$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/943185fa-c93f-4fa8-8cd3-7831cf759ee7.roa File: 943185fa-c93f-4fa8-8cd3-7831cf759ee7.roa (raw, json) Hash identifier: b/ilraNbYLBmHGXxNOoNpWlePdgW6oMPUHJGja8Qot8= Subject key identifier: 2B:F0:98:7D:03:07:E4:84:BA:F4:40:54:97:2E:8D:83:22:83:D7:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7139ED9ECBDBAFC559FAB8426CFF970B46EE266A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/943185fa-c93f-4fa8-8cd3-7831cf759ee7.roa Signing time: Tue 08 Jul 2025 16:12:02 +0000 ROA not before: Tue 08 Jul 2025 16:12:02 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ffb:20c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:39:ed:9e:cb:db:af:c5:59:fa:b8:42:6c:ff:97:0b:46:ee:26:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:12:02 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=ed51ef707d4776902c0f90aa4c77fb830b16197ea56f00816494306f0d7eaebe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:4e:5b:17:01:67:a0:d3:74:41:60:63:d1: 77:f5:c6:82:84:e5:0c:5d:9e:f8:6e:28:6f:e1:52: fb:5f:70:fc:e9:24:32:f1:23:4c:85:38:18:43:b0: 83:ee:42:9d:e2:f5:df:06:74:f7:1b:15:ab:e9:7f: 28:fa:ed:97:e8:12:e2:9b:28:b8:44:de:dc:9c:5f: ea:8c:48:3c:c7:e8:ae:d9:c5:5a:44:29:85:59:68: f8:a8:ad:9d:81:70:a2:b0:34:8c:42:97:87:ba:04: c5:a3:4e:c4:1d:a0:1e:c9:88:b1:89:c1:1a:9d:40: 09:6a:04:b9:55:c2:66:9d:73:7d:57:eb:a2:d3:c9: d9:42:a3:b1:da:91:3f:ca:a5:07:b6:93:72:ae:44: 22:3a:f9:93:4f:6c:41:09:5e:11:e2:78:0b:b4:82: 32:7d:55:bd:2f:18:13:40:3e:50:c7:41:e1:f5:d1: 38:1b:a7:5c:53:7c:6f:e4:65:d7:93:d1:3e:d1:99: e3:92:3f:70:86:a4:23:12:93:2b:64:ad:ff:f2:a6: 14:22:87:a5:22:3f:44:51:fa:9d:8d:6f:6e:90:01: 5e:1f:d9:5f:86:8d:49:24:6d:3c:3a:41:c8:0e:a7: ff:c9:25:e5:3c:3b:19:77:f1:7d:1f:6d:01:fb:0b: a8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F0:98:7D:03:07:E4:84:BA:F4:40:54:97:2E:8D:83:22:83:D7:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/943185fa-c93f-4fa8-8cd3-7831cf759ee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:20c0::/46 Signature Algorithm: sha256WithRSAEncryption b5:6f:6d:da:17:40:aa:0e:f4:c9:60:8a:95:93:71:76:8f:e3: 53:e4:db:b1:21:ff:cf:12:bd:47:7f:b2:9f:8d:40:a9:95:ee: 22:75:e6:00:6f:f9:4b:5d:0d:0f:83:56:a9:b8:81:dc:c2:19: 86:5c:5f:0c:8a:56:9a:71:20:31:bf:cc:f4:2e:db:f0:e3:13: 81:52:9d:cf:25:71:d1:2b:4b:fb:9e:d1:14:62:35:4b:0c:52: c0:a9:c4:30:57:05:8f:a1:6b:ce:af:41:fb:0c:1b:c6:77:ff: b6:e5:1f:49:b2:30:c1:dc:bb:20:54:71:38:6f:6d:fa:9f:d0: 76:97:2c:2e:d6:ed:5d:da:86:1e:cd:a5:50:45:e9:f3:62:81: 28:6a:91:13:c3:da:e0:72:7f:ea:e1:b5:b7:d8:8a:f9:a9:cb: 6d:4e:4e:e4:4e:e9:ff:e9:bf:9f:8e:67:7e:0f:f1:3c:95:d5: fa:b0:ba:ac:01:d5:55:01:f9:fb:a5:5a:74:27:62:50:1a:0f: bf:60:58:ae:3f:52:cb:d9:d9:0d:ab:54:93:62:02:31:4f:0b: ff:e0:d6:a0:da:9b:47:05:07:88:74:8f:4b:6b:a3:ef:9a:13: 77:6b:2b:ba:0b:21:5f:5b:f9:73:c0:9d:d5:03:d6:f3:c0:ac: f3:75:4f:ad -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcTntnsvbr8VZ+rhCbP+XC0buJmowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYxMjAyWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDUxZWY3MDdkNDc3NjkwMmMwZjkwYWE0Yzc3ZmI4MzBi MTYxOTdlYTU2ZjAwODE2NDk0MzA2ZjBkN2VhZWJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0v05bFwFnoNN0QWBj0Xf1xoKE5QxdnvhuKG/hUvtfcPzp JDLxI0yFOBhDsIPuQp3i9d8GdPcbFavpfyj67ZfoEuKbKLhE3tycX+qMSDzH6K7Z xVpEKYVZaPiorZ2BcKKwNIxCl4e6BMWjTsQdoB7JiLGJwRqdQAlqBLlVwmadc31X 66LTydlCo7HakT/KpQe2k3KuRCI6+ZNPbEEJXhHieAu0gjJ9Vb0vGBNAPlDHQeH1 0Tgbp1xTfG/kZdeT0T7RmeOSP3CGpCMSkytkrf/yphQih6UiP0RR+p2Nb26QAV4f 2V+GjUkkbTw6QcgOp//JJeU8Oxl38X0fbQH7C6iHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUK/CYfQMH5IS69EBUly6NgyKD17MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0MzE4NWZhLWM5M2YtNGZhOC04Y2QzLTc4MzFjZjc1OWVlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/7IMAwDQYJKoZIhvcNAQELBQADggEBALVvbdoXQKoO9MlgipWTcXaP 41Pk27Eh/88SvUd/sp+NQKmV7iJ15gBv+UtdDQ+DVqm4gdzCGYZcXwyKVppxIDG/ zPQu2/DjE4FSnc8lcdErS/ue0RRiNUsMUsCpxDBXBY+ha86vQfsMG8Z3/7blH0my MMHcuyBUcThvbfqf0HaXLC7W7V3ahh7NpVBF6fNigShqkRPD2uByf+rhtbfYivmp y21OTuRO6f/pv5+OZ34P8TyV1fqwuqwB1VUB+fulWnQnYlAaD79gWK4/UsvZ2Q2r VJNiAjFPC//g1qDam0cFB4h0j0tro++aE3drK7oLIV9b+XPAndUD1vPArPN1T60= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:52 2025 by rpki-client