$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af984960-fb9e-452a-9faf-e307203c1b94.roa File: af984960-fb9e-452a-9faf-e307203c1b94.roa (raw, json) Hash identifier: LNvRzq1EcJDVkVdMh1ct0L5DZH9g16XTZWtQQQ5vHUA= Subject key identifier: 59:51:52:78:1C:CC:A3:63:59:48:52:95:22:9F:A1:F6:CD:5C:41:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D75F08776FE4C79B3B923F6E8BEAB0E00AAEFA9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af984960-fb9e-452a-9faf-e307203c1b94.roa Signing time: Tue 19 Aug 2025 00:10:25 +0000 ROA not before: Tue 19 Aug 2025 00:10:25 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f32:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:75:f0:87:76:fe:4c:79:b3:b9:23:f6:e8:be:ab:0e:00:aa:ef:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 19 00:10:25 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=1035d787b4242dadda9ff3a6792d38e848a493f033c707a818cc67770c686bf3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:57:3f:3b:cd:df:2e:1d:ab:89:11:42:5a: 1d:3b:40:06:bd:e6:16:d0:86:e6:91:a3:b6:06:83: c6:36:ef:80:97:83:58:b3:70:16:6e:3a:a2:52:07: 91:09:91:92:b7:6b:4b:ee:0d:d6:69:bd:bb:41:51: 69:ba:a9:5a:15:a7:a6:21:79:af:c4:ff:45:39:46: 07:59:74:7a:7c:f4:8d:80:56:11:1f:26:2b:6f:60: f5:89:d4:27:81:c4:ba:57:39:3c:12:a5:1d:dc:e8: 14:70:98:2d:29:6f:35:63:ff:3d:c5:2d:a7:62:8d: 6f:7a:a5:f1:85:d1:ea:0d:bc:5c:2d:5a:19:31:d9: 8a:ae:17:8c:e0:03:ea:5e:38:4c:2b:ad:9f:4e:17: 09:e8:8b:73:2a:43:fb:5e:8f:ae:a4:c3:f5:2e:14: 34:52:b5:82:59:98:63:86:8a:4b:61:58:15:56:34: 62:dc:21:c1:cb:1c:f3:83:96:32:7f:db:b0:42:88: cf:e2:6e:b7:d0:14:e2:44:b9:5c:6a:b7:b0:65:64: b0:67:16:d4:20:12:b7:b1:b1:30:38:69:77:e7:d3: 3f:80:ab:cb:2e:7f:32:d0:37:20:26:65:57:54:2d: 11:77:20:76:2e:e3:31:08:71:0c:5f:a2:0a:cb:a1: fe:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:51:52:78:1C:CC:A3:63:59:48:52:95:22:9F:A1:F6:CD:5C:41:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af984960-fb9e-452a-9faf-e307203c1b94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32:8000::/39 Signature Algorithm: sha256WithRSAEncryption 93:d2:88:92:85:02:69:8c:c2:a5:cf:48:a6:a8:41:44:d7:ac: b8:a7:b2:24:4b:e5:d7:b5:8f:c0:24:33:9d:61:3b:37:fe:87: aa:1a:29:ee:11:13:e1:85:f7:2d:12:a8:42:28:6d:20:d0:da: 7b:bc:3b:07:60:38:7a:97:3a:5a:fe:6e:ed:cb:83:06:4c:32: d9:19:83:08:1d:13:29:45:e9:ad:db:53:ff:7d:6d:02:d2:12: 45:0f:5a:76:4a:d9:28:5c:68:57:31:77:b2:36:68:64:14:55: 7a:26:73:c4:fe:77:3e:67:1a:62:eb:16:56:9a:db:da:96:15: 23:98:29:0f:af:3f:d4:ad:39:c2:92:82:32:75:d2:82:78:1a: 7b:bb:55:0a:43:b5:ac:fc:43:b3:70:48:19:df:2a:07:75:ff: f8:cd:ec:27:7a:54:d0:9d:ad:26:3f:2b:18:e3:0b:cf:6f:8d: 72:f2:c0:33:f6:7f:f5:34:65:f3:29:20:e7:c8:89:56:75:ff: 75:cc:4c:19:ed:13:89:a3:06:18:eb:f2:e4:ad:28:b3:ea:b4: bb:d6:3a:3e:e2:ab:2e:58:7b:d4:39:cc:e2:86:de:8e:54:2a: 76:10:48:3b:3a:d6:5b:5a:82:8e:23:1f:6d:75:40:29:a3:88: 67:52:22:52 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPXXwh3b+THmzuSP26L6rDgCq76kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE5MDAxMDI1WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDM1ZDc4N2I0MjQyZGFkZGE5ZmYzYTY3OTJkMzhlODQ4 YTQ5M2YwMzNjNzA3YTgxOGNjNjc3NzBjNjg2YmYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDekFc/O83fLh2riRFCWh07QAa95hbQhuaRo7YGg8Y274CX g1izcBZuOqJSB5EJkZK3a0vuDdZpvbtBUWm6qVoVp6Yhea/E/0U5RgdZdHp89I2A VhEfJitvYPWJ1CeBxLpXOTwSpR3c6BRwmC0pbzVj/z3FLadijW96pfGF0eoNvFwt Whkx2YquF4zgA+peOEwrrZ9OFwnoi3MqQ/tej66kw/UuFDRStYJZmGOGikthWBVW NGLcIcHLHPODljJ/27BCiM/ibrfQFOJEuVxqt7BlZLBnFtQgErexsTA4aXfn0z+A q8sufzLQNyAmZVdULRF3IHYu4zEIcQxfogrLof57AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUWVFSeBzMo2NZSFKVIp+h9s1cQRwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmOTg0OTYwLWZiOWUtNDUyYS05ZmFmLWUzMDcyMDNjMWI5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB8ygDANBgkqhkiG9w0BAQsFAAOCAQEAk9KIkoUCaYzCpc9IpqhBRNes uKeyJEvl17WPwCQznWE7N/6Hqhop7hET4YX3LRKoQihtINDae7w7B2A4epc6Wv5u 7cuDBkwy2RmDCB0TKUXprdtT/31tAtISRQ9adkrZKFxoVzF3sjZoZBRVeiZzxP53 PmcaYusWVprb2pYVI5gpD68/1K05wpKCMnXSgngae7tVCkO1rPxDs3BIGd8qB3X/ +M3sJ3pU0J2tJj8rGOMLz2+NcvLAM/Z/9TRl8ykg58iJVnX/dcxMGe0TiaMGGOvy 5K0os+q0u9Y6PuKrLlh71DnM4obejlQqdhBIOzrWW1qCjiMfbXVAKaOIZ1IiUg== -----END CERTIFICATE-----Generated at Sat Aug 23 09:14:37 2025 by rpki-client