$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/854afe71-a47b-4f9f-8274-9f19c4431d15.roa File: 854afe71-a47b-4f9f-8274-9f19c4431d15.roa (raw, json) Hash identifier: BBpvF2idRpJgHBvJ8WfBUhB13/MvAUuIt+SyA9OqwqA= Subject key identifier: 4D:45:C5:D8:FD:9C:C6:9D:8A:6F:55:A6:55:E5:13:E9:0D:D2:92:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E7D396003BCB1071CAC002876AEE60ADB040F57 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/854afe71-a47b-4f9f-8274-9f19c4431d15.roa Signing time: Mon 04 Aug 2025 16:20:25 +0000 ROA not before: Mon 04 Aug 2025 16:20:25 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f36::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7d:39:60:03:bc:b1:07:1c:ac:00:28:76:ae:e6:0a:db:04:0f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:20:25 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=ab3afb5e5b9d07dd40af709ccf4668666c396013480baa3a5331d0875a9fe490, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:14:c1:f8:37:6e:da:72:cb:e0:d5:93:cc: 23:44:d6:0e:1b:24:e7:05:66:0a:70:70:0c:b6:ef: f8:ea:5a:50:58:cd:7e:1c:e6:67:01:8c:b3:e2:6b: a9:54:bc:7e:02:64:de:2d:d4:d0:d6:66:91:a5:87: 50:32:e1:c7:f2:35:13:dc:6f:11:56:98:0a:93:04: 85:a5:16:9b:da:1a:9e:21:e9:f6:13:43:b8:32:25: fa:3d:90:cd:08:8f:31:4e:1f:67:40:5e:90:b2:b6: ef:b9:43:72:85:47:03:97:6f:97:72:c5:66:d8:2c: b7:51:0e:be:d9:4c:de:3c:d1:1a:96:f2:bf:43:0f: 1a:28:a2:16:b2:ac:c1:a9:94:29:3f:f0:1b:23:c9: 07:d4:3d:94:03:40:74:7d:a5:0c:58:af:be:ed:09: 89:d8:32:2f:44:38:03:bc:5b:d3:7f:95:fa:06:aa: d0:95:2e:cd:ac:5e:7a:14:e7:81:a6:39:2b:88:10: e3:79:df:c8:a6:10:2a:90:e8:4e:c2:d5:32:9a:f4: b9:ed:eb:80:19:b0:e5:a4:a8:99:01:51:d5:4d:94: a1:24:84:1e:b5:73:fc:53:1a:79:5b:fa:fb:3a:60: ef:56:ec:75:70:c5:58:20:1f:cb:3b:75:85:60:60: 0f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:45:C5:D8:FD:9C:C6:9D:8A:6F:55:A6:55:E5:13:E9:0D:D2:92:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/854afe71-a47b-4f9f-8274-9f19c4431d15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f36::/32 Signature Algorithm: sha256WithRSAEncryption d1:27:46:0c:8a:4b:72:c8:ea:05:e4:83:db:63:7b:65:c2:10: bd:33:b6:b2:fb:27:c4:c9:07:07:c4:6c:f8:0c:c4:1e:78:38: 0f:65:10:1f:2e:63:f2:76:a0:18:e6:77:d7:6e:92:4c:58:ef: 42:44:c0:fc:d2:1a:95:28:da:4c:c4:73:eb:2c:02:0c:d7:2a: d6:92:b7:f7:25:13:31:94:94:fd:ed:bd:ea:d2:f3:1d:a4:7d: 46:fb:6c:cd:ad:66:96:f6:af:eb:50:ac:86:8a:1f:40:60:ed: 4a:9a:34:65:a3:99:0f:a8:b8:c1:84:79:3e:3b:64:bb:e5:e5: 5f:2f:9b:3f:ff:0a:a1:b8:9c:de:c2:da:82:eb:42:5e:36:ef: 2e:2f:5e:52:26:54:af:49:ad:d0:f0:48:f4:ba:af:ad:6b:25: 33:49:71:16:66:64:59:8d:8b:43:38:5f:55:71:de:45:84:aa: 6f:2d:35:1f:0a:52:8e:5e:b0:40:51:3b:61:ad:a7:f5:de:d9: 9a:ca:15:44:68:90:9f:3d:d9:64:0f:32:54:bc:5d:19:4c:8b: 5d:1c:d9:d0:d3:fc:da:89:cd:51:c7:aa:d4:7e:95:74:a6:8f: 0a:d2:35:de:68:65:1d:59:6e:d7:db:23:bb:3e:4d:8b:79:5e: aa:00:59:83 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUPn05YAO8sQccrAAodq7mCtsED1cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTYyMDI1WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjNhZmI1ZTViOWQwN2RkNDBhZjcwOWNjZjQ2Njg2NjZj Mzk2MDEzNDgwYmFhM2E1MzMxZDA4NzVhOWZlNDkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCX7hTB+Ddu2nLL4NWTzCNE1g4bJOcFZgpwcAy27/jqWlBY zX4c5mcBjLPia6lUvH4CZN4t1NDWZpGlh1Ay4cfyNRPcbxFWmAqTBIWlFpvaGp4h 6fYTQ7gyJfo9kM0IjzFOH2dAXpCytu+5Q3KFRwOXb5dyxWbYLLdRDr7ZTN480RqW 8r9DDxooohayrMGplCk/8BsjyQfUPZQDQHR9pQxYr77tCYnYMi9EOAO8W9N/lfoG qtCVLs2sXnoU54GmOSuIEON538imECqQ6E7C1TKa9Lnt64AZsOWkqJkBUdVNlKEk hB61c/xTGnlb+vs6YO9W7HVwxVggH8s7dYVgYA/9AgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUTUXF2P2cxp2Kb1WmVeUT6Q3SkhgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg1NGFmZTcxLWE0N2ItNGY5Zi04Mjc0LTlmMTljNDQzMWQxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB82MA0GCSqGSIb3DQEBCwUAA4IBAQDRJ0YMiktyyOoF5IPbY3tlwhC9 M7ay+yfEyQcHxGz4DMQeeDgPZRAfLmPydqAY5nfXbpJMWO9CRMD80hqVKNpMxHPr LAIM1yrWkrf3JRMxlJT97b3q0vMdpH1G+2zNrWaW9q/rUKyGih9AYO1KmjRlo5kP qLjBhHk+O2S75eVfL5s//wqhuJzewtqC60JeNu8uL15SJlSvSa3Q8Ej0uq+tayUz SXEWZmRZjYtDOF9Vcd5FhKpvLTUfClKOXrBAUTthraf13tmayhVEaJCfPdlkDzJU vF0ZTItdHNnQ0/zaic1Rx6rUfpV0po8K0jXeaGUdWW7X2yO7Pk2LeV6qAFmD -----END CERTIFICATE-----Generated at Wed Aug 6 00:47:13 2025 by rpki-client