$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa File: f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa (raw, json) Hash identifier: 41vqqYyANLA8xkeXD8aINbSu9N3+ghcxsr2KNYX04R8= Subject key identifier: A4:C2:F2:C8:BA:0F:58:95:A1:E5:DF:E1:28:15:3A:37:A0:7A:12:F4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A8B7E79DB119BB9562C8B5D1CADF33148857E0F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa Signing time: Tue 26 Aug 2025 16:12:12 +0000 ROA not before: Tue 26 Aug 2025 16:12:12 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:4070::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8b:7e:79:db:11:9b:b9:56:2c:8b:5d:1c:ad:f3:31:48:85:7e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 16:12:12 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=926c98ae03936bdcec7a6907ed73108ee4a402a7c7e2ec196b45a18ccf1bee7a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:2b:fa:b5:53:5a:b0:12:d7:66:91:64:24: f3:d5:9d:f2:f1:10:a0:5d:52:6c:63:3e:35:53:7b: a8:07:dd:a7:0b:6f:3a:a5:02:74:c4:c2:dc:e0:46: d8:0f:63:5a:cf:e5:81:c0:bb:5d:66:79:c4:90:63: c4:cb:82:85:77:be:82:0c:a8:de:37:7c:94:bd:c6: 14:a2:ad:bb:42:f4:33:41:6d:95:72:c4:e5:00:63: 9f:b8:21:1d:e6:0c:49:6e:25:b0:6e:9b:ff:87:14: 2e:d5:4c:82:f0:51:1c:06:af:fa:dc:e7:86:21:30: a8:59:04:1b:f9:fc:cf:52:c4:48:e1:65:de:bf:fc: 93:ba:e2:92:43:50:b8:b4:b8:53:9d:52:74:a1:cb: b0:0d:ae:16:20:04:c7:ef:17:9d:eb:9d:b5:bd:88: ab:65:dc:fe:9f:43:ce:77:15:d0:29:a1:9e:96:29: ba:1c:28:16:a7:8e:f2:b3:59:e2:d2:1e:46:38:f3: 2e:53:31:2e:d6:77:9f:a9:8b:13:61:6a:47:16:9b: 51:25:3e:49:b3:7f:f6:3f:97:48:e4:d9:bc:9d:23: 06:0a:fc:0d:b1:3e:e0:08:4f:c4:60:b6:13:bb:b9: d1:da:81:13:b0:2a:af:d8:f4:dc:59:3f:49:f3:86: d4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C2:F2:C8:BA:0F:58:95:A1:E5:DF:E1:28:15:3A:37:A0:7A:12:F4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:4070::/48 Signature Algorithm: sha256WithRSAEncryption 58:e4:c8:db:40:2e:12:01:aa:f8:a3:54:33:68:2c:03:5a:c6: e0:bd:75:15:fa:1b:5c:d2:7f:a4:64:af:27:a6:fe:65:36:b1: 03:b2:85:9a:0c:10:4f:3e:ab:bf:59:20:5e:e2:b2:a4:2f:7b: 2b:fb:37:2d:14:0f:a2:00:8b:3b:bb:1b:b7:4c:49:08:49:2e: fe:f6:42:59:d8:8a:24:b5:d3:d5:ab:7f:69:fe:bb:3a:09:63: c8:27:61:e6:8c:64:03:27:1c:77:4b:4f:e4:41:52:8e:a9:74: a7:5e:3a:82:de:1a:23:52:4f:a3:e2:8a:56:88:89:72:60:51: e3:c9:16:ab:54:b7:ff:2d:8d:dd:03:77:1c:34:23:6c:91:7b: b7:a0:f1:37:6e:d3:71:b5:77:2c:a4:15:ca:3b:27:d8:5e:84: 25:6e:ec:ad:8d:40:49:26:94:ef:02:7b:6e:67:77:e3:9a:2e: d9:c9:f9:18:6d:c8:13:5a:c5:a2:e2:31:e0:dc:d1:a8:db:5f: a6:70:73:6a:f5:83:16:3a:01:12:9e:30:c4:f9:74:8a:d7:01: 2b:f1:90:a6:9a:31:b8:49:8e:19:cd:f3:4e:0d:07:da:3c:ba: ab:72:3b:3d:cd:7e:22:2e:80:1b:80:70:3c:d8:a7:df:f0:e5: cb:0b:cb:53 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSot+edsRm7lWLItdHK3zMUiFfg8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTYxMjEyWhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjZjOThhZTAzOTM2YmRjZWM3YTY5MDdlZDczMTA4ZWU0 YTQwMmE3YzdlMmVjMTk2YjQ1YTE4Y2NmMWJlZTdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFVSv6tVNasBLXZpFkJPPVnfLxEKBdUmxjPjVTe6gH3acL bzqlAnTEwtzgRtgPY1rP5YHAu11mecSQY8TLgoV3voIMqN43fJS9xhSirbtC9DNB bZVyxOUAY5+4IR3mDEluJbBum/+HFC7VTILwURwGr/rc54YhMKhZBBv5/M9SxEjh Zd6//JO64pJDULi0uFOdUnShy7ANrhYgBMfvF53rnbW9iKtl3P6fQ853FdApoZ6W KbocKBanjvKzWeLSHkY48y5TMS7Wd5+pixNhakcWm1ElPkmzf/Y/l0jk2bydIwYK /A2xPuAIT8RgthO7udHagROwKq/Y9NxZP0nzhtSlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpMLyyLoPWJWh5d/hKBU6N6B6EvQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3MDkxOWVjLWY2ZWYtNGJhNS1hMmI3LWMwNGM5YTJmYzQ1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AQHAwDQYJKoZIhvcNAQELBQADggEBAFjkyNtALhIBqvijVDNoLANa xuC9dRX6G1zSf6Rkryem/mU2sQOyhZoMEE8+q79ZIF7isqQveyv7Ny0UD6IAizu7 G7dMSQhJLv72QlnYiiS109Wrf2n+uzoJY8gnYeaMZAMnHHdLT+RBUo6pdKdeOoLe GiNST6PiilaIiXJgUePJFqtUt/8tjd0Ddxw0I2yRe7eg8Tdu03G1dyykFco7J9he hCVu7K2NQEkmlO8Ce25nd+OaLtnJ+RhtyBNaxaLiMeDc0ajbX6Zwc2r1gxY6ARKe MMT5dIrXASvxkKaaMbhJjhnN804NB9o8uqtyOz3NfiIugBuAcDzYp9/w5csLy1M= -----END CERTIFICATE-----Generated at Sat Sep 6 14:08:20 2025 by rpki-client