$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa File: 4c24d76f-a988-4548-a654-37a30aa8d32c.roa (raw, json) Hash identifier: nrmz1NozvLLnIoPwfTAdIESBurpgH8UTJPzTp+IZ67E= Subject key identifier: 71:B0:85:70:30:4D:5B:DF:9E:69:8B:85:2B:14:E0:53:F8:CA:75:1F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7861CD2E87F04F29AAB050275295CA618A515D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa Signing time: Tue 08 Jul 2025 17:20:19 +0000 ROA not before: Tue 08 Jul 2025 17:20:19 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1c:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:61:cd:2e:87:f0:4f:29:aa:b0:50:27:52:95:ca:61:8a:51:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:20:19 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=54228a03d2381f37fe136d063435896ee2149fbbcd9fb7e91eb5d022894b7ca0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:10:aa:53:44:d7:32:ea:f0:a0:3d:10:88: 11:87:35:07:82:9b:13:d8:e7:69:e3:88:3f:da:54: 23:96:47:6b:a0:d0:68:d9:9e:cb:d7:ee:84:84:33: 31:1a:75:bb:8a:22:ea:72:0c:3a:c0:79:97:95:d7: 40:69:6f:2b:b9:1c:28:20:e9:81:70:02:ef:cf:e0: 9f:74:b0:68:5e:93:b4:dc:02:88:02:41:a3:ea:40: cb:e5:ff:1d:e0:bc:78:34:ba:f8:99:86:69:4f:9c: 66:06:d7:9e:d7:a2:55:2b:7e:84:39:dd:79:4b:c6: a0:03:0f:15:a6:b5:bb:8c:76:a3:94:15:9e:ab:57: 43:92:8b:2a:79:cb:da:63:3b:4a:7e:c4:7d:71:d6: 41:d9:0a:fe:26:b7:8b:33:b9:2d:a5:95:ee:0a:a7: 9c:d2:fa:04:75:48:6d:0f:96:ec:54:0e:50:de:e0: 55:a8:ac:0b:b6:7e:85:df:be:4a:64:ff:e9:2a:fe: d4:a9:07:33:fb:da:18:57:e6:1f:30:1d:e0:5a:af: c3:b8:17:df:eb:cb:29:7c:da:9b:3f:70:99:2a:2e: 75:a6:6e:9f:0b:55:9b:d2:53:43:3a:b8:0f:b5:1e: 48:e2:44:1f:a8:b6:17:79:3a:15:a9:ad:8b:22:15: 62:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B0:85:70:30:4D:5B:DF:9E:69:8B:85:2B:14:E0:53:F8:CA:75:1F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1c:4000::/36 Signature Algorithm: sha256WithRSAEncryption 3d:56:22:cd:55:98:5e:2f:db:e8:d4:58:df:ee:bb:04:ad:0e: 89:0c:20:0e:41:b8:82:9b:46:c0:c0:84:82:f8:68:56:bf:4b: be:bf:5e:3f:81:09:d9:b1:24:26:a6:b4:7a:ed:38:df:46:9b: b2:cc:75:7a:a9:96:3e:2a:5f:5a:ce:cc:d7:22:b5:d6:8f:ac: 95:ff:78:7b:51:0c:96:4a:7c:24:60:23:5c:79:d5:cb:a1:d5: 65:29:97:fd:db:a1:29:3b:26:b8:de:be:a2:cc:56:60:72:14: 86:07:af:c6:6d:c3:72:ee:e1:1a:7f:5e:e0:e3:f5:e2:50:85: 5e:9d:90:29:7a:bd:89:84:d3:0f:ae:e4:ac:dd:ba:56:26:a6: 75:06:22:89:9f:a6:ca:49:f5:b3:8e:0f:6d:30:40:65:ad:88: 31:03:05:b7:dc:7a:9e:6f:0b:56:75:c9:f7:4b:8d:45:a1:f4: 06:c2:63:fa:01:d0:7d:2f:ed:50:c3:c9:81:95:70:e7:e1:d0: 8b:42:f4:e6:c7:c2:34:45:7e:02:0e:58:da:77:44:5e:84:3a: 8f:36:f2:17:bb:3c:a4:c9:af:ba:44:33:6d:c6:be:c2:00:9a: 3d:74:0f:a7:8e:fd:ae:27:c5:d3:3b:8f:e2:aa:2b:3a:58:60: 7c:a6:dd:18 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITeGHNLofwTymqsFAnUpXKYYpRXTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA3MDgxNzIwMTlaFw0yNTA4MTIyMzU5NTla MHoxSTBHBgNVBAUTQDU0MjI4YTAzZDIzODFmMzdmZTEzNmQwNjM0MzU4OTZlZTIx NDlmYmJjZDlmYjdlOTFlYjVkMDIyODk0YjdjYTAxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ6xEKpTRNcy6vCgPRCIEYc1B4KbE9jnaeOIP9pUI5ZHa6DQ aNmey9fuhIQzMRp1u4oi6nIMOsB5l5XXQGlvK7kcKCDpgXAC78/gn3SwaF6TtNwC iAJBo+pAy+X/HeC8eDS6+JmGaU+cZgbXnteiVSt+hDndeUvGoAMPFaa1u4x2o5QV nqtXQ5KLKnnL2mM7Sn7EfXHWQdkK/ia3izO5LaWV7gqnnNL6BHVIbQ+W7FQOUN7g VaisC7Z+hd++SmT/6Sr+1KkHM/vaGFfmHzAd4Fqvw7gX3+vLKXzamz9wmSoudaZu nwtVm9JTQzq4D7UeSOJEH6i2F3k6FamtiyIVYoMCAwEAAaOCArMwggKvMB0GA1Ud DgQWBBRxsIVwME1b355pi4UrFOBT+Mp1HzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNGMyNGQ3NmYtYTk4OC00NTQ4LWE2NTQtMzdhMzBhYThkMzJjLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGBCYAHxxAMA0GCSqGSIb3DQEBCwUAA4IBAQA9ViLNVZheL9vo1Fjf7rsErQ6J DCAOQbiCm0bAwISC+GhWv0u+v14/gQnZsSQmprR67TjfRpuyzHV6qZY+Kl9azszX IrXWj6yV/3h7UQyWSnwkYCNcedXLodVlKZf926EpOya43r6izFZgchSGB6/GbcNy 7uEaf17g4/XiUIVenZAper2JhNMPruSs3bpWJqZ1BiKJn6bKSfWzjg9tMEBlrYgx AwW33HqebwtWdcn3S41FofQGwmP6AdB9L+1Qw8mBlXDn4dCLQvTmx8I0RX4CDlja d0RehDqPNvIXuzykya+6RDNtxr7CAJo9dA+njv2uJ8XTO4/iqis6WGB8pt0Y -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:55 2025 by rpki-client