$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1e68d6d-6823-4500-aa94-bf1a824a98f5.roa File: b1e68d6d-6823-4500-aa94-bf1a824a98f5.roa (raw, json) Hash identifier: 20z2xG6fZmoAc84YOf5i2HtvCcvUVpHpszAEgucg4dE= Subject key identifier: 6D:FD:C2:AA:37:37:5B:05:8F:B3:B9:2A:29:F4:23:92:51:56:27:3E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 383C38AE5670EBBFD756F7A99A45829FADD44626 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1e68d6d-6823-4500-aa94-bf1a824a98f5.roa Signing time: Tue 26 Aug 2025 16:51:11 +0000 ROA not before: Tue 26 Aug 2025 16:51:11 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3c:38:ae:56:70:eb:bf:d7:56:f7:a9:9a:45:82:9f:ad:d4:46:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:51:11 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=9dda723219f859f3a28864d8a9ebdd1cde3dbc64b249dd38c5a8318e09dd05f0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ba:de:8d:50:82:10:5e:ff:0e:c9:07:e9:5f: 0a:77:3a:d0:54:32:ac:ee:cd:15:91:66:b4:00:42: cc:27:b2:8b:f4:17:37:07:95:24:71:30:3d:74:19: e9:8f:c9:6e:b5:7b:62:c3:ab:ff:a9:e3:7a:31:63: 1b:44:1e:18:2c:ab:01:ba:16:d4:f2:60:8f:ac:57: ad:90:9b:e6:d7:f4:44:96:27:c1:82:11:c1:ac:dc: 08:8a:43:d5:0c:d2:3a:31:c8:aa:fd:65:ef:b4:88: 91:c1:75:57:36:75:ac:77:9d:b8:95:88:e5:d8:27: 24:3d:7c:5b:75:45:bb:31:51:f6:a4:21:ac:c3:7f: b1:9c:ab:88:82:67:d7:e1:75:4a:8e:37:a4:6e:c4: 1a:e6:dd:69:a9:99:00:c4:8c:b0:3d:e7:e7:aa:b9: c7:10:0f:51:9c:f1:08:a3:5f:3f:39:41:ff:b7:7d: ca:08:72:34:a7:5c:e8:c9:83:bc:f3:2f:c9:c1:92: b8:ee:cb:e7:da:d1:35:12:08:d4:36:ab:10:f7:1b: 55:56:e3:91:e4:91:5d:32:88:7e:7e:ed:71:92:a1: 52:d6:31:90:69:36:91:84:9c:e0:6e:04:ba:c9:f9: 6d:22:c9:2d:f9:12:98:4d:7f:cc:4a:87:eb:3e:12: cc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FD:C2:AA:37:37:5B:05:8F:B3:B9:2A:29:F4:23:92:51:56:27:3E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1e68d6d-6823-4500-aa94-bf1a824a98f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:2000::/40 Signature Algorithm: sha256WithRSAEncryption 71:db:ad:71:65:31:91:54:05:6c:b0:df:ab:d1:62:5e:c4:49: 20:b2:b2:6c:f8:05:5e:d6:e3:95:60:83:e6:0f:b4:f5:f2:54: fb:06:3b:72:f4:fa:df:c4:04:b1:73:21:ce:5c:1b:60:16:07: d7:1c:6b:9b:f2:59:88:b7:d3:f2:d1:2a:99:af:88:b5:7f:44: 05:3c:cb:77:fb:4e:0b:86:ee:67:d2:4e:d4:de:ff:3a:ef:fe: ff:92:ff:80:65:9b:34:4c:14:f5:c2:a2:03:b0:34:9c:6b:7a: 0b:60:65:87:37:46:c1:5c:76:d3:7e:4f:2a:02:1d:65:e0:d8: 6c:21:7e:f1:4c:b4:f1:eb:b1:90:35:fb:18:52:cc:8d:89:34: 45:84:ad:d8:ba:5e:db:82:a2:0d:50:74:47:fe:48:05:a0:01: c4:3d:fc:8c:88:0c:d9:14:54:2d:8d:f8:b7:74:d8:e6:61:38: 80:4c:cf:41:ed:df:f3:83:00:2a:f8:cd:65:93:e5:e2:64:2d: 2f:e8:f0:7c:42:c1:de:54:3e:97:c7:83:15:d3:a9:fa:84:a2: 7f:8c:05:8f:35:ab:b4:db:29:f6:d8:70:96:94:dd:06:3a:b8: 29:b4:e1:86:ee:47:8b:02:e1:aa:3a:3d:c6:58:03:50:25:86: dd:8f:d6:e5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUODw4rlZw67/XVvepmkWCn63URiYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTY1MTExWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGRhNzIzMjE5Zjg1OWYzYTI4ODY0ZDhhOWViZGQxY2Rl M2RiYzY0YjI0OWRkMzhjNWE4MzE4ZTA5ZGQwNWYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPut6NUIIQXv8OyQfpXwp3OtBUMqzuzRWRZrQAQswnsov0 FzcHlSRxMD10GemPyW61e2LDq/+p43oxYxtEHhgsqwG6FtTyYI+sV62Qm+bX9ESW J8GCEcGs3AiKQ9UM0joxyKr9Ze+0iJHBdVc2dax3nbiViOXYJyQ9fFt1RbsxUfak IazDf7Gcq4iCZ9fhdUqON6RuxBrm3WmpmQDEjLA95+equccQD1Gc8QijXz85Qf+3 fcoIcjSnXOjJg7zzL8nBkrjuy+fa0TUSCNQ2qxD3G1VW45HkkV0yiH5+7XGSoVLW MZBpNpGEnOBuBLrJ+W0iyS35EphNf8xKh+s+EswVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUbf3Cqjc3WwWPs7kqKfQjklFWJz4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxZTY4ZDZkLTY4MjMtNDUwMC1hYTk0LWJmMWE4MjRhOThmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//IDANBgkqhkiG9w0BAQsFAAOCAQEAcdutcWUxkVQFbLDfq9FiXsRJ ILKybPgFXtbjlWCD5g+09fJU+wY7cvT638QEsXMhzlwbYBYH1xxrm/JZiLfT8tEq ma+ItX9EBTzLd/tOC4buZ9JO1N7/Ou/+/5L/gGWbNEwU9cKiA7A0nGt6C2BlhzdG wVx2035PKgIdZeDYbCF+8Uy08euxkDX7GFLMjYk0RYSt2Lpe24KiDVB0R/5IBaAB xD38jIgM2RRULY34t3TY5mE4gEzPQe3f84MAKvjNZZPl4mQtL+jwfELB3lQ+l8eD FdOp+oSif4wFjzWrtNsp9thwlpTdBjq4KbThhu5HiwLhqjo9xlgDUCWG3Y/W5Q== -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:14 2025 by rpki-client