$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30fe8b62-dd1f-4c87-86e2-bb4137bef195.roa File: 30fe8b62-dd1f-4c87-86e2-bb4137bef195.roa (raw, json) Hash identifier: Q6Yv0Z/wHD3kAtazPjQ8/w+Y5aeTBCGDkqEdX7r0R/Q= Subject key identifier: 30:4E:D4:0A:B9:C5:44:3F:94:72:17:6B:2A:E3:8C:E5:9D:68:FE:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6548A2D6D52F39D4CA2616B42A61F21E43703AC3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30fe8b62-dd1f-4c87-86e2-bb4137bef195.roa Signing time: Wed 11 Jun 2025 00:11:42 +0000 ROA not before: Wed 11 Jun 2025 00:11:42 +0000 ROA not after: Wed 16 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:48:a2:d6:d5:2f:39:d4:ca:26:16:b4:2a:61:f2:1e:43:70:3a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 11 00:11:42 2025 GMT Not After : Jul 16 23:59:59 2025 GMT Subject: serialNumber=1c577a41cbf802a3f7a3e3b779ecf0b3048eafed2a7c5072ec364c9bd3b94eae, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d4:4f:6a:0f:ed:f9:aa:80:5a:96:94:b4:0d: 76:3a:90:a3:bd:7e:ba:14:32:e9:5d:db:48:94:7e: 8c:b7:2e:8f:4d:64:4a:63:48:9b:89:f3:8a:72:d8: f8:74:52:5e:f4:4f:e3:c0:94:cb:b2:92:95:04:4d: 33:10:ed:fb:dd:5d:27:69:22:2e:f9:eb:5e:d4:87: 5b:1e:69:bc:bc:91:73:17:29:d3:2a:82:fc:46:52: d6:db:72:69:b5:79:41:9b:99:f4:98:01:73:3a:67: da:1d:4d:75:7a:e6:eb:ba:45:4e:97:bf:f7:c3:ab: 97:1e:09:a4:90:a8:c7:a5:35:26:44:b9:eb:f5:a9: 49:56:c3:04:ee:b6:aa:b1:33:1f:32:77:39:b7:87: c8:3b:66:77:80:59:2f:05:7b:75:60:35:a1:8b:2d: 6c:27:40:fd:94:0a:21:e6:f8:c8:f1:bc:26:c2:de: 15:5c:03:50:fa:62:ea:fd:55:23:11:58:2e:70:7a: 65:e6:95:fe:03:ea:1e:4c:16:db:f4:06:68:01:57: d6:08:0f:9c:58:c2:05:01:e2:30:5d:a4:c4:64:df: 21:53:54:dc:cf:b8:d8:06:38:b8:86:02:46:a8:c3: 3b:da:93:5f:30:95:7d:21:83:45:73:db:fe:83:a3: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4E:D4:0A:B9:C5:44:3F:94:72:17:6B:2A:E3:8C:E5:9D:68:FE:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30fe8b62-dd1f-4c87-86e2-bb4137bef195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4180::/48 Signature Algorithm: sha256WithRSAEncryption 62:bd:9f:37:b2:4a:44:14:e1:8a:5d:10:75:b4:54:c5:17:4a: ad:19:ea:be:c2:4f:94:33:56:43:39:0c:01:1b:1e:4c:5c:f1: 69:64:34:cd:7b:79:64:a4:21:ee:79:ff:d2:f9:63:77:cd:2d: ad:2e:a6:6c:b5:f3:87:04:07:9e:8d:15:46:17:65:01:eb:99: c2:dd:87:20:b3:61:96:a0:b3:d7:74:85:fa:25:30:c3:f8:ad: 97:64:c2:f5:59:b8:2c:6c:5b:af:f2:a2:52:99:2b:87:95:f3: ae:9e:54:ed:45:dd:a6:9b:3f:da:92:c1:4c:24:31:f2:af:1f: 87:f0:78:cd:b6:e7:20:d9:e6:28:41:db:42:6d:79:77:f1:47: 5f:55:46:47:19:97:c6:9d:37:72:e6:9a:84:15:f6:08:1d:d3: d2:53:06:b2:52:02:d0:8b:89:1f:79:f1:01:f1:33:82:47:0f: e3:a9:32:c3:db:de:c8:e9:02:70:69:34:e8:b5:09:54:dc:32: 86:c5:e2:31:6f:ec:c1:3f:ba:4c:06:01:24:26:a4:c7:25:cf: 53:6a:b9:19:1d:fb:b7:29:6e:fc:b3:19:d1:b3:59:c0:6e:f5: c9:a5:3d:24:d1:cf:38:3a:0e:66:b0:18:87:3f:ea:32:67:79: f9:97:83:2f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZUii1tUvOdTKJha0KmHyHkNwOsMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDAxMTQyWhcNMjUwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzU3N2E0MWNiZjgwMmEzZjdhM2UzYjc3OWVjZjBiMzA0 OGVhZmVkMmE3YzUwNzJlYzM2NGM5YmQzYjk0ZWFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX1E9qD+35qoBalpS0DXY6kKO9froUMuld20iUfoy3Lo9N ZEpjSJuJ84py2Ph0Ul70T+PAlMuykpUETTMQ7fvdXSdpIi75617Uh1seaby8kXMX KdMqgvxGUtbbcmm1eUGbmfSYAXM6Z9odTXV65uu6RU6Xv/fDq5ceCaSQqMelNSZE uev1qUlWwwTutqqxMx8ydzm3h8g7ZneAWS8Fe3VgNaGLLWwnQP2UCiHm+MjxvCbC 3hVcA1D6Yur9VSMRWC5wemXmlf4D6h5MFtv0BmgBV9YID5xYwgUB4jBdpMRk3yFT VNzPuNgGOLiGAkaowzvak18wlX0hg0Vz2/6Do7UnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUME7UCrnFRD+UchdrKuOM5Z1o/kEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwZmU4YjYyLWRkMWYtNGM4Ny04NmUyLWJiNDEzN2JlZjE5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QYAwDQYJKoZIhvcNAQELBQADggEBAGK9nzeySkQU4YpdEHW0VMUX Sq0Z6r7CT5QzVkM5DAEbHkxc8WlkNM17eWSkIe55/9L5Y3fNLa0upmy184cEB56N FUYXZQHrmcLdhyCzYZags9d0hfolMMP4rZdkwvVZuCxsW6/yolKZK4eV866eVO1F 3aabP9qSwUwkMfKvH4fweM225yDZ5ihB20JteXfxR19VRkcZl8adN3LmmoQV9ggd 09JTBrJSAtCLiR958QHxM4JHD+OpMsPb3sjpAnBpNOi1CVTcMobF4jFv7ME/ukwG ASQmpMclz1NquRkd+7cpbvyzGdGzWcBu9cmlPSTRzzg6DmawGIc/6jJnefmXgy8= -----END CERTIFICATE-----Generated at Sat Jun 14 07:02:04 2025 by rpki-client