$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31fce051-af9a-40f5-a57c-0d46cb922d6b.roa File: 31fce051-af9a-40f5-a57c-0d46cb922d6b.roa (raw, json) Hash identifier: 7MeTSyyAhyRNHapWovriltC1oXGa+OewJXAhBcLNXCI= Subject key identifier: A4:31:A2:9F:BA:F4:6D:BC:D4:04:7D:17:2C:64:94:4A:F0:AF:56:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 767FC5B801EA99C2D87944442A6F485C5A7AE340 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31fce051-af9a-40f5-a57c-0d46cb922d6b.roa Signing time: Mon 19 May 2025 16:30:29 +0000 ROA not before: Mon 19 May 2025 16:30:29 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:a400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7f:c5:b8:01:ea:99:c2:d8:79:44:44:2a:6f:48:5c:5a:7a:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:30:29 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=144e2d60169473c7f642802ed90f47092ae77c8c815bc06b03769248bc7fde47, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:72:38:45:15:03:25:c3:42:3f:ca:97:8b: f7:0d:b7:ef:1e:62:f8:ab:df:da:30:18:81:d7:21: 3e:57:db:0d:cb:00:97:8c:3b:9f:aa:ac:6b:f7:37: ac:c7:6c:d5:d0:ac:94:82:8f:fb:0f:f2:7d:34:c4: b6:66:fc:e8:ad:4c:65:c9:52:62:a3:4d:6d:cc:5b: 72:b1:cb:71:68:69:3c:d3:c1:f9:32:2d:bf:e7:0f: e4:d4:45:23:ff:c1:59:98:56:a9:1a:ec:c8:4e:a4: 5c:24:e7:93:dd:72:18:ea:d2:42:20:99:89:6a:9d: a1:14:8e:75:b1:ea:27:f6:66:b2:16:a1:08:0b:0e: bd:68:c8:37:1e:93:94:13:f6:21:f0:ff:ea:65:d5: 0a:e8:a3:8a:87:91:16:81:1e:a7:a6:95:6b:d9:c2: a0:ae:f8:e6:84:e8:75:ad:5f:f7:6d:e3:82:d4:0c: 6e:a8:16:0f:aa:cb:38:10:61:c2:9a:fd:63:2d:ea: 40:53:6c:eb:87:c2:ba:36:ca:4c:ee:6f:e4:bb:f2: c1:dc:81:9b:4c:b4:ab:e1:6c:2c:ff:bd:9a:a7:d3: 06:6a:79:0d:9d:d5:88:09:44:ee:a8:d1:fb:ca:6f: db:d2:39:f5:7c:ff:02:fc:cc:d5:fb:07:4e:69:04: 94:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:31:A2:9F:BA:F4:6D:BC:D4:04:7D:17:2C:64:94:4A:F0:AF:56:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31fce051-af9a-40f5-a57c-0d46cb922d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:a400::/40 Signature Algorithm: sha256WithRSAEncryption 9d:a4:0c:64:09:83:6d:a7:ef:d1:c9:41:61:fa:3c:12:94:cd: 40:f5:11:53:c9:37:ad:d6:d2:25:e1:61:e4:ea:31:18:69:a0: d8:1a:42:10:bb:7b:67:ad:bb:a1:6b:05:0e:44:7b:5c:e2:27: b4:41:70:96:dd:fc:ae:10:08:f8:96:d3:b6:20:40:a9:c4:01: d4:54:82:02:b0:6b:4f:f1:f0:2e:d6:70:1f:04:68:6b:b0:ff: 25:d7:6e:04:06:7c:9b:0f:6f:20:06:98:2a:f0:96:2e:ce:cd: e6:c3:d1:ee:aa:67:b6:cb:fe:d4:78:fd:8d:93:94:ab:64:30: b1:27:59:9f:1b:6c:cc:b4:59:ee:8c:10:75:6f:46:e7:08:c0: 25:4c:95:88:ac:ae:dc:59:c4:c5:58:f3:a3:8b:ec:b7:6b:72: 2f:53:cb:2d:81:90:22:71:4e:c0:80:1f:7a:54:4d:75:e4:36: f6:7f:6a:db:20:36:d4:d3:13:05:85:e6:79:fd:25:f5:86:4d: c2:2c:de:a6:a9:11:bd:51:4e:88:19:48:14:26:28:7a:86:fb: 91:ed:d9:0f:a2:8a:d0:e6:82:a3:0b:d4:e4:68:70:1f:6e:8f: 38:ae:5a:a8:cb:93:fa:42:2c:7d:77:ec:46:cb:07:d6:f4:24: ae:d4:df:16 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdn/FuAHqmcLYeUREKm9IXFp640AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTYzMDI5WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDRlMmQ2MDE2OTQ3M2M3ZjY0MjgwMmVkOTBmNDcwOTJh ZTc3YzhjODE1YmMwNmIwMzc2OTI0OGJjN2ZkZTQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmsXI4RRUDJcNCP8qXi/cNt+8eYvir39owGIHXIT5X2w3L AJeMO5+qrGv3N6zHbNXQrJSCj/sP8n00xLZm/OitTGXJUmKjTW3MW3Kxy3FoaTzT wfkyLb/nD+TURSP/wVmYVqka7MhOpFwk55Pdchjq0kIgmYlqnaEUjnWx6if2ZrIW oQgLDr1oyDcek5QT9iHw/+pl1Qroo4qHkRaBHqemlWvZwqCu+OaE6HWtX/dt44LU DG6oFg+qyzgQYcKa/WMt6kBTbOuHwro2ykzub+S78sHcgZtMtKvhbCz/vZqn0wZq eQ2d1YgJRO6o0fvKb9vSOfV8/wL8zNX7B05pBJQLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUpDGin7r0bbzUBH0XLGSUSvCvVh0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMxZmNlMDUxLWFmOWEtNDBmNS1hNTdjLTBkNDZjYjkyMmQ2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/7pDANBgkqhkiG9w0BAQsFAAOCAQEAnaQMZAmDbafv0clBYfo8EpTN QPURU8k3rdbSJeFh5OoxGGmg2BpCELt7Z627oWsFDkR7XOIntEFwlt38rhAI+JbT tiBAqcQB1FSCArBrT/HwLtZwHwRoa7D/JdduBAZ8mw9vIAaYKvCWLs7N5sPR7qpn tsv+1Hj9jZOUq2QwsSdZnxtszLRZ7owQdW9G5wjAJUyViKyu3FnExVjzo4vst2ty L1PLLYGQInFOwIAfelRNdeQ29n9q2yA21NMTBYXmef0l9YZNwizepqkRvVFOiBlI FCYoeob7ke3ZD6KK0OaCowvU5GhwH26POK5aqMuT+kIsfXfsRssH1vQkrtTfFg== -----END CERTIFICATE-----Generated at Sun Jun 1 04:21:43 2025 by rpki-client