$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17a487a1-809a-4c4e-b710-02ccfbd92294.roa File: 17a487a1-809a-4c4e-b710-02ccfbd92294.roa (raw, json) Hash identifier: +3+5rLK0kDR6wDuNqGo+DNVt5hzjeqemHLxy3vH9Sps= Subject key identifier: 0B:F4:AD:DC:F4:AD:5A:0D:70:71:7D:E7:4E:15:87:DE:3F:01:A8:49 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11AF3F7C04F896EE68B1746C7950B2E6582953DE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17a487a1-809a-4c4e-b710-02ccfbd92294.roa Signing time: Mon 04 Aug 2025 15:20:16 +0000 ROA not before: Mon 04 Aug 2025 15:20:16 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:af:3f:7c:04:f8:96:ee:68:b1:74:6c:79:50:b2:e6:58:29:53:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 15:20:16 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=75279a13d6239998b5cc454ab8d2d84783ba06e7baeda1f3e1f3aeb619a5ae16, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:80:39:58:81:66:e3:86:1f:f4:14:33:c7: f1:9c:2b:f6:e5:cf:48:36:29:5d:e8:11:22:c0:c4: 94:87:a6:58:e1:ed:2a:34:48:ab:01:f8:c0:8e:1a: b7:b1:c2:42:77:03:49:54:1d:a9:ce:c9:71:38:4d: f4:56:b5:bc:bf:d0:cd:62:4e:04:bc:d8:b2:6a:47: 96:01:77:fe:0e:b3:4e:1f:38:74:ee:9f:ce:98:63: 91:49:54:30:15:cf:4d:c7:5d:ea:fc:2e:51:6a:39: 3a:17:36:2c:66:80:7e:a2:89:d4:ba:9f:44:08:11: 51:db:4d:6a:68:68:4d:03:3e:7c:51:06:91:46:53: 50:7f:4f:3d:10:3e:53:00:0b:65:f4:07:82:8e:d8: 31:13:0e:7a:72:26:b7:51:11:92:df:81:d3:e2:21: 7d:0a:48:64:2b:c1:83:f0:b9:38:6b:27:8d:3d:5b: 8d:e8:7d:ce:80:a8:cd:c3:06:82:37:35:65:59:d3: 5c:ca:29:07:14:44:92:c1:15:17:47:25:21:c0:af: e1:50:65:12:64:49:6e:50:7d:aa:da:24:fb:ca:6d: bc:39:a3:70:5a:c5:d2:49:e7:25:3b:22:a9:99:a1: ab:f2:d3:04:bd:ef:d3:44:e6:f8:4a:1f:1e:fc:1e: 36:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F4:AD:DC:F4:AD:5A:0D:70:71:7D:E7:4E:15:87:DE:3F:01:A8:49 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17a487a1-809a-4c4e-b710-02ccfbd92294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8080::/48 Signature Algorithm: sha256WithRSAEncryption 12:9a:57:51:2c:70:00:6d:27:c8:28:12:ed:d7:ab:d8:f7:87: 41:53:bc:39:7f:7d:4f:d7:5d:31:5a:40:82:81:0b:29:e8:0b: ba:0c:77:95:13:e5:a0:30:a2:f1:04:be:2a:90:98:c4:30:05: b9:36:57:8d:f8:e1:3f:63:29:d3:99:91:27:01:03:8b:45:68: ff:0f:3a:54:19:16:da:50:f9:53:a8:e7:17:9c:41:4a:d6:9e: be:28:9b:06:2e:fa:ff:3c:a9:89:b3:a0:e8:36:d2:e8:bf:d7: ca:5f:05:b5:dc:6d:35:d4:3c:04:6a:26:09:b0:30:af:a8:f0: fe:84:ef:a6:65:28:ea:05:1b:58:9d:ba:6c:63:2a:81:1f:92: d2:79:70:2f:f5:74:c7:0c:d5:0a:63:6f:ea:6d:8e:df:9f:8e: 29:72:57:74:51:11:d2:7b:88:6d:56:ac:94:e1:46:bc:9a:4f: 72:53:8f:4b:8d:5c:db:02:cf:ea:c3:89:e0:0c:e9:ce:49:53: e6:7d:fa:bf:3b:1a:cf:87:f2:02:a8:71:7f:8a:78:16:be:fb: a5:62:53:e0:2b:9e:de:b4:e7:fc:cc:de:ff:49:3b:07:1b:66: d9:df:f3:b9:9f:7a:8a:36:f9:24:32:c2:75:11:89:43:85:2a: be:5a:53:e4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEa8/fAT4lu5osXRseVCy5lgpU94wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTUyMDE2WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTI3OWExM2Q2MjM5OTk4YjVjYzQ1NGFiOGQyZDg0Nzgz YmEwNmU3YmFlZGExZjNlMWYzYWViNjE5YTVhZTE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5j4A5WIFm44Yf9BQzx/GcK/blz0g2KV3oESLAxJSHpljh 7So0SKsB+MCOGrexwkJ3A0lUHanOyXE4TfRWtby/0M1iTgS82LJqR5YBd/4Os04f OHTun86YY5FJVDAVz03HXer8LlFqOToXNixmgH6iidS6n0QIEVHbTWpoaE0DPnxR BpFGU1B/Tz0QPlMAC2X0B4KO2DETDnpyJrdREZLfgdPiIX0KSGQrwYPwuThrJ409 W43ofc6AqM3DBoI3NWVZ01zKKQcURJLBFRdHJSHAr+FQZRJkSW5QfaraJPvKbbw5 o3BaxdJJ5yU7IqmZoavy0wS979NE5vhKHx78HjYPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUC/St3PStWg1wcX3nThWH3j8BqEkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3YTQ4N2ExLTgwOWEtNGM0ZS1iNzEwLTAyY2NmYmQ5MjI5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gIAwDQYJKoZIhvcNAQELBQADggEBABKaV1EscABtJ8goEu3Xq9j3 h0FTvDl/fU/XXTFaQIKBCynoC7oMd5UT5aAwovEEviqQmMQwBbk2V4344T9jKdOZ kScBA4tFaP8POlQZFtpQ+VOo5xecQUrWnr4omwYu+v88qYmzoOg20ui/18pfBbXc bTXUPARqJgmwMK+o8P6E76ZlKOoFG1idumxjKoEfktJ5cC/1dMcM1Qpjb+ptjt+f jilyV3RREdJ7iG1WrJThRryaT3JTj0uNXNsCz+rDieAM6c5JU+Z9+r87Gs+H8gKo cX+KeBa++6ViU+Arnt605/zM3v9JOwcbZtnf87mfeoo2+SQywnURiUOFKr5aU+Q= -----END CERTIFICATE-----Generated at Sat Aug 23 08:29:52 2025 by rpki-client