$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5c3687f-79b7-4dda-a7f1-7099e551c04e.roa File: d5c3687f-79b7-4dda-a7f1-7099e551c04e.roa (raw, json) Hash identifier: wOoDriHH6WdoyzmodNDnDFoJr2qjDV+kHQZDa6qORUM= Subject key identifier: 25:9C:04:6F:DB:CA:A2:1C:1C:7C:7F:59:BB:E3:8F:59:31:42:83:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5ABF776A25BC0FA649AF87F8F50AB4AAA6C92117 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5c3687f-79b7-4dda-a7f1-7099e551c04e.roa Signing time: Sat 19 Jul 2025 00:20:21 +0000 ROA not before: Sat 19 Jul 2025 00:20:21 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f32:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:bf:77:6a:25:bc:0f:a6:49:af:87:f8:f5:0a:b4:aa:a6:c9:21:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:20:21 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=24730c352a6e8cc1c494cbf90a187a030299274ad7b3ee6b53d3b8a101f86e87, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:12:8f:a6:ed:1d:09:22:be:27:6c:9f:ed: cb:50:d3:64:12:86:2c:88:fd:bc:0e:c1:3e:0a:73: 59:96:21:a7:47:39:22:53:cf:9c:cc:2e:6c:f0:b0: 5b:1d:fa:0e:d8:a2:6e:fd:b9:9e:ec:ea:f3:cc:5c: e6:2f:02:8e:14:eb:64:d8:fa:84:5a:99:07:dc:1a: 18:89:40:aa:56:0b:f0:86:a9:99:3e:40:dc:ef:a8: cb:a4:af:f3:77:2e:d7:16:e9:6c:7e:22:56:17:de: 5a:fc:11:05:27:bd:a9:da:04:34:a8:25:85:f8:f8: 54:18:7a:10:33:4a:7a:f7:11:d3:4e:66:74:cd:82: fa:b0:cf:8e:c8:33:81:81:da:62:08:59:de:bd:67: fd:e1:81:f4:69:61:30:7c:9b:89:93:4b:89:0f:85: 70:b0:22:9f:99:9f:bc:39:17:4b:6c:5f:f3:b9:8b: c9:68:4a:d2:5a:3d:2a:52:c4:d7:28:86:17:06:28: 70:47:8d:ee:a7:c3:2b:a5:94:af:ca:c6:1b:1e:e7: 1a:db:5d:05:b9:50:09:0e:85:42:45:cf:c4:1c:43: 8f:18:ba:f9:6c:bc:e4:01:34:78:07:8b:fb:9d:a7: f9:49:0a:b7:4b:21:5d:cd:66:9d:9e:c5:e3:51:e7: 91:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9C:04:6F:DB:CA:A2:1C:1C:7C:7F:59:BB:E3:8F:59:31:42:83:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5c3687f-79b7-4dda-a7f1-7099e551c04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32:1000::/40 Signature Algorithm: sha256WithRSAEncryption be:a7:9d:0a:2b:70:e5:58:d2:40:28:c3:45:0f:67:75:e0:ef: 4b:9d:e7:d2:04:4f:68:e0:67:a8:a8:1e:16:4c:60:d5:24:c5: 58:ec:24:75:3f:cc:06:12:32:d1:80:66:80:4a:3f:0d:9e:50: be:0a:db:a2:6d:a3:42:b2:c1:da:b3:0e:3b:3b:78:ef:9b:8f: 8a:19:93:27:b4:5d:01:62:f7:fd:7c:82:f9:cf:96:9b:b0:25: 1e:a5:12:76:71:16:5e:67:87:54:b6:ff:79:dc:92:9f:0e:98: d7:07:23:f2:c6:e4:a9:2c:56:f9:ab:ed:e6:f1:d2:d3:28:26: 63:e9:fa:e1:4d:0c:8f:70:ec:ca:86:ac:75:34:65:0d:7c:e0: 26:cf:f1:c6:d1:91:2b:28:a3:56:0a:e7:4f:00:1a:d1:5d:ea: 8a:18:7a:0b:62:36:48:c3:95:2d:04:69:be:e2:e8:8a:99:b0: 27:a8:93:25:d7:90:9e:10:72:8f:ff:c5:e7:70:7e:aa:c6:8e: 96:2f:78:7e:f2:b5:28:b0:24:1c:79:97:f2:ca:f7:81:ac:e3: 9e:c3:a7:d4:a5:d6:57:88:02:7c:ec:5d:9a:7a:c3:0e:f5:a2: 65:9a:3b:0a:6b:dc:4c:dd:e6:ee:4e:47:b0:4f:6f:06:a5:3f: a7:93:98:10 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWr93aiW8D6ZJr4f49Qq0qqbJIRcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAyMDIxWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDczMGMzNTJhNmU4Y2MxYzQ5NGNiZjkwYTE4N2EwMzAy OTkyNzRhZDdiM2VlNmI1M2QzYjhhMTAxZjg2ZTg3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFoRKPpu0dCSK+J2yf7ctQ02QShiyI/bwOwT4Kc1mWIadH OSJTz5zMLmzwsFsd+g7Yom79uZ7s6vPMXOYvAo4U62TY+oRamQfcGhiJQKpWC/CG qZk+QNzvqMukr/N3LtcW6Wx+IlYX3lr8EQUnvanaBDSoJYX4+FQYehAzSnr3EdNO ZnTNgvqwz47IM4GB2mIIWd69Z/3hgfRpYTB8m4mTS4kPhXCwIp+Zn7w5F0tsX/O5 i8loStJaPSpSxNcohhcGKHBHje6nwyullK/Kxhse5xrbXQW5UAkOhUJFz8QcQ48Y uvlsvOQBNHgHi/udp/lJCrdLIV3NZp2exeNR55G9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJZwEb9vKohwcfH9Zu+OPWTFCg90wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q1YzM2ODdmLTc5YjctNGRkYS1hN2YxLTcwOTllNTUxYzA0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8yEDANBgkqhkiG9w0BAQsFAAOCAQEAvqedCitw5VjSQCjDRQ9ndeDv S53n0gRPaOBnqKgeFkxg1STFWOwkdT/MBhIy0YBmgEo/DZ5Qvgrbom2jQrLB2rMO Ozt475uPihmTJ7RdAWL3/XyC+c+Wm7AlHqUSdnEWXmeHVLb/edySnw6Y1wcj8sbk qSxW+avt5vHS0ygmY+n64U0Mj3DsyoasdTRlDXzgJs/xxtGRKyijVgrnTwAa0V3q ihh6C2I2SMOVLQRpvuLoipmwJ6iTJdeQnhByj//F53B+qsaOli94fvK1KLAkHHmX 8sr3gazjnsOn1KXWV4gCfOxdmnrDDvWiZZo7CmvcTN3m7k5HsE9vBqU/p5OYEA== -----END CERTIFICATE-----Generated at Tue Jul 22 04:28:43 2025 by rpki-client