$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa File: f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa (raw, json) Hash identifier: YYRLjnKnD5nzhPJG/2JH+6j97nesiv9eiGvoFd9Yr4w= Subject key identifier: 2C:E4:2A:5F:9F:11:77:6E:2F:1E:40:04:39:A3:A9:A2:9E:08:31:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 55107F87D2626994AD30FE075E6758FF076D68EE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa Signing time: Fri 01 Aug 2025 16:10:24 +0000 ROA not before: Fri 01 Aug 2025 16:10:24 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:4070::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:10:7f:87:d2:62:69:94:ad:30:fe:07:5e:67:58:ff:07:6d:68:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 16:10:24 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=bf77386e9269e57cee3837abc0c5c275b59cce55bbd4b6c8d74c44cd5d8eb6bb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:70:e0:1a:e0:1c:00:a1:98:ab:6f:7e:75: a5:6f:2e:7f:2d:3c:e9:79:96:ac:8f:c8:7a:a4:dc: ab:72:6f:bf:28:63:a2:4f:5c:51:0d:50:1c:9f:d3: 93:b4:b4:d2:77:11:55:8b:78:71:64:09:7f:c1:9e: d3:60:d8:d1:af:49:70:d3:ca:b2:21:d2:b1:c8:3f: e2:ac:8c:88:08:97:b4:ac:40:27:9f:98:ca:ad:99: 0f:ee:81:cc:c0:0f:48:1c:1f:04:b1:9b:37:91:fe: 7e:a9:8b:74:7f:86:3a:d4:f1:2a:0f:b5:24:a0:eb: 4f:aa:e1:63:a7:ea:3b:a6:83:88:42:52:cb:5e:a1: fe:58:7d:a6:27:a3:26:92:ac:92:b0:a1:28:95:e4: b0:9b:d6:e1:4c:e8:8b:f4:be:66:a3:18:5a:d8:67: 88:1a:8a:ed:51:6e:44:5a:47:e2:8f:dd:71:07:43: 1a:0c:93:a2:9e:33:4a:8d:6e:2e:42:fd:a4:d8:8f: 6a:c1:16:fb:45:0e:2e:0a:53:32:82:9d:fd:88:75: 91:82:73:81:11:56:f7:c9:46:3f:28:2e:6b:7a:73: a3:9f:78:16:c0:ad:69:6b:86:20:6d:4a:0e:37:a2: 85:7e:f2:83:3c:ff:9e:30:a8:a6:bd:93:c4:57:f8: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E4:2A:5F:9F:11:77:6E:2F:1E:40:04:39:A3:A9:A2:9E:08:31:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:4070::/48 Signature Algorithm: sha256WithRSAEncryption 75:2f:3e:5a:7e:a8:0b:ca:40:d7:a7:02:2b:42:96:c7:a3:bf: 93:93:bd:82:45:18:75:a1:36:51:4c:f3:15:d7:24:a0:ec:ed: b7:5e:f9:61:53:33:84:15:d5:06:c7:69:49:bb:01:cb:8c:02: af:d6:af:61:f0:e4:78:c1:bb:95:b6:1b:d7:65:f5:2e:62:0c: f2:ba:01:0f:cd:f5:a5:92:02:2f:ad:55:53:0a:b0:23:88:1c: e9:0f:5e:74:9b:e8:5c:22:af:ee:4c:8a:34:f6:f5:1b:e4:d9: 7a:9a:3f:85:90:31:7d:02:26:6b:cc:93:6c:fa:ed:77:cb:51: 48:05:fb:7c:d5:33:6d:76:ec:e9:aa:00:2d:30:76:99:ae:00: 21:07:eb:b4:ce:28:db:28:49:44:eb:4c:92:0b:27:bb:88:02: 70:bd:9c:a6:9c:ff:0e:34:5c:a6:03:3b:b2:f4:69:1d:50:9b: bd:72:11:44:00:91:ff:8d:d2:74:5f:1d:36:25:28:58:7f:e5: 0d:44:12:fc:73:76:e5:cc:d8:83:40:a0:8b:b2:04:69:15:29: 51:5a:09:56:0b:1b:e0:1b:c0:49:da:e1:c7:d6:97:79:b3:12: 2d:78:d2:01:ef:65:38:f4:ba:d8:4b:57:ff:f2:16:34:15:03: 3a:cf:e5:dd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVRB/h9JiaZStMP4HXmdY/wdtaO4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTYxMDI0WhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjc3Mzg2ZTkyNjllNTdjZWUzODM3YWJjMGM1YzI3NWI1 OWNjZTU1YmJkNGI2YzhkNzRjNDRjZDVkOGViNmJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmeHDgGuAcAKGYq29+daVvLn8tPOl5lqyPyHqk3Ktyb78o Y6JPXFENUByf05O0tNJ3EVWLeHFkCX/BntNg2NGvSXDTyrIh0rHIP+KsjIgIl7Ss QCefmMqtmQ/ugczAD0gcHwSxmzeR/n6pi3R/hjrU8SoPtSSg60+q4WOn6jumg4hC Usteof5YfaYnoyaSrJKwoSiV5LCb1uFM6Iv0vmajGFrYZ4gaiu1RbkRaR+KP3XEH QxoMk6KeM0qNbi5C/aTYj2rBFvtFDi4KUzKCnf2IdZGCc4ERVvfJRj8oLmt6c6Of eBbArWlrhiBtSg43ooV+8oM8/54wqKa9k8RX+JlJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULOQqX58Rd24vHkAEOaOpop4IMW4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3MDkxOWVjLWY2ZWYtNGJhNS1hMmI3LWMwNGM5YTJmYzQ1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AQHAwDQYJKoZIhvcNAQELBQADggEBAHUvPlp+qAvKQNenAitClsej v5OTvYJFGHWhNlFM8xXXJKDs7bde+WFTM4QV1QbHaUm7AcuMAq/Wr2Hw5HjBu5W2 G9dl9S5iDPK6AQ/N9aWSAi+tVVMKsCOIHOkPXnSb6Fwir+5MijT29Rvk2XqaP4WQ MX0CJmvMk2z67XfLUUgF+3zVM2127OmqAC0wdpmuACEH67TOKNsoSUTrTJILJ7uI AnC9nKac/w40XKYDO7L0aR1Qm71yEUQAkf+N0nRfHTYlKFh/5Q1EEvxzduXM2INA oIuyBGkVKVFaCVYLG+AbwEna4cfWl3mzEi140gHvZTj0uthLV//yFjQVAzrP5d0= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:19 2025 by rpki-client