$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abdbb1fc-71cb-4117-b953-95f82ecba7e2.roa File: abdbb1fc-71cb-4117-b953-95f82ecba7e2.roa (raw, json) Hash identifier: cFOt3kzHDIHLSEcWKjf6DSAple5NELv0GIxTOOd2nSQ= Subject key identifier: 74:EC:CE:81:8D:D0:FA:E4:98:65:27:BB:98:E9:CB:F5:3C:4A:80:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13CCE0BA60ED0CF4887ACD8036F7CBC1E190B2CB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abdbb1fc-71cb-4117-b953-95f82ecba7e2.roa Signing time: Mon 25 Aug 2025 16:52:10 +0000 ROA not before: Mon 25 Aug 2025 16:52:10 +0000 ROA not after: Mon 29 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fec:1400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:cc:e0:ba:60:ed:0c:f4:88:7a:cd:80:36:f7:cb:c1:e1:90:b2:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 16:52:10 2025 GMT Not After : Sep 29 23:59:59 2025 GMT Subject: serialNumber=750cbdbbb99bc7f31dd5c31adf285e41766f6217a648ceeb696393cf93cc035f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:a7:2b:67:30:d8:24:ef:c4:f3:bd:f9:91: 07:67:12:7d:c2:b2:fb:9a:48:70:b6:9b:04:df:18: 54:98:4e:00:f4:4c:db:bb:e5:09:dd:3e:d0:31:99: ee:97:e9:fe:0b:f1:80:6f:e6:c8:62:c2:c0:6d:27: cd:fc:76:a0:2d:1f:fb:44:56:f3:0a:67:58:e9:23: 75:b6:5f:7c:eb:de:0d:ce:77:11:85:49:54:fc:25: 93:e6:07:d2:8a:37:5b:01:32:4a:7b:4a:b0:6a:e0: c6:e1:cc:92:6d:7b:c5:ee:35:ab:de:e5:ff:c7:a2: d5:b1:00:48:f9:0e:52:fb:c6:74:a2:77:5c:f4:56: 3c:0a:f4:dd:53:b2:0a:8d:c0:f8:3d:fb:55:60:78: 30:5b:82:53:63:06:66:1a:72:81:dd:58:78:1a:57: 00:13:5d:cc:23:e9:bb:37:aa:44:ed:35:54:ad:1d: c9:5e:48:7f:8c:21:c6:e2:c7:31:96:3b:e5:bb:f9: 54:fd:15:d4:78:29:a4:14:fc:e1:62:e3:7d:90:58: 2e:f3:71:1c:7e:32:e1:3b:f9:3b:3e:48:52:1c:8a: 19:fe:b5:83:a3:31:85:85:e4:15:6d:36:c4:05:44: b5:e1:3a:30:4a:63:4e:fe:39:73:3e:b5:77:d6:c5: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EC:CE:81:8D:D0:FA:E4:98:65:27:BB:98:E9:CB:F5:3C:4A:80:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abdbb1fc-71cb-4117-b953-95f82ecba7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:1400::/48 Signature Algorithm: sha256WithRSAEncryption 43:0a:1d:92:71:ea:0f:d2:d7:5f:cb:ec:f8:05:ed:bf:b6:e1: ea:da:f7:d6:21:19:94:18:fe:ff:20:f0:9c:5d:67:ea:3f:4e: d2:fb:08:d3:3e:d8:09:97:e8:2c:e2:17:80:e3:f1:d7:df:c3: 39:46:59:0d:40:3d:47:81:e9:4a:78:c2:51:3c:99:0d:06:49: 22:4c:ee:31:79:d9:c7:78:84:a5:69:a7:54:01:53:12:10:95: 57:af:bf:3f:b0:f0:75:0c:e6:9e:63:5b:0d:51:94:3c:fe:2b: aa:8e:bc:73:3b:f8:91:2d:63:ad:0f:36:e2:23:12:23:97:60: f6:47:d4:72:42:cb:9e:bd:37:7d:20:af:54:8c:d7:33:75:d5: 3a:7b:c3:dd:6f:16:83:8a:f4:2b:b5:78:7a:30:d5:74:ce:37: 5d:94:ef:1e:44:30:4d:f2:1d:7b:1e:b1:92:5b:a7:db:26:dc: 3f:23:d3:d2:90:de:3a:d0:64:af:6d:c9:32:81:e1:45:42:79: 12:bf:31:be:4f:6a:39:b4:c8:f1:95:ad:21:ae:f4:b4:01:60: 8e:2f:90:5a:c9:b1:88:23:ae:ef:31:e2:25:93:08:2e:b8:be: 57:1c:67:64:3a:e2:bf:44:0d:78:66:c4:94:aa:89:00:48:51: 6e:c4:00:de -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE8zgumDtDPSIes2ANvfLweGQssswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI1MTY1MjEwWhcNMjUwOTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTBjYmRiYmI5OWJjN2YzMWRkNWMzMWFkZjI4NWU0MTc2 NmY2MjE3YTY0OGNlZWI2OTYzOTNjZjkzY2MwMzVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzVKcrZzDYJO/E8735kQdnEn3CsvuaSHC2mwTfGFSYTgD0 TNu75QndPtAxme6X6f4L8YBv5shiwsBtJ838dqAtH/tEVvMKZ1jpI3W2X3zr3g3O dxGFSVT8JZPmB9KKN1sBMkp7SrBq4MbhzJJte8XuNave5f/HotWxAEj5DlL7xnSi d1z0VjwK9N1TsgqNwPg9+1VgeDBbglNjBmYacoHdWHgaVwATXcwj6bs3qkTtNVSt HcleSH+MIcbixzGWO+W7+VT9FdR4KaQU/OFi432QWC7zcRx+MuE7+Ts+SFIcihn+ tYOjMYWF5BVtNsQFRLXhOjBKY07+OXM+tXfWxaMdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdOzOgY3Q+uSYZSe7mOnL9TxKgD4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiZGJiMWZjLTcxY2ItNDExNy1iOTUzLTk1ZjgyZWNiYTdlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/sFAAwDQYJKoZIhvcNAQELBQADggEBAEMKHZJx6g/S11/L7PgF7b+2 4era99YhGZQY/v8g8JxdZ+o/TtL7CNM+2AmX6CziF4Dj8dffwzlGWQ1APUeB6Up4 wlE8mQ0GSSJM7jF52cd4hKVpp1QBUxIQlVevvz+w8HUM5p5jWw1RlDz+K6qOvHM7 +JEtY60PNuIjEiOXYPZH1HJCy569N30gr1SM1zN11Tp7w91vFoOK9Cu1eHow1XTO N12U7x5EME3yHXsesZJbp9sm3D8j09KQ3jrQZK9tyTKB4UVCeRK/Mb5Pajm0yPGV rSGu9LQBYI4vkFrJsYgjru8x4iWTCC64vlccZ2Q64r9EDXhmxJSqiQBIUW7EAN4= -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:10 2025 by rpki-client