$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/561dfaff-0d62-4d0f-8223-365a2175ed6b.roa File: 561dfaff-0d62-4d0f-8223-365a2175ed6b.roa (raw, json) Hash identifier: HY9yVLStQwGznX9NbH8hjMQaJvCe49L430hTKTNWoGg= Subject key identifier: 41:CC:F1:9E:87:0A:44:9C:2A:4E:DC:F0:61:C2:1A:8E:E6:99:F9:86 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7235E707C202BDDADDCF909D9FF7AA195E963894 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/561dfaff-0d62-4d0f-8223-365a2175ed6b.roa Signing time: Fri 01 Aug 2025 16:10:58 +0000 ROA not before: Fri 01 Aug 2025 16:10:58 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:35:e7:07:c2:02:bd:da:dd:cf:90:9d:9f:f7:aa:19:5e:96:38:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 16:10:58 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=dba6387a173848f36513e03d8f383572d33c087825e22f9d1fe451780ba84c6f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:49:c6:d3:ac:69:54:6b:a3:f4:10:1e:16:0f: fd:3f:71:10:b3:83:ba:7d:20:0d:24:7b:ef:fd:71: 53:b2:fc:e2:af:f7:df:6e:61:61:a0:b4:03:9c:b7: 53:82:1b:1b:48:3d:3c:92:8d:1f:35:58:e1:1e:f0: 9c:34:17:e2:1f:df:43:fd:26:9b:37:49:8f:ea:50: f2:ca:50:9c:9f:c7:ca:85:ef:e2:34:60:1b:06:76: 64:c5:b2:d7:f3:38:ab:63:7b:dc:5c:8d:68:47:d0: 4f:db:0a:79:c2:b3:30:e5:36:d5:cd:de:fe:e0:5c: 20:2a:e4:de:a5:39:bf:d8:3f:f6:d4:54:89:da:c1: b2:c9:2b:25:e5:cb:73:65:f2:83:ad:93:3f:b1:a4: 34:76:16:e5:14:09:7c:00:79:9f:74:5e:f8:0c:b7: 4b:ca:16:10:1c:d1:01:a2:40:47:fb:77:a3:66:9a: d4:19:13:19:0e:a2:9b:e5:25:27:44:0e:9e:64:10: 15:ab:93:b8:22:cf:d9:6b:ff:72:43:fe:36:ff:be: b6:ea:3a:91:6e:4e:27:c9:5a:21:57:8a:16:69:61: 94:49:70:e1:c6:15:03:09:8c:8e:34:85:cc:98:34: 81:6f:e1:f8:ed:b3:1b:31:69:fc:55:75:39:3c:56: a4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CC:F1:9E:87:0A:44:9C:2A:4E:DC:F0:61:C2:1A:8E:E6:99:F9:86 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/561dfaff-0d62-4d0f-8223-365a2175ed6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:4080::/48 Signature Algorithm: sha256WithRSAEncryption 9e:0d:1c:27:43:bf:37:50:69:68:bc:e2:f2:b5:01:08:34:58: a4:3f:54:96:8e:dd:d0:df:42:e8:fb:29:57:52:2e:f3:c0:48: 38:aa:cf:ef:f0:73:6a:50:d2:07:78:9c:17:44:8f:bd:b3:e6: 15:9b:b7:a2:22:70:68:85:6c:5c:fc:08:f2:d2:b5:84:fb:c2: ae:83:7f:3f:35:e7:f6:c8:a1:d2:c5:16:82:7e:34:8a:f8:ae: 39:56:61:c5:1b:a0:ba:cf:2e:95:fa:db:67:a8:5f:35:e0:aa: c1:59:c7:b0:6a:61:b7:d5:a4:80:61:26:a4:13:4b:f2:35:55: 04:af:a4:9e:ab:19:2b:39:24:8e:e8:02:9c:38:c0:7b:60:8e: 4e:aa:33:32:77:67:dc:2f:77:00:1d:53:a4:50:d1:e0:1e:c3: af:ba:9a:01:db:c6:57:09:ba:ea:d7:66:9d:f2:09:af:81:7c: ac:b2:b2:e3:f5:40:7c:1a:30:b6:9a:09:1f:43:b2:8d:46:45: 6c:06:24:97:4a:f6:4f:b9:74:93:9e:16:bf:36:22:d2:9f:4b: aa:c7:4b:17:7d:f8:2a:8c:bf:af:f3:67:95:7b:69:44:ee:07: a8:20:17:30:95:e7:12:83:b7:43:0b:04:16:a3:5b:d9:26:99: 32:83:ea:cd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcjXnB8ICvdrdz5Cdn/eqGV6WOJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTYxMDU4WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmE2Mzg3YTE3Mzg0OGYzNjUxM2UwM2Q4ZjM4MzU3MmQz M2MwODc4MjVlMjJmOWQxZmU0NTE3ODBiYTg0YzZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMScbTrGlUa6P0EB4WD/0/cRCzg7p9IA0ke+/9cVOy/OKv 999uYWGgtAOct1OCGxtIPTySjR81WOEe8Jw0F+If30P9Jps3SY/qUPLKUJyfx8qF 7+I0YBsGdmTFstfzOKtje9xcjWhH0E/bCnnCszDlNtXN3v7gXCAq5N6lOb/YP/bU VInawbLJKyXly3Nl8oOtkz+xpDR2FuUUCXwAeZ90XvgMt0vKFhAc0QGiQEf7d6Nm mtQZExkOopvlJSdEDp5kEBWrk7giz9lr/3JD/jb/vrbqOpFuTifJWiFXihZpYZRJ cOHGFQMJjI40hcyYNIFv4fjtsxsxafxVdTk8VqTRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQczxnocKRJwqTtzwYcIajuaZ+YYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2MWRmYWZmLTBkNjItNGQwZi04MjIzLTM2NWEyMTc1ZWQ2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84QIAwDQYJKoZIhvcNAQELBQADggEBAJ4NHCdDvzdQaWi84vK1AQg0 WKQ/VJaO3dDfQuj7KVdSLvPASDiqz+/wc2pQ0gd4nBdEj72z5hWbt6IicGiFbFz8 CPLStYT7wq6Dfz815/bIodLFFoJ+NIr4rjlWYcUboLrPLpX622eoXzXgqsFZx7Bq YbfVpIBhJqQTS/I1VQSvpJ6rGSs5JI7oApw4wHtgjk6qMzJ3Z9wvdwAdU6RQ0eAe w6+6mgHbxlcJuurXZp3yCa+BfKyysuP1QHwaMLaaCR9Dso1GRWwGJJdK9k+5dJOe Fr82ItKfS6rHSxd9+CqMv6/zZ5V7aUTuB6ggFzCV5xKDt0MLBBajW9kmmTKD6s0= -----END CERTIFICATE-----Generated at Fri Aug 8 19:31:54 2025 by rpki-client