$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7873fdb-b89a-4bdc-bc40-0995b97e1dd9.roa File: c7873fdb-b89a-4bdc-bc40-0995b97e1dd9.roa (raw, json) Hash identifier: HfqjBLZkgGBlR7B8c6jJEccS4klOw9BZMUD68J1/iCI= Subject key identifier: 82:5A:57:B9:36:69:8D:C0:00:58:69:F4:4F:D8:11:09:68:72:4F:8E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 76B4483FC2BE4C3E3BAC02E9E81EF474336047E3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7873fdb-b89a-4bdc-bc40-0995b97e1dd9.roa Signing time: Tue 08 Jul 2025 17:20:17 +0000 ROA not before: Tue 08 Jul 2025 17:20:17 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1f:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b4:48:3f:c2:be:4c:3e:3b:ac:02:e9:e8:1e:f4:74:33:60:47:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:20:17 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=e03a24e9b8b6e40e7b60c35865bff400141edac1fea2e47be91d7e89af873666, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:f6:75:aa:ac:41:a4:b3:65:54:9a:62:62: 6e:db:29:74:a1:0c:3b:a6:71:3a:ec:95:e6:87:c0: 4a:4a:57:f1:e4:4a:3b:f3:2d:60:6a:67:d7:04:20: ae:e8:06:a5:c0:aa:0f:f6:27:3a:8f:24:28:c5:27: bf:4c:2b:f0:a6:56:43:f4:8d:f5:e6:5e:d5:da:3f: a2:9d:06:27:e4:a4:34:96:1e:5f:c5:86:9f:fc:d3: a9:9a:d8:1b:21:d2:b5:eb:24:73:89:3d:37:c1:73: 63:3a:ef:ed:30:c2:38:77:88:b8:20:bc:ca:dc:d6: bd:45:4b:2d:e1:5a:e0:66:08:01:5a:9d:30:b3:4a: eb:eb:79:ef:75:48:39:15:0f:41:3f:d3:f1:6f:00: aa:11:e8:c3:7a:22:47:fe:81:59:aa:25:c0:21:41: ab:0b:b6:32:85:d3:a9:f8:59:ad:c6:6c:fc:ef:d1: 54:77:c1:6d:df:70:8b:38:51:a8:7f:63:a7:e7:80: bc:08:d0:25:ef:6e:e0:d0:20:c5:5a:d2:4a:63:b0: 5f:32:e8:2a:aa:cd:e0:4f:02:78:16:bf:6a:8c:98: a2:d2:3f:c2:56:74:7f:e4:1c:5f:06:18:ad:ca:18: b7:c8:75:32:09:dc:b4:8d:ff:a0:bc:f0:fb:29:36: 30:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5A:57:B9:36:69:8D:C0:00:58:69:F4:4F:D8:11:09:68:72:4F:8E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7873fdb-b89a-4bdc-bc40-0995b97e1dd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1f:4000::/36 Signature Algorithm: sha256WithRSAEncryption d3:b1:10:62:40:1c:1d:91:8f:5d:12:94:22:eb:b6:0c:d3:e3: 0f:a2:e8:41:e2:13:0d:a6:13:b4:d3:2b:c5:2d:aa:f3:b4:c0: 5c:ba:58:30:69:fa:86:c3:af:89:51:c1:e1:9f:72:e9:a4:1b: f3:02:a9:6d:49:42:a5:81:d5:36:10:90:b2:9b:ee:6c:8b:fc: 4c:ac:b7:9d:7d:16:29:27:96:76:84:87:2e:e1:09:68:36:13: 5a:d1:70:09:d5:b4:53:e9:f5:45:2e:30:0b:6b:95:80:46:ab: 43:e8:f5:d7:77:33:52:94:12:61:ea:c9:59:2a:5b:60:9d:56: b2:03:13:fb:24:df:a9:8d:57:77:fd:e5:fe:0c:a5:b9:ce:37: 1a:4c:ff:72:00:b6:09:4d:92:53:ac:54:58:62:ae:83:70:2f: 79:ca:83:14:20:1f:58:5c:d6:f1:7a:ed:87:01:ce:a2:c1:60: 06:a0:dd:ab:df:26:f3:b7:ab:e3:a2:ee:e9:ca:83:6f:a2:4f: 34:5c:11:eb:3c:8c:f5:9e:45:26:4a:9c:22:3e:7f:da:4a:d8: da:99:91:04:36:ce:45:95:f4:64:7f:18:6f:1b:f9:7b:15:64: 74:ae:47:be:72:4c:88:36:25:70:a5:a7:ea:f9:30:be:47:3a: 2b:6d:8c:6b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdrRIP8K+TD47rALp6B70dDNgR+MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTcyMDE3WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDNhMjRlOWI4YjZlNDBlN2I2MGMzNTg2NWJmZjQwMDE0 MWVkYWMxZmVhMmU0N2JlOTFkN2U4OWFmODczNjY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz6vZ1qqxBpLNlVJpiYm7bKXShDDumcTrsleaHwEpKV/Hk SjvzLWBqZ9cEIK7oBqXAqg/2JzqPJCjFJ79MK/CmVkP0jfXmXtXaP6KdBifkpDSW Hl/Fhp/806ma2Bsh0rXrJHOJPTfBc2M67+0wwjh3iLggvMrc1r1FSy3hWuBmCAFa nTCzSuvree91SDkVD0E/0/FvAKoR6MN6Ikf+gVmqJcAhQasLtjKF06n4Wa3GbPzv 0VR3wW3fcIs4Uah/Y6fngLwI0CXvbuDQIMVa0kpjsF8y6CqqzeBPAngWv2qMmKLS P8JWdH/kHF8GGK3KGLfIdTIJ3LSN/6C88PspNjCtAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUglpXuTZpjcAAWGn0T9gRCWhyT44wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3ODczZmRiLWI4OWEtNGJkYy1iYzQwLTA5OTViOTdlMWRkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8fQDANBgkqhkiG9w0BAQsFAAOCAQEA07EQYkAcHZGPXRKUIuu2DNPj D6LoQeITDaYTtNMrxS2q87TAXLpYMGn6hsOviVHB4Z9y6aQb8wKpbUlCpYHVNhCQ spvubIv8TKy3nX0WKSeWdoSHLuEJaDYTWtFwCdW0U+n1RS4wC2uVgEarQ+j113cz UpQSYerJWSpbYJ1WsgMT+yTfqY1Xd/3l/gyluc43Gkz/cgC2CU2SU6xUWGKug3Av ecqDFCAfWFzW8XrthwHOosFgBqDdq98m87er46Lu6cqDb6JPNFwR6zyM9Z5FJkqc Ij5/2krY2pmRBDbORZX0ZH8Ybxv5exVkdK5HvnJMiDYlcKWn6vkwvkc6K22Maw== -----END CERTIFICATE-----Generated at Mon Jul 21 12:59:07 2025 by rpki-client