$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06a31a62-cfe6-483a-ba03-cc53daa6cae8.roa File: 06a31a62-cfe6-483a-ba03-cc53daa6cae8.roa (raw, json) Hash identifier: Fh+au9fzxfaZNYu3ITgc8NYosfNSpffyMwKh7hQToJM= Subject key identifier: BF:7E:C8:8F:DA:01:54:76:51:D7:6F:E4:A2:DD:72:B1:76:DF:50:2E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22771197DE8BB706BCFF87A223094DC8EF08164A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06a31a62-cfe6-483a-ba03-cc53daa6cae8.roa Signing time: Mon 25 Aug 2025 16:52:18 +0000 ROA not before: Mon 25 Aug 2025 16:52:18 +0000 ROA not after: Mon 29 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:77:11:97:de:8b:b7:06:bc:ff:87:a2:23:09:4d:c8:ef:08:16:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 16:52:18 2025 GMT Not After : Sep 29 23:59:59 2025 GMT Subject: serialNumber=34c8433944d453a45c27aba607d960e9dfaaf0b29648d09e250091d19e745030, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:43:ce:93:ec:83:c3:30:1d:4f:f2:88:aa:2e: 5d:d7:74:23:40:0c:01:43:05:6d:d2:c7:af:2e:31: 6b:31:97:7d:fe:9b:fd:aa:42:01:96:45:b7:fd:73: 6e:fc:6d:c3:fc:aa:b8:19:11:a6:b1:f0:17:da:b3: b5:4b:f9:d4:3a:86:7b:43:5a:08:ca:4d:01:e4:81: ab:71:25:ed:ed:d5:c5:73:1c:6e:0d:91:23:28:b5: b4:ce:2b:dc:0a:9f:a2:73:03:4a:cf:49:39:2f:6c: f7:03:82:ef:5f:3f:2d:d7:0b:52:2c:e1:6e:4c:49: 24:9f:a8:ab:ef:3b:0d:38:9b:74:43:3d:53:4e:7f: d4:a0:fb:b3:66:a7:6d:a5:f8:b7:b9:4c:90:cd:1b: 49:d2:4d:c2:06:41:3a:04:40:04:aa:0f:13:d4:e9: 03:c1:9c:ea:d3:99:b3:ff:8e:20:ea:2d:65:5d:55: 18:71:e8:b9:09:7b:7d:75:2f:93:8a:ba:c5:c7:a7: 95:4d:a7:9a:f5:2b:7f:e3:79:d8:3b:4d:b1:6e:6f: d0:7e:0c:06:35:78:c3:76:0e:d9:1d:36:3e:ca:e1: 4c:a4:f7:b1:f8:2d:e3:83:3d:c0:fb:f0:84:1e:ac: 46:12:b4:c4:5a:9b:87:26:8d:43:1a:8f:f2:a9:17: 98:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7E:C8:8F:DA:01:54:76:51:D7:6F:E4:A2:DD:72:B1:76:DF:50:2E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06a31a62-cfe6-483a-ba03-cc53daa6cae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:3000::/48 Signature Algorithm: sha256WithRSAEncryption 7b:e6:be:a3:fe:e1:30:51:b0:d1:70:54:81:4c:3f:03:ec:20: 3c:da:1b:39:21:e1:be:30:f9:8d:1e:e0:96:ec:29:ca:03:c9: 21:dd:c2:08:ed:3f:0d:04:07:dd:f1:94:55:d5:82:5b:94:f2: de:ae:a2:93:b9:40:ec:81:ad:27:66:69:a4:0e:c3:7a:9c:b5: 29:7c:43:d1:d9:ff:43:63:be:9a:52:bf:41:18:87:ba:ca:1b: e4:ad:cc:7c:f7:d1:9f:37:cc:0d:d7:ef:d0:b1:0c:eb:be:4e: c4:3c:f9:a9:37:37:83:09:b7:87:32:80:db:30:7d:9a:b6:72: b5:79:cb:8d:f9:bf:83:51:d6:78:16:ee:a2:e3:04:38:5b:42: 33:bc:9b:90:15:d9:bb:48:9e:f7:47:f3:7a:08:67:cb:05:2a: f5:2c:1c:17:31:3f:2a:45:65:80:14:2f:3f:c2:b3:b1:fd:7b: de:44:17:6c:42:41:26:0d:b5:c7:48:0a:7a:bf:f8:66:07:42: 18:19:c1:ed:78:90:ec:09:37:98:4f:21:32:c0:61:f0:21:58: da:10:9d:9f:3f:30:ca:eb:95:1c:e0:3f:02:b5:a7:31:f4:23: a9:cb:41:fd:9f:c6:3c:19:6f:a7:cf:24:e4:13:43:80:aa:e9: aa:9e:83:2a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIncRl96Ltwa8/4eiIwlNyO8IFkowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI1MTY1MjE4WhcNMjUwOTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGM4NDMzOTQ0ZDQ1M2E0NWMyN2FiYTYwN2Q5NjBlOWRm YWFmMGIyOTY0OGQwOWUyNTAwOTFkMTllNzQ1MDMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCQ86T7IPDMB1P8oiqLl3XdCNADAFDBW3Sx68uMWsxl33+ m/2qQgGWRbf9c278bcP8qrgZEaax8Bfas7VL+dQ6hntDWgjKTQHkgatxJe3t1cVz HG4NkSMotbTOK9wKn6JzA0rPSTkvbPcDgu9fPy3XC1Is4W5MSSSfqKvvOw04m3RD PVNOf9Sg+7Nmp22l+Le5TJDNG0nSTcIGQToEQASqDxPU6QPBnOrTmbP/jiDqLWVd VRhx6LkJe311L5OKusXHp5VNp5r1K3/jedg7TbFub9B+DAY1eMN2DtkdNj7K4Uyk 97H4LeODPcD78IQerEYStMRam4cmjUMaj/KpF5hLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUv37Ij9oBVHZR12/kot1ysXbfUC4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2YTMxYTYyLWNmZTYtNDgzYS1iYTAzLWNjNTNkYWE2Y2FlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sMAAwDQYJKoZIhvcNAQELBQADggEBAHvmvqP+4TBRsNFwVIFMPwPs IDzaGzkh4b4w+Y0e4JbsKcoDySHdwgjtPw0EB93xlFXVgluU8t6uopO5QOyBrSdm aaQOw3qctSl8Q9HZ/0NjvppSv0EYh7rKG+StzHz30Z83zA3X79CxDOu+TsQ8+ak3 N4MJt4cygNswfZq2crV5y435v4NR1ngW7qLjBDhbQjO8m5AV2btInvdH83oIZ8sF KvUsHBcxPypFZYAULz/Cs7H9e95EF2xCQSYNtcdICnq/+GYHQhgZwe14kOwJN5hP ITLAYfAhWNoQnZ8/MMrrlRzgPwK1pzH0I6nLQf2fxjwZb6fPJOQTQ4Cq6aqegyo= -----END CERTIFICATE-----Generated at Sat Sep 6 16:54:31 2025 by rpki-client