$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953f92fa-8022-4f8d-aa19-8d28c32712f2.roa File: 953f92fa-8022-4f8d-aa19-8d28c32712f2.roa (raw, json) Hash identifier: 1wcgZVCa5IwyNVi+3mwH0AvbEsdyzsZhIa3a/3WGK8g= Subject key identifier: DA:25:AE:88:32:1D:62:A5:70:75:B3:AA:45:76:EF:79:84:4B:AD:7F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0ABDE570EB6246C2B609C2737B68FCFB158BB9B7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953f92fa-8022-4f8d-aa19-8d28c32712f2.roa Signing time: Tue 08 Jul 2025 16:31:32 +0000 ROA not before: Tue 08 Jul 2025 16:31:32 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f70:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:bd:e5:70:eb:62:46:c2:b6:09:c2:73:7b:68:fc:fb:15:8b:b9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:31:32 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=34ce9c599baa94a113a6ca7a5a2d326b473cb455a342a121b7f31002b6adecf0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:3b:c5:74:6c:87:80:d7:80:30:34:8b:90: 13:69:7e:cc:78:f7:e0:17:86:be:e1:e1:90:91:75: f5:b9:0c:b6:e6:34:14:62:56:a4:53:5e:77:f0:24: c6:17:0a:7e:18:e4:09:18:8c:5c:7c:e6:23:e8:45: 5e:e8:91:39:70:52:d4:87:58:64:40:ca:7b:b5:14: a4:cd:7f:4a:03:6f:50:ab:2a:35:33:97:36:2e:4b: 48:57:a9:d2:d2:51:87:ff:d1:94:d8:30:96:3d:8e: 66:67:da:f6:53:32:31:ed:27:53:55:c4:7e:70:9c: 93:11:17:34:27:99:d3:7a:08:4f:26:4b:50:0e:cd: d4:4f:4e:e4:1a:94:70:47:b2:56:d2:a6:db:39:6c: ec:3b:81:c7:20:cd:a5:ab:90:91:4c:c0:46:ad:72: f1:1c:83:26:a9:b7:eb:27:c5:b8:39:06:a0:f0:74: 0c:c0:b3:90:a1:bd:04:3c:f1:66:d9:63:dc:49:5d: b2:e3:e3:dc:d5:bb:90:5c:bf:25:be:89:1b:ba:a6: fe:3f:f8:a8:80:51:6c:5a:c2:d4:cf:6d:f2:e5:f6: cb:ea:38:80:24:c2:f2:13:98:2a:18:cb:5a:61:46: fc:2c:3a:92:66:1a:57:b1:6f:7b:38:ba:cd:70:0b: aa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:25:AE:88:32:1D:62:A5:70:75:B3:AA:45:76:EF:79:84:4B:AD:7F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953f92fa-8022-4f8d-aa19-8d28c32712f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f70:3400::/40 Signature Algorithm: sha256WithRSAEncryption 12:7e:19:62:59:cd:81:d5:46:01:0e:f4:89:ef:f4:c6:89:fa: 4f:85:91:f1:c1:dc:f4:44:fe:2a:fb:b7:f0:e8:48:31:8c:0d: c8:78:6a:bf:06:1b:47:04:d6:0d:16:56:34:cd:4e:14:b8:4d: d0:f8:af:d2:34:c7:52:c6:9d:b5:8b:d6:a0:15:cb:32:57:4b: 58:9f:f7:e2:3e:dc:5b:db:10:79:cb:56:b6:1f:8f:b9:4c:ae: 1d:4f:c8:30:9c:63:07:06:76:75:93:ed:19:49:a0:a2:92:1f: 7a:66:b0:5e:9f:0b:42:82:14:d3:30:63:31:b3:34:f2:5d:29: 35:54:1d:d9:15:4a:8e:50:36:8c:9e:ad:16:8b:0b:b9:9d:00: 34:93:15:a0:1b:63:ea:bd:b5:30:b5:73:96:f7:77:39:53:8c: 1c:3c:13:78:30:88:02:ac:d7:2d:9f:a8:0d:70:cb:a6:21:2b: bb:53:2e:59:da:b8:c8:90:4b:bc:c6:d6:3a:7a:b4:8f:3e:e6: 29:13:74:dd:27:b4:be:7d:7e:69:5a:41:90:d8:63:97:25:6d: d1:01:70:ae:1f:8e:1a:27:e0:8b:5f:2e:d6:62:2a:a6:41:70: 25:62:ca:63:90:ec:d0:ec:2c:6b:14:b5:34:09:de:9d:80:8a: 87:98:de:34 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCr3lcOtiRsK2CcJze2j8+xWLubcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYzMTMyWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGNlOWM1OTliYWE5NGExMTNhNmNhN2E1YTJkMzI2YjQ3 M2NiNDU1YTM0MmExMjFiN2YzMTAwMmI2YWRlY2YwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5oDvFdGyHgNeAMDSLkBNpfsx49+AXhr7h4ZCRdfW5DLbm NBRiVqRTXnfwJMYXCn4Y5AkYjFx85iPoRV7okTlwUtSHWGRAynu1FKTNf0oDb1Cr KjUzlzYuS0hXqdLSUYf/0ZTYMJY9jmZn2vZTMjHtJ1NVxH5wnJMRFzQnmdN6CE8m S1AOzdRPTuQalHBHslbSpts5bOw7gccgzaWrkJFMwEatcvEcgyapt+snxbg5BqDw dAzAs5ChvQQ88WbZY9xJXbLj49zVu5BcvyW+iRu6pv4/+KiAUWxawtTPbfLl9svq OIAkwvITmCoYy1phRvwsOpJmGlexb3s4us1wC6ojAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2iWuiDIdYqVwdbOqRXbveYRLrX8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1M2Y5MmZhLTgwMjItNGY4ZC1hYTE5LThkMjhjMzI3MTJmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9wNDANBgkqhkiG9w0BAQsFAAOCAQEAEn4ZYlnNgdVGAQ70ie/0xon6 T4WR8cHc9ET+Kvu38OhIMYwNyHhqvwYbRwTWDRZWNM1OFLhN0Piv0jTHUsadtYvW oBXLMldLWJ/34j7cW9sQectWth+PuUyuHU/IMJxjBwZ2dZPtGUmgopIfemawXp8L QoIU0zBjMbM08l0pNVQd2RVKjlA2jJ6tFosLuZ0ANJMVoBtj6r21MLVzlvd3OVOM HDwTeDCIAqzXLZ+oDXDLpiEru1MuWdq4yJBLvMbWOnq0jz7mKRN03Se0vn1+aVpB kNhjlyVt0QFwrh+OGifgi18u1mIqpkFwJWLKY5Ds0OwsaxS1NAnenYCKh5jeNA== -----END CERTIFICATE-----Generated at Tue Jul 22 04:40:00 2025 by rpki-client