$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7014528-b1b3-4dab-9df1-adfd3b6f0a61.roa File: c7014528-b1b3-4dab-9df1-adfd3b6f0a61.roa (raw, json) Hash identifier: LH8arZKHnEIZGuBz7uXvw/l331CAMJFufUiaxb2iRZY= Subject key identifier: 97:1D:BC:02:DF:68:BB:65:C0:B1:9E:68:41:D3:57:B3:64:17:36:DB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F9126113972BE170A009CC710CE663D563FF6D3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7014528-b1b3-4dab-9df1-adfd3b6f0a61.roa Signing time: Mon 18 Aug 2025 15:31:19 +0000 ROA not before: Mon 18 Aug 2025 15:31:19 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:91:26:11:39:72:be:17:0a:00:9c:c7:10:ce:66:3d:56:3f:f6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:31:19 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=8f9dd7323dbf7c9f2b2e06656bf118571892377739cdbd6ef380fabb1f495d52, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:f3:59:b1:34:63:66:df:00:ad:f0:15:d7: 27:c7:af:be:11:98:31:12:b1:2c:7b:d8:99:4e:54: 4b:3f:4f:d0:0e:ad:22:c4:b0:bf:f1:a1:c5:62:15: 62:4f:f1:d4:76:ea:c6:b3:67:da:12:96:50:1f:ec: a5:d4:48:ee:51:3b:54:4f:cb:e3:78:dd:ea:6b:c4: a1:01:ef:17:b2:b9:62:e6:4e:28:f2:9c:3d:ba:fc: 2f:c0:17:8d:5e:b9:25:a8:49:02:10:b2:c5:dd:a4: 1a:16:eb:02:a8:00:f2:5b:b1:f4:de:bb:1e:80:8f: 90:c8:2f:06:39:4a:51:71:ab:56:ee:55:7b:39:c5: 73:a2:be:20:96:50:e2:57:1c:f7:f7:7a:29:a6:7c: 95:37:f2:8b:38:7e:fc:04:57:7d:8b:46:a4:a4:c3: 7f:88:65:77:84:35:a9:91:f9:0b:a2:f4:bd:14:98: be:9c:46:51:59:86:f4:bf:60:4e:05:a9:f1:6b:f0: 06:9d:7f:33:f7:bb:1c:c2:15:86:d5:86:e8:a3:45: de:a5:3f:7b:e5:74:93:a6:1e:17:c6:1b:d2:7d:ad: 8d:5d:18:4e:bb:27:64:32:51:a5:af:98:c2:7b:a3: 97:e1:ec:0a:ad:95:58:9c:05:68:71:23:22:4d:5f: e7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1D:BC:02:DF:68:BB:65:C0:B1:9E:68:41:D3:57:B3:64:17:36:DB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7014528-b1b3-4dab-9df1-adfd3b6f0a61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8000::/39 Signature Algorithm: sha256WithRSAEncryption 21:51:fb:94:fb:b1:f6:8e:e7:bb:bd:11:87:c7:8d:92:8f:3e: df:68:32:a8:51:d0:a9:38:fc:d8:22:b2:14:9b:89:e5:a1:2d: 56:40:d4:2d:cb:ff:f2:82:c5:12:74:21:80:bd:02:80:6d:05: fa:d7:22:95:d0:df:3f:f1:eb:ba:a3:47:5f:8d:74:3f:c2:db: a6:ca:d1:3a:5d:b2:c0:3d:39:5a:91:1d:19:58:eb:5e:61:0a: c2:f8:b2:39:20:a3:23:a5:63:1b:52:a9:5a:08:6a:48:69:cb: 88:e0:1a:9f:ba:2d:36:6a:7d:1c:8e:fd:88:49:6c:db:3e:0f: fd:56:4e:44:cb:34:07:28:fa:b0:4b:a1:2a:f2:b0:0e:6a:9f: 34:78:32:ff:ea:7d:89:ef:8b:67:61:a0:bd:bc:0b:29:9c:d4: 4a:54:6d:c9:a1:12:98:c4:88:63:58:70:e3:4e:30:04:8b:02: cd:fe:b5:36:89:e7:94:29:41:e8:cb:e6:a7:cd:a7:6c:e7:ac: 82:ea:4e:c8:98:09:cd:44:f6:be:81:14:c7:4c:7f:0c:b9:a7: d3:fa:07:13:d1:95:dc:e8:0a:45:fe:d8:4f:93:75:97:d6:f4: 9d:a8:70:fc:5e:41:c5:e1:48:2f:d9:a0:a3:35:24:c1:ee:3a: 84:72:72:00 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUH5EmETlyvhcKAJzHEM5mPVY/9tMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUzMTE5WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjlkZDczMjNkYmY3YzlmMmIyZTA2NjU2YmYxMTg1NzE4 OTIzNzc3MzljZGJkNmVmMzgwZmFiYjFmNDk1ZDUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/8vNZsTRjZt8ArfAV1yfHr74RmDESsSx72JlOVEs/T9AO rSLEsL/xocViFWJP8dR26sazZ9oSllAf7KXUSO5RO1RPy+N43eprxKEB7xeyuWLm TijynD26/C/AF41euSWoSQIQssXdpBoW6wKoAPJbsfTeux6Aj5DILwY5SlFxq1bu VXs5xXOiviCWUOJXHPf3eimmfJU38os4fvwEV32LRqSkw3+IZXeENamR+Qui9L0U mL6cRlFZhvS/YE4FqfFr8AadfzP3uxzCFYbVhuijRd6lP3vldJOmHhfGG9J9rY1d GE67J2QyUaWvmMJ7o5fh7AqtlVicBWhxIyJNX+ddAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUlx28At9ou2XAsZ5oQdNXs2QXNtswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3MDE0NTI4LWIxYjMtNGRhYi05ZGYxLWFkZmQzYjZmMGE2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB//gDANBgkqhkiG9w0BAQsFAAOCAQEAIVH7lPux9o7nu70Rh8eNko8+ 32gyqFHQqTj82CKyFJuJ5aEtVkDULcv/8oLFEnQhgL0CgG0F+tcildDfP/HruqNH X410P8LbpsrROl2ywD05WpEdGVjrXmEKwviyOSCjI6VjG1KpWghqSGnLiOAan7ot Nmp9HI79iEls2z4P/VZORMs0Byj6sEuhKvKwDmqfNHgy/+p9ie+LZ2GgvbwLKZzU SlRtyaESmMSIY1hw404wBIsCzf61NonnlClB6Mvmp82nbOesgupOyJgJzUT2voEU x0x/DLmn0/oHE9GV3OgKRf7YT5N1l9b0nahw/F5BxeFIL9mgozUkwe46hHJyAA== -----END CERTIFICATE-----Generated at Sat Aug 23 06:53:48 2025 by rpki-client