$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b84769-08e8-4a64-b1e7-450075bdfbea.roa File: 24b84769-08e8-4a64-b1e7-450075bdfbea.roa (raw, json) Hash identifier: zoXAp859UycUO6/wkLdEWQNL34jFW+QTNWrY8L7q/98= Subject key identifier: D0:48:26:FB:46:87:A6:F1:5F:F1:CD:72:D5:C5:BF:27:AC:FF:B0:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F41A8759ACC68CBE2A16E18F002D76938C12A78 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b84769-08e8-4a64-b1e7-450075bdfbea.roa Signing time: Tue 08 Jul 2025 16:32:11 +0000 ROA not before: Tue 08 Jul 2025 16:32:11 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:41:a8:75:9a:cc:68:cb:e2:a1:6e:18:f0:02:d7:69:38:c1:2a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:32:11 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=bacfbb2b1fb15919f201c26f81a84c30613ae0d95219cef4143fc64101557d71, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:85:5f:8c:eb:06:a1:0b:3b:9b:9d:21:31:4d: 40:d9:e3:cc:c3:46:cb:ff:f8:f8:ff:c3:c6:46:da: 52:20:ab:39:a6:69:21:8d:5d:19:d2:a5:36:f9:0f: d9:fc:6c:4b:c3:fd:95:ac:83:f9:31:b1:04:3e:8d: df:9c:3e:3a:5c:cf:65:75:42:ac:37:ff:bb:f1:88: a3:6a:98:ec:89:22:b2:51:e0:96:81:79:46:bf:80: 78:25:cc:bf:7d:0b:53:6d:6c:0c:ff:d8:b4:60:22: bc:94:cd:0f:7e:5f:35:7a:0f:da:df:9b:9c:f8:b7: 84:21:7e:4d:67:4c:86:56:31:74:e6:3c:17:d8:6d: 50:77:d7:28:81:e7:dd:96:11:6d:5e:9b:30:f1:32: 3e:43:28:a3:99:f3:d1:41:b4:b6:44:38:a1:1f:2e: 61:c5:36:07:bf:d5:16:1d:90:d2:7e:e1:a9:b4:52: a8:5f:bd:d9:ef:77:28:b0:20:c3:62:e7:0e:fa:0a: 3b:8e:b3:3f:c7:cc:53:4a:df:c2:f7:9d:1e:c6:63: a5:34:39:50:40:60:ec:33:a7:89:51:ec:dd:47:40: aa:61:4e:fa:ac:4f:82:68:7f:79:86:58:1a:eb:ad: c0:9b:2f:81:2c:c5:33:0e:56:d5:ce:12:c8:9b:bb: 9d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:48:26:FB:46:87:A6:F1:5F:F1:CD:72:D5:C5:BF:27:AC:FF:B0:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b84769-08e8-4a64-b1e7-450075bdfbea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:a400::/40 Signature Algorithm: sha256WithRSAEncryption d2:c9:4a:d7:b4:69:b9:70:13:3f:af:32:88:d2:c9:4f:8c:0e: ec:77:95:c6:70:6f:ef:4a:23:cf:34:52:f5:fb:df:a9:96:3b: b4:dd:9f:97:4b:64:29:4b:15:5c:5e:4a:b8:45:21:68:fc:65: 11:3c:51:fc:6a:4b:da:c6:8f:2a:56:56:6f:b3:6f:d9:13:b2: 4e:51:26:03:f7:75:81:53:b3:c2:41:66:0b:f5:48:8d:07:48: c3:7e:e0:00:79:52:98:85:a6:87:1b:cf:44:9f:7c:af:e7:40: c8:4e:8d:53:d8:27:e8:fb:2d:30:7d:18:0c:57:5b:1a:bd:de: f3:cd:ae:7f:3e:db:3b:7f:46:78:11:84:f0:96:15:15:90:73: 8b:87:5c:f5:f2:14:f9:a2:75:73:0e:43:8c:7a:e8:a5:2a:3c: 10:25:3f:70:3e:78:62:e3:07:c0:09:4e:1e:a6:ab:55:ca:2c: e2:45:53:b4:8e:45:7d:42:70:60:39:8a:14:ab:ca:6b:fc:01: 88:2f:b1:64:3a:95:7b:8c:e5:69:d7:aa:95:a8:51:af:94:ca: 52:98:fd:43:7b:46:e1:89:78:e7:79:50:69:ed:5e:ac:3e:ff: 89:0c:ef:0b:6e:34:a4:1c:7a:d2:a8:59:c3:50:fb:58:68:5e: f5:36:49:06 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUH0GodZrMaMvioW4Y8ALXaTjBKngwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYzMjExWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYWNmYmIyYjFmYjE1OTE5ZjIwMWMyNmY4MWE4NGMzMDYx M2FlMGQ5NTIxOWNlZjQxNDNmYzY0MTAxNTU3ZDcxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDahV+M6wahCzubnSExTUDZ48zDRsv/+Pj/w8ZG2lIgqzmm aSGNXRnSpTb5D9n8bEvD/ZWsg/kxsQQ+jd+cPjpcz2V1Qqw3/7vxiKNqmOyJIrJR 4JaBeUa/gHglzL99C1NtbAz/2LRgIryUzQ9+XzV6D9rfm5z4t4Qhfk1nTIZWMXTm PBfYbVB31yiB592WEW1emzDxMj5DKKOZ89FBtLZEOKEfLmHFNge/1RYdkNJ+4am0 UqhfvdnvdyiwIMNi5w76CjuOsz/HzFNK38L3nR7GY6U0OVBAYOwzp4lR7N1HQKph TvqsT4Jof3mGWBrrrcCbL4EsxTMOVtXOEsibu53TAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU0Egm+0aHpvFf8c1y1cW/J6z/sIswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0Yjg0NzY5LTA4ZTgtNGE2NC1iMWU3LTQ1MDA3NWJkZmJlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB84pDANBgkqhkiG9w0BAQsFAAOCAQEA0slK17RpuXATP68yiNLJT4wO 7HeVxnBv70ojzzRS9fvfqZY7tN2fl0tkKUsVXF5KuEUhaPxlETxR/GpL2saPKlZW b7Nv2ROyTlEmA/d1gVOzwkFmC/VIjQdIw37gAHlSmIWmhxvPRJ98r+dAyE6NU9gn 6PstMH0YDFdbGr3e882ufz7bO39GeBGE8JYVFZBzi4dc9fIU+aJ1cw5DjHropSo8 ECU/cD54YuMHwAlOHqarVcos4kVTtI5FfUJwYDmKFKvKa/wBiC+xZDqVe4zladeq lahRr5TKUpj9Q3tG4Yl453lQae1erD7/iQzvC240pBx60qhZw1D7WGhe9TZJBg== -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:40 2025 by rpki-client