$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bb4113a-c724-413d-bc8f-4c6789ea1b04.roa File: 2bb4113a-c724-413d-bc8f-4c6789ea1b04.roa (raw, json) Hash identifier: 0VmdQ7asAXgCp9b9/+x25BQkGmKZgLLMIv14H8KRFWg= Subject key identifier: CE:0A:7E:12:52:05:E0:F5:30:BA:AF:0B:4D:5C:9B:AD:00:37:CC:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7AE94DE7FE61A0447E03329AD343F36D2F0D6AA8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bb4113a-c724-413d-bc8f-4c6789ea1b04.roa Signing time: Mon 19 May 2025 15:20:12 +0000 ROA not before: Mon 19 May 2025 15:20:12 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e9:4d:e7:fe:61:a0:44:7e:03:32:9a:d3:43:f3:6d:2f:0d:6a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 15:20:12 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=bca5c272042146e1d42573e2de9dc66f784f7f0f0935034d0637c59c6ee14fe6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:77:0e:17:8b:1c:49:3f:91:c4:77:ce:41: 9f:37:a2:01:19:de:1b:09:2b:b1:e1:6c:04:b2:07: 68:7f:3f:41:47:91:9a:29:32:32:0e:bc:18:e8:e2: 6d:96:f5:5f:cc:2c:86:f4:47:b6:de:00:1d:27:38: f3:29:69:a3:e5:f7:24:f4:92:22:89:6d:01:0d:6d: 92:10:e9:7d:91:a5:a2:a5:a5:9d:f5:54:45:5f:a6: 61:d1:46:15:38:82:da:92:d4:c7:ec:9d:ca:54:24: be:09:e0:05:e5:a7:90:ae:1c:a4:dd:31:52:e9:ad: 5a:e5:58:a3:76:79:88:19:7c:0c:49:6b:5e:1c:28: 74:6b:40:a5:d5:4f:b0:ed:91:54:26:92:ec:97:db: 2a:02:93:85:30:03:f3:ae:ea:03:db:1c:8c:98:70: 4a:d0:90:c4:e7:95:6a:96:55:45:f3:d5:f1:88:76: c3:1f:c4:08:5a:68:f3:1f:ee:17:7c:58:ab:42:60: ec:63:da:dc:a3:f0:7a:17:89:86:b6:c8:d7:a0:3d: 52:40:6c:ab:cf:b3:9d:dd:00:38:2e:9a:43:d2:dd: 63:39:31:02:2b:0f:c9:6f:21:0f:42:2d:5d:db:57: 5d:83:eb:9e:46:1a:15:87:1c:84:7a:5f:4b:a9:1c: c6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:0A:7E:12:52:05:E0:F5:30:BA:AF:0B:4D:5C:9B:AD:00:37:CC:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bb4113a-c724-413d-bc8f-4c6789ea1b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption c3:91:5a:ee:0d:0d:a4:79:ea:eb:e9:1b:f1:74:a4:41:2a:c8: 77:78:93:6c:e0:2b:18:67:bd:0b:23:1f:25:ec:6d:f4:77:d7: 67:22:c8:3a:1e:be:fc:aa:c0:3c:45:d1:ac:47:4a:d7:68:1b: 78:a6:1a:f6:49:37:ff:c0:b7:43:9f:8b:2a:93:77:80:b7:aa: a5:f2:18:80:a9:9e:d0:b9:b5:11:b3:3b:04:8f:02:8e:7e:89: 74:61:5d:d2:31:2b:3d:b8:fc:33:45:4f:88:67:6a:2f:36:a0: e4:e4:dd:3d:85:5e:ab:c3:22:64:5f:a7:5e:ce:23:9d:a5:26: b2:d4:df:60:8b:1b:4d:bc:6d:76:30:6a:7e:b1:45:6f:9c:b8: 4c:f7:6e:59:da:a8:00:0c:d7:8c:6b:47:b3:29:0f:2e:ef:92: 61:0a:1d:6f:ce:f6:b8:ff:d3:38:d8:26:e3:33:e6:79:74:11: 67:19:e2:80:4d:d4:96:c4:a2:0b:b0:b5:1a:ce:ad:6a:37:2d: f7:2a:27:f6:f9:48:3b:9f:f3:71:a2:d1:73:c8:3d:72:d5:67: a7:9a:90:4f:73:51:63:38:a2:9e:11:f4:30:57:16:14:ee:e5: a2:e5:2a:fc:23:af:f0:52:49:8d:95:7c:e0:14:ca:c1:85:b7: 43:68:74:c8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeulN5/5hoER+AzKa00PzbS8NaqgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTUyMDEyWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiY2E1YzI3MjA0MjE0NmUxZDQyNTczZTJkZTlkYzY2Zjc4 NGY3ZjBmMDkzNTAzNGQwNjM3YzU5YzZlZTE0ZmU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6a3cOF4scST+RxHfOQZ83ogEZ3hsJK7HhbASyB2h/P0FH kZopMjIOvBjo4m2W9V/MLIb0R7beAB0nOPMpaaPl9yT0kiKJbQENbZIQ6X2RpaKl pZ31VEVfpmHRRhU4gtqS1MfsncpUJL4J4AXlp5CuHKTdMVLprVrlWKN2eYgZfAxJ a14cKHRrQKXVT7DtkVQmkuyX2yoCk4UwA/Ou6gPbHIyYcErQkMTnlWqWVUXz1fGI dsMfxAhaaPMf7hd8WKtCYOxj2tyj8HoXiYa2yNegPVJAbKvPs53dADgumkPS3WM5 MQIrD8lvIQ9CLV3bV12D655GGhWHHIR6X0upHMZBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzgp+ElIF4PUwuq8LTVybrQA3zDowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiYjQxMTNhLWM3MjQtNDEzZC1iYzhmLTRjNjc4OWVhMWIwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/04MAwDQYJKoZIhvcNAQELBQADggEBAMORWu4NDaR56uvpG/F0pEEq yHd4k2zgKxhnvQsjHyXsbfR312ciyDoevvyqwDxF0axHStdoG3imGvZJN//At0Of iyqTd4C3qqXyGICpntC5tRGzOwSPAo5+iXRhXdIxKz24/DNFT4hnai82oOTk3T2F XqvDImRfp17OI52lJrLU32CLG028bXYwan6xRW+cuEz3blnaqAAM14xrR7MpDy7v kmEKHW/O9rj/0zjYJuMz5nl0EWcZ4oBN1JbEoguwtRrOrWo3LfcqJ/b5SDuf83Gi 0XPIPXLVZ6eakE9zUWM4op4R9DBXFhTu5aLlKvwjr/BSSY2VfOAUysGFt0NodMg= -----END CERTIFICATE-----Generated at Sun Jun 1 04:23:26 2025 by rpki-client