$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa File: 8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa (raw, json) Hash identifier: RAY3AFb9tkJpJzfq5XUk9JFLBveRygf26BVpk82pftE= Subject key identifier: 91:64:56:32:9E:5B:FB:C4:24:4B:FE:16:E1:94:E5:EE:BD:B4:65:96 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39F22155B94ABB978AA653D4512969E0BD78A97B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa Signing time: Mon 07 Jul 2025 16:32:13 +0000 ROA not before: Mon 07 Jul 2025 16:32:13 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f38:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f2:21:55:b9:4a:bb:97:8a:a6:53:d4:51:29:69:e0:bd:78:a9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 16:32:13 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=7b04455909e0c5c6dc0e0f7ff3a5abc6df113a1e417d033735d15654ebd4eddc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:97:ba:77:2c:fa:4f:88:c3:c0:4c:f1:1b:0a: 4f:60:50:b1:21:bb:37:bf:18:34:0f:de:55:ce:63: f6:05:b1:b5:b6:8b:1c:1e:71:96:f5:1c:95:3f:95: 7c:ee:b2:e4:33:e9:4a:61:6e:7e:06:5b:53:af:88: 70:0a:73:b1:a9:21:00:ab:d3:74:59:5b:23:b5:81: 49:68:7a:7e:90:01:d6:8f:11:90:0d:ad:96:37:8f: 21:94:65:dc:87:6a:cf:6a:99:ce:38:56:d9:fc:a0: 29:1d:07:6c:d5:4c:c1:4f:a1:72:05:a4:f0:f5:70: e2:ba:28:d6:ee:e7:85:31:4a:84:d3:a8:4f:9b:dd: ec:be:56:b9:e3:df:86:9f:b2:d3:28:de:67:8f:00: fe:94:99:17:f7:37:d2:c6:30:e2:fa:66:f9:8d:d8: 66:b3:a1:db:76:3c:09:55:05:94:86:1b:76:c0:14: d3:75:91:23:be:a8:c1:2f:d9:be:90:11:06:f7:5a: 29:54:e8:26:83:9f:5c:69:d5:f3:ea:6d:7f:8b:02: dc:3b:74:66:67:db:b2:63:87:b4:e4:b3:2d:82:5f: fb:36:6e:eb:1e:5a:ae:e9:0f:ba:48:e9:4d:8d:73: e9:83:79:81:c3:4f:c5:f1:68:06:39:d3:c3:dc:3a: a0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:64:56:32:9E:5B:FB:C4:24:4B:FE:16:E1:94:E5:EE:BD:B4:65:96 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ea2dd95-8808-4d4f-923d-2f6d47862c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:5000::/40 Signature Algorithm: sha256WithRSAEncryption 00:14:8f:46:71:bf:90:30:e1:93:fb:64:a3:ad:a7:83:6c:b4: 7b:b3:99:42:e5:56:07:5a:1c:b6:56:4d:0c:d4:10:94:9d:1f: 47:64:42:46:d2:f4:9b:bc:37:99:4e:72:4f:1f:7a:41:59:26: c9:05:f2:35:aa:9c:b0:73:be:e4:86:fc:aa:5d:0e:01:bf:22: af:10:9a:1a:66:b7:22:95:ec:00:e8:1f:80:1d:2b:75:75:3f: 3f:70:c5:b3:e2:5f:3f:27:57:b1:5f:e4:3c:51:b1:e9:c1:9e: 5a:8d:68:35:11:ff:c3:b2:76:50:3c:a9:0c:60:c4:3e:31:e6: 5e:e4:cc:c4:0a:41:80:24:57:93:51:ba:2d:cd:b8:3a:83:ab: af:ec:ab:86:b6:60:8e:ee:81:1d:7e:e3:66:1e:6c:fe:5d:62: 41:b9:93:5d:54:9a:15:bf:c8:38:f5:f8:2e:d8:13:2c:ed:59: b5:a9:36:35:dd:c1:c4:12:50:14:db:26:dd:0c:d0:9f:ef:4c: 1b:fe:fa:e8:25:a9:5c:b2:52:6e:e7:56:3d:3c:0b:a3:45:19: 0d:da:f8:b3:98:ea:4a:97:43:5a:af:d5:d6:25:2a:0e:f8:e4: 8c:e5:e8:0f:55:d0:64:ed:16:de:bd:dc:ca:ef:6c:79:0d:66: b0:62:18:8f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOfIhVblKu5eKplPUUSlp4L14qXswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTYzMjEzWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjA0NDU1OTA5ZTBjNWM2ZGMwZTBmN2ZmM2E1YWJjNmRm MTEzYTFlNDE3ZDAzMzczNWQxNTY1NGViZDRlZGRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZl7p3LPpPiMPATPEbCk9gULEhuze/GDQP3lXOY/YFsbW2 ixwecZb1HJU/lXzusuQz6Uphbn4GW1OviHAKc7GpIQCr03RZWyO1gUloen6QAdaP EZANrZY3jyGUZdyHas9qmc44Vtn8oCkdB2zVTMFPoXIFpPD1cOK6KNbu54UxSoTT qE+b3ey+Vrnj34afstMo3mePAP6UmRf3N9LGMOL6ZvmN2Gazodt2PAlVBZSGG3bA FNN1kSO+qMEv2b6QEQb3WilU6CaDn1xp1fPqbX+LAtw7dGZn27Jjh7Tksy2CX/s2 buseWq7pD7pI6U2Nc+mDeYHDT8XxaAY508PcOqATAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUkWRWMp5b+8QkS/4W4ZTl7r20ZZYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlYTJkZDk1LTg4MDgtNGQ0Zi05MjNkLTJmNmQ0Nzg2MmM5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB84UDANBgkqhkiG9w0BAQsFAAOCAQEAABSPRnG/kDDhk/tko62ng2y0 e7OZQuVWB1octlZNDNQQlJ0fR2RCRtL0m7w3mU5yTx96QVkmyQXyNaqcsHO+5Ib8 ql0OAb8irxCaGma3IpXsAOgfgB0rdXU/P3DFs+JfPydXsV/kPFGx6cGeWo1oNRH/ w7J2UDypDGDEPjHmXuTMxApBgCRXk1G6Lc24OoOrr+yrhrZgju6BHX7jZh5s/l1i QbmTXVSaFb/IOPX4LtgTLO1Ztak2Nd3BxBJQFNsm3QzQn+9MG/766CWpXLJSbudW PTwLo0UZDdr4s5jqSpdDWq/V1iUqDvjkjOXoD1XQZO0W3r3cyu9seQ1msGIYjw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:19:10 2025 by rpki-client