$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc739be7-5c57-4f3f-bc0f-4b965b7bd6ba.roa File: fc739be7-5c57-4f3f-bc0f-4b965b7bd6ba.roa (raw, json) Hash identifier: Xci8tt+FRAA4mTDSQq+lEUsV46fKKkyNC7dDNWQNJS0= Subject key identifier: B8:D1:DC:CC:BD:84:3D:D4:4D:7B:B7:5A:27:63:B9:A6:55:48:7A:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7C52634A7B8DB6DBC15B4D1707BF1A07D6509BEC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc739be7-5c57-4f3f-bc0f-4b965b7bd6ba.roa Signing time: Fri 01 Aug 2025 17:10:21 +0000 ROA not before: Fri 01 Aug 2025 17:10:21 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:52:63:4a:7b:8d:b6:db:c1:5b:4d:17:07:bf:1a:07:d6:50:9b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 1 17:10:21 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=b40b5137635db6875697ba1f37c9ef2e6bd7a10c4bac5ced491d00c3198ab00b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:b0:bf:d6:61:39:83:0f:af:ba:58:0b:d7: c2:0d:6c:1b:c0:1c:56:76:9e:8e:84:e1:fc:04:dc: b4:56:b5:e2:d3:75:c0:20:f1:91:fd:e2:6a:76:b3: 87:d1:33:57:a0:b5:b9:83:27:99:db:cd:0c:d4:94: b6:42:0f:9c:c3:35:62:4f:0c:2a:6c:9f:7a:b9:9e: 87:53:c2:a9:e1:81:2c:b9:9c:fd:1a:da:77:5d:38: 1a:aa:48:60:11:12:b3:84:16:ef:85:a8:b1:fa:16: ee:cd:e2:f6:60:d9:94:8b:68:43:e9:7c:7c:df:45: 25:7f:0c:ce:fc:9b:dc:bf:b0:ae:c5:54:7d:19:9f: 0e:20:93:a8:8a:b6:fd:89:53:b0:d1:9b:8a:e6:e6: 7e:cb:56:b1:39:b3:d7:e2:6f:38:9a:38:06:44:38: 76:1d:9d:42:f0:82:33:32:82:3f:c4:da:bb:61:56: df:42:53:5a:9a:0b:80:c8:04:41:13:00:07:d4:00: bc:6c:d7:3d:a1:7d:eb:34:c9:e5:cb:58:18:6c:a0: 51:98:fe:fc:a3:e7:bb:59:11:25:9a:d4:22:37:46: ef:4b:72:99:dc:f2:07:99:c6:ec:02:20:78:b5:f3: 4c:12:42:bf:98:fa:24:5b:82:9c:d9:b5:95:48:51: 44:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D1:DC:CC:BD:84:3D:D4:4D:7B:B7:5A:27:63:B9:A6:55:48:7A:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc739be7-5c57-4f3f-bc0f-4b965b7bd6ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8000::/40 Signature Algorithm: sha256WithRSAEncryption b4:e4:56:39:f4:0d:3e:66:b4:56:2d:c4:68:80:d9:38:1d:8e: 3b:49:e5:27:87:8b:21:f1:1a:59:da:af:bd:af:e9:93:26:a1: 4d:42:e2:2d:28:ef:b4:71:2e:d0:53:39:02:7d:da:d4:09:e4: d6:a6:79:de:a4:bb:5c:82:e9:f0:34:a2:26:ef:aa:53:4f:82: 63:5f:cc:a3:37:ff:a3:af:2d:59:29:2e:9f:da:27:d3:c7:16: 62:ee:30:b8:fd:70:91:64:96:26:87:6d:d3:f3:23:f9:cd:79: 9e:91:a6:00:47:7d:c5:b1:3e:da:d8:a3:61:d0:c3:9a:12:89: 10:bf:51:f9:32:52:46:fe:3b:f1:ba:16:8a:72:1f:43:18:52: ec:e9:34:08:65:09:97:47:73:70:b9:a8:9f:1e:d7:d7:f6:35: a9:39:ce:6b:93:30:82:b8:17:4e:e2:e3:9b:3d:b3:d8:64:b6: 26:3b:e3:15:51:8f:4a:12:b4:03:b9:80:92:e7:d4:e6:4b:d7: 5c:e6:f9:da:f7:3e:f9:11:10:6c:39:ca:75:4a:bd:1b:d7:c3: 12:e3:28:51:54:1b:da:57:b7:e8:98:4d:78:e1:23:a7:9a:aa: 83:fc:c2:50:38:29:6a:31:3a:cc:fd:d6:59:b0:e9:08:6b:c2: e2:9f:f0:fa -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfFJjSnuNttvBW00XB78aB9ZQm+wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODAxMTcxMDIxWhcNMjUwOTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDBiNTEzNzYzNWRiNjg3NTY5N2JhMWYzN2M5ZWYyZTZi ZDdhMTBjNGJhYzVjZWQ0OTFkMDBjMzE5OGFiMDBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDJbC/1mE5gw+vulgL18INbBvAHFZ2no6E4fwE3LRWteLT dcAg8ZH94mp2s4fRM1egtbmDJ5nbzQzUlLZCD5zDNWJPDCpsn3q5nodTwqnhgSy5 nP0a2nddOBqqSGARErOEFu+FqLH6Fu7N4vZg2ZSLaEPpfHzfRSV/DM78m9y/sK7F VH0Znw4gk6iKtv2JU7DRm4rm5n7LVrE5s9fibziaOAZEOHYdnULwgjMygj/E2rth Vt9CU1qaC4DIBEETAAfUALxs1z2hfes0yeXLWBhsoFGY/vyj57tZESWa1CI3Ru9L cpnc8geZxuwCIHi180wSQr+Y+iRbgpzZtZVIUUTFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUuNHczL2EPdRNe7daJ2O5plVIehwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZjNzM5YmU3LTVjNTctNGYzZi1iYzBmLTRiOTY1YjdiZDZiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8AgDANBgkqhkiG9w0BAQsFAAOCAQEAtORWOfQNPma0Vi3EaIDZOB2O O0nlJ4eLIfEaWdqvva/pkyahTULiLSjvtHEu0FM5An3a1Ank1qZ53qS7XILp8DSi Ju+qU0+CY1/Mozf/o68tWSkun9on08cWYu4wuP1wkWSWJodt0/Mj+c15npGmAEd9 xbE+2tijYdDDmhKJEL9R+TJSRv478boWinIfQxhS7Ok0CGUJl0dzcLmonx7X1/Y1 qTnOa5MwgrgXTuLjmz2z2GS2JjvjFVGPShK0A7mAkufU5kvXXOb52vc++REQbDnK dUq9G9fDEuMoUVQb2le36JhNeOEjp5qqg/zCUDgpajE6zP3WWbDpCGvC4p/w+g== -----END CERTIFICATE-----Generated at Mon Aug 4 15:01:37 2025 by rpki-client