$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f18398-931e-4710-8895-365ddb4ba867.roa File: 62f18398-931e-4710-8895-365ddb4ba867.roa (raw, json) Hash identifier: BCkQ0D09Q8oY8b/7jdKkZrV2GFa3nS7k332piqGcNUo= Subject key identifier: 10:F8:4A:B5:0C:82:2E:66:7B:C6:69:CD:17:59:36:84:83:2B:97:49 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1472E6F5A9DCA436DCFA05B63E28042B79BF9685 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f18398-931e-4710-8895-365ddb4ba867.roa Signing time: Thu 26 Jun 2025 19:07:19 +0000 ROA not before: Thu 26 Jun 2025 19:07:19 +0000 ROA not after: Thu 31 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:8090::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:72:e6:f5:a9:dc:a4:36:dc:fa:05:b6:3e:28:04:2b:79:bf:96:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 26 19:07:19 2025 GMT Not After : Jul 31 23:59:59 2025 GMT Subject: serialNumber=0c8b6575a68ec5e4d9b67ea3b1ea24fe426159a0241846de7f7e47463fa317b2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9a:83:62:4f:02:97:65:17:36:29:48:c9:2d: 70:6c:91:16:48:b1:78:00:59:05:fa:8f:68:48:8c: 22:e9:bf:7d:5a:52:ff:26:4d:ad:ec:5d:bc:3a:58: 6a:60:46:26:2d:b9:be:01:08:a4:d7:c3:8c:18:f9: 8d:f7:fd:25:66:67:a4:15:19:c5:f6:f2:10:77:df: dd:e7:eb:01:f7:24:9e:f5:bb:61:95:47:da:df:67: c2:7d:b8:1d:fe:79:c0:f7:f5:78:96:38:37:ea:57: 57:b4:fc:cd:dd:e9:32:cf:99:09:16:e7:9c:d3:b5: f5:c5:b4:a2:ff:4c:59:54:d2:a0:e0:00:21:b4:81: 7b:a5:ef:cc:b3:3d:82:95:59:6b:ef:81:21:72:5d: 6a:2b:dc:41:aa:44:00:c4:ab:a4:0f:7a:5b:a7:5d: 88:69:55:57:a9:37:08:b0:1a:bc:e7:3c:1d:28:40: 68:ac:dd:ee:98:ac:20:4e:d6:a8:9e:db:91:e6:1a: d9:16:c6:fe:d4:01:aa:8e:85:b9:60:c7:f0:ac:af: 48:59:de:76:12:c0:b5:0d:40:b9:3b:c9:11:03:82: c4:30:2a:4b:44:d4:60:6a:0a:59:e5:cd:15:31:6e: 59:a0:86:8c:16:ba:80:3a:1a:03:65:97:e8:5f:cf: 13:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F8:4A:B5:0C:82:2E:66:7B:C6:69:CD:17:59:36:84:83:2B:97:49 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62f18398-931e-4710-8895-365ddb4ba867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:8090::/46 Signature Algorithm: sha256WithRSAEncryption 59:eb:3a:bd:ae:4a:fd:5e:44:06:cd:10:01:c8:6c:1e:87:db: de:13:11:3a:35:b6:41:af:d2:ad:5a:dc:02:8b:33:b6:6d:f2: 74:66:d2:f7:eb:43:0e:67:2d:f4:4b:0d:e3:12:2b:ee:10:06: c8:ba:59:cf:36:69:c1:35:f8:ab:1a:dc:74:f5:d3:2f:60:9f: cd:70:4d:f6:7b:91:cd:f2:74:e9:5e:11:d6:99:0a:2e:65:fa: 22:65:63:ef:c8:dc:a1:d0:10:9a:25:33:e2:4d:c1:9e:be:19: 00:a6:12:8e:d7:0b:77:3b:cc:5a:0e:fe:18:2a:35:03:41:1b: 7c:7d:6e:f7:01:f0:a8:a4:1a:0c:8c:2f:54:8b:c3:04:15:b3: 56:6e:65:cb:cb:83:54:27:76:a7:ab:57:40:06:59:a4:bb:05: e3:64:ae:6b:cd:a6:11:bc:0f:84:36:19:5a:12:23:7a:90:42: 43:e5:0e:f3:e2:1b:d5:a4:ea:8e:f1:5b:95:93:57:3a:79:cd: a2:76:76:e5:fd:e6:bd:d7:b8:c8:5b:c1:4d:97:37:d2:15:1f: 06:e5:97:af:06:7e:56:38:ca:a2:0d:84:99:be:66:e5:62:9f: a4:53:b4:9a:7c:fe:6e:f7:87:bb:27:70:43:d4:80:aa:de:28: e5:83:bd:6f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFHLm9ancpDbc+gW2PigEK3m/loUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI2MTkwNzE5WhcNMjUwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzhiNjU3NWE2OGVjNWU0ZDliNjdlYTNiMWVhMjRmZTQy NjE1OWEwMjQxODQ2ZGU3ZjdlNDc0NjNmYTMxN2IyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYmoNiTwKXZRc2KUjJLXBskRZIsXgAWQX6j2hIjCLpv31a Uv8mTa3sXbw6WGpgRiYtub4BCKTXw4wY+Y33/SVmZ6QVGcX28hB3393n6wH3JJ71 u2GVR9rfZ8J9uB3+ecD39XiWODfqV1e0/M3d6TLPmQkW55zTtfXFtKL/TFlU0qDg ACG0gXul78yzPYKVWWvvgSFyXWor3EGqRADEq6QPelunXYhpVVepNwiwGrznPB0o QGis3e6YrCBO1qie25HmGtkWxv7UAaqOhblgx/Csr0hZ3nYSwLUNQLk7yREDgsQw KktE1GBqClnlzRUxblmghowWuoA6GgNll+hfzxNvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEPhKtQyCLmZ7xmnNF1k2hIMrl0kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYyZjE4Mzk4LTkzMWUtNDcxMC04ODk1LTM2NWRkYjRiYTg2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pgJAwDQYJKoZIhvcNAQELBQADggEBAFnrOr2uSv1eRAbNEAHIbB6H 294TETo1tkGv0q1a3AKLM7Zt8nRm0vfrQw5nLfRLDeMSK+4QBsi6Wc82acE1+Ksa 3HT10y9gn81wTfZ7kc3ydOleEdaZCi5l+iJlY+/I3KHQEJolM+JNwZ6+GQCmEo7X C3c7zFoO/hgqNQNBG3x9bvcB8KikGgyML1SLwwQVs1ZuZcvLg1QndqerV0AGWaS7 BeNkrmvNphG8D4Q2GVoSI3qQQkPlDvPiG9Wk6o7xW5WTVzp5zaJ2duX95r3XuMhb wU2XN9IVHwbll68GflY4yqINhJm+ZuVin6RTtJp8/m73h7sncEPUgKreKOWDvW8= -----END CERTIFICATE-----Generated at Tue Jul 1 01:22:33 2025 by rpki-client