$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de9bdf2a-267d-4f5c-96cd-099837a4a762.roa File: de9bdf2a-267d-4f5c-96cd-099837a4a762.roa (raw, json) Hash identifier: loNU/Az9hDsLqMBFxBM1N3a+/HbunGa548BtB1rbKRQ= Subject key identifier: 04:E1:F9:D5:F9:33:14:F7:87:12:35:44:ED:69:CC:22:26:72:EF:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7DE9CBCE5910FB1C4C24866217264F87405B51B5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de9bdf2a-267d-4f5c-96cd-099837a4a762.roa Signing time: Tue 26 Aug 2025 15:31:27 +0000 ROA not before: Tue 26 Aug 2025 15:31:27 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f38:50c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e9:cb:ce:59:10:fb:1c:4c:24:86:62:17:26:4f:87:40:5b:51:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:31:27 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=9b0a5df5a7766d5e308bce797c1935ed7dfab9a55590d311f47bb300bb4047c9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5f:33:67:32:31:bd:df:f6:2f:70:0e:c3:b9: 04:2c:f3:17:51:b0:22:56:57:17:88:33:2f:4f:71: 8c:60:9d:bb:c5:24:ae:25:f0:07:88:de:37:e8:f1: 47:b1:41:f9:69:37:b2:81:33:94:5c:8d:2a:ec:42: 5d:a7:c2:0e:6f:2a:9c:13:dc:d2:e9:95:ed:0b:46: f4:c7:29:65:ab:7a:b2:74:e4:fa:c0:fa:15:0d:3a: 4c:7b:4d:81:5c:6d:74:fa:40:cc:44:69:15:7d:3c: b7:28:09:52:c3:7d:9e:72:4f:27:44:88:b0:aa:fb: 32:6d:8f:95:e0:e2:81:f2:d3:74:dc:30:3c:74:20: 6a:de:f2:60:e0:c5:b4:11:d6:53:09:29:cb:8d:b5: e2:46:1b:00:15:dc:f1:32:27:de:98:11:fb:c9:5a: c6:bd:b6:ec:34:cd:4d:a9:5e:00:06:0f:ca:7d:44: d4:0f:b7:95:70:40:b5:a6:7f:b6:43:61:6c:7a:18: 30:87:35:07:2b:83:7d:e5:ae:ba:ac:89:65:1b:de: 01:d9:de:29:3b:ae:1b:48:7b:7a:cf:d6:4b:3c:56: 86:8a:88:cd:c7:8e:8a:b3:e5:9e:f5:9d:08:7a:15: fa:59:7c:f7:e5:6a:6d:a0:68:db:f7:62:61:66:6a: 7f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E1:F9:D5:F9:33:14:F7:87:12:35:44:ED:69:CC:22:26:72:EF:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de9bdf2a-267d-4f5c-96cd-099837a4a762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:50c0::/48 Signature Algorithm: sha256WithRSAEncryption 64:d6:4e:03:1a:e9:82:89:51:53:d5:c2:81:01:73:4f:dd:bb: 75:d5:86:8c:a9:48:75:ec:7e:75:be:eb:20:02:ff:cc:91:44: 88:c1:8e:cb:5d:3a:3c:0e:3b:45:ec:5f:9c:d4:db:40:ea:b1: 85:f7:b9:38:a7:dd:af:6c:78:f2:6e:72:5f:01:39:cf:8c:41: 9a:b1:70:76:02:15:6f:db:84:58:8f:27:f2:a2:03:14:5d:fc: 9f:3b:a8:3a:37:5d:99:8c:90:e9:ea:15:d4:26:4a:a4:13:e4: 90:8a:fc:f3:d4:1d:3a:ec:bb:9e:2a:1d:e3:01:97:73:a7:45: 55:b1:7e:62:47:63:0b:97:b4:a1:54:9f:74:d2:db:a0:cb:04: 1f:62:0d:be:9e:26:a7:90:65:c1:98:e1:28:87:68:31:9a:59: e5:4d:9e:c0:05:eb:31:d4:73:41:ef:ed:55:b0:50:36:99:d7: 14:c8:2b:c1:43:25:16:ea:05:57:d8:c3:3d:67:4e:84:8e:0a: b7:69:ec:cd:af:cb:8e:30:18:43:b4:39:8d:de:1d:8e:42:ef: 6e:31:16:b6:95:21:23:e0:8f:6e:99:26:fe:b8:2e:9d:9f:eb: 7a:fc:f3:63:18:d3:4d:3b:82:ed:11:1b:7d:4e:6f:e5:39:6d: 8d:52:07:36 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfenLzlkQ+xxMJIZiFyZPh0BbUbUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUzMTI3WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjBhNWRmNWE3NzY2ZDVlMzA4YmNlNzk3YzE5MzVlZDdk ZmFiOWE1NTU5MGQzMTFmNDdiYjMwMGJiNDA0N2M5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtXzNnMjG93/YvcA7DuQQs8xdRsCJWVxeIMy9PcYxgnbvF JK4l8AeI3jfo8UexQflpN7KBM5RcjSrsQl2nwg5vKpwT3NLple0LRvTHKWWrerJ0 5PrA+hUNOkx7TYFcbXT6QMxEaRV9PLcoCVLDfZ5yTydEiLCq+zJtj5Xg4oHy03Tc MDx0IGre8mDgxbQR1lMJKcuNteJGGwAV3PEyJ96YEfvJWsa9tuw0zU2pXgAGD8p9 RNQPt5VwQLWmf7ZDYWx6GDCHNQcrg33lrrqsiWUb3gHZ3ik7rhtIe3rP1ks8VoaK iM3Hjoqz5Z71nQh6FfpZfPflam2gaNv3YmFman/jAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBOH51fkzFPeHEjVE7WnMIiZy7x0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RlOWJkZjJhLTI2N2QtNGY1Yy05NmNkLTA5OTgzN2E0YTc2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84UMAwDQYJKoZIhvcNAQELBQADggEBAGTWTgMa6YKJUVPVwoEBc0/d u3XVhoypSHXsfnW+6yAC/8yRRIjBjstdOjwOO0XsX5zU20DqsYX3uTin3a9sePJu cl8BOc+MQZqxcHYCFW/bhFiPJ/KiAxRd/J87qDo3XZmMkOnqFdQmSqQT5JCK/PPU HTrsu54qHeMBl3OnRVWxfmJHYwuXtKFUn3TS26DLBB9iDb6eJqeQZcGY4SiHaDGa WeVNnsAF6zHUc0Hv7VWwUDaZ1xTIK8FDJRbqBVfYwz1nToSOCrdp7M2vy44wGEO0 OY3eHY5C724xFraVISPgj26ZJv64Lp2f63r882MY0007gu0RG31Ob+U5bY1SBzY= -----END CERTIFICATE-----Generated at Sat Sep 6 14:14:09 2025 by rpki-client