$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6f99cd0-3022-4afa-a318-4a4fb2aa0c7e.roa File: c6f99cd0-3022-4afa-a318-4a4fb2aa0c7e.roa (raw, json) Hash identifier: pTq8FVXa53jaeTbnaPgyUweLf3IY27PCc+WZtO30Kx0= Subject key identifier: 0C:0F:0B:AF:9E:DA:80:80:08:EF:5C:0F:92:01:99:A7:EB:14:02:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 493A55551EE57EAA05E5FFBD0F88EBE429FCF9AB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6f99cd0-3022-4afa-a318-4a4fb2aa0c7e.roa Signing time: Tue 08 Jul 2025 16:20:17 +0000 ROA not before: Tue 08 Jul 2025 16:20:17 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f36:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3a:55:55:1e:e5:7e:aa:05:e5:ff:bd:0f:88:eb:e4:29:fc:f9:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:20:17 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=9bf01544d943ff727d0c3648e3e812d5ea11cf781290031ba46308d060f5552f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:b8:79:6b:15:be:83:43:8a:fe:8e:4e:1e: 04:76:8c:bd:f6:d2:e0:52:40:d7:c1:bc:aa:fb:a8: f1:a7:be:0f:2f:2a:f3:da:03:21:fd:4e:46:fe:f7: 27:2d:39:90:61:93:8c:ce:ce:bd:9a:2b:eb:43:16: a6:46:5b:dc:94:ff:97:83:be:ad:c5:5b:3b:b2:e1: 15:52:04:94:a3:1f:14:ae:12:c4:47:e0:b2:3e:c9: 4c:db:7d:9c:16:f3:d1:60:48:99:10:83:21:0e:3e: c4:95:bb:90:f5:bd:fb:88:72:aa:c4:ef:a2:ad:62: 42:ad:2b:bd:11:06:e8:9b:77:4f:ff:fa:9b:76:6b: a7:ef:db:64:eb:ca:32:f0:f3:28:e5:9f:5c:c4:68: 25:e7:ea:1d:44:79:8d:32:3b:06:dd:4f:33:3a:25: b4:5e:fb:5f:f0:8a:36:21:9f:41:33:80:20:5f:5f: 9e:46:fa:4e:3e:41:7e:03:3e:cb:c8:d8:a8:1b:6b: c9:46:b5:cd:8b:7a:16:97:1e:ab:9b:af:f5:0b:3b: fc:c2:d4:c6:18:b2:40:51:a5:bd:cc:23:97:08:1f: 79:ee:e8:ed:ba:fa:89:86:4d:40:a0:de:62:f2:f4: 22:a7:4d:f0:09:ba:99:73:70:aa:33:a8:73:16:88: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0F:0B:AF:9E:DA:80:80:08:EF:5C:0F:92:01:99:A7:EB:14:02:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6f99cd0-3022-4afa-a318-4a4fb2aa0c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f36:e000::/40 Signature Algorithm: sha256WithRSAEncryption 0e:b5:90:ab:f5:07:47:57:58:18:bc:99:bf:c1:b3:ae:78:9a: 2a:e5:d4:3d:29:30:68:1b:12:ad:81:00:25:b7:15:7d:5c:2b: 9e:98:07:23:ef:67:b0:75:29:20:41:e3:69:37:ff:7c:d2:16: b7:35:e9:3b:63:90:a0:e4:57:d6:59:8d:9b:49:3c:89:0b:76: 8f:46:b5:d6:fe:b2:76:44:95:b3:ec:01:a4:51:98:dd:a7:c4: 83:6f:39:a7:d8:fe:8d:a0:55:c0:e5:c3:9b:f0:1d:2d:9a:94: 5b:6a:f3:19:2d:c3:15:08:0f:75:46:7f:17:96:bd:36:ea:3f: 7e:58:da:69:20:64:5d:94:13:da:3a:40:af:d5:25:d6:f2:e8: 9a:99:3b:79:a3:7a:9c:43:83:72:e8:a2:ea:77:80:f8:e4:35: 75:22:82:0d:3c:9f:07:ec:3a:23:a8:eb:45:36:3a:f0:3c:ef: eb:0b:65:e7:d3:07:39:21:53:1e:fe:64:a0:7d:51:1b:81:76: 16:31:d0:a2:90:9a:dd:69:a4:ad:68:4d:ca:a3:ee:f2:92:7d: 40:4d:48:27:d5:8f:d8:f2:a9:1d:86:27:a7:3a:96:88:35:7e: 89:71:f8:5b:51:ef:8b:02:44:ce:9b:f3:d9:0b:73:ca:37:8d: 75:81:13:b2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSTpVVR7lfqoF5f+9D4jr5Cn8+aswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYyMDE3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YmYwMTU0NGQ5NDNmZjcyN2QwYzM2NDhlM2U4MTJkNWVh MTFjZjc4MTI5MDAzMWJhNDYzMDhkMDYwZjU1NTJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiHbh5axW+g0OK/o5OHgR2jL320uBSQNfBvKr7qPGnvg8v KvPaAyH9Tkb+9yctOZBhk4zOzr2aK+tDFqZGW9yU/5eDvq3FWzuy4RVSBJSjHxSu EsRH4LI+yUzbfZwW89FgSJkQgyEOPsSVu5D1vfuIcqrE76KtYkKtK70RBuibd0// +pt2a6fv22TryjLw8yjln1zEaCXn6h1EeY0yOwbdTzM6JbRe+1/wijYhn0EzgCBf X55G+k4+QX4DPsvI2Kgba8lGtc2LehaXHqubr/ULO/zC1MYYskBRpb3MI5cIH3nu 6O26+omGTUCg3mLy9CKnTfAJuplzcKozqHMWiBenAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUDA8Lr57agIAI71wPkgGZp+sUAlMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M2Zjk5Y2QwLTMwMjItNGFmYS1hMzE4LTRhNGZiMmFhMGM3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB824DANBgkqhkiG9w0BAQsFAAOCAQEADrWQq/UHR1dYGLyZv8Gzrnia KuXUPSkwaBsSrYEAJbcVfVwrnpgHI+9nsHUpIEHjaTf/fNIWtzXpO2OQoORX1lmN m0k8iQt2j0a11v6ydkSVs+wBpFGY3afEg285p9j+jaBVwOXDm/AdLZqUW2rzGS3D FQgPdUZ/F5a9Nuo/fljaaSBkXZQT2jpAr9Ul1vLompk7eaN6nEODcuii6neA+OQ1 dSKCDTyfB+w6I6jrRTY68Dzv6wtl59MHOSFTHv5koH1RG4F2FjHQopCa3WmkrWhN yqPu8pJ9QE1IJ9WP2PKpHYYnpzqWiDV+iXH4W1HviwJEzpvz2QtzyjeNdYETsg== -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:56 2025 by rpki-client