$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df94d7d2-40bf-476c-a671-b3d5a7f48f14.roa File: df94d7d2-40bf-476c-a671-b3d5a7f48f14.roa (raw, json) Hash identifier: 71oLN/XLQbYX5r/kYDvsxo1BI9ZnmhODZjDnulC4KeM= Subject key identifier: A3:CB:0A:9A:5E:1F:C0:DB:F0:BC:02:0C:EB:80:A7:90:30:93:6C:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68C334FB6A47A076DA2295D0FE57825FB24B5718 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df94d7d2-40bf-476c-a671-b3d5a7f48f14.roa Signing time: Fri 29 Aug 2025 16:01:28 +0000 ROA not before: Fri 29 Aug 2025 16:01:28 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f14:800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c3:34:fb:6a:47:a0:76:da:22:95:d0:fe:57:82:5f:b2:4b:57:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 29 16:01:28 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=78d5b353138ac02764a23311b8d6cbb5f9852908621a3712597c481bbbee2ac3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:40:8c:48:77:61:1a:94:a2:d0:9b:80:59: ac:a4:c4:59:7f:93:65:86:18:92:ba:bf:c1:4e:ca: 6d:9b:83:84:2c:d1:1f:55:58:a2:61:08:5e:a1:f1: ce:03:cd:0c:9a:1a:55:9f:e4:92:42:14:70:13:ca: bb:b2:58:53:36:4b:14:d0:b2:8f:dd:66:9f:07:5b: 27:1f:82:8d:e3:c6:34:dc:74:6e:4d:f0:7b:dc:5a: 45:03:d2:e6:9c:cc:28:3b:d1:8c:fc:c2:59:fd:fd: ff:14:84:f3:4e:bb:73:4e:09:33:ea:61:0d:46:2a: e9:61:13:dc:78:70:13:70:31:a9:16:f2:84:ec:0a: 88:d6:93:51:a5:b4:63:4f:a6:f3:81:b6:47:83:66: 47:d6:c8:6e:a9:59:b0:39:70:6a:7a:0a:d1:df:1a: 3a:0b:b3:2f:4b:f4:1d:aa:74:b4:06:c2:d6:a2:65: 52:df:a2:af:3d:bc:21:12:2a:5c:08:42:36:ee:f1: 37:c9:d6:3f:fa:85:75:1f:3e:bb:cf:57:4f:87:fa: 77:ca:0f:22:fd:40:fb:ea:81:83:59:4e:6b:8a:53: c1:33:dc:ed:d1:73:68:21:bd:5d:d3:a5:32:94:70: d5:b9:ba:90:31:03:9b:8a:c1:d6:f8:8b:6a:43:1e: d6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CB:0A:9A:5E:1F:C0:DB:F0:BC:02:0C:EB:80:A7:90:30:93:6C:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df94d7d2-40bf-476c-a671-b3d5a7f48f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14:800::/37 Signature Algorithm: sha256WithRSAEncryption 0e:68:f9:cc:1a:c7:6d:8e:1f:a8:22:22:80:c9:4d:3c:0b:03: ae:f9:72:09:4f:33:1e:0a:53:37:e0:0c:7c:45:28:40:33:fd: b6:d7:f9:b9:a8:38:9b:98:bd:7d:5f:31:ee:62:ce:c7:a9:c8: cb:8a:16:cd:15:57:f5:97:41:04:b2:03:f3:70:e0:00:68:95: 97:35:e5:75:30:43:d1:c7:3e:ae:7f:e2:f7:80:e8:4a:5b:7a: 47:31:27:90:a9:f8:5b:63:20:51:16:47:29:bd:ae:16:17:23: 4f:92:b2:ff:ce:46:82:54:c1:7e:86:1e:90:33:9b:68:70:19: 51:4e:68:0b:bd:16:66:3c:a7:a6:d0:b2:8e:ac:64:5b:0c:59: 3b:90:6a:bc:52:17:38:68:06:c6:7c:e2:f8:f0:cd:f5:9f:5d: 7b:60:e0:b1:4a:49:aa:34:15:d1:5a:77:4d:59:85:c5:46:c6: 51:f8:c8:15:7e:2d:36:70:3b:d6:08:70:62:bf:ab:d9:dc:db: db:8b:0b:41:72:f8:a4:79:f1:46:04:5e:b8:46:3f:d1:40:c2: d3:d4:03:55:fa:5f:df:f7:09:7f:64:71:f5:2b:89:91:b8:08: 02:5d:24:b2:96:76:41:5f:28:cd:d0:3b:da:14:86:59:76:fa: c0:0d:f8:b7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaMM0+2pHoHbaIpXQ/leCX7JLVxgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI5MTYwMTI4WhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGQ1YjM1MzEzOGFjMDI3NjRhMjMzMTFiOGQ2Y2JiNWY5 ODUyOTA4NjIxYTM3MTI1OTdjNDgxYmJiZWUyYWMzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChskCMSHdhGpSi0JuAWaykxFl/k2WGGJK6v8FOym2bg4Qs 0R9VWKJhCF6h8c4DzQyaGlWf5JJCFHATyruyWFM2SxTQso/dZp8HWycfgo3jxjTc dG5N8HvcWkUD0uaczCg70Yz8wln9/f8UhPNOu3NOCTPqYQ1GKulhE9x4cBNwMakW 8oTsCojWk1GltGNPpvOBtkeDZkfWyG6pWbA5cGp6CtHfGjoLsy9L9B2qdLQGwtai ZVLfoq89vCESKlwIQjbu8TfJ1j/6hXUfPrvPV0+H+nfKDyL9QPvqgYNZTmuKU8Ez 3O3Rc2ghvV3TpTKUcNW5upAxA5uKwdb4i2pDHtYLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUo8sKml4fwNvwvAIM64CnkDCTbGIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmOTRkN2QyLTQwYmYtNDc2Yy1hNjcxLWIzZDVhN2Y0OGYxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8UCDANBgkqhkiG9w0BAQsFAAOCAQEADmj5zBrHbY4fqCIigMlNPAsD rvlyCU8zHgpTN+AMfEUoQDP9ttf5uag4m5i9fV8x7mLOx6nIy4oWzRVX9ZdBBLID 83DgAGiVlzXldTBD0cc+rn/i94DoSlt6RzEnkKn4W2MgURZHKb2uFhcjT5Ky/85G glTBfoYekDObaHAZUU5oC70WZjynptCyjqxkWwxZO5BqvFIXOGgGxnzi+PDN9Z9d e2DgsUpJqjQV0Vp3TVmFxUbGUfjIFX4tNnA71ghwYr+r2dzb24sLQXL4pHnxRgRe uEY/0UDC09QDVfpf3/cJf2Rx9SuJkbgIAl0kspZ2QV8ozdA72hSGWXb6wA34tw== -----END CERTIFICATE-----Generated at Sat Sep 6 14:06:15 2025 by rpki-client