$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa66475-4425-4e85-b798-e003ebb71081.roa File: faa66475-4425-4e85-b798-e003ebb71081.roa (raw, json) Hash identifier: YZch95UE5FfBxqr9SDZJHzTsjXCcHaTHbBwWSuSo+FA= Subject key identifier: 57:54:90:90:10:A2:52:E3:E8:C7:FE:DF:E8:8C:37:25:0B:A4:D3:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 030F53B3BEDA700BE3DC73C7394C5916AB4D36B6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa66475-4425-4e85-b798-e003ebb71081.roa Signing time: Mon 25 Aug 2025 16:54:05 +0000 ROA not before: Mon 25 Aug 2025 16:54:05 +0000 ROA not after: Mon 29 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:ac00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:0f:53:b3:be:da:70:0b:e3:dc:73:c7:39:4c:59:16:ab:4d:36:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 25 16:54:05 2025 GMT Not After : Sep 29 23:59:59 2025 GMT Subject: serialNumber=fa5ffa4ddb19b73872dd76b24c5a2f480be28663b1301d85effd5f677f7f3070, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:32:51:2e:53:ca:5f:61:f6:88:dc:1c:4b: 67:67:2e:9e:89:c3:84:00:98:cc:70:25:4f:bd:61: cc:a3:07:5b:cd:25:fd:ba:8f:b1:ea:96:01:ca:92: 75:ff:55:f2:c7:f1:ef:81:0b:62:06:d4:d4:cf:12: e2:43:3f:61:a8:b2:f1:9e:89:08:9d:0c:46:7b:cb: c2:33:50:36:47:55:7d:5b:4b:f6:d4:62:a8:db:03: 9e:2e:90:ed:29:cc:fa:f0:ef:90:83:34:f1:a2:61: bf:ad:58:be:d1:25:db:43:eb:2f:50:92:c1:47:77: f3:08:c1:9d:66:f7:fa:42:39:a0:37:43:26:03:22: cf:ff:ea:43:75:42:69:f8:b2:74:2b:eb:2a:94:bb: 23:ab:e2:d1:82:f0:dc:50:74:a5:5f:33:16:e0:e0: 8d:c7:0a:25:e0:8e:fc:3a:c3:84:68:93:24:76:6b: 70:2b:dd:75:dd:73:91:ef:55:b2:5a:26:70:40:91: b0:f7:e8:d7:8b:9a:d4:60:d5:e2:1d:e4:27:4e:f9: fb:3e:fb:18:e4:64:4a:5e:62:56:a8:a3:ec:f4:f0: f3:1a:01:dd:29:c4:e3:5d:cd:32:48:7f:6e:c0:e1: ee:e5:1f:17:51:6f:da:c5:59:ff:6a:28:0f:ac:d8: e1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:54:90:90:10:A2:52:E3:E8:C7:FE:DF:E8:8C:37:25:0B:A4:D3:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/faa66475-4425-4e85-b798-e003ebb71081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:ac00::/48 Signature Algorithm: sha256WithRSAEncryption 40:c1:61:da:66:29:72:1e:5c:42:24:a7:66:32:3d:46:74:bf: 14:09:35:a1:c1:dd:1b:ef:e2:c0:88:d1:34:1d:90:8f:bb:dc: aa:2b:72:62:0f:63:fe:a3:05:b9:86:4c:3c:1f:5c:45:00:d0: 07:5a:d0:63:f1:c1:c2:a5:30:ff:5f:0b:d8:ad:7b:e9:f5:e8: 9c:ba:e9:af:be:1b:a4:c6:89:70:23:0e:1c:97:04:3e:de:e2: 75:52:74:28:52:0e:fa:19:98:16:94:d9:7c:e8:08:30:5c:95: 7c:eb:f7:d6:de:18:28:94:c0:4d:20:c2:22:84:93:f8:bc:3d: c4:15:6b:5e:9b:44:10:4c:f9:fb:47:a8:e0:b2:3d:11:00:6c: 22:33:bc:44:37:92:a1:6f:e8:ec:6f:a4:26:93:9a:61:b0:c2: e0:fd:c2:42:50:0e:93:b6:da:d8:26:ef:93:e0:45:de:e2:d2: e9:7c:81:8d:e0:7b:fe:8b:dc:be:ea:a9:d2:1c:87:f0:97:55: 4e:52:3c:06:32:43:48:6c:1a:bc:9f:7c:71:40:58:1e:53:69: 33:68:02:4a:dd:31:23:9e:ef:20:fa:1c:39:22:2f:6e:6c:d1: 03:e6:0c:e0:7f:40:4a:59:54:e6:7f:1b:d0:b6:79:39:fb:a7: e6:6e:3d:30 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAw9Ts77acAvj3HPHOUxZFqtNNrYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI1MTY1NDA1WhcNMjUwOTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTVmZmE0ZGRiMTliNzM4NzJkZDc2YjI0YzVhMmY0ODBi ZTI4NjYzYjEzMDFkODVlZmZkNWY2NzdmN2YzMDcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsuDJRLlPKX2H2iNwcS2dnLp6Jw4QAmMxwJU+9YcyjB1vN Jf26j7HqlgHKknX/VfLH8e+BC2IG1NTPEuJDP2GosvGeiQidDEZ7y8IzUDZHVX1b S/bUYqjbA54ukO0pzPrw75CDNPGiYb+tWL7RJdtD6y9QksFHd/MIwZ1m9/pCOaA3 QyYDIs//6kN1Qmn4snQr6yqUuyOr4tGC8NxQdKVfMxbg4I3HCiXgjvw6w4RokyR2 a3Ar3XXdc5HvVbJaJnBAkbD36NeLmtRg1eId5CdO+fs++xjkZEpeYlaoo+z08PMa Ad0pxONdzTJIf27A4e7lHxdRb9rFWf9qKA+s2OGhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUV1SQkBCiUuPox/7f6Iw3JQuk07gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhYTY2NDc1LTQ0MjUtNGU4NS1iNzk4LWUwMDNlYmI3MTA4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/srAAwDQYJKoZIhvcNAQELBQADggEBAEDBYdpmKXIeXEIkp2YyPUZ0 vxQJNaHB3Rvv4sCI0TQdkI+73KorcmIPY/6jBbmGTDwfXEUA0Ada0GPxwcKlMP9f C9ite+n16Jy66a++G6TGiXAjDhyXBD7e4nVSdChSDvoZmBaU2XzoCDBclXzr99be GCiUwE0gwiKEk/i8PcQVa16bRBBM+ftHqOCyPREAbCIzvEQ3kqFv6OxvpCaTmmGw wuD9wkJQDpO22tgm75PgRd7i0ul8gY3ge/6L3L7qqdIch/CXVU5SPAYyQ0hsGryf fHFAWB5TaTNoAkrdMSOe7yD6HDkiL25s0QPmDOB/QEpZVOZ/G9C2eTn7p+ZuPTA= -----END CERTIFICATE-----Generated at Sat Sep 6 14:14:44 2025 by rpki-client