$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cccef75f-0b8e-47d2-8aa9-79b3e973464e.roa File: cccef75f-0b8e-47d2-8aa9-79b3e973464e.roa (raw, json) Hash identifier: pV21WIF8sfNCAnR+xxDWvz+PFOYKjf0gRgWgu5it8qk= Subject key identifier: BC:03:80:3A:79:1C:67:EA:91:12:CD:7F:FC:0B:23:A5:59:72:20:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0E3FAB6C82F96BD6E1C833845780B2119E39FD68 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cccef75f-0b8e-47d2-8aa9-79b3e973464e.roa Signing time: Mon 18 Aug 2025 15:41:35 +0000 ROA not before: Mon 18 Aug 2025 15:41:35 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:41c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3f:ab:6c:82:f9:6b:d6:e1:c8:33:84:57:80:b2:11:9e:39:fd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:41:35 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=fce5f92886b3617965064eec3c3b1f606f71d5a6c0e7cb6f1a9023e41a8c2a22, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f8:ae:dd:dc:dd:14:5e:21:af:d3:92:f6:92: d1:f0:93:31:79:bc:29:23:45:2a:e1:89:00:8b:ac: ec:56:cf:41:ca:21:77:d0:f3:16:b1:6d:05:0c:19: 76:62:76:fe:85:61:24:b9:5a:80:cf:ec:34:c9:15: 59:15:f7:0c:2c:fd:07:40:99:cc:7f:5e:51:e7:3b: 1f:dc:be:b3:de:cb:f6:25:e7:41:e0:84:68:a4:15: c1:7c:bb:44:2e:d8:5d:1e:17:08:dd:52:05:9e:5e: e7:90:ca:39:97:d5:1a:c2:3a:be:2f:9c:82:1f:32: 30:fc:4e:a7:04:f5:a5:04:82:c5:4b:51:de:3b:25: ac:f9:06:03:5a:a6:98:dc:48:28:ac:75:52:ab:be: bd:1b:4c:1f:d6:71:64:79:47:dd:97:d9:e2:e3:36: 31:ab:49:b2:13:f7:3b:13:ed:4e:04:16:d0:29:d1: d4:15:d2:fb:07:b9:46:bb:51:3c:67:a9:bd:59:f5: 1f:42:30:a1:97:8c:bb:7c:8d:55:66:7e:80:dc:9c: 6a:71:b3:bf:bb:79:f3:df:a2:97:17:0a:66:48:e6: a1:4e:a0:a8:4a:29:e1:41:b8:be:ed:b4:22:7f:ab: b2:4d:73:77:a2:7e:2f:af:6b:a7:a6:c7:fd:91:c9: 8c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:03:80:3A:79:1C:67:EA:91:12:CD:7F:FC:0B:23:A5:59:72:20:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cccef75f-0b8e-47d2-8aa9-79b3e973464e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:41c0::/48 Signature Algorithm: sha256WithRSAEncryption 60:a0:43:e8:78:bf:29:81:79:95:12:4e:3c:f8:4b:76:be:fe: 41:eb:bc:18:3f:c0:3e:fd:7d:88:6b:c7:eb:a5:a9:b3:a9:e3: ba:0a:fb:df:5a:1b:91:6c:2e:b1:b7:55:ab:7d:ce:83:5a:2d: ee:48:59:9a:f9:df:91:ed:fa:fb:0e:20:68:e4:1a:c6:9f:cd: 52:fc:ce:d8:ea:92:f0:b7:7d:28:80:ca:e0:ee:69:0d:3e:1b: 27:33:66:f0:33:de:cb:d5:70:cb:04:1d:ad:95:7d:be:ad:00: 52:ce:82:24:d4:ab:9a:20:9f:77:c9:d4:72:da:32:ca:e5:dc: 38:bd:78:ea:1d:5d:4a:28:0a:bd:ee:db:01:09:d4:3a:a7:40: 71:4e:65:c8:64:f3:bf:6f:33:0f:94:7f:dd:04:d2:af:ec:34: d9:79:f0:b2:96:2f:32:5e:39:2e:85:3d:84:d9:e9:cc:21:02: 94:9e:0d:50:60:4b:8e:96:52:69:4a:cd:ec:c9:78:31:cd:80: 88:cd:6b:ec:3a:e8:38:94:d1:6b:2f:34:06:3d:56:45:1b:95: 4f:12:f7:80:0a:eb:b4:da:26:fc:13:1e:cd:5c:26:d2:b3:52: b8:6a:ee:7b:ae:94:c7:6b:2e:dd:6d:c3:55:4c:5e:58:13:83: 51:46:f4:87 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDj+rbIL5a9bhyDOEV4CyEZ45/WgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTU0MTM1WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2U1ZjkyODg2YjM2MTc5NjUwNjRlZWMzYzNiMWY2MDZm NzFkNWE2YzBlN2NiNmYxYTkwMjNlNDFhOGMyYTIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDm+K7d3N0UXiGv05L2ktHwkzF5vCkjRSrhiQCLrOxWz0HK IXfQ8xaxbQUMGXZidv6FYSS5WoDP7DTJFVkV9wws/QdAmcx/XlHnOx/cvrPey/Yl 50HghGikFcF8u0Qu2F0eFwjdUgWeXueQyjmX1RrCOr4vnIIfMjD8TqcE9aUEgsVL Ud47Jaz5BgNappjcSCisdVKrvr0bTB/WcWR5R92X2eLjNjGrSbIT9zsT7U4EFtAp 0dQV0vsHuUa7UTxnqb1Z9R9CMKGXjLt8jVVmfoDcnGpxs7+7efPfopcXCmZI5qFO oKhKKeFBuL7ttCJ/q7JNc3eifi+va6emx/2RyYwXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvAOAOnkcZ+qREs1//AsjpVlyIB0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NjY2VmNzVmLTBiOGUtNDdkMi04YWE5LTc5YjNlOTczNDY0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QcAwDQYJKoZIhvcNAQELBQADggEBAGCgQ+h4vymBeZUSTjz4S3a+ /kHrvBg/wD79fYhrx+ulqbOp47oK+99aG5FsLrG3Vat9zoNaLe5IWZr535Ht+vsO IGjkGsafzVL8ztjqkvC3fSiAyuDuaQ0+GyczZvAz3svVcMsEHa2Vfb6tAFLOgiTU q5ogn3fJ1HLaMsrl3Di9eOodXUooCr3u2wEJ1DqnQHFOZchk879vMw+Uf90E0q/s NNl58LKWLzJeOS6FPYTZ6cwhApSeDVBgS46WUmlKzezJeDHNgIjNa+w66DiU0Wsv NAY9VkUblU8S94AK67TaJvwTHs1cJtKzUrhq7nuulMdrLt1tw1VMXlgTg1FG9Ic= -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:21 2025 by rpki-client