$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16323a6-1daa-4972-8271-04fee1ea157d.roa File: d16323a6-1daa-4972-8271-04fee1ea157d.roa (raw, json) Hash identifier: Nz5B05gIH80Sdd/oMmYXQB/dulY7WNnsIfuZOiphGyI= Subject key identifier: 0F:5E:91:AA:1D:6F:B1:C7:C3:7A:E5:23:B1:2F:7A:BF:43:6C:11:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 648B70FB5E826CF4E9F86BF48A2B7083BF1EF853 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16323a6-1daa-4972-8271-04fee1ea157d.roa Signing time: Sat 19 Jul 2025 00:20:29 +0000 ROA not before: Sat 19 Jul 2025 00:20:29 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f68:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8b:70:fb:5e:82:6c:f4:e9:f8:6b:f4:8a:2b:70:83:bf:1e:f8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 19 00:20:29 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=29cf75d41ed2b9adc158ff8b0189240fc55e448786783f541e5147a311e4771a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:80:a7:d7:71:16:d9:1d:cb:0d:10:39:af:0d: 31:80:ba:3e:e6:69:48:ec:3d:ad:ab:e9:f0:d4:49: b8:02:38:a1:7f:af:1f:a9:d9:ff:89:8b:dc:79:d7: 0f:69:82:42:24:40:66:4a:31:01:e1:2b:96:e8:1d: 2d:ad:0c:8d:34:5b:6c:44:c6:03:b7:e8:75:72:84: 49:a7:65:88:84:0f:90:db:8d:26:94:1f:01:b2:eb: 33:ba:50:63:49:68:57:ab:f3:19:34:ec:c3:3a:bc: 7a:13:f4:df:f7:2e:a7:d3:d4:c1:db:28:0d:02:b9: 27:e8:cc:98:de:24:a2:fb:82:0e:05:0a:b5:ea:94: ac:80:e5:2a:1b:d8:0d:1c:b0:c9:73:65:81:10:77: 62:89:1a:d1:1b:cb:59:67:bc:aa:c6:56:fb:83:d2: 8f:cf:60:2f:a2:7f:2c:bc:65:70:45:0c:8f:4b:96: 6f:2e:29:ad:9c:a0:39:e6:04:b8:64:66:d3:88:d7: 0a:fc:3c:d9:ae:a3:2a:8f:a5:bd:97:33:46:46:2c: 98:98:7f:52:4e:97:79:6b:d8:00:0b:b2:d9:18:20: 95:bd:bb:0c:a5:cd:d9:8f:e0:10:4e:7f:34:00:8c: 44:83:30:80:f6:65:bb:2c:e9:1d:57:b0:e4:c4:2b: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5E:91:AA:1D:6F:B1:C7:C3:7A:E5:23:B1:2F:7A:BF:43:6C:11:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d16323a6-1daa-4972-8271-04fee1ea157d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:2000::/40 Signature Algorithm: sha256WithRSAEncryption 52:42:7a:be:31:58:a5:e8:e9:cb:0a:83:0d:f8:08:50:10:b7: d1:11:ca:d4:d2:fc:83:72:7e:ed:bc:72:50:cd:ab:af:02:45: 82:b0:41:1c:3e:b9:ab:1d:22:e3:04:9e:c7:96:71:3a:cc:0f: 92:ee:5b:aa:f4:01:54:0d:65:c6:2c:f4:50:23:67:ef:60:7c: b2:5e:9b:31:13:f4:1b:d7:54:a8:3f:0c:92:d6:7b:a4:af:4b: 0b:53:78:36:8b:13:9a:e8:29:83:ce:4b:9e:c6:19:40:e5:eb: 4d:50:6c:4d:34:ca:b9:73:43:9c:a2:af:6a:c2:8f:3e:62:ee: b2:51:7f:69:0d:fa:98:94:91:8c:0d:c8:cf:42:48:b3:fc:6c: 19:d8:b7:1b:bf:f5:5d:c3:aa:1e:b9:a7:f1:67:c6:c8:cb:b8: 4c:ac:d9:fd:ce:8e:07:ea:60:c2:54:66:1c:04:73:96:cb:f1: 01:83:a5:08:20:9e:08:df:36:e1:1d:6d:16:46:8b:e1:3a:b1: 58:c9:b8:1e:64:82:1d:f0:b0:7a:af:b9:7f:14:72:f1:7e:ee: 39:51:55:c3:7a:2a:fc:e6:b3:d9:db:29:6b:4f:d0:91:8a:d7: da:51:d3:24:1c:b4:1c:8b:9f:34:5d:08:b8:2c:dc:63:c8:cd: 83:63:db:35 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZItw+16CbPTp+Gv0iitwg78e+FMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDAyMDI5WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWNmNzVkNDFlZDJiOWFkYzE1OGZmOGIwMTg5MjQwZmM1 NWU0NDg3ODY3ODNmNTQxZTUxNDdhMzExZTQ3NzFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNgKfXcRbZHcsNEDmvDTGAuj7maUjsPa2r6fDUSbgCOKF/ rx+p2f+Ji9x51w9pgkIkQGZKMQHhK5boHS2tDI00W2xExgO36HVyhEmnZYiED5Db jSaUHwGy6zO6UGNJaFer8xk07MM6vHoT9N/3LqfT1MHbKA0CuSfozJjeJKL7gg4F CrXqlKyA5Sob2A0csMlzZYEQd2KJGtEby1lnvKrGVvuD0o/PYC+ifyy8ZXBFDI9L lm8uKa2coDnmBLhkZtOI1wr8PNmuoyqPpb2XM0ZGLJiYf1JOl3lr2AALstkYIJW9 uwylzdmP4BBOfzQAjESDMID2Zbss6R1XsOTEKwOBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUD16Rqh1vscfDeuUjsS96v0NsEcYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QxNjMyM2E2LTFkYWEtNDk3Mi04MjcxLTA0ZmVlMWVhMTU3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9oIDANBgkqhkiG9w0BAQsFAAOCAQEAUkJ6vjFYpejpywqDDfgIUBC3 0RHK1NL8g3J+7bxyUM2rrwJFgrBBHD65qx0i4wSex5ZxOswPku5bqvQBVA1lxiz0 UCNn72B8sl6bMRP0G9dUqD8MktZ7pK9LC1N4NosTmugpg85LnsYZQOXrTVBsTTTK uXNDnKKvasKPPmLuslF/aQ36mJSRjA3Iz0JIs/xsGdi3G7/1XcOqHrmn8WfGyMu4 TKzZ/c6OB+pgwlRmHARzlsvxAYOlCCCeCN824R1tFkaL4TqxWMm4HmSCHfCweq+5 fxRy8X7uOVFVw3oq/Oaz2dspa0/QkYrX2lHTJBy0HIufNF0IuCzcY8jNg2PbNQ== -----END CERTIFICATE-----Generated at Fri Aug 8 20:50:11 2025 by rpki-client