$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449a3cb0-095f-4360-86c2-46dba2beaf65.roa File: 449a3cb0-095f-4360-86c2-46dba2beaf65.roa (raw, json) Hash identifier: mbbFScp7PB3WaW9XjQqxWB+HMt8rmfejJAp+bt+CyTU= Subject key identifier: 7D:DF:F0:84:0D:45:A5:47:51:C7:EB:BB:21:72:E2:48:4C:22:E3:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 353DE8D9F797E6E1677DD6FF6FC96AE87B60EA36 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449a3cb0-095f-4360-86c2-46dba2beaf65.roa Signing time: Fri 01 Aug 2025 16:40:22 +0000 ROA not before: Fri 01 Aug 2025 16:40:22 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3d:e8:d9:f7:97:e6:e1:67:7d:d6:ff:6f:c9:6a:e8:7b:60:ea:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 16:40:22 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=9d44a1b346a83de8c0c5f0f56243667147b92ab5aae0fc5ce2ce524bf227661b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:e4:95:00:00:61:24:98:4d:62:cf:c3:a3: a4:ee:e1:53:a9:d8:b6:ec:0c:c5:4b:90:b6:4f:1b: 16:84:d4:4e:7b:78:c0:0f:c5:a3:15:eb:ab:c7:dd: ac:21:e7:d9:ea:7e:2e:1a:b7:5a:12:a8:2e:eb:97: b7:ce:44:09:64:35:c6:58:ab:53:ac:eb:bb:3e:c5: 5f:a6:12:0e:32:e2:4b:8a:2b:b3:13:6e:3d:bb:a1: e0:dd:09:76:ec:30:1e:62:99:bf:19:0f:8d:38:86: f7:94:03:15:a1:dd:0f:01:ce:d2:6a:86:57:9f:23: 0f:48:cf:7a:9c:6a:6b:79:29:fb:28:4f:09:d6:fa: d6:5c:ef:db:3c:1a:de:06:fd:23:d5:dd:eb:e1:25: 07:e2:e2:ba:42:4f:a4:79:17:1c:70:f9:09:11:6f: 1e:e1:b9:94:31:d8:74:9a:a8:a0:67:c9:1c:38:06: d4:87:fb:7d:c7:a5:4e:79:98:55:7e:7b:30:9a:07: 50:17:7f:f1:98:2b:9e:07:3c:10:0b:d4:33:92:1a: dc:b3:58:b7:2a:68:9c:a8:81:da:5c:dd:47:69:b9: b3:d3:57:47:e5:31:34:0b:4a:b4:6a:06:f6:f7:a0: 21:bc:81:2b:18:26:57:8a:24:54:f3:e3:ce:70:cf: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DF:F0:84:0D:45:A5:47:51:C7:EB:BB:21:72:E2:48:4C:22:E3:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/449a3cb0-095f-4360-86c2-46dba2beaf65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:3440::/48 Signature Algorithm: sha256WithRSAEncryption 61:81:eb:36:30:58:d9:70:bf:9a:6a:18:bd:28:9b:63:db:8a: 67:ac:3e:55:8c:a8:b0:3a:4e:4f:62:9c:cc:7a:f3:b7:c3:b0: f5:32:7b:44:04:69:07:7f:a1:93:bc:6f:bd:32:34:d8:74:57: f0:74:a0:80:da:47:ef:e1:12:27:71:c4:02:92:31:8e:72:f5: 40:1f:1f:af:7c:8e:d4:54:1d:d6:1b:1a:3d:7c:73:26:5a:b3: 85:f7:f3:80:65:9a:59:95:ab:69:1a:42:82:38:cb:40:d6:cb: 6c:b2:88:fa:60:02:cb:ba:4a:a0:34:8a:15:f7:bf:eb:1a:de: 0c:0a:5b:48:10:82:ff:49:d8:89:62:5e:81:2e:9a:03:86:67: 43:7f:32:15:d1:a8:ef:9f:d3:b2:3a:d5:67:8f:a0:63:e5:f0: 5a:21:2c:41:f8:6d:cc:51:b0:00:ab:70:a9:19:98:ce:19:b7: bf:5b:2f:8c:ee:bd:d3:4b:c4:d9:8b:0a:ba:f7:eb:d3:0d:d0: 59:07:37:de:0c:6a:f7:fb:f3:78:af:6e:76:d4:98:af:8e:b8: c3:f3:3d:af:ad:cb:45:c6:7b:13:f9:15:d4:85:60:69:f0:21: e0:54:82:c1:95:32:9a:d1:bd:96:7d:b7:c5:3b:75:31:d7:1b: c3:32:90:40 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNT3o2feX5uFnfdb/b8lq6Htg6jYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTY0MDIyWhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDQ0YTFiMzQ2YTgzZGU4YzBjNWYwZjU2MjQzNjY3MTQ3 YjkyYWI1YWFlMGZjNWNlMmNlNTI0YmYyMjc2NjFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC91+SVAABhJJhNYs/Do6Tu4VOp2LbsDMVLkLZPGxaE1E57 eMAPxaMV66vH3awh59nqfi4at1oSqC7rl7fORAlkNcZYq1Os67s+xV+mEg4y4kuK K7MTbj27oeDdCXbsMB5imb8ZD404hveUAxWh3Q8BztJqhlefIw9Iz3qcamt5Kfso TwnW+tZc79s8Gt4G/SPV3evhJQfi4rpCT6R5Fxxw+QkRbx7huZQx2HSaqKBnyRw4 BtSH+33HpU55mFV+ezCaB1AXf/GYK54HPBAL1DOSGtyzWLcqaJyogdpc3UdpubPT V0flMTQLSrRqBvb3oCG8gSsYJleKJFTz485wz/e/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfd/whA1FpUdRx+u7IXLiSEwi45QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ0OWEzY2IwLTA5NWYtNDM2MC04NmMyLTQ2ZGJhMmJlYWY2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//NEAwDQYJKoZIhvcNAQELBQADggEBAGGB6zYwWNlwv5pqGL0om2Pb imesPlWMqLA6Tk9inMx687fDsPUye0QEaQd/oZO8b70yNNh0V/B0oIDaR+/hEidx xAKSMY5y9UAfH698jtRUHdYbGj18cyZas4X384BlmlmVq2kaQoI4y0DWy2yyiPpg Asu6SqA0ihX3v+sa3gwKW0gQgv9J2IliXoEumgOGZ0N/MhXRqO+f07I61WePoGPl 8FohLEH4bcxRsACrcKkZmM4Zt79bL4zuvdNLxNmLCrr369MN0FkHN94Mavf783iv bnbUmK+OuMPzPa+ty0XGexP5FdSFYGnwIeBUgsGVMprRvZZ9t8U7dTHXG8MykEA= -----END CERTIFICATE-----Generated at Fri Aug 8 00:45:11 2025 by rpki-client