$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83dcb0f4-8c84-4084-a564-98b99b2911ea.roa File: 83dcb0f4-8c84-4084-a564-98b99b2911ea.roa (raw, json) Hash identifier: xNcCJGsUNHDMfjJCfmHYkvWeAq4Pe4VZXCdAd115Gyw= Subject key identifier: 2A:1A:A7:EB:85:E8:18:4D:D2:7C:EA:0E:B5:BA:55:21:5E:F3:45:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B98D6C61A2CA719F6E7B3E28AB9FBF737320FB2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83dcb0f4-8c84-4084-a564-98b99b2911ea.roa Signing time: Fri 01 Aug 2025 16:31:58 +0000 ROA not before: Fri 01 Aug 2025 16:31:58 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:98:d6:c6:1a:2c:a7:19:f6:e7:b3:e2:8a:b9:fb:f7:37:32:0f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 16:31:58 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=d3e33b79ae3926c335dc52ed725210091b1741017903fb53e79ef43aa637dba9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:5e:05:7f:d0:62:0c:4b:bc:65:cc:51:09: 18:b1:6f:61:ba:20:6f:5a:95:d6:56:be:16:e0:00: e3:35:f3:cb:c9:d7:0b:2a:62:75:95:bf:5d:29:7a: 6a:a6:49:26:26:a7:da:b1:22:fd:7e:3e:16:07:3c: 2d:11:dc:48:79:cf:b6:42:30:b6:4f:1a:5d:0c:b7: 41:33:ee:88:17:df:d1:0f:09:a5:40:fd:96:a4:ce: a5:6f:69:5a:6d:d4:14:6c:c1:42:7d:1f:2d:4a:37: 1a:1e:ca:d7:35:2e:06:2d:08:f9:51:bf:27:63:d7: d4:15:76:e8:e6:70:fa:68:70:80:f4:7d:06:b8:a0: 8d:7c:b6:61:92:80:c5:bf:56:68:bf:b9:c7:5e:01: 3a:40:f5:de:25:43:13:b7:bc:91:44:b0:5a:d9:ac: 8c:3c:6a:75:a2:af:e8:69:c4:18:65:e3:60:ba:ca: c7:1e:58:c1:9e:66:ff:94:85:a1:f9:47:92:f8:dc: 6e:67:fe:8c:34:73:cf:76:62:c5:69:b6:e2:6d:d8: 91:dc:8f:a3:3b:ca:67:ed:8b:07:9f:86:5d:e0:79: a0:24:5f:d6:3c:c1:bb:f3:be:b7:dd:78:10:6b:38: 96:43:0f:fa:b2:ae:0e:87:0f:d1:21:c4:c1:61:3f: cd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1A:A7:EB:85:E8:18:4D:D2:7C:EA:0E:B5:BA:55:21:5E:F3:45:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83dcb0f4-8c84-4084-a564-98b99b2911ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:3400::/40 Signature Algorithm: sha256WithRSAEncryption 1c:24:1f:15:b7:50:79:68:df:de:b9:c7:ae:a1:91:62:29:19: d6:37:52:ba:22:9a:22:c5:52:96:38:6e:9b:89:4b:1f:60:48: 4b:0a:81:9a:9a:ef:4e:36:38:be:85:42:4d:b0:e1:5c:8b:b6: 17:a2:ab:b5:13:cd:90:5e:6f:47:00:41:66:b8:82:90:0f:fa: a0:58:f7:c9:85:fc:48:8e:27:01:75:f9:49:0f:d7:13:71:e8: 04:42:ba:6a:59:0a:d8:34:45:08:50:fc:18:7d:b2:5e:8c:c9: 49:92:b0:13:d1:1a:56:e8:0e:a3:0f:f8:8b:00:90:a4:08:c5: 01:6d:a1:59:48:03:a9:c9:ef:08:c0:b9:78:7f:6c:7f:d1:a4: e4:dc:eb:48:b2:a3:c9:3a:bb:5f:92:07:cf:ce:7a:02:8d:ed: 25:da:17:45:2d:23:48:ed:55:d2:c8:13:00:5e:0a:0a:41:58: e7:94:15:52:37:40:f3:13:b7:70:64:a0:72:9b:d5:b8:5e:db: ae:ec:72:ce:8b:0d:90:43:8d:02:3d:32:e2:f8:ae:95:8e:a5: 80:d2:91:5f:ed:12:5b:30:73:1a:98:66:f3:d7:da:8f:f1:7f: 40:46:64:d0:8c:aa:6a:0c:84:fd:b7:62:ba:26:1c:5f:c5:2c: 62:81:91:33 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUG5jWxhospxn257Piirn79zcyD7IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTYzMTU4WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkM2UzM2I3OWFlMzkyNmMzMzVkYzUyZWQ3MjUyMTAwOTFi MTc0MTAxNzkwM2ZiNTNlNzllZjQzYWE2MzdkYmE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbWl4Ff9BiDEu8ZcxRCRixb2G6IG9aldZWvhbgAOM188vJ 1wsqYnWVv10pemqmSSYmp9qxIv1+PhYHPC0R3Eh5z7ZCMLZPGl0Mt0Ez7ogX39EP CaVA/ZakzqVvaVpt1BRswUJ9Hy1KNxoeytc1LgYtCPlRvydj19QVdujmcPpocID0 fQa4oI18tmGSgMW/Vmi/ucdeATpA9d4lQxO3vJFEsFrZrIw8anWir+hpxBhl42C6 ysceWMGeZv+UhaH5R5L43G5n/ow0c892YsVptuJt2JHcj6M7ymftiwefhl3geaAk X9Y8wbvzvrfdeBBrOJZDD/qyrg6HD9EhxMFhP80jAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUKhqn64XoGE3SfOoOtbpVIV7zRfUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgzZGNiMGY0LThjODQtNDA4NC1hNTY0LTk4Yjk5YjI5MTFlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9hNDANBgkqhkiG9w0BAQsFAAOCAQEAHCQfFbdQeWjf3rnHrqGRYikZ 1jdSuiKaIsVSljhum4lLH2BISwqBmprvTjY4voVCTbDhXIu2F6KrtRPNkF5vRwBB ZriCkA/6oFj3yYX8SI4nAXX5SQ/XE3HoBEK6alkK2DRFCFD8GH2yXozJSZKwE9Ea VugOow/4iwCQpAjFAW2hWUgDqcnvCMC5eH9sf9Gk5NzrSLKjyTq7X5IHz856Ao3t JdoXRS0jSO1V0sgTAF4KCkFY55QVUjdA8xO3cGSgcpvVuF7bruxyzosNkEONAj0y 4viulY6lgNKRX+0SWzBzGphm89faj/F/QEZk0IyqagyE/bdiuiYcX8UsYoGRMw== -----END CERTIFICATE-----Generated at Wed Aug 6 11:16:24 2025 by rpki-client