$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f6e828c-dab6-49f6-836d-72e1c0db4fa8.roa File: 7f6e828c-dab6-49f6-836d-72e1c0db4fa8.roa (raw, json) Hash identifier: OcvytnaMKchzyNbgwYwq3RB4hxRfdK7XZczVSOEdtg0= Subject key identifier: D4:16:64:07:47:70:D7:89:1D:20:4A:4B:B4:74:64:A8:8B:AE:96:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0C879A65A8E5ABA7E2C77F2DA3B2688F28194252 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f6e828c-dab6-49f6-836d-72e1c0db4fa8.roa Signing time: Mon 19 May 2025 16:00:25 +0000 ROA not before: Mon 19 May 2025 16:00:25 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:e0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:87:9a:65:a8:e5:ab:a7:e2:c7:7f:2d:a3:b2:68:8f:28:19:42:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:00:25 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=a38b4c1fc24b003e787a5caa74148c4f71687b359bdf52fd02804e0af8b1e5a6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ec:10:29:ec:f4:2e:ab:ab:a0:44:c5:a4:cf: b3:3d:63:20:b9:ac:be:ce:86:a1:3d:ca:d2:2f:be: 70:5e:03:97:c0:fb:5e:15:16:61:7e:cd:84:88:23: 68:b7:ca:f6:0e:03:1d:7e:e9:5e:c5:74:5f:5d:50: a7:fc:20:b0:87:1f:03:54:be:9f:6f:3a:c2:e1:06: 80:a4:22:de:d3:c1:a5:77:ec:37:23:9e:e3:52:a1: 9b:7f:09:dd:d2:8e:9c:ed:f6:bb:25:04:04:05:cf: 5e:5e:e1:9d:d0:b3:e3:d7:fc:a0:7b:c6:fa:83:61: df:a0:31:3c:69:fe:29:df:95:2d:df:98:f0:b0:d7: 04:bf:f5:1e:40:9a:39:80:f0:4f:79:02:51:05:dc: be:6c:94:c7:20:20:a2:d6:cd:45:eb:ef:17:40:fc: 60:19:66:0b:74:a9:08:68:69:78:29:3f:88:8e:c4: 19:87:68:fe:24:22:8e:15:9e:30:1e:2d:d2:de:c8: 8f:5f:3d:a7:48:d4:42:cd:89:e9:d8:58:f7:f1:e3: f6:f9:0f:d1:6f:12:35:94:f3:2f:d4:56:a7:7c:42: b3:8d:94:34:7a:e8:d2:49:b0:db:7c:87:63:76:98: 6b:ba:c2:c3:1d:39:26:6c:84:32:3a:1b:f1:ac:f1: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:16:64:07:47:70:D7:89:1D:20:4A:4B:B4:74:64:A8:8B:AE:96:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f6e828c-dab6-49f6-836d-72e1c0db4fa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:e0c0::/46 Signature Algorithm: sha256WithRSAEncryption ce:0c:a0:3f:8b:da:e9:be:be:33:2a:2f:5e:36:94:66:4e:57: f2:1d:e6:7b:3b:dd:4a:ad:cb:77:a8:d0:d6:7a:85:31:52:d2: fd:21:58:93:73:47:d6:37:38:dc:47:91:cc:5b:0e:a4:64:e9: d1:95:bb:be:07:9b:2a:e9:75:e2:12:98:6e:a2:f1:39:a8:dd: 58:d2:f9:ca:3a:9e:8c:da:17:ea:1d:50:2a:36:24:d9:bb:bd: 3e:bf:18:3d:85:6e:07:0b:4d:8a:23:a6:31:a6:55:6d:8b:f8: d4:b4:9b:ac:19:4b:d9:1a:d1:bf:4d:12:77:2b:a8:fb:85:8f: b9:d2:38:9f:16:cc:ad:fe:87:a2:d3:3b:b7:b0:4d:27:d0:de: 53:bc:42:e8:ee:cd:55:91:d5:5f:75:d3:86:9d:57:69:3a:b8: 1a:ba:fe:c3:6e:96:13:35:65:da:75:be:32:eb:b0:f7:59:40: c9:c7:a3:ac:9c:85:21:96:f8:57:fc:c2:4b:39:9b:89:58:a4: 0c:bd:b9:3c:37:1d:69:43:5a:4b:79:da:59:c8:84:71:5f:9e: 2d:11:81:ba:24:36:a1:e0:eb:b5:29:0b:30:2e:5c:2d:53:9a: 09:59:62:d0:73:c2:5b:73:24:28:c1:a1:a8:3e:9f:54:a0:e9: ee:55:72:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDIeaZajlq6fix38to7JojygZQlIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTYwMDI1WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzhiNGMxZmMyNGIwMDNlNzg3YTVjYWE3NDE0OGM0Zjcx Njg3YjM1OWJkZjUyZmQwMjgwNGUwYWY4YjFlNWE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD37BAp7PQuq6ugRMWkz7M9YyC5rL7OhqE9ytIvvnBeA5fA +14VFmF+zYSII2i3yvYOAx1+6V7FdF9dUKf8ILCHHwNUvp9vOsLhBoCkIt7TwaV3 7DcjnuNSoZt/Cd3Sjpzt9rslBAQFz15e4Z3Qs+PX/KB7xvqDYd+gMTxp/inflS3f mPCw1wS/9R5AmjmA8E95AlEF3L5slMcgIKLWzUXr7xdA/GAZZgt0qQhoaXgpP4iO xBmHaP4kIo4VnjAeLdLeyI9fPadI1ELNienYWPfx4/b5D9FvEjWU8y/UVqd8QrON lDR66NJJsNt8h2N2mGu6wsMdOSZshDI6G/Gs8eK9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1BZkB0dw14kdIEpLtHRkqIuuluowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdmNmU4MjhjLWRhYjYtNDlmNi04MzZkLTcyZTFjMGRiNGZhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/74MAwDQYJKoZIhvcNAQELBQADggEBAM4MoD+L2um+vjMqL142lGZO V/Id5ns73Uqty3eo0NZ6hTFS0v0hWJNzR9Y3ONxHkcxbDqRk6dGVu74HmyrpdeIS mG6i8Tmo3VjS+co6nozaF+odUCo2JNm7vT6/GD2FbgcLTYojpjGmVW2L+NS0m6wZ S9ka0b9NEncrqPuFj7nSOJ8WzK3+h6LTO7ewTSfQ3lO8QujuzVWR1V9104adV2k6 uBq6/sNulhM1Zdp1vjLrsPdZQMnHo6ychSGW+Ff8wks5m4lYpAy9uTw3HWlDWkt5 2lnIhHFfni0RgbokNqHg67UpCzAuXC1TmglZYtBzwltzJCjBoag+n1Sg6e5VclA= -----END CERTIFICATE-----Generated at Sun Jun 1 04:28:38 2025 by rpki-client