$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85010989-e86c-4694-9a07-5b4bd126192b.roa File: 85010989-e86c-4694-9a07-5b4bd126192b.roa (raw, json) Hash identifier: riYNon3rLKVZxQt3vsXvapjs1OiID9lwaDhPaFjKao0= Subject key identifier: 76:7F:2F:DA:5E:13:57:55:70:60:BB:11:18:C2:D6:5B:F2:6A:A0:14 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 376F9977B4BACBFCF8229FD528BED04EE76EE96C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85010989-e86c-4694-9a07-5b4bd126192b.roa Signing time: Mon 04 Aug 2025 16:01:18 +0000 ROA not before: Mon 04 Aug 2025 16:01:18 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6f:99:77:b4:ba:cb:fc:f8:22:9f:d5:28:be:d0:4e:e7:6e:e9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 4 16:01:18 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=f7144fa213723d4401e4082ce0df4ca23bf26a6b5aa254a5298b84aaf1ea823a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:88:5f:4f:1a:ed:14:b5:65:ba:5b:f1:28: e2:17:45:48:41:2c:f9:aa:3a:bd:60:7f:c9:5b:4c: a6:26:e9:8c:9b:f2:a0:3e:36:8d:1a:95:64:86:87: c5:28:a0:2a:0c:fb:5d:b7:f1:10:f2:56:4e:78:28: e4:f8:2b:d5:4c:67:81:8e:55:99:03:f0:bb:3c:73: d4:4d:24:b6:50:40:8c:26:62:eb:bf:15:eb:b2:ee: 84:c5:8e:28:03:0b:d1:c6:e6:4b:f2:63:f3:5b:74: a6:86:ba:05:fa:cf:c7:6e:d2:c3:6c:3c:fd:6d:76: 1c:a0:7d:2a:94:94:e4:ae:f1:7e:83:6b:a7:e0:36: 5a:7d:db:ef:98:cd:56:29:d7:6c:83:cb:cf:6e:d6: d7:f6:9e:f5:a6:ab:79:8f:68:55:ca:0d:37:a8:7a: 1b:c6:e8:14:c8:5d:71:17:84:36:ec:d8:43:35:5e: 6d:4f:85:c0:c6:e8:12:35:b4:cc:dd:98:89:fc:a3: 5d:24:5c:c7:30:81:2c:6a:28:97:30:cf:2b:5b:58: c8:fb:52:04:3b:85:ca:21:3c:f4:30:f8:77:d8:6d: a2:ca:22:dd:b8:ab:8c:03:76:8e:b7:3b:9f:99:c8: d3:a6:df:29:d0:f7:5d:9e:b2:46:5b:e5:13:7b:3c: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7F:2F:DA:5E:13:57:55:70:60:BB:11:18:C2:D6:5B:F2:6A:A0:14 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85010989-e86c-4694-9a07-5b4bd126192b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38::/32 Signature Algorithm: sha256WithRSAEncryption 25:2f:56:fd:bd:bf:2c:6c:b2:ed:8d:7c:35:6b:ec:ed:3e:ac: 5b:c1:c7:2e:d7:62:d1:ec:df:5a:66:c8:57:c0:82:87:bb:da: ae:4a:73:cc:ec:fb:16:d0:4f:ec:b3:19:5e:fe:84:9f:58:d5: 65:3f:b3:53:f3:72:f4:ee:7f:95:f9:3f:a4:13:26:92:06:3a: 9a:cb:2b:94:29:2e:90:22:39:fd:c8:0f:a3:b4:b6:9a:e6:09: 4e:fc:86:42:c7:2d:46:61:d7:de:fc:f9:f3:19:66:a2:06:dc: eb:5a:1e:f1:e6:c7:9d:8b:f5:c3:0c:bf:99:32:b1:08:d2:77: 78:b2:3a:3a:b8:11:0a:14:b6:e6:65:60:d5:62:ed:49:55:dd: 67:56:10:da:d2:a4:04:7e:1d:ca:de:b0:ea:27:27:35:b0:55: b3:a7:79:be:c3:ad:e1:ba:fd:e1:e8:2b:89:31:f8:30:1d:2f: b3:9a:c5:b7:62:ce:c1:b9:db:42:23:20:ca:96:95:c0:d0:c5: 10:b0:cc:81:54:d2:96:3f:b3:01:23:c3:45:c4:c4:37:3e:c5: 9d:64:2d:29:cd:1a:47:c5:de:aa:80:ec:49:4b:f9:9b:80:67: 72:df:51:f7:fd:45:d8:9e:55:8f:7b:20:43:6d:cc:59:29:33: c2:66:60:8b -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUN2+Zd7S6y/z4Ip/VKL7QTudu6WwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA0MTYwMTE4WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzE0NGZhMjEzNzIzZDQ0MDFlNDA4MmNlMGRmNGNhMjNi ZjI2YTZiNWFhMjU0YTUyOThiODRhYWYxZWE4MjNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSmohfTxrtFLVlulvxKOIXRUhBLPmqOr1gf8lbTKYm6Yyb 8qA+No0alWSGh8UooCoM+1238RDyVk54KOT4K9VMZ4GOVZkD8Ls8c9RNJLZQQIwm Yuu/Feuy7oTFjigDC9HG5kvyY/NbdKaGugX6z8du0sNsPP1tdhygfSqUlOSu8X6D a6fgNlp92++YzVYp12yDy89u1tf2nvWmq3mPaFXKDTeoehvG6BTIXXEXhDbs2EM1 Xm1PhcDG6BI1tMzdmIn8o10kXMcwgSxqKJcwzytbWMj7UgQ7hcohPPQw+HfYbaLK It24q4wDdo63O5+ZyNOm3ynQ912eskZb5RN7PJyHAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUdn8v2l4TV1VwYLsRGMLWW/JqoBQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg1MDEwOTg5LWU4NmMtNDY5NC05YTA3LTViNGJkMTI2MTkyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB84MA0GCSqGSIb3DQEBCwUAA4IBAQAlL1b9vb8sbLLtjXw1a+ztPqxb wccu12LR7N9aZshXwIKHu9quSnPM7PsW0E/ssxle/oSfWNVlP7NT83L07n+V+T+k EyaSBjqayyuUKS6QIjn9yA+jtLaa5glO/IZCxy1GYdfe/PnzGWaiBtzrWh7x5sed i/XDDL+ZMrEI0nd4sjo6uBEKFLbmZWDVYu1JVd1nVhDa0qQEfh3K3rDqJyc1sFWz p3m+w63huv3h6CuJMfgwHS+zmsW3Ys7BudtCIyDKlpXA0MUQsMyBVNKWP7MBI8NF xMQ3PsWdZC0pzRpHxd6qgOxJS/mbgGdy31H3/UXYnlWPeyBDbcxZKTPCZmCL -----END CERTIFICATE-----Generated at Sat Aug 9 23:21:59 2025 by rpki-client