$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020f6713-961a-446c-8dde-4a4231902f33.roa File: 020f6713-961a-446c-8dde-4a4231902f33.roa (raw, json) Hash identifier: +qRd2yLcGslIu/fgw54GHPyURK8/23C0lNLcUDCIN/k= Subject key identifier: 5A:E8:AE:4E:77:7C:89:B6:27:EA:A1:4E:37:9A:48:D1:5E:81:34:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 479EEAD586090DE64AA38173F0D30D8EA8AE63FA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020f6713-961a-446c-8dde-4a4231902f33.roa Signing time: Fri 25 Jul 2025 00:10:13 +0000 ROA not before: Fri 25 Jul 2025 00:10:13 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff8:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:9e:ea:d5:86:09:0d:e6:4a:a3:81:73:f0:d3:0d:8e:a8:ae:63:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 25 00:10:13 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=44ebded80d454461d4f7fbe2f014395127b2cdf2637e7badd4e93a4e85fd5af5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:46:78:77:9f:8e:12:eb:73:95:91:94:f4:69: d9:da:6f:45:cf:ea:57:cb:b6:c8:af:ea:a3:62:d3: ce:22:41:4f:23:3d:cc:55:e2:aa:c1:fb:98:4d:f3: eb:47:d2:fb:bf:96:e1:1d:6d:ed:a8:3d:f6:af:ae: cb:a7:a8:3d:43:1c:3a:e8:ca:65:61:de:bc:d6:66: 2f:26:39:fb:d9:7d:69:47:bf:ab:3c:e5:1e:24:29: bf:34:ef:2a:84:7a:52:f8:aa:66:3e:dc:38:ff:90: b5:0d:42:3c:62:e9:4d:e3:30:c9:ea:24:c7:7f:58: 2b:2e:9a:81:78:89:af:94:84:0f:5e:98:37:f2:f9: 06:9b:7e:a3:fe:ed:f0:5e:ba:ac:21:02:eb:37:20: c8:7e:91:52:2e:ba:bd:bc:df:dc:44:3b:91:8c:f9: b8:e3:89:d6:19:f0:34:a5:72:cc:52:72:ae:5c:c8: 4c:0e:7f:78:ff:e7:de:a4:09:7c:f9:43:ec:5f:28: 96:38:d9:41:84:eb:5e:b4:39:49:cb:8a:d1:9b:ae: 54:55:24:99:f2:4d:a8:9c:b1:27:59:3f:fc:4b:16: a3:5e:32:fa:7c:46:7b:00:26:08:f2:b7:06:be:98: 18:b3:e9:8d:e3:9f:e9:49:11:a8:de:7f:d0:6d:b0: c1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E8:AE:4E:77:7C:89:B6:27:EA:A1:4E:37:9A:48:D1:5E:81:34:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/020f6713-961a-446c-8dde-4a4231902f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff8:3400::/40 Signature Algorithm: sha256WithRSAEncryption 65:e9:7f:29:84:41:9e:49:3b:d8:eb:8c:01:d3:cc:78:7a:6d: 5b:bf:a1:6b:c0:ed:9b:61:7a:b6:d9:24:c5:47:9c:46:0b:9f: 76:9f:86:55:4a:82:d6:f1:b1:e1:14:e2:5d:67:67:ce:ae:e6: cd:98:9e:d7:a9:24:67:79:c1:b4:a5:d6:80:e0:d3:22:34:1e: 9b:e6:e2:0c:87:e7:f1:c9:7a:52:2f:ae:b2:15:a2:9a:10:9c: d5:c4:12:04:b4:cb:8e:10:a2:28:80:d4:28:7f:b5:74:98:cd: 93:c7:52:41:94:23:51:50:4c:cb:f6:a6:76:ab:fa:cd:03:b6: 5a:1b:d4:28:d8:74:0f:ca:01:6f:b2:1b:bd:e9:33:83:2c:b8: 5a:5b:52:85:10:28:3b:68:a8:83:1b:7a:84:46:94:1e:24:37: 32:ca:e6:7f:05:c7:99:7f:fe:94:60:19:c4:91:58:61:00:1c: 64:39:2c:12:98:0b:0b:64:ef:69:6a:2d:fe:7a:bd:03:5c:42: 83:e0:07:e4:d9:8b:df:dc:d2:28:b7:1b:69:35:c4:1e:b2:9f: ba:28:84:78:2e:58:a1:a6:a8:3f:52:0c:c3:73:be:b7:9a:76: 00:fe:11:aa:17:88:79:5b:b7:f8:82:6e:da:b3:6a:c4:31:45: 92:11:12:56 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUR57q1YYJDeZKo4Fz8NMNjqiuY/owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzI1MDAxMDEzWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGViZGVkODBkNDU0NDYxZDRmN2ZiZTJmMDE0Mzk1MTI3 YjJjZGYyNjM3ZTdiYWRkNGU5M2E0ZTg1ZmQ1YWY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKRnh3n44S63OVkZT0adnab0XP6lfLtsiv6qNi084iQU8j PcxV4qrB+5hN8+tH0vu/luEdbe2oPfavrsunqD1DHDroymVh3rzWZi8mOfvZfWlH v6s85R4kKb807yqEelL4qmY+3Dj/kLUNQjxi6U3jMMnqJMd/WCsumoF4ia+UhA9e mDfy+QabfqP+7fBeuqwhAus3IMh+kVIuur2839xEO5GM+bjjidYZ8DSlcsxScq5c yEwOf3j/596kCXz5Q+xfKJY42UGE6160OUnLitGbrlRVJJnyTaicsSdZP/xLFqNe Mvp8RnsAJgjytwa+mBiz6Y3jn+lJEajef9BtsMHvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUWuiuTnd8ibYn6qFON5pI0V6BNEEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyMGY2NzEzLTk2MWEtNDQ2Yy04ZGRlLTRhNDIzMTkwMmYzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/4NDANBgkqhkiG9w0BAQsFAAOCAQEAZel/KYRBnkk72OuMAdPMeHpt W7+ha8Dtm2F6ttkkxUecRgufdp+GVUqC1vGx4RTiXWdnzq7mzZie16kkZ3nBtKXW gODTIjQem+biDIfn8cl6Ui+ushWimhCc1cQSBLTLjhCiKIDUKH+1dJjNk8dSQZQj UVBMy/amdqv6zQO2WhvUKNh0D8oBb7Ibvekzgyy4WltShRAoO2iogxt6hEaUHiQ3 MsrmfwXHmX/+lGAZxJFYYQAcZDksEpgLC2TvaWot/nq9A1xCg+AH5NmL39zSKLcb aTXEHrKfuiiEeC5YoaaoP1IMw3O+t5p2AP4RqheIeVu3+IJu2rNqxDFFkhESVg== -----END CERTIFICATE-----Generated at Wed Aug 6 14:17:37 2025 by rpki-client