$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62842a99-8d9d-42aa-97f7-b9f2281d3077.roa File: 62842a99-8d9d-42aa-97f7-b9f2281d3077.roa (raw, json) Hash identifier: Tgjeif0B7VsAyV24mIxRdx6UujecuDa9kvS3J9OSTdQ= Subject key identifier: 92:7D:04:D5:CA:85:B0:B7:F8:D0:66:9A:35:32:FE:CD:89:97:2E:7A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16C9EE779AA1209DD895DE95A8CE451FBCCE17AC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62842a99-8d9d-42aa-97f7-b9f2281d3077.roa Signing time: Fri 13 Jun 2025 17:11:17 +0000 ROA not before: Fri 13 Jun 2025 17:11:17 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2f:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c9:ee:77:9a:a1:20:9d:d8:95:de:95:a8:ce:45:1f:bc:ce:17:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 17:11:17 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=3c607d9a1066bbbb70243ac0e3d329f5e6f94a45bbb2449351b215ae60af2a6b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:60:51:a8:44:a9:7c:52:06:8e:9e:cd:63: cb:81:19:75:88:19:66:94:d8:ca:5f:44:c7:40:3a: 77:4a:b5:e9:96:ae:e3:e7:ab:a7:62:8c:20:f8:f7: 40:0f:be:0e:5d:64:f6:d4:d3:e2:f0:e0:b2:88:a7: 52:65:71:f3:56:f1:e4:de:cf:c7:e5:b2:73:c9:01: 49:f8:5a:31:80:4e:94:df:cd:76:d4:bb:ef:1a:8c: e9:c2:89:35:06:ab:44:2d:eb:ce:24:08:26:15:64: 7d:90:1f:7b:4d:f6:f4:e5:21:45:69:7e:de:24:af: 15:09:20:cf:68:c2:a1:10:1d:a1:3c:be:e0:0e:55: 9f:a8:7d:2f:d9:c3:f9:48:58:4e:c6:25:16:65:90: 23:e9:dc:ee:71:58:92:8a:a7:ce:96:14:3d:99:ab: 0b:2d:ed:6a:6b:7b:60:86:96:95:4f:34:98:7b:49: d6:71:75:66:0f:d5:3c:dd:92:60:a6:e4:d9:0f:0a: 78:f6:09:48:07:75:c1:01:38:26:98:de:f7:72:9b: 97:d0:8f:fd:29:91:a5:13:97:0a:7d:cb:8f:69:d2: 4a:58:36:85:26:c2:5d:9e:dd:aa:77:96:27:a6:70: 06:ee:a6:1e:c1:8d:06:83:b6:2c:a5:db:f3:2e:b9: 1b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7D:04:D5:CA:85:B0:B7:F8:D0:66:9A:35:32:FE:CD:89:97:2E:7A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62842a99-8d9d-42aa-97f7-b9f2281d3077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2f:4000::/36 Signature Algorithm: sha256WithRSAEncryption 9b:ce:16:ae:97:ee:b0:89:c3:39:0a:9e:01:fc:d3:9a:5e:63: a7:c3:36:06:0a:28:62:3f:5a:14:a8:87:f7:7f:ba:74:8d:a5: 24:5c:88:ce:d1:81:ad:ab:13:e9:0a:da:18:d3:6f:d2:12:f4: da:74:d5:b3:ea:9c:83:1c:48:f3:a5:e0:4f:a4:83:8c:69:3d: 34:9d:ee:9c:73:b0:25:55:09:a8:5f:a9:1f:73:24:87:bc:2a: f8:33:96:7e:9f:e8:88:82:ea:eb:f4:e6:03:ea:b4:c2:0b:c6: fa:f4:63:d3:f4:cd:e0:8c:b1:54:8d:be:33:c8:e5:43:8c:d0: e0:6f:8f:21:5c:a7:65:22:c1:f5:a8:7d:3d:d6:3b:26:d2:47: 98:56:ae:60:8b:33:5e:30:0e:67:f6:3d:92:5d:e3:1e:9f:5f: 18:a3:d2:4c:75:e8:6d:0d:09:c7:3a:3a:48:55:61:b8:57:1e: a2:d8:e1:a0:49:15:bf:34:ff:69:8b:ae:ad:f4:ee:7e:a5:f7: a9:a9:f3:3d:d1:44:78:66:7c:99:63:1d:2a:14:06:54:4c:d6: e4:0f:72:06:6e:6b:99:3c:56:c7:7a:fe:f2:7c:74:f6:04:2d: c3:68:78:82:f8:89:11:21:dd:c4:d6:d5:e2:24:25:0a:e0:bf: 5e:c0:bd:32 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFsnud5qhIJ3Yld6VqM5FH7zOF6wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTcxMTE3WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzYwN2Q5YTEwNjZiYmJiNzAyNDNhYzBlM2QzMjlmNWU2 Zjk0YTQ1YmJiMjQ0OTM1MWIyMTVhZTYwYWYyYTZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9xGBRqESpfFIGjp7NY8uBGXWIGWaU2MpfRMdAOndKtemW ruPnq6dijCD490APvg5dZPbU0+Lw4LKIp1JlcfNW8eTez8flsnPJAUn4WjGATpTf zXbUu+8ajOnCiTUGq0Qt684kCCYVZH2QH3tN9vTlIUVpft4krxUJIM9owqEQHaE8 vuAOVZ+ofS/Zw/lIWE7GJRZlkCPp3O5xWJKKp86WFD2Zqwst7Wpre2CGlpVPNJh7 SdZxdWYP1TzdkmCm5NkPCnj2CUgHdcEBOCaY3vdym5fQj/0pkaUTlwp9y49p0kpY NoUmwl2e3ap3liemcAbuph7BjQaDtiyl2/MuuRsHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUkn0E1cqFsLf40GaaNTL+zYmXLnowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYyODQyYTk5LThkOWQtNDJhYS05N2Y3LWI5ZjIyODFkMzA3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8vQDANBgkqhkiG9w0BAQsFAAOCAQEAm84WrpfusInDOQqeAfzTml5j p8M2BgooYj9aFKiH93+6dI2lJFyIztGBrasT6QraGNNv0hL02nTVs+qcgxxI86Xg T6SDjGk9NJ3unHOwJVUJqF+pH3Mkh7wq+DOWfp/oiILq6/TmA+q0wgvG+vRj0/TN 4IyxVI2+M8jlQ4zQ4G+PIVynZSLB9ah9PdY7JtJHmFauYIszXjAOZ/Y9kl3jHp9f GKPSTHXobQ0Jxzo6SFVhuFceotjhoEkVvzT/aYuurfTufqX3qanzPdFEeGZ8mWMd KhQGVEzW5A9yBm5rmTxWx3r+8nx09gQtw2h4gviJESHdxNbV4iQlCuC/XsC9Mg== -----END CERTIFICATE-----Generated at Sat Jun 14 06:40:29 2025 by rpki-client