$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea87b9cf-cfcd-4e7b-bb24-077f3c834f30.roa File: ea87b9cf-cfcd-4e7b-bb24-077f3c834f30.roa (raw, json) Hash identifier: BrbL9Ue9GV4aUTHcg4jWVwk8USQmXKW+lP1Kz1TcUf4= Subject key identifier: 03:42:8E:CF:16:96:A8:9B:8F:44:CD:9A:45:A2:41:A0:52:86:B7:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13DD897D7AAFE53BC1FA9846394AB078D5206CDA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea87b9cf-cfcd-4e7b-bb24-077f3c834f30.roa Signing time: Tue 08 Jul 2025 16:11:13 +0000 ROA not before: Tue 08 Jul 2025 16:11:13 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:3440::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:dd:89:7d:7a:af:e5:3b:c1:fa:98:46:39:4a:b0:78:d5:20:6c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:11:13 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=60628ebc714e3f0bf24f82777bf74f4cb03e8fd5ca4421e74d6b3c687543ff04, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:73:9f:fe:ab:24:52:46:be:cd:fc:62:43:c2: 54:3c:02:e3:63:ca:6d:79:e8:f3:54:f5:6f:0f:d9: 7e:f5:e0:2c:cd:4c:de:2b:46:d4:9a:8d:26:34:da: 2d:17:bb:00:bb:f5:13:0e:94:2c:43:1b:28:c1:7e: a7:1b:ef:c0:fe:99:7b:03:48:cf:0d:de:39:d7:5a: 92:e6:a2:a7:4b:55:ca:b5:ba:3c:bd:43:f3:a2:10: 40:4c:50:13:4c:4d:49:85:97:82:e5:74:c3:96:4d: 9a:e8:cd:10:dc:e0:13:5c:0e:f8:a3:e0:5b:15:31: 0a:fe:b0:1e:22:e4:3f:58:ca:1e:0f:5f:f7:b6:1f: 57:62:03:0a:07:f1:55:9a:e6:21:76:82:e9:d9:95: 05:8c:f2:c9:65:81:54:14:5e:03:b7:22:9c:5a:18: a3:e3:e6:74:16:be:11:9e:72:dc:f9:5c:a6:86:9e: 78:ac:46:1e:af:13:92:c1:2f:fc:7d:0f:39:f2:b2: 5d:9a:2f:32:17:0a:70:1e:99:4f:42:65:bc:d8:53: 14:32:5d:83:af:9f:2e:48:17:2f:16:49:ec:10:cd: 7c:0f:e6:57:70:d6:35:4b:da:54:98:d2:83:80:8d: 51:19:35:fb:b2:96:63:7e:4d:8b:68:7e:03:0f:4c: 8e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:42:8E:CF:16:96:A8:9B:8F:44:CD:9A:45:A2:41:A0:52:86:B7:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea87b9cf-cfcd-4e7b-bb24-077f3c834f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:3440::/46 Signature Algorithm: sha256WithRSAEncryption c3:a8:60:2e:a3:01:f8:1d:64:24:d2:1d:8f:c9:b8:d5:fa:67: 30:a4:02:3c:ad:c6:56:96:0a:8a:fe:b3:99:29:c0:bb:83:71: 4b:64:e4:f0:4f:03:79:e8:9a:96:8f:d1:e2:dc:14:3f:af:2e: a3:e7:59:2e:cd:ae:2e:0c:eb:53:c0:20:ea:95:87:41:ea:44: e1:19:16:72:29:bd:01:36:98:41:44:e1:cb:00:ed:7a:f5:49: 2f:3e:79:ed:3f:76:6e:04:7f:db:85:4b:dd:71:19:2d:8c:a8: 37:20:35:c7:72:11:2b:65:9d:70:0b:a9:ca:76:0b:cd:11:22: 7b:af:45:b7:eb:d8:51:fd:f5:9e:f1:81:0f:c8:75:2f:77:50: f8:2e:c1:7f:e1:2d:6e:39:a8:7b:e1:dd:a1:49:f7:66:9b:15: 82:7f:3a:ef:7b:e1:5c:40:e1:58:26:65:9e:16:0f:fc:e1:d4: 3b:4d:65:76:12:fc:f3:23:35:c3:c0:81:a0:69:38:4e:05:79: 17:81:96:cc:35:4f:99:21:34:1c:6c:af:68:4a:de:9d:fc:13: 18:83:61:cc:ec:04:c3:46:32:b6:c1:fa:1f:86:dc:0b:00:07: 5a:0f:de:b4:de:59:2d:2a:14:32:83:76:54:d6:be:65:85:bc: f7:84:57:24 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE92JfXqv5TvB+phGOUqweNUgbNowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYxMTEzWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDYyOGViYzcxNGUzZjBiZjI0ZjgyNzc3YmY3NGY0Y2Iw M2U4ZmQ1Y2E0NDIxZTc0ZDZiM2M2ODc1NDNmZjA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbc5/+qyRSRr7N/GJDwlQ8AuNjym156PNU9W8P2X714CzN TN4rRtSajSY02i0XuwC79RMOlCxDGyjBfqcb78D+mXsDSM8N3jnXWpLmoqdLVcq1 ujy9Q/OiEEBMUBNMTUmFl4LldMOWTZrozRDc4BNcDvij4FsVMQr+sB4i5D9Yyh4P X/e2H1diAwoH8VWa5iF2gunZlQWM8sllgVQUXgO3IpxaGKPj5nQWvhGectz5XKaG nnisRh6vE5LBL/x9Dznysl2aLzIXCnAemU9CZbzYUxQyXYOvny5IFy8WSewQzXwP 5ldw1jVL2lSY0oOAjVEZNfuylmN+TYtofgMPTI73AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUA0KOzxaWqJuPRM2aRaJBoFKGt3EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VhODdiOWNmLWNmY2QtNGU3Yi1iYjI0LTA3N2YzYzgzNGYzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3NEAwDQYJKoZIhvcNAQELBQADggEBAMOoYC6jAfgdZCTSHY/JuNX6 ZzCkAjytxlaWCor+s5kpwLuDcUtk5PBPA3nompaP0eLcFD+vLqPnWS7Nri4M61PA IOqVh0HqROEZFnIpvQE2mEFE4csA7Xr1SS8+ee0/dm4Ef9uFS91xGS2MqDcgNcdy EStlnXALqcp2C80RInuvRbfr2FH99Z7xgQ/IdS93UPguwX/hLW45qHvh3aFJ92ab FYJ/Ou974VxA4VgmZZ4WD/zh1DtNZXYS/PMjNcPAgaBpOE4FeReBlsw1T5khNBxs r2hK3p38ExiDYczsBMNGMrbB+h+G3AsAB1oP3rTeWS0qFDKDdlTWvmWFvPeEVyQ= -----END CERTIFICATE-----Generated at Mon Jul 21 18:05:32 2025 by rpki-client