$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f7700a2-6a4d-4cc9-9b7d-83aa88a7d298.roa File: 8f7700a2-6a4d-4cc9-9b7d-83aa88a7d298.roa (raw, json) Hash identifier: B0qKyIK2PNCFiRkHMAZcIX1Phqny/aE5a4JwyUDlN2o= Subject key identifier: 8E:9F:DC:C7:3F:32:E9:70:F7:A1:B1:3B:96:1F:49:51:58:EB:57:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C48DEF4D353CBA5C7C4A40B649767CA8857B15A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f7700a2-6a4d-4cc9-9b7d-83aa88a7d298.roa Signing time: Tue 26 Aug 2025 16:41:26 +0000 ROA not before: Tue 26 Aug 2025 16:41:26 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:34c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:48:de:f4:d3:53:cb:a5:c7:c4:a4:0b:64:97:67:ca:88:57:b1:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:41:26 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=1c4441375cca304725ca44e538e344ba27ef3d7c9e9e875bf362c386dbaf3950, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:10:dc:b9:04:93:25:88:b5:24:ee:f4:45:9b: 89:cb:ee:ab:17:51:6a:df:c3:c8:ea:3e:65:55:75: 0d:5e:16:4a:95:ea:5c:e2:cd:43:d7:e2:6d:5a:cd: 01:06:71:28:4d:24:fd:2e:e6:d3:5f:47:01:15:2e: d9:61:4d:ed:25:7d:49:d2:a0:ac:fb:27:8f:01:12: eb:40:06:3f:f5:3a:55:bd:97:40:fd:85:f7:45:4a: 06:ca:d5:c6:a5:3c:52:7e:30:5e:50:44:23:01:7a: 38:a6:6c:44:d5:88:7a:ff:03:e4:54:85:6b:62:eb: f1:2f:fe:93:02:2b:40:62:88:45:93:79:3a:e8:b9: 24:ae:b5:a9:4e:dc:39:8f:53:0d:3b:52:64:e8:83: 67:3d:3b:49:e6:3a:f6:9b:3b:f8:d5:ab:e9:46:01: bb:e1:11:23:db:c2:43:91:a1:9a:d4:4d:18:57:02: 7f:fe:ac:15:31:3d:8b:41:61:18:19:6b:b9:4f:65: e2:90:70:3c:cd:78:b8:83:8e:04:53:cc:96:33:c3: d1:f3:3e:34:ed:e3:94:e9:0a:22:0b:29:01:3f:20: 65:0b:d2:7e:1f:cb:cd:65:2c:a2:1a:0c:d3:a0:7b: 9f:67:f9:37:b3:42:9d:22:b6:9d:64:ef:46:26:8f: e1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9F:DC:C7:3F:32:E9:70:F7:A1:B1:3B:96:1F:49:51:58:EB:57:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f7700a2-6a4d-4cc9-9b7d-83aa88a7d298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:34c0::/48 Signature Algorithm: sha256WithRSAEncryption be:eb:8e:c8:59:9e:ce:a1:ec:ce:4c:32:48:7d:67:57:da:ec: 08:c5:10:a5:8a:96:c2:b2:2a:45:9b:ba:ee:e3:04:8b:c7:a6: 24:89:30:73:a4:c0:8b:d0:ec:50:1f:f7:e6:18:51:17:dd:bb: 58:78:bf:88:eb:18:d8:48:f4:ab:4e:73:b9:9a:70:06:ea:cd: 80:9c:c8:13:a1:1a:e4:9f:97:a4:fc:d1:70:19:dc:6f:7b:b9: 66:ee:14:31:b9:f1:87:2b:9b:95:2f:e4:30:ad:b0:b2:37:2d: 6d:4d:ce:91:bb:b2:ee:69:f8:39:3c:65:1a:a5:04:07:6f:f5: d5:68:02:6e:ae:05:7b:d0:45:da:8e:36:e9:14:5d:ce:fe:d7: 86:20:07:78:54:09:f9:ba:47:f5:54:b4:e7:ea:07:6c:e6:7b: 01:32:29:e5:3a:79:91:37:56:ee:c7:84:fc:e2:cc:bd:45:c3: d9:89:f0:43:91:b7:58:61:aa:9a:d6:f4:ca:c2:83:06:95:66: ad:83:e4:df:7f:26:e2:e5:1c:30:08:3e:f6:13:86:48:73:5d: 76:a5:35:7f:e1:fb:4e:1b:cc:80:09:1f:65:d4:85:1d:7b:1b: 5b:2b:07:bc:1c:13:91:c8:8b:19:57:11:bf:f1:5f:d1:86:a4: f5:77:a9:6c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXEje9NNTy6XHxKQLZJdnyohXsVowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTY0MTI2WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzQ0NDEzNzVjY2EzMDQ3MjVjYTQ0ZTUzOGUzNDRiYTI3 ZWYzZDdjOWU5ZTg3NWJmMzYyYzM4NmRiYWYzOTUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD9ENy5BJMliLUk7vRFm4nL7qsXUWrfw8jqPmVVdQ1eFkqV 6lzizUPX4m1azQEGcShNJP0u5tNfRwEVLtlhTe0lfUnSoKz7J48BEutABj/1OlW9 l0D9hfdFSgbK1calPFJ+MF5QRCMBejimbETViHr/A+RUhWti6/Ev/pMCK0BiiEWT eTrouSSutalO3DmPUw07UmTog2c9O0nmOvabO/jVq+lGAbvhESPbwkORoZrUTRhX An/+rBUxPYtBYRgZa7lPZeKQcDzNeLiDjgRTzJYzw9HzPjTt45TpCiILKQE/IGUL 0n4fy81lLKIaDNOge59n+TezQp0itp1k70Ymj+FtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjp/cxz8y6XD3obE7lh9JUVjrV0EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhmNzcwMGEyLTZhNGQtNGNjOS05YjdkLTgzYWE4OGE3ZDI5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84NMAwDQYJKoZIhvcNAQELBQADggEBAL7rjshZns6h7M5MMkh9Z1fa 7AjFEKWKlsKyKkWbuu7jBIvHpiSJMHOkwIvQ7FAf9+YYURfdu1h4v4jrGNhI9KtO c7macAbqzYCcyBOhGuSfl6T80XAZ3G97uWbuFDG58Ycrm5Uv5DCtsLI3LW1NzpG7 su5p+Dk8ZRqlBAdv9dVoAm6uBXvQRdqONukUXc7+14YgB3hUCfm6R/VUtOfqB2zm ewEyKeU6eZE3Vu7HhPzizL1Fw9mJ8EORt1hhqprW9MrCgwaVZq2D5N9/JuLlHDAI PvYThkhzXXalNX/h+04bzIAJH2XUhR17G1srB7wcE5HIixlXEb/xX9GGpPV3qWw= -----END CERTIFICATE-----Generated at Sat Sep 6 16:44:09 2025 by rpki-client