$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ba3a8c3-70d5-4904-a577-21c82932ab95.roa File: 9ba3a8c3-70d5-4904-a577-21c82932ab95.roa (raw, json) Hash identifier: 3L2s4s4dKwZgaaXi1E4XHXn+fUScahA+xVYQbmWKXoU= Subject key identifier: 61:2A:D2:A4:94:49:65:0C:67:40:33:87:2D:38:B2:6D:B3:31:A4:E4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 579A004BB62877BF07B6A7BA3268CC3BC7372F85 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ba3a8c3-70d5-4904-a577-21c82932ab95.roa Signing time: Tue 08 Jul 2025 17:20:27 +0000 ROA not before: Tue 08 Jul 2025 17:20:27 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f14:4800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9a:00:4b:b6:28:77:bf:07:b6:a7:ba:32:68:cc:3b:c7:37:2f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:20:27 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=e05fe70ddd88929f7d51e118a46eef189150d8c6b376ffdae3db803f9f52a618, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:3d:f2:8a:cf:2b:a8:c3:0f:3c:a8:cc:3c: 10:d9:14:d1:85:78:f1:94:12:c0:84:95:67:91:23: 29:8d:5b:78:35:d5:64:ea:11:8c:3e:f7:0d:3d:5e: a0:c0:0f:b9:54:53:21:5d:ca:be:da:b0:1b:f3:f0: 19:e9:80:43:8a:93:e9:25:55:4a:38:b7:1b:25:31: 87:1f:34:53:5b:82:d0:9a:07:ef:25:b0:78:05:e6: cd:d4:57:80:42:be:8e:2f:8e:c2:99:9f:73:60:91: c4:ef:f6:eb:a8:88:3f:af:e4:84:df:33:b6:7c:95: 23:6e:b2:f1:df:07:5e:0f:90:26:db:59:0e:10:13: 0b:d8:fa:e7:9f:bf:59:73:51:39:1e:d2:a0:2a:b7: c9:80:b7:e6:06:82:c9:fa:32:6c:56:f6:88:b7:37: d9:41:6e:bc:eb:7e:74:f6:ca:61:ee:b1:c7:9d:8e: c1:37:1f:48:34:5f:4c:34:3a:3b:b7:13:78:49:4c: fc:d6:88:7a:8c:6b:97:54:a4:4e:d9:15:f9:2e:9e: 19:5e:34:9a:4a:a6:59:10:18:cc:34:92:91:b8:c5: 47:7d:9a:30:83:a8:15:b8:a3:a9:82:cb:39:d7:36: 14:78:66:43:28:cb:90:e5:a5:a9:77:c1:90:59:15: 91:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2A:D2:A4:94:49:65:0C:67:40:33:87:2D:38:B2:6D:B3:31:A4:E4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ba3a8c3-70d5-4904-a577-21c82932ab95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14:4800::/37 Signature Algorithm: sha256WithRSAEncryption 41:52:bf:52:d8:5c:da:49:75:f7:f7:17:c2:b0:85:b1:e9:38: 9a:98:61:af:d8:37:a4:6d:6a:eb:99:02:a4:b5:5e:3e:31:8f: 02:77:00:a4:e9:34:8c:9d:52:c4:3d:3e:c9:05:6e:44:69:66: 27:c3:bb:c1:2b:ef:04:2d:da:b9:75:87:c2:6a:9b:2a:82:58: ed:ec:96:cb:fa:d8:c3:cc:53:7f:9f:58:55:6b:a4:a7:68:aa: 13:84:d0:af:9c:57:73:d6:24:60:cd:a3:d9:1a:38:a8:32:6b: 4b:a3:30:38:3d:26:e8:38:2b:47:aa:4d:c3:63:be:1f:35:ad: 3b:13:9b:da:e5:45:07:74:e2:89:0c:a0:5b:84:44:6f:95:c4: 72:61:80:ec:85:f9:a5:43:41:d1:65:ae:22:cc:57:1f:b1:a9: 57:39:52:f2:9e:3d:1c:fe:59:e8:e8:5f:5c:ac:c2:4c:a0:a2: ca:66:c6:31:8b:fb:69:26:61:24:74:63:a0:18:b8:a7:1f:1c: ef:8c:f7:b0:84:58:b9:cc:1e:df:54:a5:1b:bb:46:bb:08:fd: 4e:72:d0:da:04:54:8e:f1:e7:b1:99:e1:a8:62:c5:fc:cb:38: 9a:c1:3f:77:50:a3:bf:f9:88:8e:81:6c:5b:ab:5f:3a:b3:8b: 82:e7:9d:47 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUV5oAS7Yod78Htqe6MmjMO8c3L4UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTcyMDI3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDVmZTcwZGRkODg5MjlmN2Q1MWUxMThhNDZlZWYxODkx NTBkOGM2YjM3NmZmZGFlM2RiODAzZjlmNTJhNjE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzej3yis8rqMMPPKjMPBDZFNGFePGUEsCElWeRIymNW3g1 1WTqEYw+9w09XqDAD7lUUyFdyr7asBvz8BnpgEOKk+klVUo4txslMYcfNFNbgtCa B+8lsHgF5s3UV4BCvo4vjsKZn3NgkcTv9uuoiD+v5ITfM7Z8lSNusvHfB14PkCbb WQ4QEwvY+uefv1lzUTke0qAqt8mAt+YGgsn6MmxW9oi3N9lBbrzrfnT2ymHusced jsE3H0g0X0w0Oju3E3hJTPzWiHqMa5dUpE7ZFfkunhleNJpKplkQGMw0kpG4xUd9 mjCDqBW4o6mCyznXNhR4ZkMoy5Dlpal3wZBZFZEDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUYSrSpJRJZQxnQDOHLTiybbMxpOQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliYTNhOGMzLTcwZDUtNDkwNC1hNTc3LTIxYzgyOTMyYWI5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8USDANBgkqhkiG9w0BAQsFAAOCAQEAQVK/Uthc2kl19/cXwrCFsek4 mphhr9g3pG1q65kCpLVePjGPAncApOk0jJ1SxD0+yQVuRGlmJ8O7wSvvBC3auXWH wmqbKoJY7eyWy/rYw8xTf59YVWukp2iqE4TQr5xXc9YkYM2j2Ro4qDJrS6MwOD0m 6DgrR6pNw2O+HzWtOxOb2uVFB3TiiQygW4REb5XEcmGA7IX5pUNB0WWuIsxXH7Gp VzlS8p49HP5Z6OhfXKzCTKCiymbGMYv7aSZhJHRjoBi4px8c74z3sIRYucwe31Sl G7tGuwj9TnLQ2gRUjvHnsZnhqGLF/Ms4msE/d1Cjv/mIjoFsW6tfOrOLguedRw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:51 2025 by rpki-client