$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ba91d72-a5b1-4908-a961-369fc80afb97.roa File: 5ba91d72-a5b1-4908-a961-369fc80afb97.roa (raw, json) Hash identifier: aeHdeJ5Nvly9a3pmIHSJ0z/XDC2Y3Xml9pC+vWdNJl8= Subject key identifier: 0E:8E:F9:C4:AC:CB:F8:41:B8:85:E5:C3:19:1B:FC:AB:58:05:1E:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03C99CCB3DCA5DBBE100BA7C9C5C1C8BC84D07C4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ba91d72-a5b1-4908-a961-369fc80afb97.roa Signing time: Mon 19 May 2025 18:10:52 +0000 ROA not before: Mon 19 May 2025 18:10:52 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1c:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c9:9c:cb:3d:ca:5d:bb:e1:00:ba:7c:9c:5c:1c:8b:c8:4d:07:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:10:52 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=0b1ab5541e7c1145bd01c4508b3a863623e6bddafe494dcc899e9ada27b0dc42, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:d8:07:80:ad:09:a6:3b:13:f2:06:5e:9a: 08:9e:82:4c:51:94:9e:1e:3a:42:09:ca:40:68:16: 17:0c:3d:8c:02:a7:00:a6:52:34:1b:61:82:89:5c: c2:da:19:d5:f6:de:87:ee:ca:96:8a:f0:ad:14:8d: b3:93:16:df:ad:1a:3c:d9:36:d8:0a:2d:e2:49:38: 30:80:f7:69:23:82:12:98:99:38:b0:93:7e:4c:10: 7a:e1:8b:ab:9e:33:9c:8a:c6:d2:39:72:01:46:76: 0b:36:8e:5b:6e:9b:14:2e:2f:8b:85:8b:34:b0:a7: e5:55:1a:76:ac:97:e7:66:bb:c9:80:c5:fd:2c:12: 2a:ab:51:c5:af:4c:50:26:b3:60:88:46:2f:b3:e7: 8f:27:b4:7e:2e:f5:eb:83:d7:fb:e3:3b:30:9f:73: 3d:e0:e0:4c:a6:da:18:aa:49:24:e9:07:71:e5:39: 57:58:d6:bb:e2:f4:96:2f:30:20:55:74:be:a5:fe: 72:dd:ca:00:fb:94:f3:76:5d:b8:91:61:84:1c:8f: 8e:6f:11:ca:c0:29:7e:56:fc:c5:ad:45:7f:14:31: 52:67:e0:02:86:5e:f7:10:8a:fe:f3:01:dc:9a:d3: d7:a2:53:ea:d2:a7:e4:c1:ba:68:5b:c5:1d:40:fb: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8E:F9:C4:AC:CB:F8:41:B8:85:E5:C3:19:1B:FC:AB:58:05:1E:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ba91d72-a5b1-4908-a961-369fc80afb97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1c:c800::/37 Signature Algorithm: sha256WithRSAEncryption 69:d7:8e:6e:71:ab:0d:46:15:4b:4e:3f:19:55:51:ec:e1:a7: ac:62:21:8a:17:66:36:ff:2d:da:df:e1:70:97:44:3a:d2:f6: 23:46:a7:9d:e4:0a:10:d1:50:3f:ad:ec:e8:1d:1c:f4:7a:c7: 56:43:05:c5:93:f4:fa:65:e7:c7:57:59:3a:81:f3:d4:62:ba: 1c:c2:62:86:c3:ed:01:a3:80:59:d5:77:95:85:a3:dd:34:8d: 74:40:fe:e8:ce:ab:4f:a7:9f:53:ee:95:09:13:8f:a1:bf:5d: 73:8d:56:8d:14:20:57:bc:9f:d4:c6:be:ef:de:a5:43:9d:fe: f9:5f:56:02:d7:8d:d9:8a:63:81:fa:0a:d5:0e:38:3e:e6:08: 4c:f6:27:e0:28:c3:fd:f1:8c:1c:c1:3e:20:f3:6f:83:b6:77: 4b:ee:1d:61:28:2e:99:a2:e3:a9:c6:1d:a0:a5:d6:0c:dc:83: 7d:4b:b8:e8:ec:55:9d:10:0e:27:30:93:0c:9c:7b:11:36:7f: 42:88:53:c2:72:53:66:3a:b9:20:8f:22:c1:83:97:d6:99:7c: d7:9b:0b:f7:fa:76:66:e8:14:d8:ad:d9:5b:7e:39:4a:19:2f: ce:68:99:d5:eb:33:90:e8:e3:38:1e:70:49:32:3f:55:86:5e: 7f:0e:b8:cd -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUA8mcyz3KXbvhALp8nFwci8hNB8QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgxMDUyWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjFhYjU1NDFlN2MxMTQ1YmQwMWM0NTA4YjNhODYzNjIz ZTZiZGRhZmU0OTRkY2M4OTllOWFkYTI3YjBkYzQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg5tgHgK0JpjsT8gZemgiegkxRlJ4eOkIJykBoFhcMPYwC pwCmUjQbYYKJXMLaGdX23ofuypaK8K0UjbOTFt+tGjzZNtgKLeJJODCA92kjghKY mTiwk35MEHrhi6ueM5yKxtI5cgFGdgs2jltumxQuL4uFizSwp+VVGnasl+dmu8mA xf0sEiqrUcWvTFAms2CIRi+z548ntH4u9euD1/vjOzCfcz3g4Eym2hiqSSTpB3Hl OVdY1rvi9JYvMCBVdL6l/nLdygD7lPN2XbiRYYQcj45vEcrAKX5W/MWtRX8UMVJn 4AKGXvcQiv7zAdya09eiU+rSp+TBumhbxR1A+/gDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUDo75xKzL+EG4heXDGRv8q1gFHjEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzViYTkxZDcyLWE1YjEtNDkwOC1hOTYxLTM2OWZjODBhZmI5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8cyDANBgkqhkiG9w0BAQsFAAOCAQEAadeObnGrDUYVS04/GVVR7OGn rGIhihdmNv8t2t/hcJdEOtL2I0anneQKENFQP63s6B0c9HrHVkMFxZP0+mXnx1dZ OoHz1GK6HMJihsPtAaOAWdV3lYWj3TSNdED+6M6rT6efU+6VCROPob9dc41WjRQg V7yf1Ma+796lQ53++V9WAteN2YpjgfoK1Q44PuYITPYn4CjD/fGMHME+IPNvg7Z3 S+4dYSgumaLjqcYdoKXWDNyDfUu46OxVnRAOJzCTDJx7ETZ/QohTwnJTZjq5II8i wYOX1pl815sL9/p2ZugU2K3ZW345ShkvzmiZ1eszkOjjOB5wSTI/VYZefw64zQ== -----END CERTIFICATE-----Generated at Sun Jun 1 04:50:30 2025 by rpki-client