$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa File: 4c24d76f-a988-4548-a654-37a30aa8d32c.roa (raw, json) Hash identifier: mTYMKYXHU51omcB/U8Y/ETsB78yG6CmC5ASBCCPzxng= Subject key identifier: 12:23:6B:27:1E:21:00:4D:A4:CA:1B:06:E0:EC:8E:7C:D9:88:41:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3EB1DA9E9E099EB6BE279443BE3841EDD1B876C4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa Signing time: Mon 04 Aug 2025 17:11:14 +0000 ROA not before: Mon 04 Aug 2025 17:11:14 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1c:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b1:da:9e:9e:09:9e:b6:be:27:94:43:be:38:41:ed:d1:b8:76:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 17:11:14 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=8b27d436840a1f91577898be3d9e2621de8b524b6ba2e500e876ebb3029f1797, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:5f:b5:6e:32:4b:3a:61:c0:e8:80:2d:b0: 87:d0:df:b2:df:ee:2c:51:75:5f:4e:06:61:9d:82: c0:ea:c0:9c:cf:44:48:da:c4:35:cf:93:21:2f:aa: f6:8c:25:6b:90:d2:66:84:4a:16:63:d3:fa:1f:11: 5d:d2:de:dd:d1:b8:eb:23:e6:08:22:f2:62:d9:34: 1d:c8:57:b6:fc:0f:48:89:63:fa:1c:39:df:8a:b4: 3a:ed:81:09:84:62:a7:9e:37:44:4c:10:b1:77:de: 28:c0:08:bd:a4:e5:19:af:bf:8e:1d:56:04:4e:d4: 91:7a:50:ad:56:92:59:13:50:a4:94:8d:94:45:db: 8d:b7:24:99:bc:44:02:70:ac:9a:86:d1:88:75:6c: 0a:49:c7:87:9b:00:69:ab:8e:1e:27:b5:a1:b6:5b: db:f0:6e:29:49:5f:7f:ed:f9:69:d5:bb:d1:79:37: 42:9b:9f:32:89:cf:aa:fa:c9:b2:3b:2f:25:b5:f0: b4:45:db:4f:34:60:92:e9:4d:ba:63:b5:29:be:41: 38:9d:1d:52:8d:78:e0:85:d8:81:bd:aa:a6:a9:b0: 05:44:09:25:36:01:c7:8e:2a:76:09:a9:80:2a:32: 74:e5:ed:e1:4d:4e:82:36:40:c7:ab:4a:75:d8:8f: 33:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:23:6B:27:1E:21:00:4D:A4:CA:1B:06:E0:EC:8E:7C:D9:88:41:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1c:4000::/36 Signature Algorithm: sha256WithRSAEncryption 5e:88:f8:7e:8b:7d:0d:ac:5e:89:87:e9:3c:29:67:e4:34:eb: 9c:b9:de:15:1e:8a:49:e9:2c:57:84:5a:2a:e5:aa:6f:a1:0b: 33:58:97:08:f0:9d:00:4a:c9:42:a4:cc:89:f0:38:3f:31:6b: 2e:9e:6a:0c:18:c7:b6:f0:fe:99:7d:bf:73:8f:4e:88:98:7f: 03:96:b7:81:42:1e:a5:4d:df:a8:3f:61:9b:27:a9:08:6c:9b: 40:be:eb:9c:f0:25:ff:cc:33:f3:2c:d6:ce:e7:2e:a4:c7:3a: b3:af:ac:02:25:ec:0f:9a:fd:75:96:3a:9e:79:cb:46:a0:2d: 14:59:ef:98:d2:74:61:af:4c:dd:74:cf:b6:7f:69:2d:8e:16: f5:71:14:db:c5:bd:d5:3b:0f:d5:a8:af:c7:0c:a1:6c:c1:56: 40:ee:2f:db:9b:24:d6:98:3e:3b:a9:8d:51:e2:13:af:c5:09: 52:d0:6b:39:41:c6:05:b2:a0:e4:03:8b:59:d7:88:07:30:eb: 25:a9:88:bb:0f:c9:89:25:45:a5:38:97:c7:d8:6b:ae:cf:48: 9e:76:42:6e:e8:00:75:63:48:74:f2:9b:6a:ab:e9:cf:b1:dc: 4a:d1:2c:41:7b:7d:41:89:f8:3c:ac:e2:cd:12:d3:e2:14:fa: fc:d2:36:80 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPrHanp4Jnra+J5RDvjhB7dG4dsQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTcxMTE0WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjI3ZDQzNjg0MGExZjkxNTc3ODk4YmUzZDllMjYyMWRl OGI1MjRiNmJhMmU1MDBlODc2ZWJiMzAyOWYxNzk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMoV+1bjJLOmHA6IAtsIfQ37Lf7ixRdV9OBmGdgsDqwJzP REjaxDXPkyEvqvaMJWuQ0maEShZj0/ofEV3S3t3RuOsj5ggi8mLZNB3IV7b8D0iJ Y/ocOd+KtDrtgQmEYqeeN0RMELF33ijACL2k5Rmvv44dVgRO1JF6UK1WklkTUKSU jZRF2423JJm8RAJwrJqG0Yh1bApJx4ebAGmrjh4ntaG2W9vwbilJX3/t+WnVu9F5 N0KbnzKJz6r6ybI7LyW18LRF2080YJLpTbpjtSm+QTidHVKNeOCF2IG9qqapsAVE CSU2AceOKnYJqYAqMnTl7eFNToI2QMerSnXYjzOTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUEiNrJx4hAE2kyhsG4OyOfNmIQSQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjMjRkNzZmLWE5ODgtNDU0OC1hNjU0LTM3YTMwYWE4ZDMyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8cQDANBgkqhkiG9w0BAQsFAAOCAQEAXoj4fot9DaxeiYfpPCln5DTr nLneFR6KSeksV4RaKuWqb6ELM1iXCPCdAErJQqTMifA4PzFrLp5qDBjHtvD+mX2/ c49OiJh/A5a3gUIepU3fqD9hmyepCGybQL7rnPAl/8wz8yzWzucupMc6s6+sAiXs D5r9dZY6nnnLRqAtFFnvmNJ0Ya9M3XTPtn9pLY4W9XEU28W91TsP1aivxwyhbMFW QO4v25sk1pg+O6mNUeITr8UJUtBrOUHGBbKg5AOLWdeIBzDrJamIuw/JiSVFpTiX x9hrrs9InnZCbugAdWNIdPKbaqvpz7HcStEsQXt9QYn4PKzizRLT4hT6/NI2gA== -----END CERTIFICATE-----Generated at Wed Aug 6 00:37:17 2025 by rpki-client