$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d135eb9-4879-4568-98c1-f37c5449cc5a.roa File: 3d135eb9-4879-4568-98c1-f37c5449cc5a.roa (raw, json) Hash identifier: 73XCkJHALBF4ScVvxU0ejrPozVYZVC2jwnODUipMJTQ= Subject key identifier: D3:C7:02:FD:67:18:2C:F8:7D:74:4B:80:6C:D2:B3:3E:06:3F:7A:05 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 20FBB14DD494720E7D1756E14325F7B7487E322C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d135eb9-4879-4568-98c1-f37c5449cc5a.roa Signing time: Tue 24 Jun 2025 00:10:59 +0000 ROA not before: Tue 24 Jun 2025 00:10:59 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:818f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fb:b1:4d:d4:94:72:0e:7d:17:56:e1:43:25:f7:b7:48:7e:32:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:10:59 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=01e911101e66f09a99e6cb73f3c99633cd3b35ab73e58c4261884a3a93c1eee6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:58:13:88:0a:10:44:db:fd:6a:3c:4f:35: 0e:21:63:c9:b8:56:35:4f:4b:8c:c2:aa:81:32:c1: 5a:22:3c:72:30:a0:55:c5:8f:89:39:8e:75:17:65: e7:ff:31:e6:e7:31:1f:8e:98:e6:05:3d:5e:ee:a1: aa:f0:b9:ba:35:78:15:bf:28:bc:ab:14:49:a9:3a: fb:af:64:e6:a4:e7:e8:a5:04:97:18:a6:bd:61:4a: 52:48:69:fb:d0:5d:cc:2b:11:5e:62:80:7d:89:e2: 36:87:b6:4c:c9:ac:d1:9d:47:8d:6f:cd:56:77:e4: bb:0f:6e:b9:58:e8:0a:72:f0:87:86:f9:73:7e:21: 94:62:ac:b1:7c:a9:42:4e:b9:96:fe:70:79:af:4f: 61:eb:94:02:aa:e3:e1:4d:a6:93:7a:d5:60:cf:23: 47:8d:35:ca:51:bd:f7:3e:62:2d:bb:2a:80:11:36: a0:98:eb:34:d9:67:a0:38:f8:8f:c7:83:26:f0:f0: 6c:94:fa:ef:2a:ea:4e:08:c7:29:92:e6:5d:ba:a7: 06:5e:b7:a0:a8:d4:6d:7b:2a:6b:58:0a:39:6b:9d: bd:17:ad:6a:81:fd:24:ac:19:d4:c9:d7:62:0b:be: 77:6a:12:96:ab:d1:c5:e6:51:5e:6f:6a:cb:44:da: 78:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C7:02:FD:67:18:2C:F8:7D:74:4B:80:6C:D2:B3:3E:06:3F:7A:05 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d135eb9-4879-4568-98c1-f37c5449cc5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:818f::/48 Signature Algorithm: sha256WithRSAEncryption 0c:4b:cd:47:8e:57:be:66:35:18:76:3c:1d:6e:3e:c1:28:71: a4:9e:0b:2c:7d:01:21:a8:f6:3a:dc:bf:f1:bc:7b:3f:dc:bf: ad:df:7a:92:8d:aa:b9:5b:09:da:39:52:31:07:bc:70:c9:63: ff:10:72:7d:db:d7:20:5a:01:12:d4:d1:f8:ca:18:ef:f8:3f: e3:f8:e1:4b:2d:ac:83:d5:32:b3:c2:1d:29:2a:0b:c4:78:d7: d5:c0:15:ad:34:66:8f:3d:5f:e0:07:8d:8f:40:4e:fd:48:99: e3:3a:77:e5:aa:fc:74:c8:70:73:04:da:55:34:40:14:57:b5: a1:60:ab:78:76:1f:34:f8:16:cf:c6:c7:48:5c:4f:73:e7:8a: 98:b7:bc:5c:1e:07:ae:e3:ce:fa:2a:86:8c:e4:1a:f6:26:43: 99:26:d5:62:63:fe:cc:a9:a4:01:be:05:66:eb:f4:dc:a4:3d: 2b:81:74:98:29:aa:f3:e6:dd:e5:0d:3a:69:1d:c3:ab:8c:7c: 29:cd:42:40:d5:d7:93:e3:d5:47:e4:00:5a:18:f8:14:ff:b8: 76:81:2b:7f:16:76:49:fd:41:6b:c9:1f:41:a7:1c:ad:fd:9e: bb:f1:08:fe:6f:a6:06:18:86:81:4e:63:40:d0:f4:20:eb:5a: c4:8b:33:06 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIPuxTdSUcg59F1bhQyX3t0h+MiwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDAxMDU5WhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMWU5MTExMDFlNjZmMDlhOTllNmNiNzNmM2M5OTYzM2Nk M2IzNWFiNzNlNThjNDI2MTg4NGEzYTkzYzFlZWU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtC1gTiAoQRNv9ajxPNQ4hY8m4VjVPS4zCqoEywVoiPHIw oFXFj4k5jnUXZef/MebnMR+OmOYFPV7uoarwubo1eBW/KLyrFEmpOvuvZOak5+il BJcYpr1hSlJIafvQXcwrEV5igH2J4jaHtkzJrNGdR41vzVZ35LsPbrlY6Apy8IeG +XN+IZRirLF8qUJOuZb+cHmvT2HrlAKq4+FNppN61WDPI0eNNcpRvfc+Yi27KoAR NqCY6zTZZ6A4+I/Hgybw8GyU+u8q6k4IxymS5l26pwZet6Co1G17KmtYCjlrnb0X rWqB/SSsGdTJ12ILvndqEpar0cXmUV5vastE2nh7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU08cC/WcYLPh9dEuAbNKzPgY/egUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkMTM1ZWI5LTQ4NzktNDU2OC05OGMxLWYzN2M1NDQ5Y2M1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gY8wDQYJKoZIhvcNAQELBQADggEBAAxLzUeOV75mNRh2PB1uPsEo caSeCyx9ASGo9jrcv/G8ez/cv63fepKNqrlbCdo5UjEHvHDJY/8Qcn3b1yBaARLU 0fjKGO/4P+P44UstrIPVMrPCHSkqC8R419XAFa00Zo89X+AHjY9ATv1ImeM6d+Wq /HTIcHME2lU0QBRXtaFgq3h2HzT4Fs/Gx0hcT3Pnipi3vFweB67jzvoqhozkGvYm Q5km1WJj/syppAG+BWbr9NykPSuBdJgpqvPm3eUNOmkdw6uMfCnNQkDV15Pj1Ufk AFoY+BT/uHaBK38Wdkn9QWvJH0GnHK39nrvxCP5vpgYYhoFOY0DQ9CDrWsSLMwY= -----END CERTIFICATE-----Generated at Wed Jul 2 19:26:30 2025 by rpki-client