$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07927291-3fc1-4e33-b87f-f263f130c6fc.roa File: 07927291-3fc1-4e33-b87f-f263f130c6fc.roa (raw, json) Hash identifier: yLJaQPwmLaRxvhdI7OgDt5FkZnJU/fDB3p4E0RL1rA0= Subject key identifier: 94:54:2C:9A:9E:A7:4C:C3:F0:C0:30:A6:48:EF:99:D9:43:4D:9D:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F94E46DE616872FCCA17D70F6B6A66D687B6E67 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07927291-3fc1-4e33-b87f-f263f130c6fc.roa Signing time: Mon 25 Aug 2025 17:07:17 +0000 ROA not before: Mon 25 Aug 2025 17:07:17 +0000 ROA not after: Mon 29 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:f400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:94:e4:6d:e6:16:87:2f:cc:a1:7d:70:f6:b6:a6:6d:68:7b:6e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 17:07:17 2025 GMT Not After : Sep 29 23:59:59 2025 GMT Subject: serialNumber=50e3ed572d50255afd004005b9be796adf44db72070ae350450cd5fa0398a696, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:34:e4:a4:b1:ee:2b:a5:55:6d:7a:60:9d: 79:f2:13:39:7b:bf:7d:f8:57:0f:b7:72:47:b6:2f: 1c:47:03:28:3f:d9:fa:d4:65:9f:44:cb:fd:a8:9c: d4:77:0e:5e:19:7e:b5:42:11:6d:21:0d:a2:b9:60: 08:5c:92:24:b2:a8:8e:5b:8f:93:41:06:03:ef:60: 37:dc:c9:dd:cd:07:e2:f9:d2:97:44:9e:b6:73:ac: 52:2c:72:4b:d8:02:bf:ef:9c:b9:14:ba:3a:79:b4: 4d:df:87:d2:2f:94:99:46:7a:22:68:a4:7a:ce:f9: 44:7c:40:4b:5d:74:01:1b:5f:b9:b6:34:09:2e:f2: 7a:40:c9:c5:07:d0:28:f8:66:e5:2f:41:45:6f:ba: d9:1a:56:32:21:1c:86:8b:5d:bf:a6:ba:00:6b:7f: f1:be:14:a1:a6:f0:ed:c0:e0:1f:17:dd:8c:2d:03: f4:76:73:56:51:8c:f8:45:2f:0f:48:99:70:c3:61: 80:61:74:15:cf:df:95:23:e0:47:92:d7:1b:77:6c: dd:33:8c:e9:4e:e1:dd:cf:77:99:ed:e5:77:c1:5c: f8:09:a2:05:63:46:f7:5e:b0:f4:f7:4b:cc:2d:df: 6d:1e:a0:4d:f0:db:c9:e0:7a:a1:f5:af:ea:2c:51: c2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:54:2C:9A:9E:A7:4C:C3:F0:C0:30:A6:48:EF:99:D9:43:4D:9D:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07927291-3fc1-4e33-b87f-f263f130c6fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:f400::/48 Signature Algorithm: sha256WithRSAEncryption c4:b8:73:6a:db:42:d3:07:50:75:36:ee:fa:47:ed:63:3f:bc: ca:cb:37:2e:1d:cc:e2:c3:d8:ba:6c:6b:8f:14:8c:22:a0:bc: 40:12:77:66:e5:d9:3f:55:fc:2e:cc:6d:5f:67:0c:13:03:88: 40:63:fc:34:29:32:6e:76:51:bc:6b:56:b2:37:75:79:92:19: 47:1c:72:9e:57:be:c6:00:c6:e8:ba:28:d6:67:ca:be:8f:6d: cd:f0:5b:fa:e1:95:7f:cf:07:f6:c4:1c:cb:64:85:0f:e9:0d: 04:a5:59:e1:99:b8:fa:03:0a:26:43:3b:28:62:5b:ed:e0:2b: ec:4a:6b:6b:e4:d3:cd:86:b1:cb:61:03:14:0e:f9:11:f5:65: d3:63:c8:70:2c:9c:29:ad:35:97:5a:d8:c6:41:8c:60:47:5b: 12:60:18:ed:39:6e:4d:f8:df:fb:2c:0c:74:1c:ab:45:fe:6a: 04:54:ce:ca:ee:51:48:b7:92:ad:c5:7a:c1:22:ed:d9:a5:57: 64:76:ea:19:d0:a5:55:f5:08:e1:70:fc:71:ba:92:35:d8:92: 16:2d:c7:fc:ab:74:a8:7e:ec:13:3c:b2:d4:24:6c:67:75:1f: c2:f8:77:13:fc:7e:a2:ea:97:1a:e8:35:1c:e2:68:62:ee:72: 4c:94:92:cf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUf5TkbeYWhy/MoX1w9rambWh7bmcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI1MTcwNzE3WhcNMjUwOTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGUzZWQ1NzJkNTAyNTVhZmQwMDQwMDViOWJlNzk2YWRm NDRkYjcyMDcwYWUzNTA0NTBjZDVmYTAzOThhNjk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5pTTkpLHuK6VVbXpgnXnyEzl7v334Vw+3cke2LxxHAyg/ 2frUZZ9Ey/2onNR3Dl4ZfrVCEW0hDaK5YAhckiSyqI5bj5NBBgPvYDfcyd3NB+L5 0pdEnrZzrFIsckvYAr/vnLkUujp5tE3fh9IvlJlGeiJopHrO+UR8QEtddAEbX7m2 NAku8npAycUH0Cj4ZuUvQUVvutkaVjIhHIaLXb+mugBrf/G+FKGm8O3A4B8X3Ywt A/R2c1ZRjPhFLw9ImXDDYYBhdBXP35Uj4EeS1xt3bN0zjOlO4d3Pd5nt5XfBXPgJ ogVjRvdesPT3S8wt320eoE3w28ngeqH1r+osUcKNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlFQsmp6nTMPwwDCmSO+Z2UNNnVMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA3OTI3MjkxLTNmYzEtNGUzMy1iODdmLWYyNjNmMTMwYzZmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/s9AAwDQYJKoZIhvcNAQELBQADggEBAMS4c2rbQtMHUHU27vpH7WM/ vMrLNy4dzOLD2Lpsa48UjCKgvEASd2bl2T9V/C7MbV9nDBMDiEBj/DQpMm52Ubxr VrI3dXmSGUcccp5XvsYAxui6KNZnyr6Pbc3wW/rhlX/PB/bEHMtkhQ/pDQSlWeGZ uPoDCiZDOyhiW+3gK+xKa2vk082GscthAxQO+RH1ZdNjyHAsnCmtNZda2MZBjGBH WxJgGO05bk343/ssDHQcq0X+agRUzsruUUi3kq3FesEi7dmlV2R26hnQpVX1COFw /HG6kjXYkhYtx/yrdKh+7BM8stQkbGd1H8L4dxP8fqLqlxroNRziaGLuckyUks8= -----END CERTIFICATE-----Generated at Sat Sep 6 16:54:30 2025 by rpki-client