$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fad9b51e-2366-4de0-ba27-7ee4fdbaab2c.roa File: fad9b51e-2366-4de0-ba27-7ee4fdbaab2c.roa (raw, json) Hash identifier: zfZcCUhbhibXVDZ8wcT3sRgbVa0EMjK513g8LdfIAoY= Subject key identifier: 22:A1:86:9B:D4:78:04:02:89:8A:33:62:5A:FB:44:42:47:C3:1C:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3FAC9F96A74D74477835D6041B55D88CA8E825A6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fad9b51e-2366-4de0-ba27-7ee4fdbaab2c.roa Signing time: Tue 08 Jul 2025 16:50:13 +0000 ROA not before: Tue 08 Jul 2025 16:50:13 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1a:4400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ac:9f:96:a7:4d:74:47:78:35:d6:04:1b:55:d8:8c:a8:e8:25:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:50:13 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=fb72e9fe916816398f06f4bb762726ccf9a899c786f74ee7dd2d9949d7286311, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:75:f1:57:d9:7f:72:51:12:e2:ab:e3:11: 8a:1c:b3:af:be:cb:4f:0a:91:63:20:74:55:f8:60: 61:0e:dc:5c:f8:42:fb:a9:e1:65:a3:a5:04:04:d3: 24:83:28:1c:da:58:80:b9:0b:e8:47:16:32:82:d7: a5:38:b3:07:d5:f0:6b:8e:d3:26:45:53:e7:f9:fa: 92:fb:77:96:0c:0d:b7:d3:25:80:57:e9:dd:00:23: 5d:fc:82:85:7e:5a:ab:77:74:2f:4e:2f:7d:88:05: 32:fc:e7:d5:8c:2e:17:8e:5b:20:a2:00:26:b7:c9: b7:78:a2:f7:43:73:bb:e7:75:da:4a:5d:7b:0d:c1: a6:d9:7e:f4:72:4d:6a:0d:ff:53:df:4d:c7:cc:01: 07:16:26:93:4d:9e:69:d4:5f:d0:34:79:9b:f4:a6: 2e:87:32:51:27:5d:5c:a6:01:d2:5c:c6:b5:14:57: 7d:9a:14:93:04:bf:de:fe:4c:ed:67:2f:59:e4:5a: 0e:65:89:39:b5:f1:47:67:e1:10:1e:5c:17:27:ba: 12:23:80:f2:43:24:8b:0b:af:0b:9c:d6:54:80:01: f1:b8:18:57:ef:ad:18:c2:57:e4:8a:de:7c:c7:88: ea:cd:fb:a3:90:6c:59:45:d8:8f:8c:23:68:62:4b: e7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A1:86:9B:D4:78:04:02:89:8A:33:62:5A:FB:44:42:47:C3:1C:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fad9b51e-2366-4de0-ba27-7ee4fdbaab2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1a:4400::/38 Signature Algorithm: sha256WithRSAEncryption 5d:4d:d1:21:b7:26:3c:cc:5b:d1:17:3c:b6:8e:46:8c:9a:5d: bf:95:5c:a7:7a:c6:5f:72:5b:a0:0e:1f:21:cf:c1:06:b8:e3: f7:fd:05:44:14:cd:6f:31:6a:1d:d0:87:0b:7c:d2:70:27:21: 69:c2:66:d1:39:35:9d:5d:b1:02:e4:40:e3:65:9b:d3:85:6b: 93:49:2a:c0:0c:28:1e:07:4a:08:53:4b:ca:54:9c:48:8c:10: d4:1a:d9:cf:8e:50:94:57:04:c2:29:cb:a2:02:e3:53:08:01: af:f5:57:98:2b:fe:ac:ef:d1:ad:56:55:31:ed:22:7c:59:d0: 88:b9:9b:32:9d:13:48:02:ab:b8:89:9a:88:f8:09:c2:94:df: 88:bb:62:5c:17:3f:4b:be:99:5b:4e:e2:00:0d:a9:52:4d:0d: 2e:50:d3:27:19:f2:30:c2:c3:61:ce:24:c9:c0:93:52:e6:28: c8:65:31:33:4b:9f:08:56:f2:cd:c8:a9:b2:6a:29:93:39:6b: 37:92:1c:2a:27:9c:6b:0c:d6:3e:77:d0:91:70:6f:92:55:3e: 8f:cf:40:60:f2:5e:48:86:67:02:e5:57:61:6c:b6:1d:d5:b3: fa:2d:d6:fd:09:5e:8e:d0:5b:93:9e:ec:4e:7a:ce:42:e5:af: 78:dd:6e:60 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUP6yflqdNdEd4NdYEG1XYjKjoJaYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTY1MDEzWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjcyZTlmZTkxNjgxNjM5OGYwNmY0YmI3NjI3MjZjY2Y5 YTg5OWM3ODZmNzRlZTdkZDJkOTk0OWQ3Mjg2MzExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCldXXxV9l/clES4qvjEYocs6++y08KkWMgdFX4YGEO3Fz4 Qvup4WWjpQQE0ySDKBzaWIC5C+hHFjKC16U4swfV8GuO0yZFU+f5+pL7d5YMDbfT JYBX6d0AI138goV+Wqt3dC9OL32IBTL859WMLheOWyCiACa3ybd4ovdDc7vnddpK XXsNwabZfvRyTWoN/1PfTcfMAQcWJpNNnmnUX9A0eZv0pi6HMlEnXVymAdJcxrUU V32aFJMEv97+TO1nL1nkWg5liTm18Udn4RAeXBcnuhIjgPJDJIsLrwuc1lSAAfG4 GFfvrRjCV+SK3nzHiOrN+6OQbFlF2I+MI2hiS+fjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUIqGGm9R4BAKJijNiWvtEQkfDHBowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhZDliNTFlLTIzNjYtNGRlMC1iYTI3LTdlZTRmZGJhYWIyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8aRDANBgkqhkiG9w0BAQsFAAOCAQEAXU3RIbcmPMxb0Rc8to5GjJpd v5Vcp3rGX3JboA4fIc/BBrjj9/0FRBTNbzFqHdCHC3zScCchacJm0Tk1nV2xAuRA 42Wb04Vrk0kqwAwoHgdKCFNLylScSIwQ1BrZz45QlFcEwinLogLjUwgBr/VXmCv+ rO/RrVZVMe0ifFnQiLmbMp0TSAKruImaiPgJwpTfiLtiXBc/S76ZW07iAA2pUk0N LlDTJxnyMMLDYc4kycCTUuYoyGUxM0ufCFbyzcipsmopkzlrN5IcKiecawzWPnfQ kXBvklU+j89AYPJeSIZnAuVXYWy2HdWz+i3W/QlejtBbk57sTnrOQuWveN1uYA== -----END CERTIFICATE-----Generated at Mon Jul 21 18:05:57 2025 by rpki-client