$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59167a0a-38a5-40ce-b8dd-17fb1df5fe38.roa File: 59167a0a-38a5-40ce-b8dd-17fb1df5fe38.roa (raw, json) Hash identifier: jZNc7QngxhHiNXX6pKDrs/SS50EOpSUvaEVfo3i3HOY= Subject key identifier: 08:95:D6:17:F0:A4:92:F9:60:7F:01:9E:91:6B:45:CC:00:03:A1:D2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 18F1935E629480CB5FF3756C7A190E6A4FC58ABD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59167a0a-38a5-40ce-b8dd-17fb1df5fe38.roa Signing time: Mon 19 May 2025 15:41:53 +0000 ROA not before: Mon 19 May 2025 15:41:53 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f1:93:5e:62:94:80:cb:5f:f3:75:6c:7a:19:0e:6a:4f:c5:8a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 15:41:53 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=c2d762607a4e41a9a4f31a4384bad351774dd0d17f84abc94df0892157e43b39, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:2f:bd:95:ce:a3:0e:e7:f1:46:22:a4:a7: 82:66:4b:b9:12:24:0f:53:73:f5:62:1f:1e:fa:81: 65:57:1e:bc:d2:e2:b1:39:bc:6e:9d:92:78:c9:4c: c0:9f:2b:01:e6:20:5a:07:fd:38:ba:8e:d8:16:69: dd:64:f1:c6:67:2b:a0:dc:5c:e1:f6:c1:2b:8e:f4: 91:3d:e6:c8:7e:cd:31:61:67:eb:b1:bb:f8:73:24: 7e:22:9f:69:4f:85:29:79:9f:97:4e:60:cb:0e:d6: 84:11:e4:51:a6:60:db:36:f7:73:ae:d4:48:fb:d2: fe:34:93:61:ed:c5:28:05:ca:2d:c9:d6:1f:f8:f0: de:1e:cf:a5:bb:d5:ef:15:ef:20:8f:fe:1d:79:c0: c2:fa:60:a3:8f:12:48:90:9e:62:b6:86:e2:0a:3e: d1:bf:88:3f:9b:3a:11:bd:bb:f9:11:5b:68:79:3d: 2e:38:03:7a:2a:56:51:ca:c1:6f:e4:de:f8:c0:dd: 06:00:5e:81:f3:f4:03:8a:2e:96:2e:bf:00:f7:f8: a4:54:4f:0c:8a:67:57:62:3d:e1:f9:4a:83:4c:d7: e9:ef:a6:41:42:91:4a:4f:aa:ea:a3:b6:d3:51:1c: 2c:3e:63:99:8a:f3:4f:8c:87:77:b8:03:c5:60:50: c4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:95:D6:17:F0:A4:92:F9:60:7F:01:9E:91:6B:45:CC:00:03:A1:D2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59167a0a-38a5-40ce-b8dd-17fb1df5fe38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8010::/48 Signature Algorithm: sha256WithRSAEncryption a9:8d:72:35:13:98:c5:29:7e:77:cf:ec:f2:f5:71:11:39:4e: 99:82:77:8d:5b:46:e2:d2:73:24:14:ab:29:86:4d:38:f6:c4: 92:1c:c3:82:d2:6b:b8:16:8d:14:d6:57:eb:8c:05:76:ab:38: 6c:d3:e7:1f:45:4f:c2:fb:b1:22:bc:b6:a6:5f:1a:e7:aa:2f: 96:f5:bd:9b:b3:b3:a0:ab:be:18:e2:56:f0:9e:6b:9f:80:b7: 9a:62:cc:2b:0a:1d:77:48:1b:3b:04:3a:a7:f1:04:0b:e1:43: 14:03:45:0c:35:09:11:b1:d0:e8:d1:65:a7:03:a2:64:1b:c1: 9d:6f:5c:a7:f0:da:19:f3:8d:ac:84:ed:67:81:6f:1a:47:b2: 0e:07:49:94:59:8e:c8:2c:71:46:bc:86:3f:4a:fc:64:0c:1c: 56:7b:24:a7:49:2c:15:a5:33:c0:ee:09:52:b4:bb:03:92:14: 93:73:1e:88:27:71:c6:91:09:e4:c8:ff:52:7f:ea:22:0d:e5: 98:b0:9c:7f:dc:5d:f6:fc:a4:04:6a:dc:74:0e:0c:96:4b:6d: a9:2f:fd:2d:79:ec:2b:f3:6e:a0:b1:74:56:ec:ce:68:a1:ef: 90:30:48:05:c2:20:dd:79:67:cc:01:9c:be:48:50:50:3b:a1: 31:24:e5:e3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGPGTXmKUgMtf83VsehkOak/Fir0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTU0MTUzWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMmQ3NjI2MDdhNGU0MWE5YTRmMzFhNDM4NGJhZDM1MTc3 NGRkMGQxN2Y4NGFiYzk0ZGYwODkyMTU3ZTQzYjM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy8i+9lc6jDufxRiKkp4JmS7kSJA9Tc/ViHx76gWVXHrzS 4rE5vG6dknjJTMCfKwHmIFoH/Ti6jtgWad1k8cZnK6DcXOH2wSuO9JE95sh+zTFh Z+uxu/hzJH4in2lPhSl5n5dOYMsO1oQR5FGmYNs293Ou1Ej70v40k2HtxSgFyi3J 1h/48N4ez6W71e8V7yCP/h15wML6YKOPEkiQnmK2huIKPtG/iD+bOhG9u/kRW2h5 PS44A3oqVlHKwW/k3vjA3QYAXoHz9AOKLpYuvwD3+KRUTwyKZ1diPeH5SoNM1+nv pkFCkUpPquqjttNRHCw+Y5mK80+Mh3e4A8VgUMQRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCJXWF/CkkvlgfwGekWtFzAADodIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5MTY3YTBhLTM4YTUtNDBjZS1iOGRkLTE3ZmIxZGY1ZmUzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gBAwDQYJKoZIhvcNAQELBQADggEBAKmNcjUTmMUpfnfP7PL1cRE5 TpmCd41bRuLScyQUqymGTTj2xJIcw4LSa7gWjRTWV+uMBXarOGzT5x9FT8L7sSK8 tqZfGueqL5b1vZuzs6CrvhjiVvCea5+At5pizCsKHXdIGzsEOqfxBAvhQxQDRQw1 CRGx0OjRZacDomQbwZ1vXKfw2hnzjayE7WeBbxpHsg4HSZRZjsgscUa8hj9K/GQM HFZ7JKdJLBWlM8DuCVK0uwOSFJNzHognccaRCeTI/1J/6iIN5ZiwnH/cXfb8pARq 3HQODJZLbakv/S157CvzbqCxdFbszmih75AwSAXCIN15Z8wBnL5IUFA7oTEk5eM= -----END CERTIFICATE-----Generated at Sun Jun 1 05:05:11 2025 by rpki-client