$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1df4982e-29d7-4611-ab19-d6a6fb9dadd9.roa File: 1df4982e-29d7-4611-ab19-d6a6fb9dadd9.roa (raw, json) Hash identifier: 2vuCikI33CD6RXQs5DYdoJHPww87eeaji4c73YkhGEY= Subject key identifier: 2E:EE:67:62:22:A4:F1:D8:0C:5B:6A:CE:87:5E:D9:B7:A5:D8:14:4F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F43D04931B6795C3B19D5D05BB5691BB941856E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1df4982e-29d7-4611-ab19-d6a6fb9dadd9.roa Signing time: Tue 08 Jul 2025 17:11:37 +0000 ROA not before: Tue 08 Jul 2025 17:11:37 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f21:4800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:43:d0:49:31:b6:79:5c:3b:19:d5:d0:5b:b5:69:1b:b9:41:85:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:11:37 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=98f928f1804b12b1e6aace6dc0b1fef5f52814a2a8f51e5c14d5c286dbc576f5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:d2:93:42:b9:ac:a0:dc:2a:16:39:cb:1e: e3:fb:5a:a4:39:87:52:e3:51:a9:31:4f:88:0e:d1: a6:d3:f9:ad:be:ab:14:30:4b:7d:41:36:27:47:2f: b5:61:de:bc:41:67:f9:fe:d6:2a:d9:eb:1b:99:12: 9a:3d:58:8a:06:c4:1a:62:90:26:03:bc:4b:7c:cb: 4f:a9:98:b6:41:e0:33:6e:c7:a8:98:7c:22:f4:ef: 41:42:0d:42:37:05:e9:c7:44:08:3b:ef:8c:e2:00: a0:31:23:ac:b0:f5:71:d7:04:24:fc:20:d6:28:25: 7d:eb:fe:1f:31:65:84:82:c4:22:71:72:31:d1:e7: c1:09:b7:4c:b9:0d:54:a4:32:af:81:5c:00:5d:21: 5b:e1:a9:e5:9c:f7:62:69:1e:9b:b7:f8:c2:a5:f5: bd:ff:2c:d2:7d:39:1f:7f:70:c1:bb:42:cd:db:a6: 20:e0:d4:a4:08:17:e4:7c:4d:02:bd:c1:ab:2c:8b: 4c:9b:6d:f7:20:52:35:ef:4c:f4:a0:39:8a:78:f4: b2:ca:d8:11:27:75:b9:df:3c:21:aa:6a:46:24:37: a4:2c:df:da:08:43:93:b0:32:77:96:d3:8a:5f:e9: 2a:c7:24:8d:cd:4d:49:2e:ce:e0:f3:88:f2:be:77: 29:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EE:67:62:22:A4:F1:D8:0C:5B:6A:CE:87:5E:D9:B7:A5:D8:14:4F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1df4982e-29d7-4611-ab19-d6a6fb9dadd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f21:4800::/37 Signature Algorithm: sha256WithRSAEncryption 69:05:c8:d4:ec:e5:58:c6:e6:ef:b1:6d:73:24:95:c5:d0:d8: a8:aa:0a:ac:c6:a6:f9:9e:8b:b4:91:04:5a:83:0f:cb:db:43: f7:82:43:8e:6f:4a:aa:56:3e:03:d0:ae:4c:fa:60:d3:23:e2: 6f:f2:e9:ac:01:41:bf:37:4a:13:f9:ca:b0:9a:44:ac:61:86: 52:be:f5:03:f3:52:10:0a:f9:52:64:dd:3d:a7:64:b0:f7:62: bb:09:5f:bb:1b:b8:9f:8f:54:6b:8f:9d:03:ae:11:8d:e1:96: fa:aa:8b:24:26:c2:51:eb:15:fe:9f:e7:e9:06:32:b2:0c:ae: 02:01:57:e4:9c:4f:03:8d:31:eb:b7:b9:77:29:83:47:9f:ae: a5:bf:c3:55:48:22:ff:d8:d2:22:3d:1d:6a:f2:e1:3b:cd:4f: 6e:d9:23:a7:c2:34:0c:1d:54:6c:74:42:e2:fe:73:ee:16:cc: 3b:99:ba:bd:8d:0f:04:e1:2e:d2:3a:46:e7:84:01:dc:30:3d: 1e:ee:9c:6d:87:16:c6:82:9a:64:04:5b:ec:ed:e4:eb:7f:1a: 94:09:9f:a5:64:3a:f5:fb:37:2d:03:0e:ae:07:4d:3d:d1:d3: 77:8f:95:11:69:4f:a7:a7:e5:b8:d4:c0:8d:7e:10:9f:e6:68: 57:64:e3:cf -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUb0PQSTG2eVw7GdXQW7VpG7lBhW4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTcxMTM3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5OGY5MjhmMTgwNGIxMmIxZTZhYWNlNmRjMGIxZmVmNWY1 MjgxNGEyYThmNTFlNWMxNGQ1YzI4NmRiYzU3NmY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBQ9KTQrmsoNwqFjnLHuP7WqQ5h1LjUakxT4gO0abT+a2+ qxQwS31BNidHL7Vh3rxBZ/n+1irZ6xuZEpo9WIoGxBpikCYDvEt8y0+pmLZB4DNu x6iYfCL070FCDUI3BenHRAg774ziAKAxI6yw9XHXBCT8INYoJX3r/h8xZYSCxCJx cjHR58EJt0y5DVSkMq+BXABdIVvhqeWc92JpHpu3+MKl9b3/LNJ9OR9/cMG7Qs3b piDg1KQIF+R8TQK9wassi0ybbfcgUjXvTPSgOYp49LLK2BEndbnfPCGqakYkN6Qs 39oIQ5OwMneW04pf6SrHJI3NTUkuzuDziPK+dylhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQULu5nYiKk8dgMW2rOh17Zt6XYFE8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFkZjQ5ODJlLTI5ZDctNDYxMS1hYjE5LWQ2YTZmYjlkYWRkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8hSDANBgkqhkiG9w0BAQsFAAOCAQEAaQXI1OzlWMbm77FtcySVxdDY qKoKrMam+Z6LtJEEWoMPy9tD94JDjm9KqlY+A9CuTPpg0yPib/LprAFBvzdKE/nK sJpErGGGUr71A/NSEAr5UmTdPadksPdiuwlfuxu4n49Ua4+dA64RjeGW+qqLJCbC UesV/p/n6QYysgyuAgFX5JxPA40x67e5dymDR5+upb/DVUgi/9jSIj0davLhO81P btkjp8I0DB1UbHRC4v5z7hbMO5m6vY0PBOEu0jpG54QB3DA9Hu6cbYcWxoKaZARb 7O3k638alAmfpWQ69fs3LQMOrgdNPdHTd4+VEWlPp6fluNTAjX4Qn+ZoV2Tjzw== -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:30 2025 by rpki-client