$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a243882a-10d7-4c67-ba3a-f385ccf44629.roa File: a243882a-10d7-4c67-ba3a-f385ccf44629.roa (raw, json) Hash identifier: ESUhZMzF5hRkXrMUBVCfGRmB2wfciHjLv+oXtLWnTTU= Subject key identifier: 00:67:53:0B:E0:06:1C:A3:5E:69:90:43:19:47:1E:44:3A:91:80:3B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3965CA43ABDCAEF86251C16FE95DE8DE136214D9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a243882a-10d7-4c67-ba3a-f385ccf44629.roa Signing time: Fri 15 Aug 2025 00:32:13 +0000 ROA not before: Fri 15 Aug 2025 00:32:13 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:8050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:65:ca:43:ab:dc:ae:f8:62:51:c1:6f:e9:5d:e8:de:13:62:14:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 15 00:32:13 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=7f4ffd8d5cbe03a531e273e1b23cfd680b26b27e043a4b0e8b836838af80fa8d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:83:26:59:40:e0:57:83:78:25:9c:ce:ec:39: 83:07:c3:27:94:e0:43:7e:e0:a9:a1:32:a5:bf:d5: 8d:e8:a4:21:68:fd:38:86:3f:4f:5b:43:54:bd:12: 43:76:42:c1:9f:ef:f5:7b:86:f6:e2:7d:64:07:13: 39:d3:69:a6:81:33:5d:dc:ff:28:6c:7b:23:27:5d: e3:61:56:ad:15:de:f4:1f:c2:1d:1e:9a:53:a7:b5: bb:cb:e9:5f:11:40:26:0d:95:8d:68:38:07:7c:59: 47:82:4b:43:b9:74:b9:89:1d:30:94:4e:b3:6e:bb: 28:3e:c5:f6:4a:43:38:38:f2:e8:53:a2:dc:16:ab: 1d:2f:ed:be:f5:4b:ea:01:22:c0:26:8b:6c:bf:8d: 48:6a:2f:d2:a8:ac:a9:41:89:3b:af:3e:38:fd:e9: 5f:fc:e4:23:50:e5:64:fc:d7:12:59:62:ae:05:40: 2f:bf:3e:38:ca:fd:bd:c1:66:5f:21:65:89:b3:40: 13:cd:fa:4d:b1:9e:dc:d2:6f:b7:bc:6b:bf:9b:0c: 03:83:16:55:d6:ce:ff:c1:11:ab:c3:c0:ae:90:9e: 66:b8:1e:c4:57:16:a6:37:7e:5d:a2:05:46:20:68: 00:02:a4:9c:aa:c4:23:16:49:8b:3c:ef:18:ad:17: 80:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:67:53:0B:E0:06:1C:A3:5E:69:90:43:19:47:1E:44:3A:91:80:3B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a243882a-10d7-4c67-ba3a-f385ccf44629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:8050::/48 Signature Algorithm: sha256WithRSAEncryption a1:6c:f6:e6:04:72:3d:2c:af:fc:8a:80:25:d8:ac:46:3d:4f: 66:af:b0:f2:55:de:91:2f:60:ed:90:5e:75:55:11:47:81:5c: b2:fa:06:54:73:cd:45:ba:d3:7e:f6:6d:65:8f:45:5f:a7:84: 9f:90:45:5c:27:bd:9e:66:99:09:bd:66:ce:53:b1:6b:06:5a: 0b:0d:20:24:ba:38:ec:b4:4b:ac:c1:c1:b6:0b:9c:c1:2e:6c: 6e:c4:a0:18:11:a2:22:01:42:2b:64:d8:ce:b2:3a:f6:91:02: 7d:33:8e:05:3e:fe:1d:2d:0e:ff:99:44:3e:dd:f2:22:ac:b5: 74:8c:03:7b:0a:46:e4:5c:c2:2f:38:ea:19:ef:aa:d8:7b:f8: 10:61:fe:f6:56:f2:f3:47:8d:76:2a:2c:76:f4:1f:86:44:d4: d2:27:b4:a6:a2:fe:f6:d8:0a:cc:67:8f:38:12:db:ba:70:40: 85:c9:78:93:11:0a:b2:b2:e6:37:7f:50:c6:e0:9a:7a:8c:35: 41:ec:8d:90:73:f8:03:25:7d:97:ac:4e:d0:37:2e:93:79:1d: cf:e8:a0:28:3a:fc:4e:0e:08:72:1d:c7:6e:e1:7d:01:21:4b: ef:dd:d7:6b:46:54:cb:5c:52:35:2b:3f:22:3c:33:30:b6:27: 59:82:7e:34 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOWXKQ6vcrvhiUcFv6V3o3hNiFNkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE1MDAzMjEzWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjRmZmQ4ZDVjYmUwM2E1MzFlMjczZTFiMjNjZmQ2ODBi MjZiMjdlMDQzYTRiMGU4YjgzNjgzOGFmODBmYThkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbgyZZQOBXg3glnM7sOYMHwyeU4EN+4KmhMqW/1Y3opCFo /TiGP09bQ1S9EkN2QsGf7/V7hvbifWQHEznTaaaBM13c/yhseyMnXeNhVq0V3vQf wh0emlOntbvL6V8RQCYNlY1oOAd8WUeCS0O5dLmJHTCUTrNuuyg+xfZKQzg48uhT otwWqx0v7b71S+oBIsAmi2y/jUhqL9KorKlBiTuvPjj96V/85CNQ5WT81xJZYq4F QC+/PjjK/b3BZl8hZYmzQBPN+k2xntzSb7e8a7+bDAODFlXWzv/BEavDwK6Qnma4 HsRXFqY3fl2iBUYgaAACpJyqxCMWSYs87xitF4AxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAGdTC+AGHKNeaZBDGUceRDqRgDswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyNDM4ODJhLTEwZDctNGM2Ny1iYTNhLWYzODVjY2Y0NDYyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hgFAwDQYJKoZIhvcNAQELBQADggEBAKFs9uYEcj0sr/yKgCXYrEY9 T2avsPJV3pEvYO2QXnVVEUeBXLL6BlRzzUW60372bWWPRV+nhJ+QRVwnvZ5mmQm9 Zs5TsWsGWgsNICS6OOy0S6zBwbYLnMEubG7EoBgRoiIBQitk2M6yOvaRAn0zjgU+ /h0tDv+ZRD7d8iKstXSMA3sKRuRcwi846hnvqth7+BBh/vZW8vNHjXYqLHb0H4ZE 1NIntKai/vbYCsxnjzgS27pwQIXJeJMRCrKy5jd/UMbgmnqMNUHsjZBz+AMlfZes TtA3LpN5Hc/ooCg6/E4OCHIdx27hfQEhS+/d12tGVMtcUjUrPyI8MzC2J1mCfjQ= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:10 2025 by rpki-client