$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a87590-1b18-4e21-bef6-533a9b6eb087.roa File: 02a87590-1b18-4e21-bef6-533a9b6eb087.roa (raw, json) Hash identifier: uAY9jJHtj1/fHLDXunrN/BuQrx508ToJAI0upM5IKTU= Subject key identifier: 96:BC:C2:DE:60:57:D3:00:8A:3A:B0:3A:EB:03:C2:56:5B:37:75:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5AC2B90A399980E879757C16ED52DB0B49BC3588 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a87590-1b18-4e21-bef6-533a9b6eb087.roa Signing time: Fri 30 May 2025 00:11:44 +0000 ROA not before: Fri 30 May 2025 00:11:44 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c2:b9:0a:39:99:80:e8:79:75:7c:16:ed:52:db:0b:49:bc:35:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 30 00:11:44 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=8fb32080376af555b91383985eda1694997cf6f5c93e978fa5f3a6bc29515d00, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:22:0a:63:3b:2b:3a:3a:f1:89:20:db:74: c4:e5:79:bb:f6:5e:a4:26:c3:f0:37:d1:74:28:7b: 5c:d8:7a:eb:97:d2:c4:31:eb:6b:7d:23:a1:4c:19: ea:4f:81:36:d6:19:ee:ed:c1:63:18:13:e7:71:fa: 49:4b:a0:b9:77:e6:2a:28:69:fd:62:d0:63:de:31: 18:40:a8:36:0c:69:7c:05:25:5e:9b:f6:76:71:f7: 8d:9f:98:ce:ef:8e:93:01:13:63:ec:a2:8f:cb:f4: c0:c1:11:95:58:8e:2f:eb:f8:09:e5:d4:ac:0a:db: 85:c5:9c:d9:c0:9f:1b:4a:18:ed:43:b2:5c:78:8f: 47:48:51:ce:bd:45:17:22:82:24:c6:92:cc:3b:05: 47:59:25:eb:e2:eb:2b:09:bb:31:85:02:c5:a3:5a: 20:88:87:cf:85:87:d4:cd:8c:97:94:11:09:43:a9: 3c:2e:84:cb:f6:ac:1f:3c:17:80:4f:40:40:6e:63: 81:ff:c9:2b:cf:49:c3:cc:7b:ff:3a:ee:72:44:27: ad:c0:ec:b5:1b:29:82:8a:68:84:86:0e:76:91:3b: 60:24:de:40:04:ce:0a:78:86:c8:34:00:ce:4f:d9: 6f:0b:5e:7a:9a:74:3f:09:e1:2d:b4:f2:84:5d:f0: b7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BC:C2:DE:60:57:D3:00:8A:3A:B0:3A:EB:03:C2:56:5B:37:75:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02a87590-1b18-4e21-bef6-533a9b6eb087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd::/32 Signature Algorithm: sha256WithRSAEncryption 79:1a:76:c9:b5:05:af:66:ca:ec:2a:74:5a:b3:2c:20:6d:5a: 36:27:e5:8e:fe:06:ff:b2:a6:97:d7:80:e1:4f:83:57:d1:b4: a7:18:d0:25:76:30:82:39:76:8c:77:1e:d8:1f:a3:a8:5e:03: 19:52:b3:8b:da:6c:6e:b7:9e:44:6c:d5:ed:02:cd:79:ac:30: 00:bb:7a:07:70:0c:2a:68:9f:de:54:17:df:c4:14:9c:c1:b2: 99:58:24:23:ec:7f:a0:b5:be:a9:14:af:52:b1:40:e9:49:e1: 74:ce:6c:ba:ff:92:86:51:38:d3:3b:23:67:58:38:96:2b:7a: a3:64:8e:53:d7:b6:db:4d:bc:44:c5:c9:1b:fd:7d:7e:aa:d3: a9:48:23:d6:f6:41:a0:ab:e2:15:83:89:d0:32:92:ba:6f:03: e1:80:d9:dd:37:d1:15:89:90:2b:36:f1:31:b2:aa:d5:a6:ed: 60:47:09:8f:34:20:5b:09:75:18:99:64:84:9c:0b:94:72:fc: 47:1a:82:f9:c7:14:83:f2:ed:37:2c:cc:87:c9:95:87:39:cc: 28:35:45:c4:c0:5f:7b:ef:a0:7a:1a:71:6d:47:41:80:bb:99: 9b:31:e4:36:18:e6:02:74:35:11:3f:23:65:92:04:24:c5:fc: 8a:dd:ee:57 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUWsK5CjmZgOh5dXwW7VLbC0m8NYgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDAxMTQ0WhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZmIzMjA4MDM3NmFmNTU1YjkxMzgzOTg1ZWRhMTY5NDk5 N2NmNmY1YzkzZTk3OGZhNWYzYTZiYzI5NTE1ZDAwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCb5iIKYzsrOjrxiSDbdMTlebv2XqQmw/A30XQoe1zYeuuX 0sQx62t9I6FMGepPgTbWGe7twWMYE+dx+klLoLl35iooaf1i0GPeMRhAqDYMaXwF JV6b9nZx942fmM7vjpMBE2Psoo/L9MDBEZVYji/r+Anl1KwK24XFnNnAnxtKGO1D slx4j0dIUc69RRcigiTGksw7BUdZJevi6ysJuzGFAsWjWiCIh8+Fh9TNjJeUEQlD qTwuhMv2rB88F4BPQEBuY4H/ySvPScPMe/867nJEJ63A7LUbKYKKaISGDnaRO2Ak 3kAEzgp4hsg0AM5P2W8LXnqadD8J4S208oRd8LcdAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUlrzC3mBX0wCKOrA66wPCVls3dXYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyYTg3NTkwLTFiMTgtNGUyMS1iZWY2LTUzM2E5YjZlYjA4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB/9MA0GCSqGSIb3DQEBCwUAA4IBAQB5GnbJtQWvZsrsKnRasywgbVo2 J+WO/gb/sqaX14DhT4NX0bSnGNAldjCCOXaMdx7YH6OoXgMZUrOL2mxut55EbNXt As15rDAAu3oHcAwqaJ/eVBffxBScwbKZWCQj7H+gtb6pFK9SsUDpSeF0zmy6/5KG UTjTOyNnWDiWK3qjZI5T17bbTbxExckb/X1+qtOpSCPW9kGgq+IVg4nQMpK6bwPh gNndN9EViZArNvExsqrVpu1gRwmPNCBbCXUYmWSEnAuUcvxHGoL5xxSD8u03LMyH yZWHOcwoNUXEwF9776B6GnFtR0GAu5mbMeQ2GOYCdDURPyNlkgQkxfyK3e5X -----END CERTIFICATE-----Generated at Sun Jun 1 04:47:48 2025 by rpki-client