$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9655f4ce-87f0-4d76-863e-8032d78fbca6.roa File: 9655f4ce-87f0-4d76-863e-8032d78fbca6.roa (raw, json) Hash identifier: p33RNy6DaNxzzdoggQehPS0vklHcVfb7bHzKA7TvM30= Subject key identifier: AE:F2:AB:39:06:E9:1F:C4:C5:8B:57:CE:F7:EB:B7:97:D5:0B:D8:69 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1404BFEF30769463BF0492935F6CBA61FC37ED1B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9655f4ce-87f0-4d76-863e-8032d78fbca6.roa Signing time: Tue 05 Aug 2025 00:21:31 +0000 ROA not before: Tue 05 Aug 2025 00:21:31 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fed:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:04:bf:ef:30:76:94:63:bf:04:92:93:5f:6c:ba:61:fc:37:ed:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:21:31 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=fd3024a52a81f5acaada7fd8ebbf98bcb7c3326132ec27437df8ebf42d74ed73, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:71:15:f8:e3:12:be:f7:c9:52:69:e8:05:65: 43:eb:e4:08:c3:b4:84:30:d1:22:b8:8d:ca:fd:2c: 65:3f:22:16:fb:6b:a9:db:71:2a:01:a2:f7:a5:ce: 48:97:66:47:47:7c:dc:b2:de:90:ec:7d:54:be:1d: 32:e6:4e:ad:91:0e:74:fa:c6:b6:ac:c5:c6:51:98: d8:85:38:f6:f2:16:0a:1a:50:f0:10:7a:7e:56:ff: 64:83:dd:f1:43:7a:1e:b5:86:bd:df:98:73:24:a8: 28:cb:73:6b:fd:db:80:af:b1:f2:19:f7:df:40:73: c0:dc:13:0a:61:83:05:68:34:d5:27:69:23:e5:0e: aa:32:42:fa:33:e6:59:89:e1:71:56:e8:fc:e5:c8: 20:ec:a0:fd:35:2a:6b:cb:9c:60:52:a7:51:b3:c1: a8:e0:95:64:cd:74:e1:57:cc:47:bd:c0:dc:70:7b: a2:00:c3:a7:d7:e2:85:ce:54:88:ba:04:1f:9e:93: b0:76:d0:a7:60:3e:35:bc:b4:9b:0c:26:83:29:62: 67:04:52:7b:50:8e:38:ed:9b:cc:0b:9e:d4:9b:f2: f4:59:7b:ed:fc:a6:6e:84:3e:78:ff:41:ad:56:5a: 7f:70:60:2e:78:c2:2f:eb:12:6d:f7:fd:a4:28:fd: bb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F2:AB:39:06:E9:1F:C4:C5:8B:57:CE:F7:EB:B7:97:D5:0B:D8:69 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9655f4ce-87f0-4d76-863e-8032d78fbca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fed:8000::/39 Signature Algorithm: sha256WithRSAEncryption 35:74:48:a6:8f:b6:dc:2d:6e:f3:8a:9b:5e:8d:b5:be:da:24: dd:d4:45:55:cd:b4:fc:0a:7b:70:a5:b9:c3:9c:b0:4c:89:38: 6b:c6:9f:53:de:73:69:be:9b:86:d7:33:62:01:7b:ff:97:a1: 11:c7:32:48:b0:0f:dc:f7:b9:e1:69:03:57:79:03:8d:23:ff: 94:c5:68:c0:66:9c:c6:6a:5a:5b:90:cb:7d:44:ad:02:2a:36: eb:fa:c1:e3:6a:f9:83:cb:5e:1f:38:18:79:86:08:9c:03:94: 05:41:20:b0:50:b9:a8:94:9a:4f:ed:09:61:76:a7:4b:b7:92: 0f:97:fc:4b:70:cd:7c:a4:f5:0b:bb:1e:3d:eb:48:02:a9:c4: ad:f1:cc:aa:9a:96:75:46:50:4c:50:6f:bc:dd:aa:8d:e2:5e: d3:3c:57:69:ee:91:82:1c:48:d7:dd:56:07:cf:d4:39:ad:62: 5a:4b:34:bc:6c:cb:1d:49:26:a2:92:ac:db:28:e0:4b:b2:35: 82:42:f2:b9:92:dc:6e:04:fe:03:29:6c:ce:84:5b:a3:d3:79: c7:55:4f:7f:79:8f:6d:38:76:53:23:99:c4:dc:67:fb:73:e1: b0:73:0c:12:94:5a:df:64:ee:36:26:fe:41:ed:02:30:1f:44: ec:06:bc:2c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFAS/7zB2lGO/BJKTX2y6Yfw37RswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAyMTMxWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDMwMjRhNTJhODFmNWFjYWFkYTdmZDhlYmJmOThiY2I3 YzMzMjYxMzJlYzI3NDM3ZGY4ZWJmNDJkNzRlZDczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDycRX44xK+98lSaegFZUPr5AjDtIQw0SK4jcr9LGU/Ihb7 a6nbcSoBovelzkiXZkdHfNyy3pDsfVS+HTLmTq2RDnT6xrasxcZRmNiFOPbyFgoa UPAQen5W/2SD3fFDeh61hr3fmHMkqCjLc2v924CvsfIZ999Ac8DcEwphgwVoNNUn aSPlDqoyQvoz5lmJ4XFW6PzlyCDsoP01KmvLnGBSp1GzwajglWTNdOFXzEe9wNxw e6IAw6fX4oXOVIi6BB+ek7B20KdgPjW8tJsMJoMpYmcEUntQjjjtm8wLntSb8vRZ e+38pm6EPnj/Qa1WWn9wYC54wi/rEm33/aQo/bsLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUrvKrOQbpH8TFi1fO9+u3l9UL2GkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk2NTVmNGNlLTg3ZjAtNGQ3Ni04NjNlLTgwMzJkNzhmYmNhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/tgDANBgkqhkiG9w0BAQsFAAOCAQEANXRIpo+23C1u84qbXo21vtok 3dRFVc20/Ap7cKW5w5ywTIk4a8afU95zab6bhtczYgF7/5ehEccySLAP3Pe54WkD V3kDjSP/lMVowGacxmpaW5DLfUStAio26/rB42r5g8teHzgYeYYInAOUBUEgsFC5 qJSaT+0JYXanS7eSD5f8S3DNfKT1C7sePetIAqnErfHMqpqWdUZQTFBvvN2qjeJe 0zxXae6RghxI191WB8/UOa1iWks0vGzLHUkmopKs2yjgS7I1gkLyuZLcbgT+Ayls zoRbo9N5x1VPf3mPbTh2UyOZxNxn+3PhsHMMEpRa32TuNib+Qe0CMB9E7Aa8LA== -----END CERTIFICATE-----Generated at Wed Aug 6 05:20:46 2025 by rpki-client