$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/031ecc67-62fa-4582-a831-3b27fed946e0.roa File: 031ecc67-62fa-4582-a831-3b27fed946e0.roa (raw, json) Hash identifier: JKFR+o3N++4o46vF+csNHGVJQdnBxJFWP6nU3qhhguA= Subject key identifier: B8:C0:92:8C:D8:7C:57:60:FF:A8:24:BA:4F:A2:1E:81:87:43:6A:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16229FF921C73BF5876AD0F8B41BE2235F4528C1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/031ecc67-62fa-4582-a831-3b27fed946e0.roa Signing time: Mon 25 Aug 2025 16:52:09 +0000 ROA not before: Mon 25 Aug 2025 16:52:09 +0000 ROA not after: Mon 29 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffe:2c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:22:9f:f9:21:c7:3b:f5:87:6a:d0:f8:b4:1b:e2:23:5f:45:28:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 16:52:09 2025 GMT Not After : Sep 29 23:59:59 2025 GMT Subject: serialNumber=1c77df0f87357855f1ddfc7361d1af50a1a1bce093cded8ea159112e726696b5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:83:02:ee:3d:ca:c1:1a:ab:96:24:5a:8b: b0:fd:ac:d2:bd:b8:fa:6f:e0:2a:86:a2:65:ad:ce: 32:10:98:71:dc:f7:6e:a1:af:ef:4f:e3:4a:55:34: ca:ba:2f:e5:d0:76:52:e0:4f:a6:be:0b:ed:f6:62: f6:63:f8:97:c7:1b:9b:1d:2e:d6:2d:dc:ea:33:96: 84:57:e1:3c:37:5b:b6:e2:82:6b:c4:1b:7a:95:8d: ca:e6:9c:33:0a:70:f8:e1:36:5c:fc:8b:49:79:df: 81:9c:7a:a1:20:a8:96:3d:76:cb:cb:0b:b7:2e:2b: 62:3c:3a:9a:4c:34:30:5c:25:a7:03:06:34:71:7f: 41:4b:52:22:cd:d9:aa:46:f4:17:52:33:15:0b:c0: 68:b4:0c:d3:cd:de:1d:70:d9:70:cf:15:03:16:55: 61:05:fd:50:c7:25:87:b6:ca:ae:bc:38:f3:55:1a: f5:1f:63:80:79:b9:d7:06:c8:59:3a:40:73:98:d1: f0:a4:e0:bc:10:d7:bc:c9:6e:ea:4a:5a:29:de:21: 7a:df:9c:1b:e7:38:26:9c:f5:b2:d8:a5:ce:b5:41: aa:62:b3:83:c2:bd:41:b1:cd:5c:e1:e4:d7:31:21: ce:c9:4b:20:2a:57:8a:b3:e3:35:72:21:a0:20:9c: 26:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C0:92:8C:D8:7C:57:60:FF:A8:24:BA:4F:A2:1E:81:87:43:6A:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/031ecc67-62fa-4582-a831-3b27fed946e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffe:2c00::/40 Signature Algorithm: sha256WithRSAEncryption 3d:e7:6c:74:46:d6:59:99:6d:51:0c:2d:70:8d:6a:86:1a:05: 04:62:22:8b:3e:f4:72:1f:27:4b:6b:95:84:cb:0e:7b:85:fc: 27:de:3d:9f:43:79:8f:e6:d0:82:38:e0:5d:9c:80:3c:8e:d4: eb:2d:3b:b0:f7:05:98:7e:be:c7:2e:71:11:30:21:0d:45:ac: 84:a2:38:b8:80:80:c0:b6:24:33:ce:80:97:20:22:7d:32:f6: ab:d7:9b:ba:7f:46:1c:04:7c:e9:09:f0:b5:8b:8c:6a:d6:60: ff:75:44:02:59:29:19:f5:dd:f9:9d:d8:bf:4f:e0:d1:2c:32: 2d:40:55:3f:41:38:82:50:f1:d4:b0:60:d8:96:01:3b:3a:60: 6e:0b:85:ca:ac:e9:41:1f:ae:19:66:42:4b:27:3f:13:55:85: b9:cd:8f:3d:c6:2a:c2:c6:c7:d5:6b:f5:e7:d7:eb:6c:e4:76: 18:8f:21:48:f6:70:1a:a3:23:5f:bc:48:03:a5:16:89:f8:94: 5c:ce:0b:b7:8b:92:27:29:69:e8:0a:c5:5c:9c:92:d1:70:a6: c2:9e:5f:46:86:45:58:a9:a3:a7:2d:d4:5c:2c:7f:12:ce:cd: ce:85:68:7a:31:29:67:0b:83:e3:3e:ca:4f:87:f6:bb:39:e6: 7a:4d:a0:74 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFiKf+SHHO/WHatD4tBviI19FKMEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI1MTY1MjA5WhcNMjUwOTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzc3ZGYwZjg3MzU3ODU1ZjFkZGZjNzM2MWQxYWY1MGEx YTFiY2UwOTNjZGVkOGVhMTU5MTEyZTcyNjY5NmI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZSIMC7j3KwRqrliRai7D9rNK9uPpv4CqGomWtzjIQmHHc 926hr+9P40pVNMq6L+XQdlLgT6a+C+32YvZj+JfHG5sdLtYt3OozloRX4Tw3W7bi gmvEG3qVjcrmnDMKcPjhNlz8i0l534GceqEgqJY9dsvLC7cuK2I8OppMNDBcJacD BjRxf0FLUiLN2apG9BdSMxULwGi0DNPN3h1w2XDPFQMWVWEF/VDHJYe2yq68OPNV GvUfY4B5udcGyFk6QHOY0fCk4LwQ17zJbupKWineIXrfnBvnOCac9bLYpc61Qapi s4PCvUGxzVzh5NcxIc7JSyAqV4qz4zVyIaAgnCYFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUuMCSjNh8V2D/qCS6T6IegYdDajcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzMWVjYzY3LTYyZmEtNDU4Mi1hODMxLTNiMjdmZWQ5NDZlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/+LDANBgkqhkiG9w0BAQsFAAOCAQEAPedsdEbWWZltUQwtcI1qhhoF BGIiiz70ch8nS2uVhMsOe4X8J949n0N5j+bQgjjgXZyAPI7U6y07sPcFmH6+xy5x ETAhDUWshKI4uICAwLYkM86AlyAifTL2q9ebun9GHAR86QnwtYuMatZg/3VEAlkp GfXd+Z3Yv0/g0SwyLUBVP0E4glDx1LBg2JYBOzpgbguFyqzpQR+uGWZCSyc/E1WF uc2PPcYqwsbH1Wv159frbOR2GI8hSPZwGqMjX7xIA6UWifiUXM4Lt4uSJylp6ArF XJyS0XCmwp5fRoZFWKmjpy3UXCx/Es7NzoVoejEpZwuD4z7KT4f2uznmek2gdA== -----END CERTIFICATE-----Generated at Sat Sep 6 14:12:19 2025 by rpki-client