$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00f6a72a-32e8-4493-b37d-ef38fbc59663.roa File: 00f6a72a-32e8-4493-b37d-ef38fbc59663.roa (raw, json) Hash identifier: DsU83de3jsAZ0p65oIIzQ7iCXLK/2Hq5bbkMcq+52+0= Subject key identifier: 40:62:59:AC:1B:48:C2:F2:59:15:7F:A0:C4:BE:75:13:9D:AE:7F:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 30B7717B31F70A3037C2DFF1919C9B85446F1A01 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00f6a72a-32e8-4493-b37d-ef38fbc59663.roa Signing time: Fri 13 Jun 2025 15:50:32 +0000 ROA not before: Fri 13 Jun 2025 15:50:32 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b7:71:7b:31:f7:0a:30:37:c2:df:f1:91:9c:9b:85:44:6f:1a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 15:50:32 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=fdf720e174b7b5330ffc64e249e98a5c1f397f0f5b584cb5bd5be6f52af9a9eb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b5:ec:f1:20:99:8d:62:cf:43:fe:e3:24:90: dd:6c:ef:34:b8:f6:12:54:7d:ce:93:97:84:5c:37: 0a:ef:b6:db:5e:30:93:f0:ba:6a:19:0f:9a:c4:51: 2a:20:e7:7d:a1:55:f5:fa:bb:2f:7b:9a:ce:ac:3e: e0:d6:dd:9e:e7:88:75:03:01:2c:d1:aa:e1:00:a5: 95:0b:ad:72:b3:b0:27:d2:24:5a:0b:20:a1:92:2b: 7d:55:a5:14:1c:76:28:92:16:42:92:ac:d1:58:61: 9b:5b:ed:d4:98:cb:78:cd:ee:8f:3b:da:58:81:88: 23:be:97:ef:80:02:cd:d7:41:08:e4:1b:05:66:92: be:95:ff:d6:3c:75:b5:fd:89:56:65:6c:77:68:fe: 84:7d:98:09:f0:4f:a6:60:30:72:fe:6e:bc:44:e1: 77:56:ed:1c:93:1d:71:36:a0:1a:d0:a4:d3:26:59: 86:9e:d8:1b:ed:04:9c:a7:93:72:0a:eb:e5:bb:07: 4b:d9:39:62:ce:8f:ec:90:2c:45:b8:95:a4:3d:f6: 2a:49:90:c7:3a:61:6d:db:fb:58:ff:32:8a:ab:8c: 4f:e0:49:79:20:6c:a1:40:ff:a3:b0:49:d1:c9:3a: 44:07:5a:8d:8d:0c:6c:8b:70:7e:92:1d:da:46:7d: d5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:62:59:AC:1B:48:C2:F2:59:15:7F:A0:C4:BE:75:13:9D:AE:7F:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00f6a72a-32e8-4493-b37d-ef38fbc59663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:5000::/40 Signature Algorithm: sha256WithRSAEncryption 6e:81:a5:e6:e5:8b:30:97:fc:22:3c:df:3a:d8:43:62:05:80: 45:cb:a5:7f:37:2e:d1:38:8f:28:10:3b:1d:44:70:34:c3:86: fb:6a:dc:11:94:87:73:b1:30:d3:58:d6:b5:92:71:05:98:aa: 4a:a7:02:3d:f3:21:8c:e6:8a:bf:30:b5:cd:20:ce:9d:a9:f0: fb:1e:53:b4:da:45:3c:68:31:21:83:d3:dc:26:aa:c9:ef:df: d2:aa:b9:62:8b:78:19:2f:6e:23:ad:4e:23:ad:29:91:6d:4f: 36:bf:0f:8e:76:63:66:f2:5d:2c:6e:61:2c:31:11:ae:c1:2e: db:35:f6:64:f9:ba:dc:36:7c:94:93:ae:86:5e:ab:8f:3d:a0: d0:95:78:94:76:3d:c3:0f:0a:45:5d:16:71:bf:54:cd:7c:c9: c8:84:69:6a:c7:8f:b1:16:94:1a:32:e1:14:df:9d:29:a2:df: 18:d0:c1:0a:4f:11:87:cc:fc:4f:05:61:25:91:19:d2:66:c1: 51:bd:f6:fa:ff:c8:31:2f:bf:f7:e9:f1:13:6a:7f:86:fa:aa: 5d:12:a7:12:bf:8b:f0:6c:7d:5e:08:1f:46:94:10:3c:e2:66: e1:99:72:34:9c:89:fb:9f:28:f1:e3:94:8e:71:d0:a3:a6:45: 31:e3:13:38 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMLdxezH3CjA3wt/xkZybhURvGgEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTU1MDMyWhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZGY3MjBlMTc0YjdiNTMzMGZmYzY0ZTI0OWU5OGE1YzFm Mzk3ZjBmNWI1ODRjYjViZDViZTZmNTJhZjlhOWViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHtezxIJmNYs9D/uMkkN1s7zS49hJUfc6Tl4RcNwrvttte MJPwumoZD5rEUSog532hVfX6uy97ms6sPuDW3Z7niHUDASzRquEApZULrXKzsCfS JFoLIKGSK31VpRQcdiiSFkKSrNFYYZtb7dSYy3jN7o872liBiCO+l++AAs3XQQjk GwVmkr6V/9Y8dbX9iVZlbHdo/oR9mAnwT6ZgMHL+brxE4XdW7RyTHXE2oBrQpNMm WYae2BvtBJynk3IK6+W7B0vZOWLOj+yQLEW4laQ99ipJkMc6YW3b+1j/MoqrjE/g SXkgbKFA/6OwSdHJOkQHWo2NDGyLcH6SHdpGfdX3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQGJZrBtIwvJZFX+gxL51E52ufyIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAwZjZhNzJhLTMyZTgtNDQ5My1iMzdkLWVmMzhmYmM1OTY2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/7UDANBgkqhkiG9w0BAQsFAAOCAQEAboGl5uWLMJf8IjzfOthDYgWA Rculfzcu0TiPKBA7HURwNMOG+2rcEZSHc7Ew01jWtZJxBZiqSqcCPfMhjOaKvzC1 zSDOnanw+x5TtNpFPGgxIYPT3Caqye/f0qq5Yot4GS9uI61OI60pkW1PNr8PjnZj ZvJdLG5hLDERrsEu2zX2ZPm63DZ8lJOuhl6rjz2g0JV4lHY9ww8KRV0Wcb9UzXzJ yIRpasePsRaUGjLhFN+dKaLfGNDBCk8Rh8z8TwVhJZEZ0mbBUb32+v/IMS+/9+nx E2p/hvqqXRKnEr+L8Gx9XggfRpQQPOJm4ZlyNJyJ+58o8eOUjnHQo6ZFMeMTOA== -----END CERTIFICATE-----Generated at Wed Jul 2 02:04:51 2025 by rpki-client