$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15744b95-7e2b-4853-b31b-c5b2711a1a35.roa File: 15744b95-7e2b-4853-b31b-c5b2711a1a35.roa (raw, json) Hash identifier: lP/rzrXK0vAe0XAts1jh2DX2x7MYJOkJkyXHTuNqVAA= Subject key identifier: E1:1C:F6:5A:8A:E8:7D:05:EA:D4:47:D5:6E:67:67:6A:44:F1:D3:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 234970A147FF791C420DDD38C855736489D86542 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15744b95-7e2b-4853-b31b-c5b2711a1a35.roa Signing time: Mon 04 Aug 2025 16:32:13 +0000 ROA not before: Mon 04 Aug 2025 16:32:13 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f15:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:49:70:a1:47:ff:79:1c:42:0d:dd:38:c8:55:73:64:89:d8:65:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:32:13 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=a282a1653c87cb0675497f6c120ddcb64ce3fb2c9ae9cf3a6094587e59d96847, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:74:02:bb:fc:3b:b5:5e:cd:a6:b4:55:b4: 6a:1b:b5:12:a3:18:09:d7:30:25:d4:02:0d:28:59: ba:41:1a:71:a7:9e:22:70:b6:3c:61:cd:f5:ff:bc: 86:ff:87:c1:f3:98:ff:02:2e:80:23:74:43:fd:51: b6:88:21:76:3e:e5:c4:85:11:7d:e9:28:6f:e2:7a: 7c:76:cb:40:84:12:2e:d5:25:6b:75:d1:70:47:23: ae:fa:3c:40:c4:fa:57:f3:65:a2:62:63:c1:dc:84: 0b:16:0a:74:07:9b:5f:ea:04:70:6d:2f:f6:52:2f: 1e:ed:3d:78:15:f2:37:a5:23:f9:e8:9d:de:a8:e0: 3f:47:14:18:54:de:c4:dd:b8:98:49:fe:2d:2c:77: 0b:82:99:7e:2c:ac:0d:6d:19:a9:03:02:36:ff:4a: 46:0f:99:e2:12:77:c7:8d:f4:fd:35:23:ef:d6:44: 36:b2:8f:c8:4a:45:1c:68:69:d7:b0:4e:83:e1:3e: 9c:9d:3c:28:fe:a8:f1:7a:77:f1:d5:dd:8b:d7:a4: 9f:fe:cc:9e:8d:aa:ee:55:05:4d:92:30:89:88:f1: 33:c1:6c:bf:c1:17:4e:ee:81:b2:22:e0:66:02:42: 00:f4:6f:40:94:10:b6:fb:e1:8b:74:40:91:aa:57: 12:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1C:F6:5A:8A:E8:7D:05:EA:D4:47:D5:6E:67:67:6A:44:F1:D3:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15744b95-7e2b-4853-b31b-c5b2711a1a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f15:c00::/38 Signature Algorithm: sha256WithRSAEncryption 21:fe:ba:a8:55:ac:b2:59:a2:d8:e5:44:db:4c:ff:db:68:48: 2c:97:11:f7:6e:3f:6b:ec:bb:fe:ad:da:41:db:83:54:3b:f0: 8c:e6:b4:ad:ce:8f:4a:45:30:c3:11:3a:11:3f:d3:3a:09:07: e0:74:35:9c:d4:f8:3e:74:40:52:0a:98:ba:35:df:cc:51:a6: dd:c7:bf:32:db:fc:4a:2e:e6:0a:bc:a1:d9:13:d7:82:26:1d: a8:c4:a3:98:b7:96:42:22:31:c6:f4:21:62:49:4c:2c:94:99: b8:70:1b:20:21:ba:b1:20:e8:78:04:62:59:17:0b:fe:0f:6c: c9:b3:1d:24:64:a0:66:b3:6b:85:30:ae:e2:9e:0c:f6:5d:ac: 20:d1:d2:67:47:ab:09:86:f5:87:52:db:66:d4:01:2e:ba:ac: 37:9b:b5:c3:16:71:8f:11:9a:66:d2:4e:8b:c2:a0:97:30:e6: 7a:ff:ae:02:f7:14:f8:c0:d1:7c:3a:48:c1:14:e1:48:3c:c0: ef:e9:23:ef:0d:28:19:6c:9a:0a:d1:58:41:37:84:00:aa:55: b4:ed:c5:47:7f:6a:7a:fd:1d:b2:7a:f0:8b:38:cf:26:fd:70: d7:9d:c8:bd:d3:03:c4:1b:d1:3a:d4:4f:1c:f4:b2:1d:43:b6: c5:7a:fc:af -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUI0lwoUf/eRxCDd04yFVzZInYZUIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTYzMjEzWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjgyYTE2NTNjODdjYjA2NzU0OTdmNmMxMjBkZGNiNjRj ZTNmYjJjOWFlOWNmM2E2MDk0NTg3ZTU5ZDk2ODQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyYXQCu/w7tV7NprRVtGobtRKjGAnXMCXUAg0oWbpBGnGn niJwtjxhzfX/vIb/h8HzmP8CLoAjdEP9UbaIIXY+5cSFEX3pKG/ienx2y0CEEi7V JWt10XBHI676PEDE+lfzZaJiY8HchAsWCnQHm1/qBHBtL/ZSLx7tPXgV8jelI/no nd6o4D9HFBhU3sTduJhJ/i0sdwuCmX4srA1tGakDAjb/SkYPmeISd8eN9P01I+/W RDayj8hKRRxoadewToPhPpydPCj+qPF6d/HV3YvXpJ/+zJ6Nqu5VBU2SMImI8TPB bL/BF07ugbIi4GYCQgD0b0CUELb74Yt0QJGqVxLFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4Rz2WorofQXq1EfVbmdnakTx0xYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE1NzQ0Yjk1LTdlMmItNDg1My1iMzFiLWM1YjI3MTFhMWEzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8VDDANBgkqhkiG9w0BAQsFAAOCAQEAIf66qFWsslmi2OVE20z/22hI LJcR924/a+y7/q3aQduDVDvwjOa0rc6PSkUwwxE6ET/TOgkH4HQ1nNT4PnRAUgqY ujXfzFGm3ce/Mtv8Si7mCryh2RPXgiYdqMSjmLeWQiIxxvQhYklMLJSZuHAbICG6 sSDoeARiWRcL/g9sybMdJGSgZrNrhTCu4p4M9l2sINHSZ0erCYb1h1LbZtQBLrqs N5u1wxZxjxGaZtJOi8KglzDmev+uAvcU+MDRfDpIwRThSDzA7+kj7w0oGWyaCtFY QTeEAKpVtO3FR39qev0dsnrwizjPJv1w153IvdMDxBvROtRPHPSyHUO2xXr8rw== -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:31 2025 by rpki-client