:02:48:10:d0:5b:38:3f:68:bd:47:bc:0f:e0:c0:52: 03:84:42:45:54:29:78:a8:b9:35:17:64:53:74:7a:c2:e7:ea: ca:41:93:22:14:0d:78:a1:2d:7a:fd:be:57:2a:55:42:86:c7: 19:b4:63:03:79:e0:b9:7c:a5:27:07:d0:e1:6d:0f:a0:07:a5: 14:4b:e5:42:91:a0:6b:c2:48:c0:ba:20:c3:ff:45:87:e1:3a: 2c:7b:25:1b:f2:56:15:49:91:d2:d8:70:79:d1:f1:2c:33:14: bb:d7:e6:2e:56:c4:f8:85:91:ea:7d:0e:03:60:87:04:e0:77: 50:30:b0:84:e1:65:d7:f3:da:51:62:1e:e1:2f:c6:dc:6a:b5: fe:e7:83:11:eb:19:e5:2b:16:0b:1f:ef:ca:6e:b5:f4:e2:78: 9a:c5:f2:51:a4:10:3a:90:f8:ca:c3:06:a3:8a:bd:2a:ab:64: 49:a5:30:e9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMonxfnWPcvboB4QhYXxFimQbQeowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTUyMDMyWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjljZGZjMzg3MjNmODRmMTY5OThkMWFhMGNmNTUxMzg1 OTI2MmNiNTVjNWExM2ExODRhY2FkNzA0ZDQ3ZTU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZqEaxMOi/Dr897SI9oTGG+4E7QXn3Fz+5ojD7nQAe2FN9 5+M8hdjwJY8enwm72yfo3buL85V6nPVZMI98nCCxlI0nVlaDUXQTqkdfieol4x0X nBASMNA5UGkDsA06uwBJM44lgAKNJx+E2Zp10VzGpX28YLn4ukaY+YfTA9YQN75D nxaIJncZCs+bdF0kFeSE8nWWy+iU9BRVxfRBSbQbCBNc9kURvtjWBexbbrNxZ00J YKkYtUEPi46+1vgcwvJsQabnchV136lgOYeV+nBdMc8C/BmNANHmDDdk7sfAAl9h Gis6fcc97DGNXYUxEmPZR5p+f+5mOnGbfEZffbNlAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUAozwQTODM3e06/Eiw3e1j967hCkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjOTIxYTFiLWM1YmUtNGM1My05OTE4LTVmMzUxOTBiNTFhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8ANDANBgkqhkiG9w0BAQsFAAOCAQEAdmmtrca2T52Us6836pMBqaGd Vd+NePDULPj7u9X/awuoZ2NCgJ20JP7S5h7qspVNjC7e+a01G9OYKBp4qyor48qS dWL60ZO0HtLpAkgQ0Fs4P2i9R7wP4MBSA4RCRVQpeKi5NRdkU3R6wufqykGTIhQN eKEtev2+VypVQobHGbRjA3nguXylJwfQ4W0PoAelFEvlQpGga8JIwLogw/9Fh+E6 LHslG/JWFUmR0thwedHxLDMUu9fmLlbE+IWR6n0OA2CHBOB3UDCwhOFl1/PaUWIe 4S/G3Gq1/ueDEesZ5SsWCx/vym619OJ4msXyUaQQOpD4ysMGo4q9KqtkSaUw6Q== -----END CERTIFICATE-----Generated at Sat Jul 26 01:48:58 2025 by rpki-client