$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7986098-6bff-4ad7-9690-b401315864c0.roa File: d7986098-6bff-4ad7-9690-b401315864c0.roa (raw, json) Hash identifier: +DNs6qoyshxCuGGzTmiubmcqpPvN8QPGXMwJPdl4sU8= Subject key identifier: 42:CB:9A:CF:64:5E:E3:20:41:E5:FD:15:A6:62:E0:A2:1B:C3:05:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48057D1F0CE4034C177D4FEA9D62C9451302D904 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7986098-6bff-4ad7-9690-b401315864c0.roa Signing time: Mon 25 Aug 2025 17:07:14 +0000 ROA not before: Mon 25 Aug 2025 17:07:14 +0000 ROA not after: Mon 29 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:e400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:05:7d:1f:0c:e4:03:4c:17:7d:4f:ea:9d:62:c9:45:13:02:d9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 17:07:14 2025 GMT Not After : Sep 29 23:59:59 2025 GMT Subject: serialNumber=e52f2b704447d121d94c1529929739b23780b22e4ea0cbb4c591c37a0dd726b1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ef:26:55:ec:fb:4a:48:32:ff:91:40:d8:52: db:b0:56:fa:6d:57:47:af:3d:e2:ba:5e:a2:00:49: db:24:40:2e:9a:4e:c6:1b:b1:27:1c:c0:97:a0:70: e7:cc:fa:43:b3:f7:82:5f:f1:5a:21:e3:71:f9:92: cb:f4:f2:ca:b3:27:ba:42:68:e2:fe:6c:05:46:86: 17:c0:76:16:3a:7d:5f:6d:69:7c:14:ca:c9:d4:e3: 65:2f:9d:d6:db:a4:74:1c:46:80:00:36:65:6d:08: f7:a3:1d:77:95:c4:fe:13:4b:ca:09:04:bf:fc:d0: 99:9f:58:0f:4b:08:33:0b:2d:bc:99:d0:c3:aa:81: 15:05:4b:e6:ac:db:de:46:63:ef:93:bf:d1:a1:18: 2c:9d:87:0d:54:2d:e8:b7:b1:1f:ac:63:d2:f5:e8: ca:ef:9d:50:6a:c4:8c:a1:58:e3:b8:fb:44:bf:de: 9b:05:e1:36:5b:03:e2:27:f9:65:dc:8a:60:62:c6: 99:f2:6b:e2:cf:e1:cf:57:ae:bd:08:91:1d:86:ff: ce:a2:47:71:60:14:1d:d3:e7:b3:df:a6:9d:9a:bd: be:d5:d8:d9:d4:ab:81:a7:3a:a2:4b:d8:6b:a9:2a: d5:a3:8e:55:53:ce:ad:0a:96:be:64:2c:59:f9:75: 14:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CB:9A:CF:64:5E:E3:20:41:E5:FD:15:A6:62:E0:A2:1B:C3:05:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7986098-6bff-4ad7-9690-b401315864c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:e400::/48 Signature Algorithm: sha256WithRSAEncryption 98:a6:3e:32:40:f6:89:29:3b:fb:4b:96:36:3a:c1:8d:9a:9e: d8:f3:61:90:33:10:4b:47:a3:ab:62:72:e1:b6:65:c2:40:7a: bb:cb:b5:4f:f0:0f:8a:97:2a:b6:99:34:9e:58:6d:5c:1c:09: f5:f2:32:f4:94:4f:11:ab:8d:74:75:14:ac:c1:6f:86:a1:cc: 7d:b8:9c:c1:73:bc:df:e5:9a:71:12:28:35:46:91:35:aa:81: 05:3f:71:36:cd:46:95:12:e2:66:66:e4:64:1b:09:56:37:40: bb:91:d5:59:3d:6c:35:d2:00:74:28:ed:c5:de:7a:c2:6d:e2: e6:a7:25:79:e0:c1:b5:d7:ea:12:41:0a:fa:47:81:4a:da:c3: b3:4a:5e:cc:4e:6f:b2:8c:7e:ef:b7:f0:6d:51:44:83:9c:ce: cf:22:45:d9:9f:49:dd:be:ef:4a:b4:6a:92:58:97:a2:b3:12: a1:a5:eb:92:a2:8b:bb:72:e6:68:11:40:36:9b:9d:be:31:15: d8:90:77:70:df:5b:97:46:b8:f9:04:ea:09:fa:e5:1e:4a:0b: b5:ed:c0:a4:56:8a:94:65:ff:d9:73:13:0f:5a:8a:38:ed:b4: aa:0b:61:37:7a:56:bb:d6:19:9f:b6:34:74:ac:22:88:5b:4b: 60:da:95:df -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSAV9HwzkA0wXfU/qnWLJRRMC2QQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI1MTcwNzE0WhcNMjUwOTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTJmMmI3MDQ0NDdkMTIxZDk0YzE1Mjk5Mjk3MzliMjM3 ODBiMjJlNGVhMGNiYjRjNTkxYzM3YTBkZDcyNmIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi7yZV7PtKSDL/kUDYUtuwVvptV0evPeK6XqIASdskQC6a TsYbsSccwJegcOfM+kOz94Jf8Voh43H5ksv08sqzJ7pCaOL+bAVGhhfAdhY6fV9t aXwUysnU42UvndbbpHQcRoAANmVtCPejHXeVxP4TS8oJBL/80JmfWA9LCDMLLbyZ 0MOqgRUFS+as295GY++Tv9GhGCydhw1ULei3sR+sY9L16MrvnVBqxIyhWOO4+0S/ 3psF4TZbA+In+WXcimBixpnya+LP4c9Xrr0IkR2G/86iR3FgFB3T57Pfpp2avb7V 2NnUq4GnOqJL2GupKtWjjlVTzq0Klr5kLFn5dRQJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQsuaz2Re4yBB5f0VpmLgohvDBRMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q3OTg2MDk4LTZiZmYtNGFkNy05NjkwLWI0MDEzMTU4NjRjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/s5AAwDQYJKoZIhvcNAQELBQADggEBAJimPjJA9okpO/tLljY6wY2a ntjzYZAzEEtHo6ticuG2ZcJAervLtU/wD4qXKraZNJ5YbVwcCfXyMvSUTxGrjXR1 FKzBb4ahzH24nMFzvN/lmnESKDVGkTWqgQU/cTbNRpUS4mZm5GQbCVY3QLuR1Vk9 bDXSAHQo7cXeesJt4uanJXngwbXX6hJBCvpHgUraw7NKXsxOb7KMfu+38G1RRIOc zs8iRdmfSd2+70q0apJYl6KzEqGl65Kii7ty5mgRQDabnb4xFdiQd3DfW5dGuPkE 6gn65R5KC7XtwKRWipRl/9lzEw9aijjttKoLYTd6VrvWGZ+2NHSsIohbS2Dald8= -----END CERTIFICATE-----Generated at Sat Sep 6 16:49:54 2025 by rpki-client