$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa File: 34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa (raw, json) Hash identifier: vreyjlnhCPlt3obwH97P39GXMxIEjE2awQO4QW3iAbc= Subject key identifier: 32:36:E8:F3:28:10:4C:C7:5D:15:D6:45:8B:86:F9:31:2D:8B:E9:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45DEB3CC09468AAF41A2D34D1AB0A944CBF0D0A5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa Signing time: Mon 19 May 2025 17:51:00 +0000 ROA not before: Mon 19 May 2025 17:51:00 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1c::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:de:b3:cc:09:46:8a:af:41:a2:d3:4d:1a:b0:a9:44:cb:f0:d0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 17:51:00 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=e38e3040eefc36da299dccd1fce1de2e9f8cc59e032923ad5e85629be4a4b44c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:da:db:4a:29:ad:79:82:7b:4b:f4:5e:f7: 06:19:fc:ab:93:66:2e:b5:b9:37:c0:ed:13:6c:14: f6:f6:e7:0b:8b:0a:82:75:b1:21:26:36:91:a2:0f: e8:1e:10:b4:60:98:dd:d8:91:9e:68:53:6a:a5:ae: ef:5b:c0:d2:e6:c5:14:05:94:dc:b4:dc:07:cd:85: d3:4c:c1:96:e1:20:46:af:5d:5d:08:ad:54:7e:0d: 56:48:e1:fe:c8:51:e0:d8:26:30:1b:ab:71:4c:fe: 7b:70:da:6d:c9:ce:24:80:7d:79:1e:9f:68:e0:61: 99:c9:8a:20:e0:be:d1:12:7a:16:24:aa:d7:e0:16: d8:3a:d5:8c:36:43:f2:2d:d6:02:38:51:01:60:ee: ff:b5:32:56:f3:e3:14:f8:4d:95:03:9d:14:25:66: a4:c4:2d:44:51:20:c2:83:b8:83:51:b2:0e:97:12: f8:e6:06:b1:5a:85:7d:43:99:72:8d:dc:8b:de:1a: cf:b3:67:bc:cd:56:e5:bb:e8:d8:f3:1f:9c:6f:8b: ef:5b:6c:e2:a9:69:3f:f3:76:95:ac:a0:6c:84:12: 79:97:bc:70:21:a0:8d:9a:99:1e:92:1e:ea:cf:53: 9d:13:db:f2:42:42:8b:1d:f7:96:4a:ef:70:2a:8a: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:36:E8:F3:28:10:4C:C7:5D:15:D6:45:8B:86:F9:31:2D:8B:E9:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34a79db6-083b-4ccc-8b7b-2e01a76ddbe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1c::/38 Signature Algorithm: sha256WithRSAEncryption c3:b3:0f:58:b0:8c:ae:8a:09:1a:0b:4c:66:52:3a:6b:30:72: fa:b8:45:b7:de:8d:a7:90:03:3e:fe:c8:5d:fb:94:f2:08:1f: b3:bf:af:33:8b:62:cf:2f:d2:b7:00:22:e4:c5:3b:99:70:fa: b3:64:87:db:74:4f:4a:72:71:69:8e:62:2c:66:fa:a8:25:43: bd:56:34:a5:71:41:36:f5:2c:06:32:1f:b7:11:80:6a:43:1e: ab:ba:ef:d9:f9:d1:d5:4d:62:f0:c2:21:a2:45:8f:6d:d9:85: 72:01:a0:74:ef:d8:d2:fd:3d:3a:eb:45:c6:d5:d8:d6:85:82: 6e:89:ee:ff:75:de:cf:4e:32:25:cd:7f:c8:81:ff:ee:e7:38: c8:65:35:ef:39:c4:6f:6b:d5:ce:b8:70:1d:33:db:4f:de:5d: 4f:ed:40:80:14:8d:ed:ef:ee:19:73:1c:37:e2:39:ea:e1:34: 98:f1:74:90:f3:0b:cb:bd:ef:e0:81:cf:c0:12:52:db:7c:c7: ea:34:c8:77:b9:2c:2d:11:e0:c0:be:bc:76:3c:d1:01:f2:0b: 9c:c9:ea:bc:91:32:25:8c:37:8f:30:fb:ec:ba:87:57:1e:e4: 5a:32:6a:df:8c:af:10:5e:02:9c:c0:62:6e:33:78:03:11:2e: 8a:0a:90:3f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURd6zzAlGiq9BotNNGrCpRMvw0KUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTc1MTAwWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzhlMzA0MGVlZmMzNmRhMjk5ZGNjZDFmY2UxZGUyZTlm OGNjNTllMDMyOTIzYWQ1ZTg1NjI5YmU0YTRiNDRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzYtrbSimteYJ7S/Re9wYZ/KuTZi61uTfA7RNsFPb25wuL CoJ1sSEmNpGiD+geELRgmN3YkZ5oU2qlru9bwNLmxRQFlNy03AfNhdNMwZbhIEav XV0IrVR+DVZI4f7IUeDYJjAbq3FM/ntw2m3JziSAfXken2jgYZnJiiDgvtESehYk qtfgFtg61Yw2Q/It1gI4UQFg7v+1Mlbz4xT4TZUDnRQlZqTELURRIMKDuINRsg6X EvjmBrFahX1DmXKN3IveGs+zZ7zNVuW76NjzH5xvi+9bbOKpaT/zdpWsoGyEEnmX vHAhoI2amR6SHurPU50T2/JCQosd95ZK73Aqit29AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMjbo8ygQTMddFdZFi4b5MS2L6RkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0YTc5ZGI2LTA4M2ItNGNjYy04YjdiLTJlMDFhNzZkZGJlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8cADANBgkqhkiG9w0BAQsFAAOCAQEAw7MPWLCMrooJGgtMZlI6azBy +rhFt96Np5ADPv7IXfuU8ggfs7+vM4tizy/StwAi5MU7mXD6s2SH23RPSnJxaY5i LGb6qCVDvVY0pXFBNvUsBjIftxGAakMeq7rv2fnR1U1i8MIhokWPbdmFcgGgdO/Y 0v09OutFxtXY1oWCbonu/3Xez04yJc1/yIH/7uc4yGU17znEb2vVzrhwHTPbT95d T+1AgBSN7e/uGXMcN+I56uE0mPF0kPMLy73v4IHPwBJS23zH6jTId7ksLRHgwL68 djzRAfILnMnqvJEyJYw3jzD77LqHVx7kWjJq34yvEF4CnMBibjN4AxEuigqQPw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:24:16 2025 by rpki-client