$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e1adddc-4622-4699-97d5-c55279fbf04a.roa File: 5e1adddc-4622-4699-97d5-c55279fbf04a.roa (raw, json) Hash identifier: FbIulpIbQaqKtred0CrKjeC+TpItpKEKMjiAy1ewI/I= Subject key identifier: 35:E1:9B:5D:27:DB:31:29:EE:D5:BE:14:9E:A7:3B:7C:49:31:E4:C8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F63CC9E9C6825B35B92BFE107B2D4A9E0B11186 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e1adddc-4622-4699-97d5-c55279fbf04a.roa Signing time: Wed 23 Jul 2025 00:31:49 +0000 ROA not before: Wed 23 Jul 2025 00:31:49 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:41a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:63:cc:9e:9c:68:25:b3:5b:92:bf:e1:07:b2:d4:a9:e0:b1:11:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:31:49 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=341f45cd269ab09ea495e78b90c2171b0c9a50db52886c465fd7d75d78b6841a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:21:de:ba:97:b4:4b:a1:5e:05:5a:fe:8d:a2: 7f:bf:1c:65:45:47:8d:18:d3:45:52:7b:46:60:de: 05:3d:b9:7e:71:e1:19:9b:83:7b:55:d0:39:14:f1: 98:be:8b:fb:b0:46:93:0d:db:74:3a:18:f5:98:e0: 36:53:1e:63:56:20:12:cf:ee:9c:ae:fe:c9:61:f8: da:4b:11:36:12:6a:22:e8:69:4d:ef:00:7b:91:77: 03:43:d9:32:39:3a:7e:6f:fc:69:f7:57:d2:af:09: de:6e:20:41:84:9f:21:c1:93:d6:54:f0:cf:26:01: b6:53:7b:f2:5e:d0:8f:30:e8:ce:b7:f4:a5:22:2b: fa:1f:f3:1c:c3:3f:ae:7b:86:bb:62:6c:e1:e5:04: ca:2e:96:c1:b5:fa:09:90:4e:9b:7a:5d:06:71:34: eb:06:07:60:96:50:9b:71:a3:7c:91:74:37:d2:fb: 4a:a2:ae:98:fc:42:56:5d:59:a3:7e:ae:b2:fe:3d: 9f:4f:da:c0:82:2f:4c:01:3b:6e:b5:ea:3e:0c:dc: 72:5e:04:0c:ee:d4:83:76:49:2b:e0:fb:b9:0e:66: fa:5f:e4:62:39:ca:9f:26:16:ab:e1:64:ba:bc:62: 6d:c8:b8:6e:2f:6a:3f:ee:fd:c5:eb:a6:6a:c4:2c: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E1:9B:5D:27:DB:31:29:EE:D5:BE:14:9E:A7:3B:7C:49:31:E4:C8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e1adddc-4622-4699-97d5-c55279fbf04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:41a0::/48 Signature Algorithm: sha256WithRSAEncryption 43:07:0f:3f:d2:ce:49:a0:fe:77:86:31:fd:19:72:ef:c0:e4: dd:34:2e:a3:69:b7:4e:18:89:f0:c1:aa:4c:9e:34:d3:5b:5a: 76:95:a3:84:42:19:eb:95:4a:8d:ea:9e:de:7b:bd:a1:2a:a0: 18:1f:d4:1f:01:92:c3:bd:df:87:9f:aa:1e:f3:29:aa:f2:e8: a1:b9:49:54:4e:50:af:f8:89:73:2e:d3:9d:7c:94:77:cf:05: e8:bf:dc:91:80:ed:91:1a:30:d6:e5:28:91:2c:2e:7b:e9:4a: da:aa:a6:cc:77:5f:a2:d8:f3:fa:f0:29:cc:0f:ed:c1:1e:64: 5e:d5:95:60:3f:33:68:53:f4:e6:ca:0b:b9:db:4e:fd:58:49: 0c:f5:89:db:c8:35:77:c8:4a:1a:1d:71:74:10:e9:d9:6c:a6: 90:8f:19:b0:ea:1a:bb:57:03:44:59:58:7e:55:0d:fa:65:c8: 08:23:1f:35:df:52:04:43:b7:ab:36:b0:c8:02:09:1d:22:dc: eb:77:4c:89:91:9d:3a:d4:81:56:ad:ee:eb:13:9a:c5:2f:d6: 2c:b3:85:72:b8:fa:cc:06:02:be:f5:4b:6f:46:de:a0:f2:4f: d5:07:61:10:8a:e9:34:ec:1f:ef:6d:e1:8f:3e:2d:82:57:61: 12:bb:8c:84 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUD2PMnpxoJbNbkr/hB7LUqeCxEYYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDAzMTQ5WhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDFmNDVjZDI2OWFiMDllYTQ5NWU3OGI5MGMyMTcxYjBj OWE1MGRiNTI4ODZjNDY1ZmQ3ZDc1ZDc4YjY4NDFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhId66l7RLoV4FWv6Non+/HGVFR40Y00VSe0Zg3gU9uX5x 4Rmbg3tV0DkU8Zi+i/uwRpMN23Q6GPWY4DZTHmNWIBLP7pyu/slh+NpLETYSaiLo aU3vAHuRdwND2TI5On5v/Gn3V9KvCd5uIEGEnyHBk9ZU8M8mAbZTe/Je0I8w6M63 9KUiK/of8xzDP657hrtibOHlBMoulsG1+gmQTpt6XQZxNOsGB2CWUJtxo3yRdDfS +0qirpj8QlZdWaN+rrL+PZ9P2sCCL0wBO2616j4M3HJeBAzu1IN2SSvg+7kOZvpf 5GI5yp8mFqvhZLq8Ym3IuG4vaj/u/cXrpmrELLblAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNeGbXSfbMSnu1b4Unqc7fEkx5MgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVlMWFkZGRjLTQ2MjItNDY5OS05N2Q1LWM1NTI3OWZiZjA0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AQaAwDQYJKoZIhvcNAQELBQADggEBAEMHDz/Szkmg/neGMf0Zcu/A 5N00LqNpt04YifDBqkyeNNNbWnaVo4RCGeuVSo3qnt57vaEqoBgf1B8BksO934ef qh7zKary6KG5SVROUK/4iXMu0518lHfPBei/3JGA7ZEaMNblKJEsLnvpStqqpsx3 X6LY8/rwKcwP7cEeZF7VlWA/M2hT9ObKC7nbTv1YSQz1idvINXfIShodcXQQ6dls ppCPGbDqGrtXA0RZWH5VDfplyAgjHzXfUgRDt6s2sMgCCR0i3Ot3TImRnTrUgVat 7usTmsUv1iyzhXK4+swGAr71S29G3qDyT9UHYRCK6TTsH+9t4Y8+LYJXYRK7jIQ= -----END CERTIFICATE-----Generated at Thu Jul 31 01:09:45 2025 by rpki-client