$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3f91ab4-930a-4958-b6c8-811feb211be7.roa File: b3f91ab4-930a-4958-b6c8-811feb211be7.roa (raw, json) Hash identifier: IqV1d7wMcjFBflfZJJavPvu4i54nxOrjIBrrxZk2YcM= Subject key identifier: 8D:F3:8F:6C:F2:F4:73:9C:3C:22:0D:A3:79:9C:96:C0:2D:6C:D8:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E9527E1E217B6835B60832A42E77FFB6E3286A8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3f91ab4-930a-4958-b6c8-811feb211be7.roa Signing time: Fri 29 Aug 2025 16:11:54 +0000 ROA not before: Fri 29 Aug 2025 16:11:54 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f10:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:95:27:e1:e2:17:b6:83:5b:60:83:2a:42:e7:7f:fb:6e:32:86:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:11:54 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=3701dd0d6d5f2e1f337da83c4034a23e6e3f16600be14cfc7490c965734ab9cb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:5b:29:85:0f:66:96:fd:96:f5:4e:5e:a2: 9f:c7:a7:0d:58:25:bc:24:2b:26:04:91:36:6a:f2: 8d:9c:41:51:7c:b2:20:31:c4:00:fe:93:67:73:6a: 2a:a4:77:40:37:14:81:4d:a0:e1:78:3b:46:a7:9f: d6:62:79:da:80:94:63:19:cd:c0:51:e6:7f:da:0c: 20:70:65:d3:91:ad:bc:29:68:da:b6:51:b8:20:43: 7e:2d:90:67:7e:4f:8b:03:23:26:17:9e:aa:64:f7: 85:1e:f4:ef:0d:59:67:04:8a:15:4b:53:7a:b8:a0: a9:8f:1b:d0:83:82:16:bd:69:f1:54:78:d5:5b:01: c3:31:fa:91:3f:19:ba:72:b8:ff:e1:7c:c2:46:27: 63:ff:0c:25:43:27:51:ea:21:05:c7:97:3e:ec:5e: 98:86:91:d3:a6:f7:3c:fc:4c:4e:00:b7:1c:ae:60: 8c:f7:3f:69:45:15:d8:72:e5:fc:e2:58:4b:c3:3b: eb:fb:ae:7f:22:90:de:47:25:1f:d8:d7:5c:02:66: 53:8d:3b:f8:5e:ac:17:db:bc:94:a6:b2:a8:25:ae: 4a:c2:e5:d3:d4:a9:db:e3:2e:8a:cd:c4:21:2a:20: 53:7f:e5:f0:d2:1a:c7:71:ca:ea:7e:6c:44:80:54: 4f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F3:8F:6C:F2:F4:73:9C:3C:22:0D:A3:79:9C:96:C0:2D:6C:D8:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3f91ab4-930a-4958-b6c8-811feb211be7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f10:c800::/37 Signature Algorithm: sha256WithRSAEncryption 98:7d:c8:08:e6:98:12:2d:33:7c:1a:6c:29:fb:be:47:3b:4e: f6:ca:36:e2:1f:d5:f5:a6:9c:c5:db:90:94:41:ec:ce:4d:b8: ca:74:6b:d3:14:92:59:04:95:c6:c7:d7:6a:a4:d3:c4:6b:73: ef:67:a4:ea:3d:1a:74:fc:75:f8:be:12:19:31:d3:0f:e7:19: 7f:03:99:d3:93:b0:be:17:f1:84:38:0d:27:0b:ba:df:71:11: 37:ae:83:ba:b9:de:1f:84:e6:10:23:16:0f:eb:8e:79:31:6f: 9d:bb:18:2c:ff:86:c4:9c:13:29:ad:35:99:85:e6:d5:21:5a: a3:2d:c1:47:6b:9e:f6:80:4b:db:fc:76:7a:10:0c:66:18:a7: 06:14:ec:a4:47:aa:13:76:26:ee:6a:1e:7c:1c:d6:19:5c:53: 4e:e2:9c:62:dc:30:e7:64:a0:ec:d5:af:26:da:82:1d:92:bc: 98:8c:b2:45:6a:49:6c:e7:1b:25:01:ef:49:ea:43:e7:96:44: 3d:95:5f:c7:4d:19:4f:ba:1a:93:d6:44:9b:16:07:e4:37:09: 73:ed:d3:ce:31:ff:4b:f0:83:46:6d:41:55:84:24:0c:60:de: b5:31:27:4e:99:83:09:dc:0c:2e:5b:2b:ad:21:33:e3:e7:2f: 88:8f:e8:a4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULpUn4eIXtoNbYIMqQud/+24yhqgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYxMTU0WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNzAxZGQwZDZkNWYyZTFmMzM3ZGE4M2M0MDM0YTIzZTZl M2YxNjYwMGJlMTRjZmM3NDkwYzk2NTczNGFiOWNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdVlsphQ9mlv2W9U5eop/Hpw1YJbwkKyYEkTZq8o2cQVF8 siAxxAD+k2dzaiqkd0A3FIFNoOF4O0ann9ZiedqAlGMZzcBR5n/aDCBwZdORrbwp aNq2UbggQ34tkGd+T4sDIyYXnqpk94Ue9O8NWWcEihVLU3q4oKmPG9CDgha9afFU eNVbAcMx+pE/GbpyuP/hfMJGJ2P/DCVDJ1HqIQXHlz7sXpiGkdOm9zz8TE4Atxyu YIz3P2lFFdhy5fziWEvDO+v7rn8ikN5HJR/Y11wCZlONO/herBfbvJSmsqglrkrC 5dPUqdvjLorNxCEqIFN/5fDSGsdxyup+bESAVE9xAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUjfOPbPL0c5w8Ig2jeZyWwC1s2HMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzZjkxYWI0LTkzMGEtNDk1OC1iNmM4LTgxMWZlYjIxMWJlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8QyDANBgkqhkiG9w0BAQsFAAOCAQEAmH3ICOaYEi0zfBpsKfu+RztO 9so24h/V9aacxduQlEHszk24ynRr0xSSWQSVxsfXaqTTxGtz72ek6j0adPx1+L4S GTHTD+cZfwOZ05OwvhfxhDgNJwu633ERN66DurneH4TmECMWD+uOeTFvnbsYLP+G xJwTKa01mYXm1SFaoy3BR2ue9oBL2/x2ehAMZhinBhTspEeqE3Ym7moefBzWGVxT TuKcYtww52Sg7NWvJtqCHZK8mIyyRWpJbOcbJQHvSepD55ZEPZVfx00ZT7oak9ZE mxYH5DcJc+3TzjH/S/CDRm1BVYQkDGDetTEnTpmDCdwMLlsrrSEz4+cviI/opA== -----END CERTIFICATE-----Generated at Sat Sep 6 14:11:31 2025 by rpki-client