$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2490be-36b4-4ace-9cba-a26053204659.roa File: dd2490be-36b4-4ace-9cba-a26053204659.roa (raw, json) Hash identifier: FSYWpojU7p8ENBiIs1BeLHFwp9iStUI2dSTjS1ljLD4= Subject key identifier: 7B:01:AB:84:9B:A7:23:EE:B0:CE:5F:97:50:69:91:9B:04:98:6D:92 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 66BAC0EC898C580EA04DF420F40E3D03B166EDA3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2490be-36b4-4ace-9cba-a26053204659.roa Signing time: Mon 23 Jun 2025 15:12:23 +0000 ROA not before: Mon 23 Jun 2025 15:12:23 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f68:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ba:c0:ec:89:8c:58:0e:a0:4d:f4:20:f4:0e:3d:03:b1:66:ed:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 15:12:23 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=2d1b271e6c53e334fd83e3fd9613dbfc0ca8a15648a15470f983aa129c8793d5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:29:08:a0:07:0a:61:9f:2f:3d:09:a3:27:63: 1b:53:99:b3:8e:f2:75:34:9b:5f:d4:ea:64:c9:3c: f0:ca:1a:06:bd:2d:15:8c:dc:f5:47:81:18:07:7c: 41:ec:99:a2:ce:9a:d0:63:2d:d4:e3:6f:01:67:71: ba:22:e5:ec:0f:ef:4f:04:d5:ab:67:d7:a7:27:89: 49:cd:be:27:42:49:a7:2a:f3:0e:ea:5d:1f:32:54: 51:a7:bd:0e:d5:4a:c2:72:ed:30:84:f3:ac:51:81: 7a:fc:cf:30:30:b4:67:37:11:08:7c:af:92:c3:f9: fe:ca:9e:01:56:d0:65:18:f6:3c:8d:d3:5c:91:38: 1f:9c:ae:22:a5:44:34:79:72:06:94:39:45:14:4e: 47:59:8d:1d:5a:33:d3:08:7f:61:7c:6e:64:0b:ed: 1e:4a:2e:b8:6a:1a:93:26:ac:74:f8:06:4d:4e:8e: 19:46:f0:71:53:bd:62:45:2b:67:d8:84:35:ba:a0: 2d:37:0f:ab:8a:84:5c:e4:16:75:58:fe:e0:a4:58: 49:08:bd:d7:fa:06:b5:66:34:02:cd:cc:42:5e:c2: 8e:b6:75:6f:98:66:42:63:bc:93:04:bb:e4:8d:f6: 6c:9e:40:d4:71:64:29:05:d4:50:68:9c:c3:d2:c7: 52:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:01:AB:84:9B:A7:23:EE:B0:CE:5F:97:50:69:91:9B:04:98:6D:92 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd2490be-36b4-4ace-9cba-a26053204659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:5000::/40 Signature Algorithm: sha256WithRSAEncryption 7f:ef:2b:4f:3b:59:fe:fa:84:83:4f:7f:99:c7:70:67:6b:23: 4f:f9:02:f7:8d:7c:87:77:90:2a:35:33:05:24:d0:1b:18:56: b9:45:11:2a:d4:8f:fc:95:a2:b1:16:71:ca:af:b8:9e:c1:82: 47:92:4f:01:65:cc:dd:b6:5a:5b:b0:74:84:b5:c4:2b:1f:fb: 3a:21:87:cf:08:9e:5c:99:ec:05:94:aa:0f:8e:e6:e8:b2:45: 12:48:3d:95:a8:7f:83:b8:8e:28:84:a7:8f:fa:6e:5d:ad:aa: 85:36:f3:69:08:80:5b:0f:e9:de:f1:0e:4e:1a:e8:ee:32:5b: 47:ae:c6:fd:f0:39:1e:87:e3:e6:9e:81:49:c3:87:a2:91:27: 45:63:92:8a:3e:11:f3:85:6d:53:d4:0d:28:66:b9:4b:7e:61: 85:d2:8e:fd:b0:f8:5a:07:5f:e7:4d:e4:86:d5:f4:87:13:8f: d3:31:e8:e7:46:12:33:66:19:24:ad:6e:9a:55:cd:71:d3:58: 64:c5:a9:5b:a7:c9:c7:ca:00:af:48:ad:c3:47:e9:e8:8d:54: 8b:99:f9:eb:ce:9d:c9:9e:1e:a3:6b:a7:ef:44:83:9d:ec:63: 9b:fd:be:a4:c3:b2:3c:7f:b7:80:66:15:1e:ef:f2:83:03:75: 45:76:5b:e9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZrrA7ImMWA6gTfQg9A49A7Fm7aMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIzMTUxMjIzWhcNMjUwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDFiMjcxZTZjNTNlMzM0ZmQ4M2UzZmQ5NjEzZGJmYzBj YThhMTU2NDhhMTU0NzBmOTgzYWExMjljODc5M2Q1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJKQigBwphny89CaMnYxtTmbOO8nU0m1/U6mTJPPDKGga9 LRWM3PVHgRgHfEHsmaLOmtBjLdTjbwFncboi5ewP708E1atn16cniUnNvidCSacq 8w7qXR8yVFGnvQ7VSsJy7TCE86xRgXr8zzAwtGc3EQh8r5LD+f7KngFW0GUY9jyN 01yROB+criKlRDR5cgaUOUUUTkdZjR1aM9MIf2F8bmQL7R5KLrhqGpMmrHT4Bk1O jhlG8HFTvWJFK2fYhDW6oC03D6uKhFzkFnVY/uCkWEkIvdf6BrVmNALNzEJewo62 dW+YZkJjvJMEu+SN9myeQNRxZCkF1FBonMPSx1IdAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUewGrhJunI+6wzl+XUGmRmwSYbZIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RkMjQ5MGJlLTM2YjQtNGFjZS05Y2JhLWEyNjA1MzIwNDY1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9oUDANBgkqhkiG9w0BAQsFAAOCAQEAf+8rTztZ/vqEg09/mcdwZ2sj T/kC9418h3eQKjUzBSTQGxhWuUURKtSP/JWisRZxyq+4nsGCR5JPAWXM3bZaW7B0 hLXEKx/7OiGHzwieXJnsBZSqD47m6LJFEkg9lah/g7iOKISnj/puXa2qhTbzaQiA Ww/p3vEOThro7jJbR67G/fA5Hofj5p6BScOHopEnRWOSij4R84VtU9QNKGa5S35h hdKO/bD4Wgdf503khtX0hxOP0zHo50YSM2YZJK1umlXNcdNYZMWpW6fJx8oAr0it w0fp6I1Ui5n5686dyZ4eo2un70SDnexjm/2+pMOyPH+3gGYVHu/ygwN1RXZb6Q== -----END CERTIFICATE-----Generated at Sun Jun 29 16:38:58 2025 by rpki-client