$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e122f150-4433-49fd-8d03-e561b732c146.roa File: e122f150-4433-49fd-8d03-e561b732c146.roa (raw, json) Hash identifier: G7hX7mVu7jlYVhXr6KozGBXu7rzYXVxCC3++HXsC9QU= Subject key identifier: E5:35:23:22:98:29:9B:E9:69:29:C1:92:9E:56:D4:FA:6E:FB:79:47 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50C7BBF14D74E3ED3B122A0A940C715E4EC1431E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e122f150-4433-49fd-8d03-e561b732c146.roa Signing time: Mon 25 Aug 2025 16:53:59 +0000 ROA not before: Mon 25 Aug 2025 16:53:59 +0000 ROA not after: Mon 29 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fec:9800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c7:bb:f1:4d:74:e3:ed:3b:12:2a:0a:94:0c:71:5e:4e:c1:43:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 16:53:59 2025 GMT Not After : Sep 29 23:59:59 2025 GMT Subject: serialNumber=3f413e392020269fd7c8bcc8f124b6867a124505d9822656fb5869f87589e3a2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:27:3c:f6:65:a5:e5:34:db:8d:be:94:a1: ef:35:12:20:0f:93:a6:1b:30:25:bf:8c:ec:59:a9: f6:a3:b5:22:84:d8:65:5d:af:f1:f3:7f:9c:6e:a1: 66:05:d8:fd:69:92:39:cf:99:17:77:ef:8f:b8:05: d3:47:c0:71:72:82:40:86:f7:ad:28:da:6f:c9:45: 14:7a:47:e7:e5:1d:79:e6:18:08:cb:41:e9:5e:3d: ad:45:80:47:1d:dc:61:d8:6e:0c:cf:e7:7f:e5:4d: 51:87:41:9e:27:56:29:0f:d2:9b:f0:32:15:c1:83: 2b:57:e4:a1:b7:da:e7:82:00:d3:7b:9e:5d:9e:cc: bd:84:d1:62:1f:e0:b3:03:ba:e9:57:0e:3d:c1:d5: e6:2a:d3:c0:a6:62:08:26:82:96:5c:fc:c9:54:2a: 5e:22:25:5b:a9:33:9e:c3:32:fb:ed:67:8c:2d:a1: 1d:d6:65:51:35:ef:cc:81:cc:76:fb:a0:7d:70:b3: bd:8d:c5:c4:a9:0d:69:fc:8f:6f:f6:f3:44:2f:e0: 61:e0:c4:8d:d1:4f:2e:ec:0b:1d:90:b5:16:02:52: 88:64:46:cf:0d:8a:31:38:5c:9f:10:ab:43:34:b1: e7:bb:04:b1:38:74:6c:a2:13:63:a5:38:f2:bd:0c: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:35:23:22:98:29:9B:E9:69:29:C1:92:9E:56:D4:FA:6E:FB:79:47 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e122f150-4433-49fd-8d03-e561b732c146.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:9800::/48 Signature Algorithm: sha256WithRSAEncryption 0a:3a:c2:2c:5f:a8:42:b6:35:b0:72:6e:27:99:48:fb:83:be: 64:c2:fa:c9:9c:a4:a3:12:25:52:b6:3f:56:87:4e:89:10:a4: 14:1f:f3:69:37:e0:84:ea:fc:c9:79:43:c0:2b:92:f2:ce:1f: 45:f9:14:8c:10:17:c0:0a:aa:c1:1f:bf:cd:f7:be:4b:ab:1a: 0e:1f:df:cd:af:76:74:a0:5f:b1:1a:ee:e6:3f:e4:da:18:b0: cb:12:70:6c:22:8a:ab:2f:a7:9f:87:ff:ad:a0:16:15:d1:e3: f7:8c:0a:60:e1:4e:76:42:7d:55:4c:c8:fc:dd:5f:da:ae:69: 28:64:bf:c2:02:26:af:be:19:85:4f:ba:2a:da:cb:ba:2d:fc: 2c:68:00:99:7b:98:63:9a:67:3b:c1:8c:ac:a7:22:45:3a:d6: 67:a1:8d:67:8b:3b:e6:cf:77:dc:18:6c:c9:e2:e3:43:ef:21: 1e:37:e0:3a:41:97:b7:2f:d3:47:64:1a:6c:d5:52:85:02:a4: e6:c9:18:8d:1f:a2:45:96:77:6a:f1:9c:23:50:6c:9d:1a:9f: 97:99:bc:dc:5f:3d:df:f1:06:4a:72:1f:06:2b:2c:2a:6d:36: 19:d2:46:76:8b:93:3b:a2:40:2e:d6:42:b3:ff:f0:ae:48:98: fe:dd:fc:80 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUMe78U104+07EioKlAxxXk7BQx4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI1MTY1MzU5WhcNMjUwOTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjQxM2UzOTIwMjAyNjlmZDdjOGJjYzhmMTI0YjY4Njdh MTI0NTA1ZDk4MjI2NTZmYjU4NjlmODc1ODllM2EyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy8Cc89mWl5TTbjb6Uoe81EiAPk6YbMCW/jOxZqfajtSKE 2GVdr/Hzf5xuoWYF2P1pkjnPmRd374+4BdNHwHFygkCG960o2m/JRRR6R+flHXnm GAjLQelePa1FgEcd3GHYbgzP53/lTVGHQZ4nVikP0pvwMhXBgytX5KG32ueCANN7 nl2ezL2E0WIf4LMDuulXDj3B1eYq08CmYggmgpZc/MlUKl4iJVupM57DMvvtZ4wt oR3WZVE178yBzHb7oH1ws72NxcSpDWn8j2/280Qv4GHgxI3RTy7sCx2QtRYCUohk Rs8NijE4XJ8Qq0M0see7BLE4dGyiE2OlOPK9DMRZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5TUjIpgpm+lpKcGSnlbU+m77eUcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UxMjJmMTUwLTQ0MzMtNDlmZC04ZDAzLWU1NjFiNzMyYzE0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/smAAwDQYJKoZIhvcNAQELBQADggEBAAo6wixfqEK2NbBybieZSPuD vmTC+smcpKMSJVK2P1aHTokQpBQf82k34ITq/Ml5Q8ArkvLOH0X5FIwQF8AKqsEf v833vkurGg4f382vdnSgX7Ea7uY/5NoYsMsScGwiiqsvp5+H/62gFhXR4/eMCmDh TnZCfVVMyPzdX9quaShkv8ICJq++GYVPuiray7ot/CxoAJl7mGOaZzvBjKynIkU6 1mehjWeLO+bPd9wYbMni40PvIR434DpBl7cv00dkGmzVUoUCpObJGI0fokWWd2rx nCNQbJ0an5eZvNxfPd/xBkpyHwYrLCptNhnSRnaLkzuiQC7WQrP/8K5ImP7d/IA= -----END CERTIFICATE-----Generated at Sat Sep 6 16:49:54 2025 by rpki-client