$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98dd07b0-57c5-4d57-a48c-9b2adecccaec.roa File: 98dd07b0-57c5-4d57-a48c-9b2adecccaec.roa (raw, json) Hash identifier: WGx7mOYodi/9RsEuGJGSBWt3LmtrkkVW7qmM2vMYAXs= Subject key identifier: 09:7A:5D:15:B7:CC:8F:F6:0A:37:83:6B:36:06:48:7D:36:11:EF:30 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0A3E76458F7A104604682D4075BF81CA05C364C9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98dd07b0-57c5-4d57-a48c-9b2adecccaec.roa Signing time: Mon 07 Jul 2025 18:00:21 +0000 ROA not before: Mon 07 Jul 2025 18:00:21 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:5080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3e:76:45:8f:7a:10:46:04:68:2d:40:75:bf:81:ca:05:c3:64:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 18:00:21 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=a18c1f54f18028d5c37043d23e172c2b6e0517b40ba4d91c39473c994201a661, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:7e:de:b7:34:3f:aa:c0:a2:c0:0f:13:28: 20:d4:b2:bd:97:f9:d7:5c:49:68:ae:91:6f:c3:c5: 08:a6:61:b6:29:f0:b0:24:18:33:fc:40:68:73:38: 2f:cb:5d:0f:a8:db:03:94:1a:77:12:5b:33:0b:b1: 5c:79:4a:80:c7:bf:6e:4e:9e:51:95:3c:02:26:35: a2:fb:32:63:d9:b0:5d:f1:54:33:07:f8:90:7a:1d: 48:a6:21:19:2a:d0:5d:51:59:06:1a:39:2f:66:52: b8:d6:77:25:78:17:a2:26:96:0a:c7:f8:a8:a2:da: 67:98:27:cb:11:03:c0:de:58:ca:a8:9f:07:7a:d8: 0d:97:87:03:db:ab:f7:d2:4a:6b:9a:07:f6:d6:a8: df:4b:93:76:4a:fc:59:6e:69:b6:12:75:63:05:8a: d7:82:df:b0:e1:b9:bd:79:99:72:4b:be:b5:1f:85: 17:f7:1b:dc:dc:a7:4c:8a:d9:9a:f8:27:61:23:6b: e7:b8:6b:ef:98:11:a3:d5:d1:57:c5:66:ed:98:44: 4f:93:02:be:93:14:e2:ec:81:78:11:bb:00:33:ef: 59:35:e0:eb:62:e1:88:78:da:c5:eb:08:a9:1a:a6: bb:59:f3:21:9f:20:4b:67:32:5d:55:e3:b6:6c:6d: c9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7A:5D:15:B7:CC:8F:F6:0A:37:83:6B:36:06:48:7D:36:11:EF:30 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98dd07b0-57c5-4d57-a48c-9b2adecccaec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:5080::/48 Signature Algorithm: sha256WithRSAEncryption 9c:3b:cb:79:1d:a8:0f:9c:6f:53:0e:8d:c8:1d:ec:0a:48:21: 5e:e9:db:2f:07:8c:80:36:f1:41:c5:a2:80:0c:f1:20:a6:c0: 98:4e:90:32:93:90:de:a8:80:4e:85:c0:d5:24:fa:18:46:88: d0:df:d7:b2:c6:e8:de:df:57:53:ad:2c:8e:e8:56:45:42:d4: 42:8f:52:90:d1:a9:ec:d2:67:e8:e4:c5:44:05:b2:d1:a3:29: 97:38:77:c3:3e:d9:2e:dc:10:4d:db:ab:d1:70:9d:cf:02:45: 10:fd:91:34:0e:0b:2b:33:65:cd:60:09:e1:aa:34:79:19:cb: 17:8a:a9:3d:a5:01:96:ab:2b:ec:c3:d6:1a:01:a7:7e:59:10: 85:07:53:f6:69:7a:64:05:92:05:40:63:1f:fe:4b:59:a3:8a: 1c:6f:b2:3a:99:a1:12:27:5d:ac:7b:04:3c:f2:02:1b:f1:f0: 6a:5a:81:ab:97:db:c7:b8:6b:bd:7d:eb:a3:a4:32:ce:f8:49: c1:09:7a:13:9a:38:85:62:0d:fc:1b:ad:00:ca:02:af:4b:63: a1:9b:d7:9b:83:a6:4b:aa:13:b4:76:a2:5e:c0:32:48:56:0d: 92:7c:72:d1:79:b4:9a:5f:9c:fe:de:4d:09:b2:b6:41:d4:06: 60:e6:42:66 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCj52RY96EEYEaC1Adb+BygXDZMkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTgwMDIxWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMThjMWY1NGYxODAyOGQ1YzM3MDQzZDIzZTE3MmMyYjZl MDUxN2I0MGJhNGQ5MWMzOTQ3M2M5OTQyMDFhNjYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMqX7etzQ/qsCiwA8TKCDUsr2X+ddcSWiukW/DxQimYbYp 8LAkGDP8QGhzOC/LXQ+o2wOUGncSWzMLsVx5SoDHv25OnlGVPAImNaL7MmPZsF3x VDMH+JB6HUimIRkq0F1RWQYaOS9mUrjWdyV4F6ImlgrH+Kii2meYJ8sRA8DeWMqo nwd62A2XhwPbq/fSSmuaB/bWqN9Lk3ZK/FluabYSdWMFiteC37Dhub15mXJLvrUf hRf3G9zcp0yK2Zr4J2Eja+e4a++YEaPV0VfFZu2YRE+TAr6TFOLsgXgRuwAz71k1 4Oti4Yh42sXrCKkaprtZ8yGfIEtnMl1V47ZsbcmLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCXpdFbfMj/YKN4NrNgZIfTYR7zAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4ZGQwN2IwLTU3YzUtNGQ1Ny1hNDhjLTliMmFkZWNjY2FlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AUIAwDQYJKoZIhvcNAQELBQADggEBAJw7y3kdqA+cb1MOjcgd7ApI IV7p2y8HjIA28UHFooAM8SCmwJhOkDKTkN6ogE6FwNUk+hhGiNDf17LG6N7fV1Ot LI7oVkVC1EKPUpDRqezSZ+jkxUQFstGjKZc4d8M+2S7cEE3bq9Fwnc8CRRD9kTQO CyszZc1gCeGqNHkZyxeKqT2lAZarK+zD1hoBp35ZEIUHU/ZpemQFkgVAYx/+S1mj ihxvsjqZoRInXax7BDzyAhvx8GpagauX28e4a71966OkMs74ScEJehOaOIViDfwb rQDKAq9LY6Gb15uDpkuqE7R2ol7AMkhWDZJ8ctF5tJpfnP7eTQmytkHUBmDmQmY= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:03 2025 by rpki-client