$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/866a68a9-989e-463b-be1d-493465d7a0ab.roa File: 866a68a9-989e-463b-be1d-493465d7a0ab.roa (raw, json) Hash identifier: cd2VIhRImRXxghSz8hNyP6/VCpLZVowcrTRGdbQLaps= Subject key identifier: F3:92:0E:C2:CC:FC:F4:D3:49:C3:A1:85:2F:2C:AD:CF:D2:80:D2:83 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39127E534018FAF3BE3BD782A412ABFDF8A96C43 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/866a68a9-989e-463b-be1d-493465d7a0ab.roa Signing time: Mon 23 Jun 2025 15:12:36 +0000 ROA not before: Mon 23 Jun 2025 15:12:36 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ffa:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:12:7e:53:40:18:fa:f3:be:3b:d7:82:a4:12:ab:fd:f8:a9:6c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 15:12:36 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=fe04ca0f9a991961dacffec536b5e7cddd26297c8660908b9086a6a81265d170, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a5:83:5d:6b:f8:b8:db:7a:d8:14:ae:87:d3: 4b:d1:77:82:08:1b:12:4e:50:a9:21:84:ee:f3:fa: 2d:79:96:3e:08:37:8a:89:a5:c7:ad:a3:a9:d0:a4: bb:7b:94:69:79:13:69:75:d2:96:c9:b0:d3:f1:54: a6:9c:df:8a:9e:6e:6a:d7:45:c9:2e:32:ec:41:a8: e1:6b:99:20:6b:a8:f5:73:8e:20:97:95:b4:50:76: 4f:71:3c:8a:46:b6:7c:c2:1b:fb:1b:9e:d8:06:07: de:90:c5:f9:81:b5:fc:85:84:18:8a:bb:de:70:13: fc:fa:27:60:a8:c4:1d:a2:a5:b6:d0:25:2e:63:03: 04:f0:2c:98:7c:5a:9b:bd:3b:45:d1:50:b4:d7:40: 9a:5f:05:94:b1:3e:ea:a3:57:a6:28:fe:5e:57:f5: 0a:0d:02:ac:3c:bc:cc:26:16:d5:2a:1f:63:35:bd: 5f:dd:bf:c8:2b:f4:e3:db:c8:86:c6:d7:14:ac:3a: 32:da:fd:b9:2b:87:d6:0b:9a:f6:cc:34:a7:98:6b: ac:a0:a8:da:c9:c6:45:0f:6b:ee:06:df:9e:c9:ed: 96:ad:67:74:08:1d:6c:d1:8d:74:78:cb:57:96:c6: 9b:7e:39:73:8b:7e:a4:d7:6f:81:55:bc:c7:a6:29: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:92:0E:C2:CC:FC:F4:D3:49:C3:A1:85:2F:2C:AD:CF:D2:80:D2:83 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/866a68a9-989e-463b-be1d-493465d7a0ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffa:2000::/40 Signature Algorithm: sha256WithRSAEncryption 3c:17:92:f7:70:80:1b:16:65:e1:8e:4a:ff:f4:d7:e4:04:f5: 6f:ee:97:3a:2d:b6:6a:fb:42:84:12:62:f0:49:fd:a8:b1:27: 5e:19:a8:9e:03:c2:06:7b:d2:72:72:5d:47:3f:32:bd:f3:07: cf:51:74:76:87:3f:e1:37:f9:32:cd:89:a3:4f:08:23:bb:3c: 3c:5a:cc:1e:f8:71:3f:11:76:24:24:d7:ff:ad:29:fa:94:8f: 15:cb:01:b7:b9:82:51:ff:69:e0:97:cc:2b:9f:ba:ce:a1:cc: ac:ac:88:a2:2c:4d:8f:cf:bf:ed:58:2d:82:c8:bd:ee:d4:ab: 8e:1e:5b:94:09:7a:a6:3b:60:41:9a:ab:1c:64:eb:8a:19:b0: ff:39:1a:af:8c:87:c9:01:76:9e:87:03:2f:21:f3:10:35:a8: 8c:c6:fb:46:5c:a1:88:8f:45:3a:f4:2c:21:a2:45:dd:cf:fb: 95:55:ec:36:b4:6e:dc:2a:33:7b:59:05:b9:0a:81:e0:7d:2f: 0b:5e:c6:b5:9d:8f:3b:11:0b:86:e3:79:69:d0:fc:ba:9a:16: 2d:9e:05:b8:30:b2:01:41:39:8e:10:84:77:11:8b:a4:db:1d: 93:65:08:49:c7:8d:60:8f:44:b9:45:cd:51:d6:bb:6f:40:02: d8:02:97:7e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUORJ+U0AY+vO+O9eCpBKr/fipbEMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIzMTUxMjM2WhcNMjUwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTA0Y2EwZjlhOTkxOTYxZGFjZmZlYzUzNmI1ZTdjZGRk MjYyOTdjODY2MDkwOGI5MDg2YTZhODEyNjVkMTcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJpYNda/i423rYFK6H00vRd4IIGxJOUKkhhO7z+i15lj4I N4qJpceto6nQpLt7lGl5E2l10pbJsNPxVKac34qebmrXRckuMuxBqOFrmSBrqPVz jiCXlbRQdk9xPIpGtnzCG/sbntgGB96QxfmBtfyFhBiKu95wE/z6J2CoxB2ipbbQ JS5jAwTwLJh8Wpu9O0XRULTXQJpfBZSxPuqjV6Yo/l5X9QoNAqw8vMwmFtUqH2M1 vV/dv8gr9OPbyIbG1xSsOjLa/bkrh9YLmvbMNKeYa6ygqNrJxkUPa+4G357J7Zat Z3QIHWzRjXR4y1eWxpt+OXOLfqTXb4FVvMemKfUjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU85IOwsz89NNJw6GFLyytz9KA0oMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2NmE2OGE5LTk4OWUtNDYzYi1iZTFkLTQ5MzQ2NWQ3YTBhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/6IDANBgkqhkiG9w0BAQsFAAOCAQEAPBeS93CAGxZl4Y5K//TX5AT1 b+6XOi22avtChBJi8En9qLEnXhmongPCBnvScnJdRz8yvfMHz1F0doc/4Tf5Ms2J o08II7s8PFrMHvhxPxF2JCTX/60p+pSPFcsBt7mCUf9p4JfMK5+6zqHMrKyIoixN j8+/7Vgtgsi97tSrjh5blAl6pjtgQZqrHGTrihmw/zkar4yHyQF2nocDLyHzEDWo jMb7RlyhiI9FOvQsIaJF3c/7lVXsNrRu3Coze1kFuQqB4H0vC17GtZ2POxELhuN5 adD8upoWLZ4FuDCyAUE5jhCEdxGLpNsdk2UISceNYI9EuUXNUda7b0AC2AKXfg== -----END CERTIFICATE-----Generated at Mon Jun 30 15:51:54 2025 by rpki-client