$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c6ca0ad-3730-4c38-ade2-b847b2dbef7c.roa File: 4c6ca0ad-3730-4c38-ade2-b847b2dbef7c.roa (raw, json) Hash identifier: fyuHXGL1p7BfGhDaU+NXeZEnOgpdqP5ex+Ez+62mPe4= Subject key identifier: F0:29:E5:26:25:61:EF:9E:C7:4F:9F:B3:2F:78:23:FB:D0:C8:17:FC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 32F567D47F5510C1DA67DCE489C1CE5ADE348FB9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c6ca0ad-3730-4c38-ade2-b847b2dbef7c.roa Signing time: Mon 19 May 2025 15:10:18 +0000 ROA not before: Mon 19 May 2025 15:10:18 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:4020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f5:67:d4:7f:55:10:c1:da:67:dc:e4:89:c1:ce:5a:de:34:8f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 15:10:18 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=0f6be903873b18e8e96a26d30525033afb9fb80f3ed965340fec907e46ab7440, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c9:8b:d5:8b:18:2b:62:26:6a:6c:9c:06:5d: 7e:91:b3:30:0a:7c:9f:9f:0d:9a:89:14:15:86:63: 47:9f:e6:15:60:fb:e4:19:52:21:02:e6:7e:24:99: a1:b8:77:2b:26:81:0b:a4:9d:57:f9:ef:3b:f0:12: bd:22:28:d6:31:f9:46:11:e3:40:6a:3a:1f:39:25: 2f:9d:dd:5c:4d:d2:8c:4d:eb:f1:8c:8d:a5:6a:53: 06:c1:ac:d3:63:b5:00:75:ad:fc:47:28:4b:80:88: 9a:24:a4:e3:41:35:90:53:5a:4e:4d:b7:97:c0:7b: 73:5e:9e:95:1f:1f:46:dd:b1:e5:d2:f2:83:fe:d9: 3f:7e:ff:d5:4e:3d:d1:47:d3:9a:3c:6a:63:61:ae: 90:2e:0d:e5:a3:1d:77:67:00:50:34:ce:5b:e4:b6: 73:ce:a6:98:c3:d5:31:cc:e5:b5:48:b6:e8:ce:cd: f3:0d:4c:de:57:1b:36:e9:ca:3d:8f:8d:89:aa:19: 91:cd:31:a9:e7:26:66:0e:61:5a:60:bd:a2:79:6d: a8:49:0b:bb:61:0c:85:da:39:3d:61:10:b9:ee:e2: 2f:98:6c:b4:11:5b:c1:96:41:db:ee:11:c6:02:c9: 1a:a1:c8:ba:da:be:86:d9:77:1d:4c:60:e0:bd:17: 58:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:29:E5:26:25:61:EF:9E:C7:4F:9F:B3:2F:78:23:FB:D0:C8:17:FC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c6ca0ad-3730-4c38-ade2-b847b2dbef7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:4020::/46 Signature Algorithm: sha256WithRSAEncryption 71:47:35:3c:c3:51:ef:ad:7b:7f:73:ee:93:97:46:6c:a9:2e: a3:29:04:3c:88:75:ce:fd:9e:ba:77:c7:a2:ec:59:a2:a0:87: 48:93:d2:95:44:8a:ab:ea:3e:07:63:25:0d:ff:41:59:54:a8: 89:a0:63:2d:40:5d:49:12:38:18:aa:3c:81:1d:e2:27:92:c7: fd:f8:eb:fe:33:2e:98:10:ee:76:f3:4c:de:c6:43:46:51:34: 1b:22:10:a9:eb:65:78:d1:4d:65:1f:82:9d:cb:18:44:12:56: 74:8e:65:f1:03:79:f0:32:5f:82:a6:ec:06:90:2d:b8:a5:1d: dd:96:46:25:14:54:48:8c:fe:19:18:f1:8b:74:53:c6:14:bb: 80:13:b8:6d:3a:5a:3d:67:bb:be:67:86:b8:c1:af:43:5b:97: 1a:da:a9:a4:88:08:80:c6:25:8c:e6:da:8e:02:08:5b:93:b7: 97:71:dd:c8:f5:e2:ad:e5:b6:1a:0f:80:1c:f3:8e:bd:1a:9d: 6f:d5:1f:da:91:cf:f0:b5:a4:f0:5c:5e:3d:2c:19:0a:fb:f2: 41:a9:75:23:74:38:08:77:39:2c:9c:3d:72:98:7e:a8:7a:8a: 7c:65:67:f5:9c:e5:be:61:29:8d:c8:b6:65:62:02:69:cf:e9: d0:d5:8f:77 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMvVn1H9VEMHaZ9zkicHOWt40j7kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTUxMDE4WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjZiZTkwMzg3M2IxOGU4ZTk2YTI2ZDMwNTI1MDMzYWZi OWZiODBmM2VkOTY1MzQwZmVjOTA3ZTQ2YWI3NDQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZyYvVixgrYiZqbJwGXX6RszAKfJ+fDZqJFBWGY0ef5hVg ++QZUiEC5n4kmaG4dysmgQuknVf57zvwEr0iKNYx+UYR40BqOh85JS+d3VxN0oxN 6/GMjaVqUwbBrNNjtQB1rfxHKEuAiJokpONBNZBTWk5Nt5fAe3NenpUfH0bdseXS 8oP+2T9+/9VOPdFH05o8amNhrpAuDeWjHXdnAFA0zlvktnPOppjD1THM5bVItujO zfMNTN5XGzbpyj2PjYmqGZHNMannJmYOYVpgvaJ5bahJC7thDIXaOT1hELnu4i+Y bLQRW8GWQdvuEcYCyRqhyLravobZdx1MYOC9F1gBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8CnlJiVh757HT5+zL3gj+9DIF/wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjNmNhMGFkLTM3MzAtNGMzOC1hZGUyLWI4NDdiMmRiZWY3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pQCAwDQYJKoZIhvcNAQELBQADggEBAHFHNTzDUe+te39z7pOXRmyp LqMpBDyIdc79nrp3x6LsWaKgh0iT0pVEiqvqPgdjJQ3/QVlUqImgYy1AXUkSOBiq PIEd4ieSx/346/4zLpgQ7nbzTN7GQ0ZRNBsiEKnrZXjRTWUfgp3LGEQSVnSOZfED efAyX4Km7AaQLbilHd2WRiUUVEiM/hkY8Yt0U8YUu4ATuG06Wj1nu75nhrjBr0Nb lxraqaSICIDGJYzm2o4CCFuTt5dx3cj14q3lthoPgBzzjr0anW/VH9qRz/C1pPBc Xj0sGQr78kGpdSN0OAh3OSycPXKYfqh6inxlZ/Wc5b5hKY3ItmViAmnP6dDVj3c= -----END CERTIFICATE-----Generated at Sun Jun 1 05:08:43 2025 by rpki-client