$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/759eee0f-c645-4460-bc81-76005e6422b4.roa File: 759eee0f-c645-4460-bc81-76005e6422b4.roa (raw, json) Hash identifier: 9+zNmb0BwmrIjj9KuGKDyTqrECp1hspLlGZOMihfLnA= Subject key identifier: 8F:58:94:C9:19:47:77:79:C0:1B:69:1C:AD:21:FB:DA:F8:36:9F:F8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 639D427B7925C57CAF395E85306DFB72AD646BB4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/759eee0f-c645-4460-bc81-76005e6422b4.roa Signing time: Mon 19 May 2025 18:21:41 +0000 ROA not before: Mon 19 May 2025 18:21:41 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1d:4800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9d:42:7b:79:25:c5:7c:af:39:5e:85:30:6d:fb:72:ad:64:6b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:21:41 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=1fb3d924ad0d180eda3ac2b0d75f8880bb6eaa4e479fe753ad4a24d000d9a23d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d5:ed:63:8a:5c:d3:1e:80:23:64:b2:58:55: 64:b9:34:57:b5:93:e8:e3:d1:91:cf:27:f7:0f:fe: 94:e4:5f:26:62:7c:2d:71:83:be:0c:17:65:58:33: 2a:c5:07:1c:48:d3:38:5f:f0:9b:a9:2b:e1:81:3c: 73:a4:c2:f6:48:36:e9:9f:1e:32:ca:4f:71:7c:30: 36:45:bf:0d:41:9b:6f:a8:99:7b:2f:2f:b8:33:58: df:d7:3f:d4:0e:fa:b9:9b:4f:55:0f:8d:d1:ae:b0: 49:03:e2:14:09:d7:a8:49:7d:fb:ff:a4:a9:1c:59: c5:87:64:d8:a5:4a:ce:4a:aa:e1:b9:94:1b:78:4f: 82:57:35:29:ff:38:66:fb:b0:af:66:38:5e:e5:d0: 2b:b8:54:45:c1:a4:2b:b4:19:51:46:e2:b1:2f:5e: 06:c2:18:93:6c:2f:6f:93:ad:f7:98:79:08:90:11: ea:a2:8b:9a:c2:81:d2:f7:4c:f5:b5:90:f4:bc:df: 3d:b8:04:0e:b4:e5:14:28:fe:ba:50:79:11:03:12: 95:fb:38:02:6a:91:ac:3d:92:70:88:ce:55:6b:ca: 36:07:6e:a0:cf:3c:c9:60:51:c1:fe:53:13:4f:34: 65:09:fe:12:cb:c1:4a:81:98:2b:c0:f2:13:ea:e0: ce:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:58:94:C9:19:47:77:79:C0:1B:69:1C:AD:21:FB:DA:F8:36:9F:F8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/759eee0f-c645-4460-bc81-76005e6422b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1d:4800::/37 Signature Algorithm: sha256WithRSAEncryption 38:1e:40:34:4a:71:cc:23:a3:96:d4:51:cb:e0:3b:16:45:c7: a3:fd:a1:0a:8e:cb:dc:2e:29:0b:ed:01:cf:d4:45:ff:3d:bc: e8:6a:ce:9b:ee:46:b7:49:78:15:f4:c1:bb:ee:45:7d:c6:8b: 10:0c:f2:6b:7c:64:e1:f8:13:02:d3:14:8f:cc:f9:12:68:c7: 81:31:2e:7c:38:33:af:44:48:0f:0f:bf:df:88:ed:0e:03:8b: ab:93:9c:83:92:86:10:57:1f:03:8a:c9:87:77:76:5e:91:16: c6:d4:1e:81:5f:41:4c:f8:05:84:fb:43:a3:6b:14:61:93:70: 12:1e:3e:57:24:fd:b1:c7:37:ba:be:79:1c:50:cb:58:ad:1c: 0d:a6:71:f6:c6:0b:01:8f:62:47:4a:f3:c2:67:be:56:1f:c5: e9:c5:04:ca:33:fd:51:cd:f2:27:7d:a9:29:12:a3:87:53:ea: 65:ac:01:8c:bf:9a:b0:6d:b2:81:ee:9f:0f:6a:9a:c8:99:f1: fd:cd:9b:a4:da:ce:4d:e7:9f:25:21:88:98:c3:f0:f4:65:86: e1:91:2c:5f:88:aa:b7:35:b4:dc:26:86:0e:cd:d1:fd:19:92: c2:0e:dc:07:3b:73:f5:c7:23:9b:e7:f2:a0:df:9b:a1:99:47: e1:50:58:50 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUY51Ce3klxXyvOV6FMG37cq1ka7QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgyMTQxWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZmIzZDkyNGFkMGQxODBlZGEzYWMyYjBkNzVmODg4MGJi NmVhYTRlNDc5ZmU3NTNhZDRhMjRkMDAwZDlhMjNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV1e1jilzTHoAjZLJYVWS5NFe1k+jj0ZHPJ/cP/pTkXyZi fC1xg74MF2VYMyrFBxxI0zhf8JupK+GBPHOkwvZINumfHjLKT3F8MDZFvw1Bm2+o mXsvL7gzWN/XP9QO+rmbT1UPjdGusEkD4hQJ16hJffv/pKkcWcWHZNilSs5KquG5 lBt4T4JXNSn/OGb7sK9mOF7l0Cu4VEXBpCu0GVFG4rEvXgbCGJNsL2+TrfeYeQiQ Eeqii5rCgdL3TPW1kPS83z24BA605RQo/rpQeREDEpX7OAJqkaw9knCIzlVryjYH bqDPPMlgUcH+UxNPNGUJ/hLLwUqBmCvA8hPq4M71AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUj1iUyRlHd3nAG2kcrSH72vg2n/gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1OWVlZTBmLWM2NDUtNDQ2MC1iYzgxLTc2MDA1ZTY0MjJiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8dSDANBgkqhkiG9w0BAQsFAAOCAQEAOB5ANEpxzCOjltRRy+A7FkXH o/2hCo7L3C4pC+0Bz9RF/z286GrOm+5Gt0l4FfTBu+5FfcaLEAzya3xk4fgTAtMU j8z5EmjHgTEufDgzr0RIDw+/34jtDgOLq5Ocg5KGEFcfA4rJh3d2XpEWxtQegV9B TPgFhPtDo2sUYZNwEh4+VyT9scc3ur55HFDLWK0cDaZx9sYLAY9iR0rzwme+Vh/F 6cUEyjP9Uc3yJ32pKRKjh1PqZawBjL+asG2yge6fD2qayJnx/c2bpNrOTeefJSGI mMPw9GWG4ZEsX4iqtzW03CaGDs3R/RmSwg7cBztz9ccjm+fyoN+boZlH4VBYUA== -----END CERTIFICATE-----Generated at Sun Jun 1 05:12:52 2025 by rpki-client