$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ba3a8c3-70d5-4904-a577-21c82932ab95.roa File: 9ba3a8c3-70d5-4904-a577-21c82932ab95.roa (raw, json) Hash identifier: j36KaWvsgvwyVk6E2eBixaTrEuSWCSM6/00oDOpdhSc= Subject key identifier: 7B:C3:6F:E8:62:25:30:24:49:78:A1:5E:6E:E7:EF:26:F3:EE:15:4E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 44C6FA786D8F28D417FE01E1322547AFF8EBB4D4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ba3a8c3-70d5-4904-a577-21c82932ab95.roa Signing time: Fri 29 Aug 2025 16:10:27 +0000 ROA not before: Fri 29 Aug 2025 16:10:27 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f14:4800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c6:fa:78:6d:8f:28:d4:17:fe:01:e1:32:25:47:af:f8:eb:b4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:10:27 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=cfceb1916e7f44c24e17fe0026f4bea1b9ca237ecf3b88a5408b3b89afe71548, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:a3:14:37:af:51:6c:c6:e6:53:cb:92:bf: 59:b8:66:9f:4d:76:4d:4f:57:fc:55:6a:a9:6e:9b: 50:7a:5b:8c:28:da:f3:1b:2b:8e:1d:bb:be:eb:37: 74:bf:bd:85:65:a4:b1:81:c6:4a:dc:18:93:f1:aa: 08:f9:42:a5:3a:a7:31:d2:02:71:02:e0:aa:f9:fd: e9:ff:f4:5b:6f:be:ac:61:c6:64:82:2e:2f:89:af: 74:e2:43:fc:59:95:e6:b1:21:26:eb:e9:67:66:d4: c4:31:98:a5:69:0d:00:a7:9e:29:ea:04:bc:57:1d: 25:86:6d:5a:6b:bd:d7:5e:09:84:be:39:75:03:6c: 48:be:8e:44:c1:7b:d2:73:23:45:34:52:8b:e7:9b: f6:78:ff:2e:a2:51:ea:a7:e4:c0:af:be:f8:64:6f: 6e:74:bb:e4:e9:ab:cb:c6:21:c8:1a:71:e1:bd:2a: 24:d1:b1:55:f7:8b:18:8c:0a:ae:d0:5a:55:4b:61: 99:15:ed:54:83:72:0b:f0:b1:fb:a9:23:37:05:8f: fe:92:75:a0:74:20:24:30:28:25:35:0b:14:e5:44: 65:37:ae:94:ff:1d:d0:59:96:45:e3:67:9a:93:e5: 0b:e7:62:06:4b:85:2f:0e:10:2c:c3:9f:f3:f6:1b: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C3:6F:E8:62:25:30:24:49:78:A1:5E:6E:E7:EF:26:F3:EE:15:4E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ba3a8c3-70d5-4904-a577-21c82932ab95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14:4800::/37 Signature Algorithm: sha256WithRSAEncryption 76:b3:a8:a5:4c:d3:72:a5:bf:3e:39:b5:2b:e7:e1:5e:d0:e1: c1:b2:23:95:86:2c:00:8a:e9:73:10:d5:6d:6c:11:e0:51:f7: 0d:79:10:d2:c1:bc:00:c1:5f:30:a9:b7:00:87:7a:77:c8:38: 61:b3:92:83:af:d8:4e:2e:c3:5e:0f:68:2d:6a:84:1c:46:1b: db:c4:38:f0:28:89:dd:6d:ad:10:c1:46:cf:ec:cc:6c:78:cd: 53:fe:be:b9:90:12:ef:5b:1d:2f:98:19:93:f6:d7:45:c3:94: a9:3f:58:48:97:5f:e5:ba:82:42:01:af:51:e3:c0:d7:7c:ba: bb:cf:7f:bb:bb:d5:61:0d:e2:0a:dc:a6:50:14:69:83:11:69: 59:b2:7c:ab:69:ec:22:2e:f2:31:99:30:8c:b8:57:df:91:5a: 38:99:46:eb:cd:7f:fc:fd:ca:8c:4c:41:0d:a0:48:a8:95:c8: be:9f:b4:31:61:f5:58:1c:97:6a:06:ec:62:4c:32:f7:5e:a4: 39:f6:36:25:34:f2:ee:52:ff:13:63:39:1d:d5:44:55:6f:40: 0c:8a:26:ef:8b:5b:ed:dd:96:53:1b:d3:c0:1b:be:70:f3:d6: ae:f7:97:5d:2b:ef:2d:52:cb:56:4c:91:73:4d:c7:95:b4:69: eb:98:0f:c3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURMb6eG2PKNQX/gHhMiVHr/jrtNQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYxMDI3WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZmNlYjE5MTZlN2Y0NGMyNGUxN2ZlMDAyNmY0YmVhMWI5 Y2EyMzdlY2YzYjg4YTU0MDhiM2I4OWFmZTcxNTQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCthqMUN69RbMbmU8uSv1m4Zp9Ndk1PV/xVaqlum1B6W4wo 2vMbK44du77rN3S/vYVlpLGBxkrcGJPxqgj5QqU6pzHSAnEC4Kr5/en/9Ftvvqxh xmSCLi+Jr3TiQ/xZleaxISbr6Wdm1MQxmKVpDQCnninqBLxXHSWGbVprvddeCYS+ OXUDbEi+jkTBe9JzI0U0Uovnm/Z4/y6iUeqn5MCvvvhkb250u+Tpq8vGIcgaceG9 KiTRsVX3ixiMCq7QWlVLYZkV7VSDcgvwsfupIzcFj/6SdaB0ICQwKCU1CxTlRGU3 rpT/HdBZlkXjZ5qT5QvnYgZLhS8OECzDn/P2GyaLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUe8Nv6GIlMCRJeKFebufvJvPuFU4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzliYTNhOGMzLTcwZDUtNDkwNC1hNTc3LTIxYzgyOTMyYWI5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8USDANBgkqhkiG9w0BAQsFAAOCAQEAdrOopUzTcqW/Pjm1K+fhXtDh wbIjlYYsAIrpcxDVbWwR4FH3DXkQ0sG8AMFfMKm3AId6d8g4YbOSg6/YTi7DXg9o LWqEHEYb28Q48CiJ3W2tEMFGz+zMbHjNU/6+uZAS71sdL5gZk/bXRcOUqT9YSJdf 5bqCQgGvUePA13y6u89/u7vVYQ3iCtymUBRpgxFpWbJ8q2nsIi7yMZkwjLhX35Fa OJlG681//P3KjExBDaBIqJXIvp+0MWH1WByXagbsYkwy916kOfY2JTTy7lL/E2M5 HdVEVW9ADIom74tb7d2WUxvTwBu+cPPWrveXXSvvLVLLVkyRc03HlbRp65gPww== -----END CERTIFICATE-----Generated at Sat Sep 6 16:40:54 2025 by rpki-client