$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/840c3edc-37da-4000-b1b9-30b0ddf8ed0d.roa File: 840c3edc-37da-4000-b1b9-30b0ddf8ed0d.roa (raw, json) Hash identifier: tpWRXq8rbnmWZpZyKI1OD/q6O8vbjZ6rSYS7XU0S5II= Subject key identifier: 8B:C0:4C:8F:E6:5F:D6:C0:CA:EF:6D:5A:1E:EA:4E:E4:93:3E:33:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D3F1A16CEEE1727A8B7FACDA24367AFE2A74B70 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/840c3edc-37da-4000-b1b9-30b0ddf8ed0d.roa Signing time: Tue 08 Jul 2025 16:51:27 +0000 ROA not before: Tue 08 Jul 2025 16:51:27 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1e:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3f:1a:16:ce:ee:17:27:a8:b7:fa:cd:a2:43:67:af:e2:a7:4b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:51:27 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=f43aa532ac6dae42ffbd862db647e945f1f92d03c6ae604e088071c6163d893a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8c:30:9a:67:40:45:99:8a:46:82:0c:a1:8c: 95:36:cf:da:89:4c:cb:e3:b4:66:c8:de:9f:82:8e: 35:70:28:1d:2f:d4:c6:51:3d:b1:aa:15:74:98:e4: c6:e7:18:6c:d4:b6:ac:21:dc:ed:d8:cd:dc:66:02: 04:ad:2c:a7:1c:0c:35:2f:c1:0f:92:95:48:79:a6: 31:9d:99:19:6d:08:18:2c:61:1c:b8:91:f1:59:c4: 86:08:35:cc:3b:d2:dc:43:82:52:32:d6:8f:69:4f: 9b:44:0b:22:18:5b:44:49:40:90:86:27:a9:15:5e: c2:5c:b1:67:72:51:41:d6:fa:59:b4:67:55:cf:a6: 7f:5f:7a:5f:0e:b2:10:11:12:c5:1e:33:74:8c:19: d9:e8:8c:1b:fb:13:b8:05:49:55:8c:33:76:e6:bd: 89:ed:3d:58:8c:50:d0:53:a3:7d:ee:08:af:5e:69: a0:54:6a:4f:a6:ef:b0:cb:ab:8c:03:6b:09:9d:44: e2:a0:87:13:fd:5d:81:03:51:d0:48:a8:98:46:06: 63:84:c0:f1:f9:23:af:0a:2e:42:d8:53:26:ec:72: 96:02:e5:0d:9e:5a:b2:5e:b6:d7:5f:a3:e4:59:83: e7:d5:a7:15:ba:8a:f9:df:48:89:12:22:61:05:af: b5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C0:4C:8F:E6:5F:D6:C0:CA:EF:6D:5A:1E:EA:4E:E4:93:3E:33:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/840c3edc-37da-4000-b1b9-30b0ddf8ed0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1e:c00::/38 Signature Algorithm: sha256WithRSAEncryption 20:32:a5:6e:4b:33:66:d6:14:74:a8:34:f7:5b:4b:5a:03:06: f9:f9:ce:11:70:ca:08:a7:2d:12:ba:9e:ea:8a:d6:1e:e1:51: 91:63:1e:f1:a2:fe:a1:1d:0b:5d:d8:d7:c8:0d:e0:be:9e:69: 6f:0a:6c:5f:9e:1d:e6:a9:23:59:08:02:15:a4:a9:89:62:d6: 0a:58:7f:f7:23:05:a2:e9:3d:21:89:28:4d:f2:1d:17:3f:51: d6:cd:08:cf:07:36:e4:be:ab:33:a1:c8:e7:83:12:4f:c8:84: 0d:cd:48:c7:5e:35:5a:44:6b:75:93:42:1a:b3:49:dc:f0:77: b8:c2:2d:19:14:96:5a:74:13:d8:ae:cd:3f:75:cb:e6:a5:54: 03:d9:a8:27:6f:00:6c:8e:bb:0f:7b:8d:8d:b8:3e:e8:f4:22: 8f:85:1e:0f:73:2a:fd:2e:48:3c:17:fe:e0:c2:2f:e9:5a:78: 73:c2:b5:cf:19:bf:a9:36:9f:25:e0:52:8b:c9:d6:e1:7f:a3: b6:70:f3:95:98:3a:77:9f:88:f8:82:cf:16:5d:18:fd:6f:fa: f1:e9:b4:a3:44:b6:d4:1e:d4:43:65:04:de:68:db:53:9f:c6: cd:6f:c8:d9:b1:18:d9:98:e6:c2:36:7d:1f:dd:11:85:29:4b: d8:e6:a4:00 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULT8aFs7uFyeot/rNokNnr+KnS3AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTY1MTI3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDNhYTUzMmFjNmRhZTQyZmZiZDg2MmRiNjQ3ZTk0NWYx ZjkyZDAzYzZhZTYwNGUwODgwNzFjNjE2M2Q4OTNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYjDCaZ0BFmYpGggyhjJU2z9qJTMvjtGbI3p+CjjVwKB0v 1MZRPbGqFXSY5MbnGGzUtqwh3O3YzdxmAgStLKccDDUvwQ+SlUh5pjGdmRltCBgs YRy4kfFZxIYINcw70txDglIy1o9pT5tECyIYW0RJQJCGJ6kVXsJcsWdyUUHW+lm0 Z1XPpn9fel8OshAREsUeM3SMGdnojBv7E7gFSVWMM3bmvYntPViMUNBTo33uCK9e aaBUak+m77DLq4wDawmdROKghxP9XYEDUdBIqJhGBmOEwPH5I68KLkLYUybscpYC 5Q2eWrJettdfo+RZg+fVpxW6ivnfSIkSImEFr7XBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUi8BMj+Zf1sDK721aHupO5JM+M/UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg0MGMzZWRjLTM3ZGEtNDAwMC1iMWI5LTMwYjBkZGY4ZWQwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8eDDANBgkqhkiG9w0BAQsFAAOCAQEAIDKlbkszZtYUdKg091tLWgMG +fnOEXDKCKctErqe6orWHuFRkWMe8aL+oR0LXdjXyA3gvp5pbwpsX54d5qkjWQgC FaSpiWLWClh/9yMFouk9IYkoTfIdFz9R1s0Izwc25L6rM6HI54MST8iEDc1Ix141 WkRrdZNCGrNJ3PB3uMItGRSWWnQT2K7NP3XL5qVUA9moJ28AbI67D3uNjbg+6PQi j4UeD3Mq/S5IPBf+4MIv6Vp4c8K1zxm/qTafJeBSi8nW4X+jtnDzlZg6d5+I+ILP Fl0Y/W/68em0o0S21B7UQ2UE3mjbU5/GzW/I2bEY2ZjmwjZ9H90RhSlL2OakAA== -----END CERTIFICATE-----Generated at Wed Jul 23 02:28:24 2025 by rpki-client