$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88d05d2c-791d-492a-9697-f4c4a592c57a.roa File: 88d05d2c-791d-492a-9697-f4c4a592c57a.roa (raw, json) Hash identifier: q1bxZoJl/P23xKN/8JaQddyJw+f6DhfRdhNr1Zo+mPM= Subject key identifier: 5D:F6:F7:18:BF:88:2F:E1:16:EC:DF:A2:FE:29:D7:D7:AE:1E:50:8F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 13C46A9DE105F34E1EB95058F9D7B63F80D8F58F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88d05d2c-791d-492a-9697-f4c4a592c57a.roa Signing time: Tue 05 Aug 2025 15:10:08 +0000 ROA not before: Tue 05 Aug 2025 15:10:08 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:5201::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c4:6a:9d:e1:05:f3:4e:1e:b9:50:58:f9:d7:b6:3f:80:d8:f5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Aug 5 15:10:08 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=abfaec42c81fb08acf37b537b79721faf429361175460b189cd48db5b2c96512, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:0b:96:d0:fb:c6:62:6b:c5:b0:5d:0a:57: d6:66:6b:fe:72:a5:39:15:66:ae:32:63:99:e2:ae: 76:23:26:08:62:96:65:40:61:ee:a7:b3:35:0c:b2: 7f:f9:0e:e5:3b:df:b3:72:d2:65:8b:29:11:3c:96: da:d2:20:51:9b:c5:e0:85:22:f8:5c:4b:f9:49:b8: a9:8a:a8:9a:3a:04:8f:13:c9:f0:f5:6c:c7:1e:2c: 8c:67:ec:62:b5:c7:2e:2b:a0:73:b2:af:ad:43:d0: 7a:9d:28:e8:a0:6b:28:19:36:ac:61:76:03:06:ba: 58:9f:04:4a:32:7a:bb:bb:38:56:b7:d8:b3:6d:0f: 88:cd:06:03:6c:8f:e3:80:06:df:bc:4a:73:aa:6e: 4b:5a:76:8c:17:fe:a2:60:fa:5c:e3:2a:6a:a4:95: 88:b3:f2:72:38:77:e1:d4:78:5d:df:29:2a:86:81: 17:75:0c:ea:3f:67:2a:4e:9e:bc:d7:70:24:47:41: 02:a3:9d:14:1e:50:7c:af:97:1f:e1:5f:91:db:80: c6:70:62:54:54:cb:77:f7:8a:23:8c:3a:02:89:33: cf:23:a2:ba:d6:be:49:60:e6:f9:4f:f0:86:e7:cc: b6:ba:87:c4:a7:3f:97:24:06:63:91:78:6a:e2:78: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F6:F7:18:BF:88:2F:E1:16:EC:DF:A2:FE:29:D7:D7:AE:1E:50:8F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88d05d2c-791d-492a-9697-f4c4a592c57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:5201::/48 Signature Algorithm: sha256WithRSAEncryption 73:5a:33:f6:60:c0:a1:04:fa:e0:92:10:69:80:4c:76:f9:dc: 7d:7d:3e:e5:91:f7:06:3a:aa:54:11:22:ea:ae:7f:08:e1:2b: fa:b5:67:01:a5:6e:28:55:b4:c4:a1:32:d6:8c:86:21:e7:10: 2c:14:94:27:98:ba:c9:bc:7d:7a:7d:8b:7f:86:18:5f:d6:49: 74:b9:ec:ac:1f:c8:fa:72:69:d2:ac:70:12:05:5d:99:84:88: 6b:b9:6e:1f:73:f4:ab:23:b7:6e:bc:bd:8c:d9:d4:0d:2f:7f: 9f:68:78:8b:64:17:bc:18:ab:63:45:65:18:75:34:0a:b0:34: f9:0f:2b:ea:b2:90:b5:81:54:e8:f5:68:54:24:c4:eb:9b:5a: 86:b4:04:b9:69:56:83:d4:2e:92:99:76:6f:e6:87:da:49:61: ad:2e:a6:7c:f7:89:e5:75:25:3a:8a:8c:41:74:9a:e0:9b:39: f4:ea:46:13:ab:4c:bc:85:ae:c1:13:4a:e2:57:59:25:6c:32: a5:c8:9a:ba:1f:93:cb:69:3d:c6:f2:cb:2c:97:9f:fb:8a:24: 7a:d7:bd:4d:71:3f:55:4a:de:78:0b:bb:79:e6:92:ee:c6:d8: 17:94:22:d9:0b:b7:7e:04:26:00:01:e3:13:a6:20:5c:c9:02: b6:fa:0d:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE8RqneEF804euVBY+de2P4DY9Y8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwODA1MTUxMDA4WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmZhZWM0MmM4MWZiMDhhY2YzN2I1MzdiNzk3MjFmYWY0 MjkzNjExNzU0NjBiMTg5Y2Q0OGRiNWIyYzk2NTEyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLtwuW0PvGYmvFsF0KV9Zma/5ypTkVZq4yY5nirnYjJghi lmVAYe6nszUMsn/5DuU737Ny0mWLKRE8ltrSIFGbxeCFIvhcS/lJuKmKqJo6BI8T yfD1bMceLIxn7GK1xy4roHOyr61D0HqdKOigaygZNqxhdgMGulifBEoyeru7OFa3 2LNtD4jNBgNsj+OABt+8SnOqbktadowX/qJg+lzjKmqklYiz8nI4d+HUeF3fKSqG gRd1DOo/ZypOnrzXcCRHQQKjnRQeUHyvlx/hX5HbgMZwYlRUy3f3iiOMOgKJM88j orrWvklg5vlP8IbnzLa6h8SnP5ckBmOReGrieHYzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXfb3GL+IL+EW7N+i/inX164eUI8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg4ZDA1ZDJjLTc5MWQtNDkyYS05Njk3LWY0YzRhNTkyYzU3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAUgEwDQYJKoZIhvcNAQELBQADggEBAHNaM/ZgwKEE+uCSEGmATHb5 3H19PuWR9wY6qlQRIuqufwjhK/q1ZwGlbihVtMShMtaMhiHnECwUlCeYusm8fXp9 i3+GGF/WSXS57KwfyPpyadKscBIFXZmEiGu5bh9z9Ksjt268vYzZ1A0vf59oeItk F7wYq2NFZRh1NAqwNPkPK+qykLWBVOj1aFQkxOubWoa0BLlpVoPULpKZdm/mh9pJ Ya0upnz3ieV1JTqKjEF0muCbOfTqRhOrTLyFrsETSuJXWSVsMqXImrofk8tpPcby yyyXn/uKJHrXvU1xP1VK3ngLu3nmku7G2BeUItkLt34EJgAB4xOmIFzJArb6DfQ= -----END CERTIFICATE-----Generated at Tue Aug 5 20:13:06 2025 by rpki-client