$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/410cc314-5613-4835-b4ce-28724122fcab.roa File: 410cc314-5613-4835-b4ce-28724122fcab.roa (raw, json) Hash identifier: 2MOuxOtMQNC092h/RpA3OfJpBRd3phiz8lsZNfxoNu0= Subject key identifier: 65:10:5D:66:77:57:12:2D:97:02:0F:81:03:09:62:53:95:2D:20:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22203CFA9C261ED8BA0AEFC1BB4A428C8FCE2D7B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/410cc314-5613-4835-b4ce-28724122fcab.roa Signing time: Mon 19 May 2025 16:10:22 +0000 ROA not before: Mon 19 May 2025 16:10:22 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:6080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:20:3c:fa:9c:26:1e:d8:ba:0a:ef:c1:bb:4a:42:8c:8f:ce:2d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:10:22 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=f22ed20b4bb0df124a060753a3360e7c9936d3809a9a28c6d8ad4dc49dba6ec8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:76:16:cb:7a:b8:ca:6c:09:7e:e8:a6:d7: b4:c3:58:b5:35:1d:f9:e6:00:f8:3b:85:2e:a6:85: 6d:45:d9:36:4c:d9:70:0c:cf:d6:6a:0a:e6:6f:8d: 58:e0:0b:bd:c3:63:2e:9f:fe:b0:3b:bb:0c:c4:ec: 04:69:3d:42:de:6b:b3:51:e2:c4:b4:79:27:f1:0c: e5:3e:aa:c1:6f:e8:1d:bf:f5:9f:08:e5:f5:0a:1f: 44:50:f3:21:6f:31:b4:d6:fb:46:95:09:f6:18:26: 1b:e9:d4:5c:ae:6f:1b:87:6a:77:75:d9:e9:74:69: dd:68:08:7f:d8:c7:2b:b1:49:7d:eb:7a:ad:64:27: 28:ff:94:48:d6:f0:61:d4:93:5a:92:e3:de:9d:cb: 4a:15:f2:f1:0a:fa:a5:c1:91:b9:43:12:ab:bb:f8: de:32:c7:d7:88:c8:d7:95:7e:b4:c1:87:d9:72:69: e0:df:07:80:13:c2:05:26:61:3b:c8:e0:2e:31:b5: db:4c:e4:45:49:22:55:51:04:a3:43:78:fa:c0:4a: 2d:47:9f:77:5e:20:6f:0d:52:14:f5:ab:f9:16:74: 7b:98:d4:92:99:06:b1:8d:38:ad:d5:75:d5:bc:16: 84:86:4a:f8:04:85:59:bc:c1:73:07:f7:c6:0a:74: 28:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:10:5D:66:77:57:12:2D:97:02:0F:81:03:09:62:53:95:2D:20:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/410cc314-5613-4835-b4ce-28724122fcab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:6080::/46 Signature Algorithm: sha256WithRSAEncryption a9:87:98:da:1f:81:28:fe:a8:92:d3:00:8f:ce:65:5d:36:8e: 54:d8:e2:08:48:0e:f5:40:86:25:09:ec:ec:e5:ea:88:0b:3f: 05:55:49:77:7d:bc:e8:5e:1e:ce:6d:34:ea:3b:13:d2:b1:8b: ed:9e:ea:cb:70:7e:d3:50:3f:a1:14:bd:16:fd:55:cb:9a:c4: 4c:5e:39:0c:1c:65:b6:ad:2a:40:23:48:31:6e:b9:14:0b:30: e6:fd:a0:23:28:0b:48:ea:ff:a6:39:5a:31:7f:cb:1e:df:97: 5c:0b:84:8e:70:4f:08:d4:33:8b:4f:4d:dd:b0:72:ae:dc:e7: ef:ad:1b:00:71:15:26:7c:17:bc:9a:35:f4:58:52:16:40:96: 58:d4:2b:09:16:c2:de:b2:24:fe:5a:85:43:23:70:0e:5c:96: 0c:70:57:13:0d:87:75:8c:67:43:b0:d8:f9:b7:ea:e0:5f:47: ef:ce:47:4e:6a:f6:89:e4:06:37:c3:1e:99:3c:fb:b9:ba:09: da:62:e1:ab:b0:83:f9:d9:72:15:68:8d:b4:68:63:91:64:60: dc:24:70:76:ba:f6:32:d6:d2:11:ce:43:d4:27:97:32:2e:25: 9a:9c:00:8f:fb:7f:72:1f:9f:03:00:72:12:f3:2a:5f:6a:07: d9:26:87:e4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIiA8+pwmHti6Cu/Bu0pCjI/OLXswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTYxMDIyWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjJlZDIwYjRiYjBkZjEyNGEwNjA3NTNhMzM2MGU3Yzk5 MzZkMzgwOWE5YTI4YzZkOGFkNGRjNDlkYmE2ZWM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC39XYWy3q4ymwJfuim17TDWLU1HfnmAPg7hS6mhW1F2TZM 2XAMz9ZqCuZvjVjgC73DYy6f/rA7uwzE7ARpPULea7NR4sS0eSfxDOU+qsFv6B2/ 9Z8I5fUKH0RQ8yFvMbTW+0aVCfYYJhvp1FyubxuHand12el0ad1oCH/YxyuxSX3r eq1kJyj/lEjW8GHUk1qS496dy0oV8vEK+qXBkblDEqu7+N4yx9eIyNeVfrTBh9ly aeDfB4ATwgUmYTvI4C4xtdtM5EVJIlVRBKNDePrASi1Hn3deIG8NUhT1q/kWdHuY 1JKZBrGNOK3VddW8FoSGSvgEhVm8wXMH98YKdCihAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZRBdZndXEi2XAg+BAwliU5UtIMAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQxMGNjMzE0LTU2MTMtNDgzNS1iNGNlLTI4NzI0MTIyZmNhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/7YIAwDQYJKoZIhvcNAQELBQADggEBAKmHmNofgSj+qJLTAI/OZV02 jlTY4ghIDvVAhiUJ7Ozl6ogLPwVVSXd9vOheHs5tNOo7E9Kxi+2e6stwftNQP6EU vRb9VcuaxExeOQwcZbatKkAjSDFuuRQLMOb9oCMoC0jq/6Y5WjF/yx7fl1wLhI5w TwjUM4tPTd2wcq7c5++tGwBxFSZ8F7yaNfRYUhZAlljUKwkWwt6yJP5ahUMjcA5c lgxwVxMNh3WMZ0Ow2Pm36uBfR+/OR05q9onkBjfDHpk8+7m6Cdpi4auwg/nZchVo jbRoY5FkYNwkcHa69jLW0hHOQ9QnlzIuJZqcAI/7f3IfnwMAchLzKl9qB9kmh+Q= -----END CERTIFICATE-----Generated at Sun Jun 1 05:31:55 2025 by rpki-client