$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98b69d9f-696f-41bf-b67b-214977d82ae4.roa File: 98b69d9f-696f-41bf-b67b-214977d82ae4.roa (raw, json) Hash identifier: TtxYl3F0h8ELcAAQpiCrIGyx14nMuWqWhfQHCl/3bYU= Subject key identifier: D5:4C:DF:63:35:25:77:E3:08:F9:1D:42:4E:D8:4D:9A:A0:18:52:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2F5249F1614C5F7B2E9ED656F4E5AD5CF56390E3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98b69d9f-696f-41bf-b67b-214977d82ae4.roa Signing time: Wed 09 Jul 2025 00:41:12 +0000 ROA not before: Wed 09 Jul 2025 00:41:12 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f29:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:52:49:f1:61:4c:5f:7b:2e:9e:d6:56:f4:e5:ad:5c:f5:63:90:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 9 00:41:12 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=4a181b98db74ea339e042b4700c7f89b4910b8f2e143cbec70e92d7920308b35, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:aa:18:85:36:17:1e:a0:31:a8:be:3e:de: f4:45:26:56:09:5e:27:c3:cf:d5:6d:b0:cb:4d:4b: cd:82:89:eb:8f:5b:c1:6d:56:d2:ba:86:74:7c:f6: bf:52:68:88:18:39:43:07:df:bf:08:47:33:89:0d: f4:de:fb:68:c7:31:ec:d1:7b:15:4b:c0:7b:59:33: 34:e9:30:4f:e4:c8:5e:35:c1:64:9a:49:51:b9:87: 60:38:2e:6f:2b:c1:88:2e:c8:e4:32:e1:07:0f:fe: ba:95:76:0a:37:ce:4f:67:d0:dd:12:5f:3f:91:f3: 1e:5b:6b:d2:0c:8e:22:fd:84:e9:2e:ed:65:ce:52: a0:c1:9e:56:4a:9a:b1:ee:d6:47:6c:0c:d0:6f:b7: 3c:b6:00:6b:29:fe:39:37:3b:7c:94:b2:fe:bb:f5: 99:a4:02:6e:b3:a1:0d:2d:16:ba:ee:1c:82:ee:2f: 0f:8b:e0:b2:d3:58:04:5f:60:0f:14:92:6c:f7:ba: 48:0c:2e:fe:6a:19:b4:30:9c:48:6b:1c:7e:c6:4e: 85:66:ac:86:70:24:0b:0b:80:4b:3b:4c:d2:a8:4b: c5:f6:54:42:e4:43:55:49:28:d0:bc:11:ae:db:c5: 83:8e:54:1e:9e:2c:8d:46:65:17:1a:06:95:13:4e: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4C:DF:63:35:25:77:E3:08:F9:1D:42:4E:D8:4D:9A:A0:18:52:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98b69d9f-696f-41bf-b67b-214977d82ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f29:8000::/36 Signature Algorithm: sha256WithRSAEncryption 34:e4:2d:f4:5f:4b:14:ef:6f:b5:68:6e:c8:ff:10:b6:78:99: 80:0a:3b:24:30:92:ea:f2:84:63:04:d8:f0:af:64:28:e0:29: 5e:e5:c9:49:f1:b5:4f:30:ff:47:7a:04:70:4a:b6:17:27:c3: 1c:cd:c6:ba:43:0b:17:ae:99:af:44:c5:4c:49:14:66:db:ea: b6:20:6c:fc:cc:eb:50:90:98:4e:16:5c:e6:f4:50:d0:90:dd: bc:1e:b8:cb:01:fe:6f:4b:9d:f6:b1:7a:83:ac:87:d8:9e:1c: 18:c3:4f:7d:18:a4:af:0e:fe:a9:ee:a8:c0:ba:d1:1a:95:93: c1:aa:fb:a8:71:95:49:4b:14:36:23:3d:e4:b8:a9:ec:87:3c: 3c:f3:ed:46:8b:28:be:03:77:d2:8d:c0:0a:05:e8:72:44:15: 9a:d6:e4:7b:3d:d8:43:a3:50:50:f6:47:28:46:3a:d4:d6:24: 6a:07:08:d1:cc:c4:6c:e2:79:33:0a:3f:d8:70:5f:af:8d:e1: 3c:44:8f:7b:f4:8e:24:87:f5:4a:85:3d:96:f9:aa:ea:15:18: f1:28:e0:88:b9:38:60:08:a4:1b:b3:30:5d:a8:36:49:fe:b9: be:85:9d:ca:83:6d:c3:de:bb:69:c4:2a:6d:e4:ee:62:39:7a: 47:6f:a2:ad -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUL1JJ8WFMX3suntZW9OWtXPVjkOMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA5MDA0MTEyWhcNMjUwODEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTE4MWI5OGRiNzRlYTMzOWUwNDJiNDcwMGM3Zjg5YjQ5 MTBiOGYyZTE0M2NiZWM3MGU5MmQ3OTIwMzA4YjM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTfqoYhTYXHqAxqL4+3vRFJlYJXifDz9VtsMtNS82CieuP W8FtVtK6hnR89r9SaIgYOUMH378IRzOJDfTe+2jHMezRexVLwHtZMzTpME/kyF41 wWSaSVG5h2A4Lm8rwYguyOQy4QcP/rqVdgo3zk9n0N0SXz+R8x5ba9IMjiL9hOku 7WXOUqDBnlZKmrHu1kdsDNBvtzy2AGsp/jk3O3yUsv679ZmkAm6zoQ0tFrruHILu Lw+L4LLTWARfYA8Ukmz3ukgMLv5qGbQwnEhrHH7GToVmrIZwJAsLgEs7TNKoS8X2 VELkQ1VJKNC8Ea7bxYOOVB6eLI1GZRcaBpUTTj7HAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU1UzfYzUld+MI+R1CTthNmqAYUkIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4YjY5ZDlmLTY5NmYtNDFiZi1iNjdiLTIxNDk3N2Q4MmFlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8pgDANBgkqhkiG9w0BAQsFAAOCAQEANOQt9F9LFO9vtWhuyP8QtniZ gAo7JDCS6vKEYwTY8K9kKOApXuXJSfG1TzD/R3oEcEq2FyfDHM3GukMLF66Zr0TF TEkUZtvqtiBs/MzrUJCYThZc5vRQ0JDdvB64ywH+b0ud9rF6g6yH2J4cGMNPfRik rw7+qe6owLrRGpWTwar7qHGVSUsUNiM95Lip7Ic8PPPtRosovgN30o3ACgXockQV mtbkez3YQ6NQUPZHKEY61NYkagcI0czEbOJ5Mwo/2HBfr43hPESPe/SOJIf1SoU9 lvmq6hUY8SjgiLk4YAikG7MwXag2Sf65voWdyoNtw967acQqbeTuYjl6R2+irQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:30 2025 by rpki-client