$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d242dd3-4828-4940-a282-0989033825f4.roa File: 6d242dd3-4828-4940-a282-0989033825f4.roa (raw, json) Hash identifier: 823zizuGjgMTQMssZprJMUhWdrgtNWYb2sXC7cWeVUw= Subject key identifier: 17:E9:0E:81:EF:D6:81:48:D8:07:5A:64:36:AA:A8:F1:2A:66:39:11 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 50698D32BD81477F9EDACA3AD48357E27CC9BE12 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d242dd3-4828-4940-a282-0989033825f4.roa Signing time: Tue 08 Jul 2025 16:02:05 +0000 ROA not before: Tue 08 Jul 2025 16:02:05 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:e040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:69:8d:32:bd:81:47:7f:9e:da:ca:3a:d4:83:57:e2:7c:c9:be:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:02:05 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=194083cc0c280e0249f02967a298b6999cf3aac7356b7b41d891839d913f76f3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:51:25:8b:9b:ef:35:24:f5:54:4a:c3:91: 9b:9c:81:c9:98:99:62:fc:db:8c:57:a5:0c:29:62: 38:e5:d0:df:e8:6f:1b:6d:21:c0:4b:52:a8:6e:b0: 3c:27:ce:a2:27:74:10:44:3d:af:46:81:c1:2b:81: 09:e3:b0:fb:96:bb:ee:ee:70:42:bf:95:82:c1:b1: d6:60:5a:39:4c:08:d1:c8:1d:95:9b:f0:44:03:9b: 31:c5:14:67:48:b9:22:1e:f8:d7:ae:18:2d:4a:95: 7c:ba:f4:90:eb:d8:1e:c5:5c:7f:d6:40:b6:98:bd: d1:59:a4:28:e8:72:92:21:e3:aa:d2:c4:e5:f7:76: 3c:dc:12:b8:01:dd:5a:67:6a:16:4a:3a:2d:2e:66: dc:62:6f:8f:9a:88:b8:eb:31:66:63:8c:05:e6:1b: 79:a3:ed:c6:24:d4:5d:d3:e9:d2:26:b1:1a:7a:21: 7c:6e:6d:8c:aa:d3:f7:89:a0:86:d8:fb:75:90:1c: 5e:d1:20:22:46:d7:dc:c3:3e:04:44:0f:76:70:51: 1b:a1:83:1c:9c:00:ed:73:f1:1a:5c:8b:0a:63:fa: 1d:1e:9f:70:52:21:42:ed:54:a8:56:61:80:1f:99: af:d9:42:44:e3:e3:ac:d5:94:32:84:93:8a:85:72: de:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E9:0E:81:EF:D6:81:48:D8:07:5A:64:36:AA:A8:F1:2A:66:39:11 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d242dd3-4828-4940-a282-0989033825f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:e040::/46 Signature Algorithm: sha256WithRSAEncryption 3e:3b:77:4a:3a:06:45:c6:ca:4f:8d:9e:4a:1b:28:b0:d6:03: 78:08:fe:37:30:82:15:59:8c:d1:60:d9:12:66:93:f9:bf:01: b3:69:2a:b3:b7:5a:37:81:68:80:6f:67:e2:c6:3f:40:ca:16: 35:7c:b3:bc:41:43:97:2f:65:4a:da:1b:24:c5:66:c2:b3:e0: 4c:61:f6:5b:31:7a:b0:62:fc:27:5f:13:4b:6c:70:4b:f9:26: 94:f6:ae:c3:c3:b2:b1:08:f6:f9:00:5f:ea:ef:04:43:53:c1: b3:92:4d:47:18:46:87:7d:37:4b:93:a6:c7:4f:9e:2a:ca:86: 0a:e9:30:77:b4:48:98:14:fb:54:bc:e8:16:4b:3a:c1:d7:99: 49:df:01:53:7b:cb:27:d9:17:ad:b0:f7:2d:dd:98:2e:28:46: 56:1e:57:d2:0c:92:79:9c:03:a7:f7:45:2a:2a:aa:a5:5d:c3: 5b:e0:fd:60:07:5f:c0:23:f3:42:36:fa:52:f1:e1:61:53:d6: 69:44:86:19:dd:ea:38:59:59:8a:d4:e4:50:9b:95:4d:31:ec: c0:3b:1d:04:98:3b:4c:0d:bf:6e:64:79:fb:f1:5c:90:19:83: ff:3d:49:c3:ad:48:77:80:2a:d3:31:00:71:f7:c6:ee:fc:85: 01:e5:e7:16 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUGmNMr2BR3+e2so61INX4nzJvhIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYwMjA1WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTQwODNjYzBjMjgwZTAyNDlmMDI5NjdhMjk4YjY5OTlj ZjNhYWM3MzU2YjdiNDFkODkxODM5ZDkxM2Y3NmYzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7KFEli5vvNST1VErDkZucgcmYmWL824xXpQwpYjjl0N/o bxttIcBLUqhusDwnzqIndBBEPa9GgcErgQnjsPuWu+7ucEK/lYLBsdZgWjlMCNHI HZWb8EQDmzHFFGdIuSIe+NeuGC1KlXy69JDr2B7FXH/WQLaYvdFZpCjocpIh46rS xOX3djzcErgB3VpnahZKOi0uZtxib4+aiLjrMWZjjAXmG3mj7cYk1F3T6dImsRp6 IXxubYyq0/eJoIbY+3WQHF7RICJG19zDPgRED3ZwURuhgxycAO1z8Rpciwpj+h0e n3BSIULtVKhWYYAfma/ZQkTj46zVlDKEk4qFct6BAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUF+kOge/WgUjYB1pkNqqo8SpmOREwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZkMjQyZGQzLTQ4MjgtNDk0MC1hMjgyLTA5ODkwMzM4MjVmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/34EAwDQYJKoZIhvcNAQELBQADggEBAD47d0o6BkXGyk+NnkobKLDW A3gI/jcwghVZjNFg2RJmk/m/AbNpKrO3WjeBaIBvZ+LGP0DKFjV8s7xBQ5cvZUra GyTFZsKz4Exh9lsxerBi/CdfE0tscEv5JpT2rsPDsrEI9vkAX+rvBENTwbOSTUcY Rod9N0uTpsdPnirKhgrpMHe0SJgU+1S86BZLOsHXmUnfAVN7yyfZF62w9y3dmC4o RlYeV9IMknmcA6f3RSoqqqVdw1vg/WAHX8Aj80I2+lLx4WFT1mlEhhnd6jhZWYrU 5FCblU0x7MA7HQSYO0wNv25kefvxXJAZg/89ScOtSHeAKtMxAHH3xu78hQHl5xY= -----END CERTIFICATE-----Generated at Tue Jul 22 05:13:05 2025 by rpki-client