$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e08da60-3018-411f-82ea-ec3caa1d2cc3.roa File: 1e08da60-3018-411f-82ea-ec3caa1d2cc3.roa (raw, json) Hash identifier: pBJshyd0TmhHqdu3gbmhPJSazlzf1ZqCp10PrMPYHfU= Subject key identifier: 55:9D:8A:F2:BC:A9:E4:13:DB:48:84:42:B1:52:88:40:DD:54:94:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40AA3CC2B80AEEECEE9D88A9DC77F143349B6810 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e08da60-3018-411f-82ea-ec3caa1d2cc3.roa Signing time: Mon 04 Aug 2025 16:52:02 +0000 ROA not before: Mon 04 Aug 2025 16:52:02 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1f::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:aa:3c:c2:b8:0a:ee:ec:ee:9d:88:a9:dc:77:f1:43:34:9b:68:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:52:02 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=a8efb039129ae5f891f198a2505b654c506256423a069cf25031b361e2652713, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:87:61:48:ca:0d:b1:74:19:cf:d3:ed:8a: 54:98:48:d3:fd:b3:68:8c:c5:cd:b2:d4:82:68:ab: f2:7f:81:83:e3:79:7b:79:1f:4c:6e:9f:ee:82:62: 3e:0e:2a:77:4f:81:54:be:e3:0c:a6:38:ee:fd:84: 02:90:a6:7a:92:68:09:f4:d6:9d:de:18:4d:43:a6: a1:f4:62:eb:3e:dd:c9:f4:ce:f9:dd:83:73:e5:68: 06:57:45:3c:1f:fd:83:42:a0:bb:6f:c5:0b:e3:6a: d8:9a:3a:73:2b:ff:c3:ac:58:58:d7:81:57:15:e7: 28:a5:be:67:48:2a:8c:e0:c8:62:60:a7:d4:3b:a7: cb:26:38:a5:bf:a0:58:d1:fa:68:73:22:99:06:97: ba:43:b0:91:ca:0b:69:b6:a2:ae:58:5c:7a:ba:ca: b5:db:82:9d:08:dd:2e:74:0d:03:a7:04:e1:89:d7: 3e:28:16:3c:67:ab:17:04:77:0c:9e:4c:09:81:c0: 41:ba:39:58:4a:f1:ce:83:0e:57:38:18:06:36:06: 53:55:84:3f:83:95:97:3f:8f:ef:ff:51:07:f7:46: a8:ba:c8:e7:f5:e7:af:3a:f0:92:86:0f:c8:6f:29: 7d:e3:74:52:7d:1d:ae:ee:ad:13:0c:21:44:c4:ad: 69:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9D:8A:F2:BC:A9:E4:13:DB:48:84:42:B1:52:88:40:DD:54:94:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e08da60-3018-411f-82ea-ec3caa1d2cc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1f::/37 Signature Algorithm: sha256WithRSAEncryption 40:70:9e:5e:76:5a:2e:7e:31:d5:07:4e:62:75:44:b0:c0:1c: 5e:58:64:93:a9:01:88:b2:16:6b:d5:5b:e9:8c:96:2e:3b:c2: 08:a5:19:2e:46:0a:ed:82:6a:af:65:3a:5b:78:79:ec:0b:be: 04:af:57:8f:6e:a7:c3:3e:43:bb:4d:02:06:85:23:ff:c8:43: 9a:e3:0f:4d:bb:1d:30:d4:eb:73:25:64:8f:9a:90:b6:a8:b7: e9:57:35:7e:d5:64:48:5b:48:bf:e6:29:c7:c5:b6:c1:9d:c3: 90:7c:86:45:9c:21:25:aa:34:92:62:03:10:d6:05:05:2c:cd: 45:7b:4c:0e:90:79:4e:f1:94:6b:05:5c:09:60:0f:23:3b:39: 70:4f:fb:2e:ba:51:9b:c2:6c:82:56:a3:44:04:6f:ce:87:b3: 4a:bf:af:b8:e3:31:77:cf:47:28:01:f9:a0:b4:b8:62:8e:83: 58:be:3a:71:d3:06:ca:f0:d5:cb:23:09:7a:53:56:6e:37:d6: 3f:3e:f9:cc:4c:94:f3:04:52:4b:96:4c:83:06:bd:a0:ee:54: 21:42:1d:e7:8d:7b:62:de:29:35:98:3b:40:df:76:70:2f:e2: 12:22:e4:87:d4:3f:75:6f:fe:90:72:89:d6:e3:4d:82:d9:ad: 3a:c3:4c:f3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQKo8wrgK7uzunYip3HfxQzSbaBAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTY1MjAyWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOGVmYjAzOTEyOWFlNWY4OTFmMTk4YTI1MDViNjU0YzUw NjI1NjQyM2EwNjljZjI1MDMxYjM2MWUyNjUyNzEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCo04dhSMoNsXQZz9PtilSYSNP9s2iMxc2y1IJoq/J/gYPj eXt5H0xun+6CYj4OKndPgVS+4wymOO79hAKQpnqSaAn01p3eGE1DpqH0Yus+3cn0 zvndg3PlaAZXRTwf/YNCoLtvxQvjatiaOnMr/8OsWFjXgVcV5yilvmdIKozgyGJg p9Q7p8smOKW/oFjR+mhzIpkGl7pDsJHKC2m2oq5YXHq6yrXbgp0I3S50DQOnBOGJ 1z4oFjxnqxcEdwyeTAmBwEG6OVhK8c6DDlc4GAY2BlNVhD+DlZc/j+//UQf3Rqi6 yOf156868JKGD8hvKX3jdFJ9Ha7urRMMIUTErWl5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUVZ2K8ryp5BPbSIRCsVKIQN1UlCIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFlMDhkYTYwLTMwMTgtNDExZi04MmVhLWVjM2NhYTFkMmNjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8fADANBgkqhkiG9w0BAQsFAAOCAQEAQHCeXnZaLn4x1QdOYnVEsMAc Xlhkk6kBiLIWa9Vb6YyWLjvCCKUZLkYK7YJqr2U6W3h57Au+BK9Xj26nwz5Du00C BoUj/8hDmuMPTbsdMNTrcyVkj5qQtqi36Vc1ftVkSFtIv+Ypx8W2wZ3DkHyGRZwh Jao0kmIDENYFBSzNRXtMDpB5TvGUawVcCWAPIzs5cE/7LrpRm8JsglajRARvzoez Sr+vuOMxd89HKAH5oLS4Yo6DWL46cdMGyvDVyyMJelNWbjfWPz75zEyU8wRSS5ZM gwa9oO5UIUId5417Yt4pNZg7QN92cC/iEiLkh9Q/dW/+kHKJ1uNNgtmtOsNM8w== -----END CERTIFICATE-----Generated at Wed Aug 6 10:19:08 2025 by rpki-client