$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa File: 089a9530-fe26-4bbb-b150-6e821d16225e.roa (raw, json) Hash identifier: F3W4x0x6N9tcD8erOUmHG/6ifnaUpm0uwx5Y0zji5aw= Subject key identifier: 14:C0:FC:DB:83:9F:89:CD:17:FF:D0:47:C2:7E:85:62:4F:8E:D0:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 127CF72D0E0F806E09EBDEA5FB672E19AAF745B5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa Signing time: Fri 16 May 2025 16:50:19 +0000 ROA not before: Fri 16 May 2025 16:50:19 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f38:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7c:f7:2d:0e:0f:80:6e:09:eb:de:a5:fb:67:2e:19:aa:f7:45:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 16:50:19 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=48da8a1ed63fd8a47d34e7fce15fc7cef03608cf09df8881cadc1a836badfd7a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:35:46:ee:c9:03:7a:c8:bd:ae:00:0a:a2:29: 75:51:2f:ee:ad:1b:6b:e5:d2:21:de:cc:76:82:77: 21:c2:15:70:69:e1:3d:37:91:8f:91:bf:2d:15:0b: 65:c2:ed:41:fc:b1:c9:d4:12:d3:98:6a:c3:76:6d: e7:aa:fe:49:e3:64:3a:61:78:55:44:39:0f:ad:e5: 26:e0:2f:cd:e4:e0:77:5c:e3:e9:ce:a5:ae:6b:20: 5d:c8:2d:ff:6e:d8:d3:53:de:cf:6e:8a:81:11:ef: 46:3e:67:2b:08:f0:d4:08:96:15:1f:8d:4a:60:81: 39:8d:dc:44:33:4d:56:16:fb:a0:4d:54:ee:23:33: d4:53:df:09:3d:47:e0:24:68:35:09:8d:2a:a2:ae: 18:06:eb:ab:6f:7d:9b:e9:95:b5:a5:4a:2d:77:59: 00:a2:08:e2:4b:24:06:91:a9:71:9c:1e:aa:c3:21: 52:e4:6e:6c:92:51:d4:2d:fe:2c:c5:ab:86:92:7e: d9:dd:d9:94:d6:bb:ca:fa:50:3f:e0:63:70:db:30: 42:cb:d8:f3:c2:8c:18:07:fd:28:1f:72:0b:44:59: c4:53:56:1d:28:00:58:2a:dc:7a:fd:c4:75:83:1a: fe:10:82:b1:c7:fb:ac:f0:f3:e3:25:70:0f:54:91: ad:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C0:FC:DB:83:9F:89:CD:17:FF:D0:47:C2:7E:85:62:4F:8E:D0:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:80c0::/48 Signature Algorithm: sha256WithRSAEncryption c2:4e:56:76:fe:c5:41:90:c4:bc:0a:bc:da:34:0d:af:d2:1e: 49:45:39:04:b1:bc:ea:a0:a0:86:c6:f5:bd:bd:a2:fe:58:86: d7:a4:d8:79:d2:7c:a8:c2:06:d0:a1:9e:67:09:ee:a7:f1:01: 15:0e:e7:57:02:69:da:9a:75:ff:2f:5b:1c:c4:b4:a4:92:c9: 64:23:86:9f:b2:7a:af:4e:75:81:37:57:2d:d5:93:aa:07:63: 5b:7f:d2:9d:74:cf:a6:95:e7:4e:7a:88:8e:67:ea:ef:b0:93: 20:0b:ea:83:63:9b:49:f3:12:5d:2d:83:8f:88:3a:50:09:7a: 84:e1:3a:a6:73:c1:84:cd:6d:79:f7:c3:ca:b1:31:f2:6d:f4: 33:6e:c9:15:a8:11:99:fd:e3:eb:51:30:a7:f0:97:0f:e8:6b: 53:7d:72:83:c4:b6:73:2a:15:74:79:4c:6c:4f:74:33:81:21: cd:19:ef:49:12:b3:17:53:24:56:bb:94:df:c7:22:81:2d:40: e5:6f:10:ce:a3:25:98:34:53:17:2a:29:5a:ad:d4:fe:f1:cd: 56:78:2d:c5:61:96:c8:12:d2:2b:ef:e3:3e:53:23:00:12:40: 33:bf:b7:74:81:f9:4d:0b:da:f0:3a:fb:63:41:5b:2a:ee:25: f0:00:d7:c4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEnz3LQ4PgG4J696l+2cuGar3RbUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTY1MDE5WhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OGRhOGExZWQ2M2ZkOGE0N2QzNGU3ZmNlMTVmYzdjZWYw MzYwOGNmMDlkZjg4ODFjYWRjMWE4MzZiYWRmZDdhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyNUbuyQN6yL2uAAqiKXVRL+6tG2vl0iHezHaCdyHCFXBp 4T03kY+Rvy0VC2XC7UH8scnUEtOYasN2beeq/knjZDpheFVEOQ+t5SbgL83k4Hdc 4+nOpa5rIF3ILf9u2NNT3s9uioER70Y+ZysI8NQIlhUfjUpggTmN3EQzTVYW+6BN VO4jM9RT3wk9R+AkaDUJjSqirhgG66tvfZvplbWlSi13WQCiCOJLJAaRqXGcHqrD IVLkbmySUdQt/izFq4aSftnd2ZTWu8r6UD/gY3DbMELL2PPCjBgH/SgfcgtEWcRT Vh0oAFgq3Hr9xHWDGv4QgrHH+6zw8+MlcA9Uka0TAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFMD824Ofic0X/9BHwn6FYk+O0FowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA4OWE5NTMwLWZlMjYtNGJiYi1iMTUwLTZlODIxZDE2MjI1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84gMAwDQYJKoZIhvcNAQELBQADggEBAMJOVnb+xUGQxLwKvNo0Da/S HklFOQSxvOqgoIbG9b29ov5Yhtek2HnSfKjCBtChnmcJ7qfxARUO51cCadqadf8v WxzEtKSSyWQjhp+yeq9OdYE3Vy3Vk6oHY1t/0p10z6aV5056iI5n6u+wkyAL6oNj m0nzEl0tg4+IOlAJeoThOqZzwYTNbXn3w8qxMfJt9DNuyRWoEZn94+tRMKfwlw/o a1N9coPEtnMqFXR5TGxPdDOBIc0Z70kSsxdTJFa7lN/HIoEtQOVvEM6jJZg0Uxcq KVqt1P7xzVZ4LcVhlsgS0ivv4z5TIwASQDO/t3SB+U0L2vA6+2NBWyruJfAA18Q= -----END CERTIFICATE-----Generated at Sun Jun 1 05:27:49 2025 by rpki-client