$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af587f49-38bf-4b30-8bc9-8c7823a6b805.roa File: af587f49-38bf-4b30-8bc9-8c7823a6b805.roa (raw, json) Hash identifier: KIpE/MvXsBTir7SjjznvmjfvXZDT/A8rMZk5dOxBhnM= Subject key identifier: 45:41:56:95:69:EB:4A:43:10:C9:77:54:8B:DE:50:D4:DC:B0:F9:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45E50405DDF5A79734C668BA1AB936A204DE4E9A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af587f49-38bf-4b30-8bc9-8c7823a6b805.roa Signing time: Tue 26 Aug 2025 15:32:17 +0000 ROA not before: Tue 26 Aug 2025 15:32:17 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e5:04:05:dd:f5:a7:97:34:c6:68:ba:1a:b9:36:a2:04:de:4e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:32:17 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=699123b3b2a3cfffcfebb20777825c83552874db5ee4cd182ef531189818b5e6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f1:b9:fc:0f:63:22:59:ee:90:db:da:ed:56: f3:dd:5d:83:c6:63:11:28:ce:c1:85:1e:79:53:57: ae:2a:cc:0f:aa:a5:7d:5f:31:60:d8:3f:b1:a2:c7: cb:fa:a0:04:8b:c4:db:10:9d:50:08:76:4c:4c:08: aa:dc:a0:6d:2b:66:da:13:0f:91:6f:ac:f8:6c:b0: 9e:34:ac:bd:7c:71:d3:af:2c:7b:f9:e5:4e:38:7c: 4a:92:0d:53:ca:a4:63:2f:0b:ee:ce:7d:56:85:f1: 11:1d:fa:03:51:57:0c:90:de:17:ab:36:3f:bb:47: f5:0c:18:d9:77:cc:91:e7:a9:13:c8:6b:80:6e:a2: 85:f7:e1:05:5e:10:dd:2b:60:ea:7e:d4:ae:bf:08: 0c:cf:63:84:fc:28:3d:fe:ac:04:17:e0:32:1c:d6: 97:8f:fe:36:24:a3:cf:f3:21:b5:70:b1:ca:98:2d: a0:52:a4:7d:42:07:0b:03:ca:c6:21:ad:c2:a1:72: 8b:d9:b8:35:15:7c:1e:e6:2b:bf:9e:b7:99:22:dc: 61:d9:01:7a:8e:83:07:f4:a3:23:9b:2d:6a:60:f1: 0c:a2:2b:09:1d:4e:5f:bd:bd:9e:ea:f1:15:7c:6e: 8f:ef:96:86:70:89:3c:f9:1f:c3:68:a0:3e:98:b7: 0f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:41:56:95:69:EB:4A:43:10:C9:77:54:8B:DE:50:D4:DC:B0:F9:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af587f49-38bf-4b30-8bc9-8c7823a6b805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8120::/48 Signature Algorithm: sha256WithRSAEncryption 5c:ba:4b:51:66:ef:be:1e:05:f8:28:0f:c0:16:5f:61:2e:bd: 98:94:4f:86:68:73:72:f7:31:fc:e8:9f:94:fc:b3:bd:84:85: 6b:42:d4:78:fe:b2:1e:48:16:87:52:63:1c:75:38:ab:20:33: 5a:f0:e1:54:90:ae:a5:e2:49:73:fe:bb:a1:ec:b3:c4:e5:21: 6c:70:eb:ab:41:dc:26:e8:50:4f:cd:78:b2:5c:2d:28:9a:d6: 4a:26:62:1b:af:db:b4:3e:29:f7:26:90:9b:ad:7e:82:df:d0: a2:47:2c:4e:00:99:a0:dd:18:2e:04:3b:49:43:1c:36:2b:86: 72:7f:9d:55:19:dc:96:fb:35:27:3b:95:1f:a0:38:a4:31:12: 39:2c:67:2b:37:db:35:90:c5:78:4c:58:87:64:48:d0:89:8c: 85:e3:83:c6:c1:84:4a:b7:a1:e9:d7:14:22:9e:9d:a9:6f:d4: df:3d:2c:9c:5e:a8:24:52:7a:07:c5:e5:2c:37:79:b3:fb:31: 0b:8a:09:97:79:44:22:21:bc:39:4f:d7:5f:b0:e0:9b:2b:bb: e9:7f:83:1a:f5:c9:b2:ed:36:30:01:9f:ed:c0:d2:bc:4e:8d: 21:57:b7:95:e7:aa:f5:8a:ca:c0:9d:f8:50:a4:d3:22:ce:b6: 59:05:91:48 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUReUEBd31p5c0xmi6Grk2ogTeTpowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUzMjE3WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTkxMjNiM2IyYTNjZmZmY2ZlYmIyMDc3NzgyNWM4MzU1 Mjg3NGRiNWVlNGNkMTgyZWY1MzExODk4MThiNWU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY8bn8D2MiWe6Q29rtVvPdXYPGYxEozsGFHnlTV64qzA+q pX1fMWDYP7Gix8v6oASLxNsQnVAIdkxMCKrcoG0rZtoTD5FvrPhssJ40rL18cdOv LHv55U44fEqSDVPKpGMvC+7OfVaF8REd+gNRVwyQ3herNj+7R/UMGNl3zJHnqRPI a4BuooX34QVeEN0rYOp+1K6/CAzPY4T8KD3+rAQX4DIc1peP/jYko8/zIbVwscqY LaBSpH1CBwsDysYhrcKhcovZuDUVfB7mK7+et5ki3GHZAXqOgwf0oyObLWpg8Qyi KwkdTl+9vZ7q8RV8bo/vloZwiTz5H8NooD6Ytw+3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURUFWlWnrSkMQyXdUi95Q1Nyw+SkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmNTg3ZjQ5LTM4YmYtNGIzMC04YmM5LThjNzgyM2E2YjgwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gSAwDQYJKoZIhvcNAQELBQADggEBAFy6S1Fm774eBfgoD8AWX2Eu vZiUT4Zoc3L3Mfzon5T8s72EhWtC1Hj+sh5IFodSYxx1OKsgM1rw4VSQrqXiSXP+ u6Hss8TlIWxw66tB3CboUE/NeLJcLSia1komYhuv27Q+KfcmkJutfoLf0KJHLE4A maDdGC4EO0lDHDYrhnJ/nVUZ3Jb7NSc7lR+gOKQxEjksZys32zWQxXhMWIdkSNCJ jIXjg8bBhEq3oenXFCKenalv1N89LJxeqCRSegfF5Sw3ebP7MQuKCZd5RCIhvDlP 11+w4Jsru+l/gxr1ybLtNjABn+3A0rxOjSFXt5XnqvWKysCd+FCk0yLOtlkFkUg= -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:26 2025 by rpki-client