$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/479d03c1-bbe0-4d19-80da-b46973f364ea.roa File: 479d03c1-bbe0-4d19-80da-b46973f364ea.roa (raw, json) Hash identifier: dyTN4t8eORbkxHEXpNpipzPDkLrV1bLuW9VjeB+X4iU= Subject key identifier: 48:DB:4A:2E:9F:B4:B2:7C:AD:CC:39:77:32:54:D1:85:78:64:DC:5B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 323FB78037CFF1BE454FE16962AD1304E00C90BB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/479d03c1-bbe0-4d19-80da-b46973f364ea.roa Signing time: Fri 08 Aug 2025 00:10:31 +0000 ROA not before: Fri 08 Aug 2025 00:10:31 +0000 ROA not after: Fri 12 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fec:b400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3f:b7:80:37:cf:f1:be:45:4f:e1:69:62:ad:13:04:e0:0c:90:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 8 00:10:31 2025 GMT Not After : Sep 12 23:59:59 2025 GMT Subject: serialNumber=f2fa63af63fc32cc9cfab47a23e22614a1b0d556e7d894b0824449db563cc3c9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:24:78:90:4d:cf:7e:17:0d:03:1b:6f:06: 3d:d3:ba:aa:de:7a:d0:34:db:d9:ee:d8:a8:d1:58: 82:32:2b:36:0f:ed:85:1f:9b:40:a2:91:bb:2b:ab: 26:02:9d:7b:7a:d7:87:4b:bf:21:37:4c:bf:e8:67: da:c5:2a:fa:28:3b:aa:57:39:ee:f8:8a:48:87:f9: 4a:04:d4:e6:5f:9f:57:f3:f1:20:a2:8c:5e:05:25: ce:5f:d3:32:57:6e:ce:2a:db:34:e8:99:2c:c7:eb: be:47:80:42:4d:79:79:81:e1:f1:ca:af:2e:c3:df: 14:66:3a:01:90:db:d7:22:f6:76:72:59:0a:8c:ae: eb:48:9d:70:75:f4:57:3d:0f:b3:f6:22:7d:1b:ac: 04:b5:1b:9b:07:f4:08:bc:69:39:68:11:f8:87:ef: fd:f3:37:54:41:85:6b:c5:fd:c6:da:71:e5:7e:0a: 78:c6:c8:aa:25:7f:7d:af:31:de:85:de:d6:1f:93: 22:bb:b2:2b:4b:d7:7b:f9:c1:99:71:f9:3f:f8:40: 7b:af:01:a0:fa:61:ec:65:1b:bd:b4:04:07:cf:fb: 02:2d:0e:3d:7b:8b:35:38:d9:40:0f:ef:d8:3c:9f: 93:1d:02:11:17:5a:1e:b1:29:67:3c:3d:1e:de:7e: 67:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DB:4A:2E:9F:B4:B2:7C:AD:CC:39:77:32:54:D1:85:78:64:DC:5B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/479d03c1-bbe0-4d19-80da-b46973f364ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fec:b400::/48 Signature Algorithm: sha256WithRSAEncryption 4b:08:74:64:b5:c4:8a:b5:2f:57:f8:08:f7:0e:d7:73:0a:af: 34:af:f7:a9:de:ea:e4:da:88:ee:7c:3c:c3:7e:78:69:83:67: f8:88:36:f7:84:25:c2:be:00:64:6a:32:60:56:61:e0:44:cb: 6c:4f:12:bf:50:25:bd:cc:8f:1a:ae:cf:09:40:7a:55:5a:45: 31:5e:28:fc:88:ce:1a:6f:35:fc:5d:74:d8:93:dc:b1:59:47: ee:7a:21:ae:ea:8f:1d:30:89:21:66:1a:3d:3e:ba:8b:5a:f3: 6e:ae:78:ff:13:79:d6:4b:53:68:43:5a:3f:71:35:f9:57:c9: e2:46:e9:d5:51:cd:d4:8a:96:31:ba:ea:b6:0e:fd:8b:f0:5d: 0f:46:65:76:8f:e0:6c:2a:03:c4:49:5d:9c:f2:2d:4b:b9:9d: 88:81:d1:d6:45:b9:c9:e4:ce:79:04:ff:58:f5:52:da:9a:e5: 0b:0f:e6:5e:0b:20:d5:e0:c9:0d:77:1c:52:07:9f:d8:96:88: 1d:ce:0e:d4:c6:71:63:5a:e0:82:1e:d1:0d:be:a7:28:4d:db: 11:82:f2:ae:2e:c6:d1:6d:f4:8f:80:9a:ae:cf:ed:e9:ca:c0: b3:12:76:9d:3e:ae:74:d0:c7:8b:4d:8f:a6:a1:61:78:e4:07: 03:33:71:06 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMj+3gDfP8b5FT+FpYq0TBOAMkLswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA4MDAxMDMxWhcNMjUwOTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmZhNjNhZjYzZmMzMmNjOWNmYWI0N2EyM2UyMjYxNGEx YjBkNTU2ZTdkODk0YjA4MjQ0NDlkYjU2M2NjM2M5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQPSR4kE3PfhcNAxtvBj3TuqreetA029nu2KjRWIIyKzYP 7YUfm0CikbsrqyYCnXt614dLvyE3TL/oZ9rFKvooO6pXOe74ikiH+UoE1OZfn1fz 8SCijF4FJc5f0zJXbs4q2zTomSzH675HgEJNeXmB4fHKry7D3xRmOgGQ29ci9nZy WQqMrutInXB19Fc9D7P2In0brAS1G5sH9Ai8aTloEfiH7/3zN1RBhWvF/cbaceV+ CnjGyKolf32vMd6F3tYfkyK7sitL13v5wZlx+T/4QHuvAaD6YexlG720BAfP+wIt Dj17izU42UAP79g8n5MdAhEXWh6xKWc8PR7efmdtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSNtKLp+0snytzDl3MlTRhXhk3FswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3OWQwM2MxLWJiZTAtNGQxOS04MGRhLWI0Njk3M2YzNjRlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/stAAwDQYJKoZIhvcNAQELBQADggEBAEsIdGS1xIq1L1f4CPcO13MK rzSv96ne6uTaiO58PMN+eGmDZ/iINveEJcK+AGRqMmBWYeBEy2xPEr9QJb3Mjxqu zwlAelVaRTFeKPyIzhpvNfxddNiT3LFZR+56Ia7qjx0wiSFmGj0+uota826ueP8T edZLU2hDWj9xNflXyeJG6dVRzdSKljG66rYO/YvwXQ9GZXaP4GwqA8RJXZzyLUu5 nYiB0dZFucnkznkE/1j1Utqa5QsP5l4LINXgyQ13HFIHn9iWiB3ODtTGcWNa4IIe 0Q2+pyhN2xGC8q4uxtFt9I+Amq7P7enKwLMSdp0+rnTQx4tNj6ahYXjkBwMzcQY= -----END CERTIFICATE-----Generated at Sat Aug 23 08:18:06 2025 by rpki-client