$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e37dce6-073c-42e1-9afc-071c9e360693.roa File: 3e37dce6-073c-42e1-9afc-071c9e360693.roa (raw, json) Hash identifier: HhN0XpyVJvC5E2E0wpSZ3mYhLzWvfi2gncvqdnKwIU8= Subject key identifier: 02:6F:E4:1A:EC:F3:D5:31:FE:75:8D:D0:D9:3D:9E:43:A6:B6:4C:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 64F88F0F68743EAB81B85E3F6486E13251E7A28C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e37dce6-073c-42e1-9afc-071c9e360693.roa Signing time: Mon 19 May 2025 18:01:17 +0000 ROA not before: Mon 19 May 2025 18:01:17 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f16::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f8:8f:0f:68:74:3e:ab:81:b8:5e:3f:64:86:e1:32:51:e7:a2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:01:17 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=81055fe72ba49b4de89ad592d0c57ba8e5f2e646a791432fdc28abd67d3cff5d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:17:50:e8:51:e5:7c:b8:11:76:4f:aa:65: d2:3c:85:fe:72:b8:9c:27:09:e3:1f:b2:ea:1c:df: ae:e7:66:1d:d6:ff:37:07:a7:32:ab:cf:df:c7:cc: ce:a8:ee:9b:49:b7:3f:e9:55:9e:2c:44:a6:2c:79: 07:c4:bc:03:b6:0d:aa:66:67:61:29:6b:4b:63:e7: f2:58:12:a9:30:b3:8f:5b:90:8c:a7:00:45:e2:5d: 04:a5:98:44:e8:47:03:18:dc:da:46:b9:81:71:52: b7:f6:5b:3f:7e:6a:00:6b:91:90:f4:76:59:c2:14: d1:3e:15:52:f1:7a:84:97:13:a6:10:12:d9:e1:cb: 86:14:d1:68:03:89:7e:1e:4f:40:c2:83:7f:4e:e4: 79:d1:47:42:b6:a5:7d:13:e5:f3:e9:af:fe:05:87: b5:e7:a1:ce:f3:1b:75:d7:04:a6:90:14:b5:46:1c: 9f:67:79:60:85:df:79:0f:de:28:da:59:a5:2b:dd: 2b:cf:0c:9a:35:6c:84:8d:8c:e1:5b:09:2f:e7:d2: 9c:51:8c:e7:09:69:3e:de:c9:00:e3:71:cc:42:34: 74:05:9b:09:11:1d:2e:f0:3f:01:dd:b9:d0:8c:98: 2d:dc:b7:5e:e9:64:91:80:29:19:b1:ed:50:5d:e6: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6F:E4:1A:EC:F3:D5:31:FE:75:8D:D0:D9:3D:9E:43:A6:B6:4C:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e37dce6-073c-42e1-9afc-071c9e360693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f16::/34 Signature Algorithm: sha256WithRSAEncryption 61:c0:27:91:80:3e:f1:92:bb:46:4c:08:58:ad:61:92:fe:2e: 65:aa:47:a6:46:63:6d:87:ad:ff:d4:a2:b5:b2:65:0e:c0:fe: 05:80:9c:b4:d3:e6:58:f0:1d:12:94:43:9d:49:ce:5b:ba:40: da:f2:5b:c0:fe:63:08:30:e2:8c:00:7d:c2:10:52:59:ee:0c: de:66:8b:7b:24:1b:0b:30:a4:d9:7b:b1:c5:4c:8e:e7:a1:b0: be:fe:4e:df:31:94:00:79:0e:1f:e0:59:16:a3:c6:2b:8d:97: 52:74:fa:51:74:21:69:62:1b:9b:d5:c8:a8:da:f9:48:a7:e0: 9f:6c:89:ec:ec:c4:a0:93:23:bb:5d:b1:e7:d1:56:ea:10:62: e8:7a:5c:14:af:73:98:84:8b:8a:79:78:89:19:fd:40:ea:0c: df:dc:b6:0d:36:e5:62:b5:55:7b:4f:af:84:7f:af:06:07:2f: 9f:6f:04:b4:bc:78:8d:9d:cd:33:34:49:87:0b:86:05:46:8b: 7a:27:a2:5f:fb:07:de:42:f8:c0:c4:09:e4:6e:65:20:b4:0b: e8:e2:75:52:e1:b5:bb:47:94:d3:76:0c:d3:c0:a3:ef:a3:d8: 07:ba:bf:ef:12:b3:26:f6:08:ac:d0:bd:25:0f:fe:e8:c7:4d: 64:1b:2c:e6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZPiPD2h0PquBuF4/ZIbhMlHnoowwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgwMTE3WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTA1NWZlNzJiYTQ5YjRkZTg5YWQ1OTJkMGM1N2JhOGU1 ZjJlNjQ2YTc5MTQzMmZkYzI4YWJkNjdkM2NmZjVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdLxdQ6FHlfLgRdk+qZdI8hf5yuJwnCeMfsuoc367nZh3W /zcHpzKrz9/HzM6o7ptJtz/pVZ4sRKYseQfEvAO2DapmZ2Epa0tj5/JYEqkws49b kIynAEXiXQSlmEToRwMY3NpGuYFxUrf2Wz9+agBrkZD0dlnCFNE+FVLxeoSXE6YQ Etnhy4YU0WgDiX4eT0DCg39O5HnRR0K2pX0T5fPpr/4Fh7Xnoc7zG3XXBKaQFLVG HJ9neWCF33kP3ijaWaUr3SvPDJo1bISNjOFbCS/n0pxRjOcJaT7eyQDjccxCNHQF mwkRHS7wPwHdudCMmC3ct17pZJGAKRmx7VBd5oLtAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUAm/kGuzz1TH+dY3Q2T2eQ6a2TLYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlMzdkY2U2LTA3M2MtNDJlMS05YWZjLTA3MWM5ZTM2MDY5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgYmAB8WADANBgkqhkiG9w0BAQsFAAOCAQEAYcAnkYA+8ZK7RkwIWK1hkv4u ZapHpkZjbYet/9SitbJlDsD+BYCctNPmWPAdEpRDnUnOW7pA2vJbwP5jCDDijAB9 whBSWe4M3maLeyQbCzCk2XuxxUyO56Gwvv5O3zGUAHkOH+BZFqPGK42XUnT6UXQh aWIbm9XIqNr5SKfgn2yJ7OzEoJMju12x59FW6hBi6HpcFK9zmISLinl4iRn9QOoM 39y2DTblYrVVe0+vhH+vBgcvn28EtLx4jZ3NMzRJhwuGBUaLeieiX/sH3kL4wMQJ 5G5lILQL6OJ1UuG1u0eU03YM08Cj76PYB7q/7xKzJvYIrNC9JQ/+6MdNZBss5g== -----END CERTIFICATE-----Generated at Sun Jun 1 04:29:29 2025 by rpki-client