$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60b87d32-0a4f-4766-9763-0e165ad166bb.roa File: 60b87d32-0a4f-4766-9763-0e165ad166bb.roa (raw, json) Hash identifier: bd/3woovgsHNtj8yrmtoRTKY4gYsEtfyZW7ys169GX0= Subject key identifier: AC:19:27:20:F1:83:99:3A:5E:E4:23:95:72:25:E8:AE:C0:6F:80:18 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 573D64BCE739E5010B91CC78F3B6C77E06D545E9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60b87d32-0a4f-4766-9763-0e165ad166bb.roa Signing time: Tue 05 Aug 2025 00:10:29 +0000 ROA not before: Tue 05 Aug 2025 00:10:29 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff3:8060::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:3d:64:bc:e7:39:e5:01:0b:91:cc:78:f3:b6:c7:7e:06:d5:45:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 00:10:29 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=b5d2c951bc8f2d736727184edc64d3e6685888380a32021d294cdab727a61649, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:33:9b:97:6c:b0:f5:fe:7c:0c:5b:e4:fe: f9:1e:9a:4b:87:b8:1e:41:4e:39:15:c1:56:2e:60: d5:51:41:a5:94:6f:33:4f:bd:b0:98:35:cb:a3:aa: 84:7b:62:79:5d:44:21:ef:88:83:90:ca:11:85:b0: 70:c4:f8:45:54:c4:46:41:79:4d:98:87:b0:cc:6b: 14:22:e3:53:f1:9f:8f:48:e0:ce:53:21:38:58:7c: ea:bd:3f:88:97:8c:e8:0e:ec:9a:c6:49:d8:d5:73: ca:bd:68:cb:9b:7e:c5:16:b4:31:1d:39:93:bd:d3: e5:10:39:d0:6f:6d:3c:f9:26:9e:68:66:aa:99:b9: 86:8f:93:19:56:c8:8c:7f:2d:dc:d0:64:02:02:ab: 1a:d6:50:2c:77:f2:b3:74:c9:77:06:fe:99:44:bd: 1b:d8:bc:2a:fb:cd:38:26:05:cb:8a:ef:2a:24:f3: 19:0f:e4:4c:6c:83:ec:8b:0a:35:24:12:cd:7e:55: 8d:ed:3e:2f:94:27:36:91:e4:7c:cd:3b:01:99:c6: e1:93:c5:ee:d0:a3:ff:86:53:81:7e:a3:5b:ee:51: 6a:36:55:ef:b9:8c:5b:1b:da:13:c3:43:fa:61:8f: 85:22:17:3a:5c:96:91:3d:12:fb:10:20:e8:9a:d5: 88:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:19:27:20:F1:83:99:3A:5E:E4:23:95:72:25:E8:AE:C0:6F:80:18 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60b87d32-0a4f-4766-9763-0e165ad166bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:8060::/46 Signature Algorithm: sha256WithRSAEncryption 5f:dd:73:2a:ae:51:d9:79:5f:e9:ca:2e:82:72:16:60:43:52: 82:0d:07:06:36:a8:b6:7d:0c:81:de:10:fd:20:dc:19:3f:74: 3c:06:d4:32:68:8e:04:76:ad:9c:57:67:eb:6b:7d:dc:89:99: a4:6e:06:af:3d:2a:0c:a7:59:49:12:59:39:77:44:2a:c6:20: e8:56:34:8d:a2:31:33:61:55:c5:94:96:ea:97:b8:ed:0e:a6: 68:9c:11:4c:e6:e3:08:6a:20:db:f3:fc:d8:6a:1a:a0:a7:b4: 34:4c:0c:c7:42:a1:cf:c5:48:7a:23:8e:65:2b:b2:9c:cc:9f: 2b:65:83:cd:93:9a:ba:64:a2:6b:27:44:e6:81:44:43:11:54: 3b:fe:97:3e:59:7d:0e:3e:e8:d0:a5:75:a0:c4:b9:39:14:07: 5a:ca:90:7e:10:ee:b8:87:27:80:8d:2b:23:0f:43:02:b1:10: d3:0a:04:90:d4:33:41:58:59:3b:b6:c4:a0:b2:d1:e6:96:72: d9:26:29:2d:c5:c2:39:f1:bd:e4:17:26:94:4f:5d:6c:0d:cd: f7:6f:3c:c0:89:41:f8:ac:26:22:10:4f:ed:9c:fd:53:e5:79: 73:fd:a9:75:fd:fa:59:b3:74:f0:19:ed:b0:fd:34:be:7f:f6: 7c:98:78:bd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVz1kvOc55QELkcx487bHfgbVRekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODA1MDAxMDI5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNWQyYzk1MWJjOGYyZDczNjcyNzE4NGVkYzY0ZDNlNjY4 NTg4ODM4MGEzMjAyMWQyOTRjZGFiNzI3YTYxNjQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+RDObl2yw9f58DFvk/vkemkuHuB5BTjkVwVYuYNVRQaWU bzNPvbCYNcujqoR7YnldRCHviIOQyhGFsHDE+EVUxEZBeU2Yh7DMaxQi41Pxn49I 4M5TIThYfOq9P4iXjOgO7JrGSdjVc8q9aMubfsUWtDEdOZO90+UQOdBvbTz5Jp5o ZqqZuYaPkxlWyIx/LdzQZAICqxrWUCx38rN0yXcG/plEvRvYvCr7zTgmBcuK7yok 8xkP5Exsg+yLCjUkEs1+VY3tPi+UJzaR5HzNOwGZxuGTxe7Qo/+GU4F+o1vuUWo2 Ve+5jFsb2hPDQ/phj4UiFzpclpE9EvsQIOia1YhhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrBknIPGDmTpe5COVciXorsBvgBgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYwYjg3ZDMyLTBhNGYtNDc2Ni05NzYzLTBlMTY1YWQxNjZiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zgGAwDQYJKoZIhvcNAQELBQADggEBAF/dcyquUdl5X+nKLoJyFmBD UoINBwY2qLZ9DIHeEP0g3Bk/dDwG1DJojgR2rZxXZ+trfdyJmaRuBq89KgynWUkS WTl3RCrGIOhWNI2iMTNhVcWUluqXuO0OpmicEUzm4whqINvz/NhqGqCntDRMDMdC oc/FSHojjmUrspzMnytlg82TmrpkomsnROaBREMRVDv+lz5ZfQ4+6NCldaDEuTkU B1rKkH4Q7riHJ4CNKyMPQwKxENMKBJDUM0FYWTu2xKCy0eaWctkmKS3FwjnxveQX JpRPXWwNzfdvPMCJQfisJiIQT+2c/VPleXP9qXX9+lmzdPAZ7bD9NL5/9nyYeL0= -----END CERTIFICATE-----Generated at Fri Aug 8 10:14:31 2025 by rpki-client