$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa400fa5-7af4-49a1-a0c8-cf41ab563bca.roa File: aa400fa5-7af4-49a1-a0c8-cf41ab563bca.roa (raw, json) Hash identifier: Dde/TOLD8YcuqnTTw/JV5xedbX8XvdqH+uXRT87+ens= Subject key identifier: D7:D3:CB:EB:1A:AD:57:60:9A:5D:1E:70:68:A0:9B:7A:11:83:57:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43190684BB51E5742661053843004393A721608A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa400fa5-7af4-49a1-a0c8-cf41ab563bca.roa Signing time: Fri 13 Jun 2025 17:11:15 +0000 ROA not before: Fri 13 Jun 2025 17:11:15 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f2f:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:19:06:84:bb:51:e5:74:26:61:05:38:43:00:43:93:a7:21:60:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 17:11:15 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=7fab572ab6570fbafad077c28e92ec70de05d130646e204a234bb0a66ec6e228, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:0b:f7:5c:d1:87:77:95:35:c3:f0:59:80: 6d:7d:15:94:d6:3c:d3:78:14:f8:20:d3:f5:9d:d4: 86:0a:f6:4a:fd:0d:d1:72:c0:23:3a:cf:fa:54:85: 77:54:a0:1d:8a:5f:1d:2f:e8:29:68:7e:fe:91:be: 7c:96:36:aa:c3:40:e2:65:2f:3a:7a:b4:32:f3:46: c9:25:00:de:8e:2e:24:fb:1b:0a:45:04:41:60:e4: d8:e8:19:8a:60:e7:07:f3:62:d2:5a:a9:75:d4:53: 41:a7:a2:bd:71:15:8e:a1:0b:9a:5e:33:b8:c1:60: 5b:0f:ba:1b:1e:9c:2a:65:8e:61:ab:d6:fc:43:2f: 72:b0:91:e2:7b:f7:fd:ed:61:83:d7:88:c1:54:63: 2b:ef:73:1a:46:d9:84:cb:25:9d:34:1f:c0:47:a1: bd:ff:b4:5a:b2:85:23:bd:79:d6:46:9d:ac:24:ef: ea:a7:cd:3f:39:30:dd:e0:13:51:e8:35:b3:48:df: 5b:b1:82:81:72:00:a2:28:e9:6f:64:49:d2:bf:74: 51:2a:ce:1c:a0:0e:3f:4a:d1:50:76:69:8c:b4:73: 19:50:59:69:8a:59:4f:4d:59:9e:6a:2b:78:d7:46: ec:99:c0:63:25:6f:63:76:c7:49:f4:51:1f:0a:70: 83:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D3:CB:EB:1A:AD:57:60:9A:5D:1E:70:68:A0:9B:7A:11:83:57:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa400fa5-7af4-49a1-a0c8-cf41ab563bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2f:4000::/36 Signature Algorithm: sha256WithRSAEncryption 14:98:0b:b8:04:ad:31:b6:96:91:aa:e8:4a:2c:7b:ee:3e:d5: 47:5f:7d:87:62:c6:a6:2f:de:f8:9f:fd:6c:6c:43:a2:8f:44: b6:e6:68:b7:18:4b:89:b4:04:2d:cc:1d:55:7e:7e:7a:62:8e: 03:ac:b1:16:d7:0d:c0:53:96:d8:ae:23:da:11:54:3e:e4:57: ae:77:aa:67:21:e3:7d:9f:ae:56:4b:6c:2c:a2:c4:3e:62:8c: 87:45:74:f5:ff:52:cd:49:22:47:95:be:1f:11:02:1c:83:93: f7:07:87:02:e4:e0:c7:cf:87:8d:aa:03:a2:dc:bb:0a:fa:7a: 96:2b:45:b8:00:fa:75:88:0a:e2:cb:18:23:85:70:cc:0c:cb: fd:45:67:ac:e6:7c:c0:13:fa:15:ed:c8:32:95:a3:44:da:b8: de:2f:c7:fd:6e:64:42:5c:2d:68:12:30:8b:73:a4:48:4b:70: 6c:35:f1:71:d5:4c:99:f2:00:df:8a:da:ca:54:27:16:26:81: 51:f3:dc:dd:13:3d:fb:0b:82:4b:b9:68:23:df:1e:f7:83:d3: c9:73:cf:75:4c:55:a1:48:13:07:6c:a3:40:5b:a4:a8:33:82: 42:64:0e:d2:4a:a9:73:b5:3f:b3:96:cb:ae:24:5b:a6:20:4a: a4:c2:ef:ad -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQxkGhLtR5XQmYQU4QwBDk6chYIowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTcxMTE1WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZmFiNTcyYWI2NTcwZmJhZmFkMDc3YzI4ZTkyZWM3MGRl MDVkMTMwNjQ2ZTIwNGEyMzRiYjBhNjZlYzZlMjI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzjgv3XNGHd5U1w/BZgG19FZTWPNN4FPgg0/Wd1IYK9kr9 DdFywCM6z/pUhXdUoB2KXx0v6Clofv6RvnyWNqrDQOJlLzp6tDLzRsklAN6OLiT7 GwpFBEFg5NjoGYpg5wfzYtJaqXXUU0Gnor1xFY6hC5peM7jBYFsPuhsenCpljmGr 1vxDL3KwkeJ79/3tYYPXiMFUYyvvcxpG2YTLJZ00H8BHob3/tFqyhSO9edZGnawk 7+qnzT85MN3gE1HoNbNI31uxgoFyAKIo6W9kSdK/dFEqzhygDj9K0VB2aYy0cxlQ WWmKWU9NWZ5qK3jXRuyZwGMlb2N2x0n0UR8KcIPNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU19PL6xqtV2CaXR5waKCbehGDV2MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhNDAwZmE1LTdhZjQtNDlhMS1hMGM4LWNmNDFhYjU2M2JjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8vQDANBgkqhkiG9w0BAQsFAAOCAQEAFJgLuAStMbaWkaroSix77j7V R199h2LGpi/e+J/9bGxDoo9EtuZotxhLibQELcwdVX5+emKOA6yxFtcNwFOW2K4j 2hFUPuRXrneqZyHjfZ+uVktsLKLEPmKMh0V09f9SzUkiR5W+HxECHIOT9weHAuTg x8+HjaoDoty7Cvp6litFuAD6dYgK4ssYI4VwzAzL/UVnrOZ8wBP6Fe3IMpWjRNq4 3i/H/W5kQlwtaBIwi3OkSEtwbDXxcdVMmfIA34raylQnFiaBUfPc3RM9+wuCS7lo I98e94PTyXPPdUxVoUgTB2yjQFukqDOCQmQO0kqpc7U/s5bLriRbpiBKpMLvrQ== -----END CERTIFICATE-----Generated at Sun Jun 29 01:25:50 2025 by rpki-client