$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb3020c0-5769-4801-876b-451f887bfe1b.roa File: fb3020c0-5769-4801-876b-451f887bfe1b.roa (raw, json) Hash identifier: Sy2M0xcazxUSOrYIfsqeIv4+q8ldcCZNSltyaJPg/g8= Subject key identifier: 60:38:78:21:B4:FA:68:65:E9:9C:50:75:72:A0:36:D3:F6:EE:29:B1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2154F4749D60C885A7D9E50B6F0023BC65137C54 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb3020c0-5769-4801-876b-451f887bfe1b.roa Signing time: Tue 26 Aug 2025 15:31:38 +0000 ROA not before: Tue 26 Aug 2025 15:31:38 +0000 ROA not after: Tue 30 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:8060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:54:f4:74:9d:60:c8:85:a7:d9:e5:0b:6f:00:23:bc:65:13:7c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 26 15:31:38 2025 GMT Not After : Sep 30 23:59:59 2025 GMT Subject: serialNumber=d5db6ee3acfbc15201bea23738619b77fb71c4e7f6174ec6faac0362b653b720, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:17:f8:8a:b3:9f:55:01:2e:7b:55:93:23: 5e:cf:88:3f:03:f4:37:73:a8:91:9d:8c:a7:ff:65: 15:68:17:7a:dd:81:8d:54:11:54:a9:03:cb:1b:d1: db:64:38:8d:ea:cc:74:45:89:bc:e1:2f:e2:c3:5e: e6:6b:02:cc:eb:03:0f:0f:6d:1e:6b:fe:e8:7c:5c: d1:6d:4c:d4:9e:9d:48:c4:72:c9:88:50:10:38:35: fc:9e:53:5a:98:da:40:38:c3:ee:d5:c4:65:75:0a: 3f:80:68:a5:55:18:cf:0c:1a:06:2e:c9:49:b0:83: 38:cd:4a:c3:b5:87:4a:24:87:8d:74:88:79:77:43: 54:19:e7:33:44:e8:81:b3:37:61:4c:bd:72:f7:c2: 5c:3e:e6:7b:38:ef:7f:a1:0d:4d:15:19:e0:44:fa: 8e:32:56:d1:8f:79:eb:1c:3a:cb:90:ea:30:ae:0e: 1c:ee:c6:d9:40:ea:3d:24:af:ee:43:30:3b:d5:b8: 32:5b:29:1b:d9:fa:de:81:5c:7d:09:db:0e:32:bd: 38:3c:4b:b7:fa:99:3c:5e:5f:38:c8:49:1b:a9:ad: 36:24:b9:c0:8c:f9:e2:eb:d2:a3:cf:b7:5c:d7:e6: 22:a3:2c:0d:26:fa:5b:ec:8c:38:ea:6c:c2:90:a5: 14:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:38:78:21:B4:FA:68:65:E9:9C:50:75:72:A0:36:D3:F6:EE:29:B1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb3020c0-5769-4801-876b-451f887bfe1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8060::/48 Signature Algorithm: sha256WithRSAEncryption 21:df:36:63:0e:78:0d:d7:c1:aa:ab:48:09:36:64:ed:a5:23: c9:97:f7:5a:4f:b5:1c:be:af:ce:f7:69:ed:83:4c:61:5b:3f: 63:fa:7e:25:90:87:4c:09:f7:5f:f3:45:76:b2:fa:9d:c9:6b: 14:c9:6a:31:36:32:0e:ac:05:e9:62:40:64:e8:af:7f:78:bf: d4:6b:16:c4:b3:d3:84:57:a2:b4:60:8f:f8:76:5f:ad:4c:7a: bc:d4:dc:38:4d:b3:1d:55:b0:32:34:02:9f:69:10:fe:ce:55: 95:6e:ac:50:ce:14:73:11:d5:42:47:53:20:9d:63:ae:28:67: 90:67:b6:cd:83:bb:e6:e0:42:4d:82:cf:37:ce:28:c8:ec:7f: b3:64:40:ab:5a:f0:6d:21:9c:ce:48:65:f6:96:cd:56:33:58: 0b:0d:80:00:a4:cb:a4:37:0f:df:f3:c8:b1:2e:56:c4:6d:2d: e5:20:f7:38:c7:92:a1:ea:d4:68:37:12:87:75:14:98:4e:03: 28:f1:c0:d2:4b:bc:f8:75:3e:a1:16:b5:d4:cb:2a:62:ee:06: 39:86:7e:ac:e5:6d:0f:e9:b4:76:6e:47:74:52:14:d5:41:6f: 93:93:b3:7e:e0:47:70:20:a7:89:1f:27:c6:2e:7b:c9:54:93: d7:6a:e1:a6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIVT0dJ1gyIWn2eULbwAjvGUTfFQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODI2MTUzMTM4WhcNMjUwOTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWRiNmVlM2FjZmJjMTUyMDFiZWEyMzczODYxOWI3N2Zi NzFjNGU3ZjYxNzRlYzZmYWFjMDM2MmI2NTNiNzIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6kRf4irOfVQEue1WTI17PiD8D9DdzqJGdjKf/ZRVoF3rd gY1UEVSpA8sb0dtkOI3qzHRFibzhL+LDXuZrAszrAw8PbR5r/uh8XNFtTNSenUjE csmIUBA4NfyeU1qY2kA4w+7VxGV1Cj+AaKVVGM8MGgYuyUmwgzjNSsO1h0okh410 iHl3Q1QZ5zNE6IGzN2FMvXL3wlw+5ns473+hDU0VGeBE+o4yVtGPeescOsuQ6jCu DhzuxtlA6j0kr+5DMDvVuDJbKRvZ+t6BXH0J2w4yvTg8S7f6mTxeXzjISRuprTYk ucCM+eLr0qPPt1zX5iKjLA0m+lvsjDjqbMKQpRRrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYDh4IbT6aGXpnFB1cqA20/buKbEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZiMzAyMGMwLTU3NjktNDgwMS04NzZiLTQ1MWY4ODdiZmUxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgGAwDQYJKoZIhvcNAQELBQADggEBACHfNmMOeA3XwaqrSAk2ZO2l I8mX91pPtRy+r873ae2DTGFbP2P6fiWQh0wJ91/zRXay+p3JaxTJajE2Mg6sBeli QGTor394v9RrFsSz04RXorRgj/h2X61MerzU3DhNsx1VsDI0Ap9pEP7OVZVurFDO FHMR1UJHUyCdY64oZ5Bnts2Du+bgQk2CzzfOKMjsf7NkQKta8G0hnM5IZfaWzVYz WAsNgACky6Q3D9/zyLEuVsRtLeUg9zjHkqHq1Gg3Eod1FJhOAyjxwNJLvPh1PqEW tdTLKmLuBjmGfqzlbQ/ptHZuR3RSFNVBb5OTs37gR3Agp4kfJ8Yue8lUk9dq4aY= -----END CERTIFICATE-----Generated at Sat Sep 6 14:19:55 2025 by rpki-client