$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9655f4ce-87f0-4d76-863e-8032d78fbca6.roa File: 9655f4ce-87f0-4d76-863e-8032d78fbca6.roa (raw, json) Hash identifier: 3BIVspD6/wOfgIhvcq6iqbJzPfjFL8b9ubPsJqTFgWU= Subject key identifier: 92:52:60:7B:DB:B8:74:61:DA:13:48:1F:68:DD:A1:5D:2F:45:88:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 09C5A44D5EA4F940E2E608A9552AD78A776FBBCC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9655f4ce-87f0-4d76-863e-8032d78fbca6.roa Signing time: Fri 11 Jul 2025 00:21:07 +0000 ROA not before: Fri 11 Jul 2025 00:21:07 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fed:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c5:a4:4d:5e:a4:f9:40:e2:e6:08:a9:55:2a:d7:8a:77:6f:bb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 11 00:21:07 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=a77105fe7688bd423d0537d50db3a395cda6df783147a6214de347c1f76e3979, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:ca:1b:01:3c:93:b4:00:52:27:3c:ed:04: ec:80:b2:f6:7a:94:69:e8:79:55:69:f7:64:72:1f: a6:5a:d5:96:1b:6c:24:11:c1:e2:6b:d2:72:2d:ea: c2:a2:1e:da:b0:ad:e3:d7:cc:0c:7a:a5:13:f7:ff: 04:17:e7:12:53:34:b0:6b:e6:5f:cc:7d:d4:93:c0: 61:3a:c2:2b:d4:cb:a8:2d:d9:24:33:1b:6f:4b:ad: 3c:fc:e2:0f:9e:7b:68:b1:c1:21:f3:1b:02:0e:09: 59:40:86:a0:6f:72:c0:e0:d5:07:98:62:87:28:df: 7a:e7:1d:be:6c:9a:c6:18:ad:db:77:30:e2:ed:00: aa:ab:70:80:10:d3:8a:3c:39:db:2d:9b:b5:4e:17: c6:5c:b6:b3:d5:6a:50:62:01:6e:40:7e:29:f5:13: e1:be:1a:49:24:70:e4:71:73:41:20:e7:f5:4b:58: 54:5c:30:c2:6a:ec:5c:6c:39:f9:ef:42:6f:18:ae: 61:7c:18:07:e7:bd:d0:eb:2e:93:ce:ef:d5:74:71: e3:4a:83:d2:03:78:ef:c7:66:6c:66:79:18:64:d6: ba:53:f2:8d:ee:f6:ba:1a:dc:90:df:27:f0:e0:a1: b3:15:b9:b6:f6:a3:4d:fd:6c:97:ab:0a:77:30:4b: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:52:60:7B:DB:B8:74:61:DA:13:48:1F:68:DD:A1:5D:2F:45:88:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9655f4ce-87f0-4d76-863e-8032d78fbca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fed:8000::/39 Signature Algorithm: sha256WithRSAEncryption 6d:b9:5b:16:ff:e9:1d:4d:f2:62:19:77:bc:2f:ad:3e:2a:67: 48:d2:e7:5b:6f:d3:0c:8a:88:26:17:33:e5:28:f9:b8:b4:a0: 17:94:64:20:a8:65:1b:cf:64:76:77:bd:e1:d7:f3:93:f3:bb: b1:7c:c6:2f:cc:bf:80:14:44:c2:8d:5f:a6:43:36:51:d0:ec: 08:0f:6e:aa:72:fa:ff:6f:1f:82:5d:49:7e:76:b7:a4:f7:65: a8:3a:12:fa:bc:42:4f:9c:6d:0e:34:0f:86:84:4b:6e:d7:06: 93:c2:72:97:49:46:0c:fa:6c:a0:2f:b5:f7:63:2c:fb:9d:21: 27:2d:ec:9f:78:14:be:5f:bb:9b:73:e1:98:ae:88:79:b7:c6: 32:15:73:bb:2f:88:62:00:ec:d1:30:fb:f3:6c:76:eb:95:f8: 18:58:24:8d:44:34:6c:a1:2f:92:6c:f4:e3:8d:66:37:63:01: 6f:94:98:2e:3f:24:a4:dc:05:52:f7:14:ef:97:41:7a:6a:3a: a7:6b:e4:bd:59:fa:e6:be:ba:89:6e:c3:6f:6c:87:c1:7b:dd: 82:55:71:53:f3:35:66:18:40:c3:b7:ef:d9:61:36:fe:00:b6: 99:95:f4:08:fb:1a:6a:b1:75:2f:ff:fc:d7:57:11:8f:17:f0: d5:30:e7:8d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCcWkTV6k+UDi5gipVSrXindvu8wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzExMDAyMTA3WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzcxMDVmZTc2ODhiZDQyM2QwNTM3ZDUwZGIzYTM5NWNk YTZkZjc4MzE0N2E2MjE0ZGUzNDdjMWY3NmUzOTc5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCveMobATyTtABSJzztBOyAsvZ6lGnoeVVp92RyH6Za1ZYb bCQRweJr0nIt6sKiHtqwrePXzAx6pRP3/wQX5xJTNLBr5l/MfdSTwGE6wivUy6gt 2SQzG29LrTz84g+ee2ixwSHzGwIOCVlAhqBvcsDg1QeYYoco33rnHb5smsYYrdt3 MOLtAKqrcIAQ04o8Odstm7VOF8ZctrPValBiAW5Afin1E+G+GkkkcORxc0Eg5/VL WFRcMMJq7FxsOfnvQm8YrmF8GAfnvdDrLpPO79V0ceNKg9IDeO/HZmxmeRhk1rpT 8o3u9roa3JDfJ/DgobMVubb2o039bJerCncwS17HAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUklJge9u4dGHaE0gfaN2hXS9FiDYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2NTVmNGNlLTg3ZjAtNGQ3Ni04NjNlLTgwMzJkNzhmYmNhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/tgDANBgkqhkiG9w0BAQsFAAOCAQEAbblbFv/pHU3yYhl3vC+tPipn SNLnW2/TDIqIJhcz5Sj5uLSgF5RkIKhlG89kdne94dfzk/O7sXzGL8y/gBREwo1f pkM2UdDsCA9uqnL6/28fgl1Jfna3pPdlqDoS+rxCT5xtDjQPhoRLbtcGk8Jyl0lG DPpsoC+192Ms+50hJy3sn3gUvl+7m3PhmK6IebfGMhVzuy+IYgDs0TD782x265X4 GFgkjUQ0bKEvkmz0441mN2MBb5SYLj8kpNwFUvcU75dBemo6p2vkvVn65r66iW7D b2yHwXvdglVxU/M1ZhhAw7fv2WE2/gC2mZX0CPsaarF1L//811cRjxfw1TDnjQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:21 2025 by rpki-client