$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa File: 09200eb5-786c-452c-91b5-6e7b43daf2f1.roa (raw, json) Hash identifier: tXBT1HvfsuI21exe7MBs9nP36yVhdRjyFQNQEeuqjLw= Subject key identifier: F5:E0:D9:52:DC:3A:8C:2E:BA:16:88:58:0A:EF:8C:77:05:AF:CE:02 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 47543F4F5A5CC44E70A6A755B6D862D9684D970B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa Signing time: Mon 23 Jun 2025 15:20:27 +0000 ROA not before: Mon 23 Jun 2025 15:20:27 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:54:3f:4f:5a:5c:c4:4e:70:a6:a7:55:b6:d8:62:d9:68:4d:97:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 15:20:27 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=4a679c9bebaf932510671cd09fcb73abc26f0a46d1fb56b986626937cc2efcdd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:73:4f:bc:05:93:0d:97:b7:4c:d5:ac:2c:00: 19:0a:f6:cc:3c:17:01:32:a9:40:5e:f6:04:0f:43: ad:4a:6a:d3:f6:c2:8d:3c:67:71:a0:02:9b:9a:e4: 65:08:ff:67:5c:27:45:30:42:c1:58:16:28:33:14: 7b:3d:83:36:e9:ae:40:b1:0f:0e:69:20:db:8b:a1: 9e:c3:91:cc:e9:c3:99:2a:f9:59:c5:e5:81:fd:8d: ee:73:ca:e5:fc:31:5d:aa:1e:88:da:68:03:0c:87: eb:51:42:8a:3c:7e:ee:ec:7e:92:0c:85:03:6e:a0: b7:35:7d:b2:1d:6d:be:f8:f8:21:8d:7e:f4:50:d0: 62:41:ec:c9:7f:92:4e:03:9c:ad:9f:1f:f0:fa:27: 98:c9:0e:63:50:0d:6d:5f:c6:6c:67:38:9f:15:2a: 83:ba:1f:16:0e:c3:80:3a:e8:a3:c5:3e:cd:eb:88: bd:e0:03:88:43:bb:e3:f0:3a:3a:37:43:53:cb:d8: 41:b6:97:07:d1:b6:68:8c:c9:86:33:39:37:8d:cc: 57:a6:d1:d4:d4:6d:0d:e7:14:d1:a8:d3:51:0e:e1: d3:de:66:83:4f:50:ac:8a:25:c6:00:1e:ab:49:4c: 5e:c9:b8:51:eb:23:4e:62:36:b5:0b:ad:d2:9d:b6: 1a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E0:D9:52:DC:3A:8C:2E:BA:16:88:58:0A:EF:8C:77:05:AF:CE:02 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2e::/36 Signature Algorithm: sha256WithRSAEncryption 5f:85:98:a2:ea:99:8f:e9:93:1b:38:4e:3b:8d:f9:af:42:3b: 86:1f:23:6e:b8:e2:72:60:af:bd:a7:51:89:a2:2f:c6:8f:ca: f6:52:01:21:a5:69:16:07:5f:2a:21:a9:bc:d0:d5:52:d4:d3: 0e:7d:be:af:fa:b3:6c:ba:a1:36:c6:6a:ef:90:4d:08:ba:a8: f7:01:bb:5f:39:35:c5:26:3d:61:6d:a2:56:95:f2:d1:2c:64: 1f:7c:4a:3f:0e:86:54:2c:73:37:b8:ff:9d:60:39:f7:42:c0: ba:57:48:6b:c5:8f:fd:7d:29:d0:c4:7c:0e:69:69:26:cf:69: a8:52:89:2d:d4:06:aa:48:86:96:68:17:8a:2a:43:b8:43:db: c3:de:6f:23:8b:d3:eb:75:a3:a1:8b:66:51:a0:95:86:2e:fb: 91:38:d6:b9:b0:f9:ff:a0:46:bd:f8:23:a8:78:38:a9:e1:1c: ce:d6:d3:a8:04:05:81:a2:75:48:df:8a:f9:5b:74:ec:e3:2d: b4:ae:0a:90:06:23:85:96:1e:f4:94:69:3d:3c:38:f7:01:f5: c2:5c:03:96:e9:6e:02:48:80:ed:f9:24:6b:c9:34:24:4c:58: 6f:75:86:98:f6:15:db:7c:eb:14:e2:68:e8:dd:3a:ff:c2:7a: f1:8b:9a:65 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUR1Q/T1pcxE5wpqdVtthi2WhNlwswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIzMTUyMDI3WhcNMjUwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTY3OWM5YmViYWY5MzI1MTA2NzFjZDA5ZmNiNzNhYmMy NmYwYTQ2ZDFmYjU2Yjk4NjYyNjkzN2NjMmVmY2RkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbc0+8BZMNl7dM1awsABkK9sw8FwEyqUBe9gQPQ61KatP2 wo08Z3GgApua5GUI/2dcJ0UwQsFYFigzFHs9gzbprkCxDw5pINuLoZ7Dkczpw5kq +VnF5YH9je5zyuX8MV2qHojaaAMMh+tRQoo8fu7sfpIMhQNuoLc1fbIdbb74+CGN fvRQ0GJB7Ml/kk4DnK2fH/D6J5jJDmNQDW1fxmxnOJ8VKoO6HxYOw4A66KPFPs3r iL3gA4hDu+PwOjo3Q1PL2EG2lwfRtmiMyYYzOTeNzFem0dTUbQ3nFNGo01EO4dPe ZoNPUKyKJcYAHqtJTF7JuFHrI05iNrULrdKdthr9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9eDZUtw6jC66FohYCu+MdwWvzgIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA5MjAwZWI1LTc4NmMtNDUyYy05MWI1LTZlN2I0M2RhZjJmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8uADANBgkqhkiG9w0BAQsFAAOCAQEAX4WYouqZj+mTGzhOO435r0I7 hh8jbrjicmCvvadRiaIvxo/K9lIBIaVpFgdfKiGpvNDVUtTTDn2+r/qzbLqhNsZq 75BNCLqo9wG7Xzk1xSY9YW2iVpXy0SxkH3xKPw6GVCxzN7j/nWA590LAuldIa8WP /X0p0MR8DmlpJs9pqFKJLdQGqkiGlmgXiipDuEPbw95vI4vT63WjoYtmUaCVhi77 kTjWubD5/6BGvfgjqHg4qeEcztbTqAQFgaJ1SN+K+Vt07OMttK4KkAYjhZYe9JRp PTw49wH1wlwDluluAkiA7fkka8k0JExYb3WGmPYV23zrFOJo6N06/8J68YuaZQ== -----END CERTIFICATE-----Generated at Sun Jun 29 07:29:00 2025 by rpki-client