$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42de6a2d-c361-4624-becb-d4fdb7b386d4.roa File: 42de6a2d-c361-4624-becb-d4fdb7b386d4.roa (raw, json) Hash identifier: XFwH1HyRP0KuoYivApOLMF8aO4gX+WtT/Sg/Alu3UXQ= Subject key identifier: 79:20:F4:58:F9:14:1C:23:C5:98:23:A2:25:02:A7:C5:B8:2B:50:52 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0C42925A068327ED9F6F6D41BCE3689B67688A95 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42de6a2d-c361-4624-becb-d4fdb7b386d4.roa Signing time: Mon 04 Aug 2025 16:51:54 +0000 ROA not before: Mon 04 Aug 2025 16:51:54 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2d:4800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:42:92:5a:06:83:27:ed:9f:6f:6d:41:bc:e3:68:9b:67:68:8a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:51:54 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=eb246512ace9b50c26036851f96a56bff08a5b3c9159b26987e665422407bb66, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:75:ab:6a:18:1c:26:ab:e4:c8:b7:d6:ff:53: c5:93:cc:9f:86:1a:cb:46:18:0d:8d:a2:10:2e:c7: 7a:f2:ef:90:14:7c:1d:e2:8d:61:6a:89:5c:d1:8a: cd:c0:1f:ca:e8:d7:62:1c:79:30:7b:bb:fd:a6:7f: 12:f9:3c:5f:df:a6:8b:c3:40:a0:91:91:55:c6:e9: 24:ed:cf:15:75:52:b1:75:89:0e:27:54:fd:b5:b2: 02:8f:3e:f7:99:08:bc:61:ff:9b:17:bd:5b:2e:86: 4a:77:4c:26:69:59:94:da:86:c5:ec:1e:b5:48:ff: 44:82:53:2b:2d:20:85:1f:ba:aa:99:db:86:16:af: 69:f3:67:12:f9:3d:90:97:9b:58:28:bc:6a:dc:31: e8:ad:39:01:b1:ff:35:9d:2a:de:af:f6:0b:e2:e1: d2:24:da:0a:d0:28:90:fd:9d:64:d1:72:4c:ae:f3: 73:3d:56:d3:1a:d5:7c:7f:72:e1:78:66:04:d4:b4: 31:db:e0:e2:89:18:b6:57:12:6c:e5:c1:99:09:e4: 31:b8:3e:df:97:4c:12:b1:8c:e8:cb:15:a6:8c:f0: 27:9e:3e:27:be:14:b4:47:92:f7:09:f3:7f:57:7b: e0:61:13:c2:bb:fe:67:b6:f8:04:ae:5e:53:4a:54: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:20:F4:58:F9:14:1C:23:C5:98:23:A2:25:02:A7:C5:B8:2B:50:52 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42de6a2d-c361-4624-becb-d4fdb7b386d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2d:4800::/37 Signature Algorithm: sha256WithRSAEncryption 3e:e3:00:48:52:3a:3b:65:66:0c:e5:92:a6:54:68:40:8f:90: c4:fe:ab:9d:90:7d:f9:54:80:80:16:55:c6:ba:02:3e:18:a4: 0d:c3:f1:17:52:c1:48:14:d5:37:ab:ca:a6:61:25:c0:06:66: c1:8d:9a:48:e9:e9:4f:46:7f:ef:0b:29:73:87:f6:09:d9:94: d2:fa:a1:49:b2:0c:8a:63:6f:49:27:f1:36:09:a2:e8:c6:76: 42:98:6b:5d:63:5b:4c:81:18:f3:fa:c6:7c:34:be:42:df:93: 20:97:e1:ca:83:08:e9:10:5c:79:17:a3:37:82:0f:77:a9:c2: 7b:e9:64:fa:a2:85:9b:43:31:47:71:94:18:bf:a9:62:23:af: 1f:1a:99:75:10:07:05:3e:e0:28:c2:c8:0a:64:7a:c9:39:bd: 97:55:ad:de:cd:09:3f:7d:e9:87:c9:5f:f5:b8:d5:f9:ee:0e: 0f:aa:18:a2:24:00:e3:a0:64:a8:6f:ec:01:ff:5f:4f:b3:eb: d7:38:33:14:b5:47:7f:66:0b:ac:21:e8:9d:bb:59:a4:74:a6: 25:e6:e2:2f:ac:5a:b5:a2:43:5c:db:9d:ec:4b:3f:98:ec:9f: 16:5d:f0:3f:35:0e:4d:c7:9c:a7:07:7f:ac:c1:0f:20:c2:7b: ea:f6:53:4b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDEKSWgaDJ+2fb21BvONom2doipUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTY1MTU0WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjI0NjUxMmFjZTliNTBjMjYwMzY4NTFmOTZhNTZiZmYw OGE1YjNjOTE1OWIyNjk4N2U2NjU0MjI0MDdiYjY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVdatqGBwmq+TIt9b/U8WTzJ+GGstGGA2NohAux3ry75AU fB3ijWFqiVzRis3AH8ro12IceTB7u/2mfxL5PF/fpovDQKCRkVXG6STtzxV1UrF1 iQ4nVP21sgKPPveZCLxh/5sXvVsuhkp3TCZpWZTahsXsHrVI/0SCUystIIUfuqqZ 24YWr2nzZxL5PZCXm1govGrcMeitOQGx/zWdKt6v9gvi4dIk2grQKJD9nWTRckyu 83M9VtMa1Xx/cuF4ZgTUtDHb4OKJGLZXEmzlwZkJ5DG4Pt+XTBKxjOjLFaaM8Cee Pie+FLRHkvcJ839Xe+BhE8K7/me2+ASuXlNKVFvFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUeSD0WPkUHCPFmCOiJQKnxbgrUFIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQyZGU2YTJkLWMzNjEtNDYyNC1iZWNiLWQ0ZmRiN2IzODZkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8tSDANBgkqhkiG9w0BAQsFAAOCAQEAPuMASFI6O2VmDOWSplRoQI+Q xP6rnZB9+VSAgBZVxroCPhikDcPxF1LBSBTVN6vKpmElwAZmwY2aSOnpT0Z/7wsp c4f2CdmU0vqhSbIMimNvSSfxNgmi6MZ2QphrXWNbTIEY8/rGfDS+Qt+TIJfhyoMI 6RBceRejN4IPd6nCe+lk+qKFm0MxR3GUGL+pYiOvHxqZdRAHBT7gKMLICmR6yTm9 l1Wt3s0JP33ph8lf9bjV+e4OD6oYoiQA46BkqG/sAf9fT7Pr1zgzFLVHf2YLrCHo nbtZpHSmJebiL6xataJDXNud7Es/mOyfFl3wPzUOTcecpwd/rMEPIMJ76vZTSw== -----END CERTIFICATE-----Generated at Fri Aug 8 20:52:25 2025 by rpki-client