$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38153cce-e525-47a5-af36-a8f25ad480b4.roa File: 38153cce-e525-47a5-af36-a8f25ad480b4.roa (raw, json) Hash identifier: AXZtpG4gma5KYyNJTpxjChtREcaj5U29q8U4vENtErs= Subject key identifier: D8:DE:BD:2C:E4:A9:2B:5F:D5:26:E6:5A:F9:6A:83:22:0E:5C:79:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1179040940A5BE243D1DFA89ABDB3577847D82C2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38153cce-e525-47a5-af36-a8f25ad480b4.roa Signing time: Sat 14 Jun 2025 00:42:00 +0000 ROA not before: Sat 14 Jun 2025 00:42:00 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f21:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:79:04:09:40:a5:be:24:3d:1d:fa:89:ab:db:35:77:84:7d:82:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:42:00 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=3cade21c145282d94a0311fca780f2e143ec831676029d3752e395570f5b7aeb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:8b:0d:8b:46:a3:a0:f1:68:40:c0:8a:e9: 1b:ec:46:ed:aa:59:fc:73:59:73:7c:c0:66:8c:4c: 9b:0c:e8:57:7c:3f:db:19:87:28:98:83:6b:1c:85: 75:f5:77:59:a6:a4:b7:54:4e:d8:96:9b:46:8a:d4: 35:e6:e0:61:72:70:59:86:cf:87:9c:f6:35:24:5e: a3:5f:0b:21:2b:a9:06:6f:15:c7:19:17:12:9b:6c: 6e:4e:44:08:56:ad:5d:ce:54:52:fc:ef:98:20:89: 30:53:67:41:ac:58:00:a8:9f:82:e7:d1:9b:50:74: 7a:d3:f3:a2:6c:d3:ff:c0:40:63:76:db:72:7e:89: 2e:c6:27:93:ef:44:e0:3c:08:65:ce:6a:f4:00:30: 03:87:22:f3:13:af:6f:7f:80:26:ee:13:58:ef:17: ef:4c:bc:11:85:f8:cd:a3:c6:19:8f:8c:4a:d8:9f: 24:76:5a:cc:f8:c2:1a:39:4b:33:8e:ef:dd:d9:37: 6f:fa:bd:d7:4f:0a:ad:b0:d9:2f:bd:6d:cf:43:dc: 60:f9:79:51:74:62:04:62:f4:f3:ab:48:8c:9a:46: 94:01:42:ca:19:04:5a:2e:15:e7:30:d8:5e:4a:81: b3:6a:cb:a0:8c:80:6c:6a:e6:d9:9d:0f:0a:ea:aa: 11:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DE:BD:2C:E4:A9:2B:5F:D5:26:E6:5A:F9:6A:83:22:0E:5C:79:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38153cce-e525-47a5-af36-a8f25ad480b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f21:8000::/36 Signature Algorithm: sha256WithRSAEncryption 3b:30:60:a0:09:a3:61:1a:f6:65:ff:bf:98:60:2e:5b:ba:34: 8a:c7:5d:d8:5e:4f:f8:12:8b:c3:ab:31:75:a5:de:21:33:7a: d7:ce:ea:b7:9a:d0:0b:20:8d:f1:0c:a7:6e:4a:fa:94:5f:57: 2c:c3:42:20:91:e8:f0:7f:90:d8:18:dc:2b:54:b3:c9:72:51: 56:73:bc:a4:0c:8f:a7:02:be:d9:a2:0c:93:81:d9:4a:66:7a: 5a:32:03:10:36:e3:ac:95:3d:70:2e:de:b4:96:22:d7:f4:0b: 87:cc:5d:79:7f:89:b6:76:88:f3:19:9e:d4:8f:9a:30:61:a0: 10:85:b9:4d:a6:39:1c:2b:f2:62:c1:87:89:a7:f2:59:0c:57: 3d:2d:55:77:fe:1f:ab:d9:a3:9b:22:44:16:1e:37:87:cb:22: e8:2d:27:d1:55:50:5b:db:bb:45:e0:7b:f7:60:31:c0:8c:3a: c1:11:f1:29:81:94:c2:72:fa:82:49:44:ce:c0:58:62:b5:0c: ac:8b:ec:f9:1c:24:b5:4a:88:bb:4a:ee:1d:a4:ec:6c:69:41: 6e:c2:59:00:d4:cc:78:d0:82:81:4e:7a:a6:89:b3:29:97:65: 19:d8:be:8c:ca:4b:be:14:9e:a5:c5:34:c1:6e:f1:79:ab:4c: 60:95:78:0c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEXkECUClviQ9HfqJq9s1d4R9gsIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDA0MjAwWhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzY2FkZTIxYzE0NTI4MmQ5NGEwMzExZmNhNzgwZjJlMTQz ZWM4MzE2NzYwMjlkMzc1MmUzOTU1NzBmNWI3YWViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyXIsNi0ajoPFoQMCK6RvsRu2qWfxzWXN8wGaMTJsM6Fd8 P9sZhyiYg2schXX1d1mmpLdUTtiWm0aK1DXm4GFycFmGz4ec9jUkXqNfCyErqQZv FccZFxKbbG5ORAhWrV3OVFL875ggiTBTZ0GsWACon4Ln0ZtQdHrT86Js0//AQGN2 23J+iS7GJ5PvROA8CGXOavQAMAOHIvMTr29/gCbuE1jvF+9MvBGF+M2jxhmPjErY nyR2Wsz4who5SzOO793ZN2/6vddPCq2w2S+9bc9D3GD5eVF0YgRi9POrSIyaRpQB QsoZBFouFecw2F5KgbNqy6CMgGxq5tmdDwrqqhE5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2N69LOSpK1/VJuZa+WqDIg5cefEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM4MTUzY2NlLWU1MjUtNDdhNS1hZjM2LWE4ZjI1YWQ0ODBiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8hgDANBgkqhkiG9w0BAQsFAAOCAQEAOzBgoAmjYRr2Zf+/mGAuW7o0 isdd2F5P+BKLw6sxdaXeITN6187qt5rQCyCN8Qynbkr6lF9XLMNCIJHo8H+Q2Bjc K1SzyXJRVnO8pAyPpwK+2aIMk4HZSmZ6WjIDEDbjrJU9cC7etJYi1/QLh8xdeX+J tnaI8xme1I+aMGGgEIW5TaY5HCvyYsGHiafyWQxXPS1Vd/4fq9mjmyJEFh43h8si 6C0n0VVQW9u7ReB792AxwIw6wRHxKYGUwnL6gklEzsBYYrUMrIvs+RwktUqIu0ru HaTsbGlBbsJZANTMeNCCgU56pomzKZdlGdi+jMpLvhSepcU0wW7xeatMYJV4DA== -----END CERTIFICATE-----Generated at Tue Jun 17 11:45:57 2025 by rpki-client