$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7547cf-1d8f-409c-90d9-899b542e967e.roa File: bd7547cf-1d8f-409c-90d9-899b542e967e.roa (raw, json) Hash identifier: 1wnHsNoBvtJu7GOAhNkpIjFH7U4bYkWmu/D+tNC0Rrc= Subject key identifier: 26:A8:3D:CE:0D:E5:43:84:EF:02:02:2F:1F:5D:50:47:16:A9:10:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3927DDE76AE5866C07CF87D24A91518C904DA2F2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7547cf-1d8f-409c-90d9-899b542e967e.roa Signing time: Wed 23 Jul 2025 00:40:21 +0000 ROA not before: Wed 23 Jul 2025 00:40:21 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff4:7400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:27:dd:e7:6a:e5:86:6c:07:cf:87:d2:4a:91:51:8c:90:4d:a2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 23 00:40:21 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=ae18cfef45a3bb63f4427e85e06b34c62789a4b895b947bbcb4c76d86badd289, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:cd:05:31:4d:55:79:a3:d3:93:29:3c:fe: cd:78:9e:a6:09:7c:13:8f:70:1e:6e:be:6b:c4:cf: 9a:ca:a5:d3:53:0c:c0:fa:fe:d3:bd:d7:d0:e6:bf: eb:51:cb:ae:f2:c8:de:12:9a:12:96:51:10:f1:65: 91:5f:dd:bc:2f:a2:b5:40:bd:64:37:2c:1b:c4:a4: 13:b2:ee:49:0d:a3:31:87:25:2e:d0:79:06:2c:b3: 3c:d4:7f:4d:9a:52:a2:2e:e7:e2:11:05:ff:2c:b7: 2d:d2:5f:8d:9b:f9:2a:b2:06:d5:c4:2d:22:60:e9: 4b:81:b9:ba:41:15:b0:56:7f:7f:b3:fe:f7:77:34: 83:c6:52:eb:2f:90:5f:82:2e:c9:d2:9c:3c:b4:ab: 86:33:99:99:7a:76:e0:94:05:ea:cd:d7:f3:28:33: 7a:ba:10:ae:ff:2f:71:3d:03:80:e7:2d:63:09:89: eb:89:f9:e7:3b:1f:83:5b:af:26:5a:43:3d:c7:be: 72:a7:c3:b2:b0:35:c1:1d:3c:96:33:f5:ed:68:1d: 5e:0e:07:64:ab:cb:8c:19:94:21:99:5b:47:af:a5: cf:11:d5:e7:7d:3b:af:08:0d:a6:62:bb:79:c0:4b: d3:ce:f0:b5:3e:35:aa:14:68:5c:14:71:e3:92:2c: 9f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A8:3D:CE:0D:E5:43:84:EF:02:02:2F:1F:5D:50:47:16:A9:10:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7547cf-1d8f-409c-90d9-899b542e967e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:7400::/40 Signature Algorithm: sha256WithRSAEncryption 78:7f:52:de:1a:3b:35:40:5c:ca:ea:78:fd:d8:4d:76:23:a8: e3:a5:c2:56:9f:99:45:05:64:bb:a5:d3:e5:c3:f2:6f:53:11: 68:d5:1e:13:9d:7a:5d:35:21:2e:d6:fd:25:f6:b7:eb:57:03: 3a:8a:41:a0:d3:f1:4b:70:6b:aa:1d:0e:23:0a:8b:98:46:4e: 45:9e:69:05:78:16:48:81:a7:0d:9c:19:9c:4d:fe:85:08:2e: e8:8f:51:d6:23:65:8f:d6:22:4a:11:e3:fe:16:a2:6c:e4:9e: 91:ae:45:c1:21:9f:01:8f:42:ce:37:de:36:19:6a:27:f0:6d: 11:32:73:98:5a:a8:52:80:b2:1a:c2:3b:29:ea:1d:35:1a:6c: 99:1b:dc:c9:d9:04:90:0e:1a:6a:c5:f4:54:74:18:c1:bf:ce: a5:da:30:78:6b:4f:f9:0d:84:bd:b7:f6:bd:8a:f5:85:d8:61: 43:92:33:17:95:4f:bc:e3:3b:1e:3c:51:72:d2:67:9f:ad:11: 27:e7:1e:89:8f:9d:f9:47:e1:5e:b5:91:6c:e3:54:95:4b:ea: 71:55:05:f7:6a:ce:c4:98:9b:7f:b8:c4:7c:8f:a2:49:e8:6e: 7c:e4:5b:d4:5c:f2:89:77:ab:72:64:c0:a4:54:93:e9:16:75: b8:11:7f:cd -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOSfd52rlhmwHz4fSSpFRjJBNovIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIzMDA0MDIxWhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTE4Y2ZlZjQ1YTNiYjYzZjQ0MjdlODVlMDZiMzRjNjI3 ODlhNGI4OTViOTQ3YmJjYjRjNzZkODZiYWRkMjg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJOM0FMU1VeaPTkyk8/s14nqYJfBOPcB5uvmvEz5rKpdNT DMD6/tO919Dmv+tRy67yyN4SmhKWURDxZZFf3bwvorVAvWQ3LBvEpBOy7kkNozGH JS7QeQYsszzUf02aUqIu5+IRBf8sty3SX42b+SqyBtXELSJg6UuBubpBFbBWf3+z /vd3NIPGUusvkF+CLsnSnDy0q4YzmZl6duCUBerN1/MoM3q6EK7/L3E9A4DnLWMJ ieuJ+ec7H4NbryZaQz3HvnKnw7KwNcEdPJYz9e1oHV4OB2Sry4wZlCGZW0evpc8R 1ed9O68IDaZiu3nAS9PO8LU+NaoUaFwUceOSLJ/9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJqg9zg3lQ4TvAgIvH11QRxapEGMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkNzU0N2NmLTFkOGYtNDA5Yy05MGQ5LTg5OWI1NDJlOTY3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/0dDANBgkqhkiG9w0BAQsFAAOCAQEAeH9S3ho7NUBcyup4/dhNdiOo 46XCVp+ZRQVku6XT5cPyb1MRaNUeE516XTUhLtb9Jfa361cDOopBoNPxS3Brqh0O IwqLmEZORZ5pBXgWSIGnDZwZnE3+hQgu6I9R1iNlj9YiShHj/haibOSeka5FwSGf AY9CzjfeNhlqJ/BtETJzmFqoUoCyGsI7KeodNRpsmRvcydkEkA4aasX0VHQYwb/O pdoweGtP+Q2Evbf2vYr1hdhhQ5IzF5VPvOM7HjxRctJnn60RJ+ceiY+d+UfhXrWR bONUlUvqcVUF92rOxJibf7jEfI+iSehufORb1FzyiXercmTApFST6RZ1uBF/zQ== -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:31 2025 by rpki-client