$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d94a7aa-9505-4db3-925e-cf3f285b296b.roa File: 9d94a7aa-9505-4db3-925e-cf3f285b296b.roa (raw, json) Hash identifier: 5lReIp8r/30qEnswgexRzu6175w0OFQn6Km7tixFz6s= Subject key identifier: DE:6D:84:A1:C3:D7:36:61:10:D6:70:EA:DB:52:B3:29:CF:7D:F1:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 502E4595CCE4862BC8F0471E1FE78C35A4A2A3C0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d94a7aa-9505-4db3-925e-cf3f285b296b.roa Signing time: Fri 13 Jun 2025 17:32:14 +0000 ROA not before: Fri 13 Jun 2025 17:32:14 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f10:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2e:45:95:cc:e4:86:2b:c8:f0:47:1e:1f:e7:8c:35:a4:a2:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 17:32:14 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=bc726690e8e8ad01c3f7fcc37f95280ff6c70feb7b4c1dcd63a46de087c4c0fa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:d5:8a:0a:a5:01:63:6a:bf:94:38:f3:31: a6:4f:7d:2e:99:c3:f6:e2:63:23:9d:4a:df:bd:8a: ac:21:b6:05:49:3b:46:3c:c8:ef:0c:f8:95:7d:e3: 70:1c:7b:ae:59:5f:1c:e8:a2:b5:b3:91:33:34:b8: ea:26:c0:8b:67:65:3c:5e:99:aa:98:47:e7:f8:04: d2:b1:5f:ea:ce:c7:b8:65:3f:78:58:a3:3c:87:b7: 3c:c3:5a:54:43:a3:cd:cb:d3:d5:26:23:16:b3:2c: 11:8f:08:af:db:b6:3c:7b:3b:16:c8:a0:56:a1:46: 8f:8c:2c:36:b4:f0:4e:56:66:af:65:cf:a7:ef:4e: 34:f8:b6:55:80:f9:ca:e0:45:52:49:71:46:c2:c6: c6:14:c0:21:a6:35:0e:bd:dc:19:91:08:a3:e3:ba: 03:87:6a:53:1b:1f:0a:8f:ca:b9:92:6f:5e:c2:a0: 4e:96:f8:66:cf:5e:02:20:90:1e:a6:38:83:cd:17: b7:71:eb:1a:dd:31:b6:c5:9d:d3:06:bd:3e:11:3c: 0d:6d:ef:9a:f3:01:38:8c:31:a7:81:b4:1f:c1:6c: 98:a0:8e:01:14:ed:cf:eb:60:c7:cb:a1:1e:00:60: 86:a2:6f:60:9b:81:af:9d:e2:e4:8d:19:a5:07:c8: 1b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6D:84:A1:C3:D7:36:61:10:D6:70:EA:DB:52:B3:29:CF:7D:F1:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d94a7aa-9505-4db3-925e-cf3f285b296b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f10:8000::/36 Signature Algorithm: sha256WithRSAEncryption 09:24:e7:eb:0e:07:76:24:e0:23:f6:d4:4a:b9:63:6f:b0:7d: 0e:96:f3:ff:5b:78:06:60:a7:ed:5d:f4:7e:3b:da:b1:12:0d: 55:fc:36:27:7b:ac:f2:56:63:67:e7:23:9c:7e:9e:ac:f3:ab: ee:43:73:89:c6:8f:cf:d9:03:7b:2e:aa:c7:5f:01:eb:0f:6e: 09:50:b2:73:71:09:11:6a:1f:f0:56:65:c9:6f:db:fa:4a:28: b1:2e:05:93:29:53:e0:58:4b:46:68:2d:81:31:9f:e4:be:72: 6b:49:89:84:cf:1f:cb:9a:3a:ec:10:36:f3:45:68:b4:c2:c4: a1:84:41:66:5a:28:5e:f8:aa:ec:6b:fa:df:39:18:25:e1:85: f3:c0:a8:db:7d:4f:c6:fd:ce:3c:4c:4b:71:fa:4c:99:98:d7: 46:61:92:65:62:7e:df:b0:74:4c:f9:0b:48:71:a0:43:c2:71: 5e:fd:f8:9b:0e:c2:2c:5e:8a:2a:71:1c:38:f4:ba:88:b7:dc: 6a:04:42:54:be:cd:a7:93:be:cf:37:9f:4c:9f:4f:4f:a2:2a: d8:46:8c:b7:9a:5b:7c:db:13:5b:1e:1c:c2:db:8d:7f:74:ae: 4e:6f:16:a4:d9:56:74:a4:2f:99:34:5f:25:1e:0b:50:27:7b: a6:7a:6d:6d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUC5FlczkhivI8EceH+eMNaSio8AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTczMjE0WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzcyNjY5MGU4ZThhZDAxYzNmN2ZjYzM3Zjk1MjgwZmY2 YzcwZmViN2I0YzFkY2Q2M2E0NmRlMDg3YzRjMGZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9i9WKCqUBY2q/lDjzMaZPfS6Zw/biYyOdSt+9iqwhtgVJ O0Y8yO8M+JV943Ace65ZXxzoorWzkTM0uOomwItnZTxemaqYR+f4BNKxX+rOx7hl P3hYozyHtzzDWlRDo83L09UmIxazLBGPCK/btjx7OxbIoFahRo+MLDa08E5WZq9l z6fvTjT4tlWA+crgRVJJcUbCxsYUwCGmNQ693BmRCKPjugOHalMbHwqPyrmSb17C oE6W+GbPXgIgkB6mOIPNF7dx6xrdMbbFndMGvT4RPA1t75rzATiMMaeBtB/BbJig jgEU7c/rYMfLoR4AYIaib2Cbga+d4uSNGaUHyBv/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU3m2EocPXNmEQ1nDq21KzKc998UEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlkOTRhN2FhLTk1MDUtNGRiMy05MjVlLWNmM2YyODViMjk2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8QgDANBgkqhkiG9w0BAQsFAAOCAQEACSTn6w4HdiTgI/bUSrljb7B9 Dpbz/1t4BmCn7V30fjvasRINVfw2J3us8lZjZ+cjnH6erPOr7kNzicaPz9kDey6q x18B6w9uCVCyc3EJEWof8FZlyW/b+koosS4FkylT4FhLRmgtgTGf5L5ya0mJhM8f y5o67BA280VotMLEoYRBZlooXviq7Gv63zkYJeGF88Co231Pxv3OPExLcfpMmZjX RmGSZWJ+37B0TPkLSHGgQ8JxXv34mw7CLF6KKnEcOPS6iLfcagRCVL7Np5O+zzef TJ9PT6Iq2EaMt5pbfNsTWx4cwtuNf3SuTm8WpNlWdKQvmTRfJR4LUCd7pnptbQ== -----END CERTIFICATE-----Generated at Mon Jun 30 18:38:40 2025 by rpki-client