$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88e60927-76e0-4587-a9cb-c00951418852.roa File: 88e60927-76e0-4587-a9cb-c00951418852.roa (raw, json) Hash identifier: WYWIfNx9QSs9n4VvnjqQ3mC8O+VHSFAX6wadXwz7Jjo= Subject key identifier: 4B:6A:31:28:C6:F8:0B:BE:81:99:52:4C:C3:F6:0D:8A:9F:C6:4D:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61E4FA8689BFDCD2D2D1E4E4F0625730238C1D7C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88e60927-76e0-4587-a9cb-c00951418852.roa Signing time: Mon 19 May 2025 16:30:18 +0000 ROA not before: Mon 19 May 2025 16:30:18 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:c040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e4:fa:86:89:bf:dc:d2:d2:d1:e4:e4:f0:62:57:30:23:8c:1d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:30:18 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=910397570dfc7c71ddc9325e35fbf800e555235085469f193484bff97b648c8c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:87:0b:4f:ec:fa:b4:d8:89:a5:5c:00:e6:13: 7f:bc:2e:01:41:99:83:46:67:8d:84:11:42:48:11: 8d:73:ba:2a:04:43:4d:26:a7:8d:a3:cc:fc:33:94: c9:75:bd:3f:66:95:a5:dd:d7:d6:5c:33:f0:e6:58: 8b:cd:63:7b:6f:aa:52:a4:71:68:88:48:61:71:0b: 8e:00:24:6a:51:9d:0c:64:fa:03:aa:6b:67:14:45: cb:36:87:a0:e0:89:66:b6:7e:33:e7:d5:b9:52:7f: 32:52:2a:57:73:28:4a:b9:2c:2d:ae:af:30:16:ce: a9:7b:bf:39:72:e6:39:54:3d:fa:d2:f0:96:12:7c: fe:0a:41:05:74:0d:95:33:3c:47:d0:bf:e7:6c:3d: 09:05:ab:7c:43:d5:61:d2:a0:46:e3:4a:ff:4c:c2: 4b:b6:46:6f:05:32:8e:80:50:a9:47:3d:72:f2:3b: 04:b6:66:8c:90:54:17:14:88:e7:fe:dc:9d:22:18: 58:da:8b:f2:01:56:39:8e:5c:6b:1b:1b:0b:10:09: fe:77:dc:b0:7b:ff:5e:ad:64:f0:14:c5:72:be:69: 5f:8d:ea:0b:df:2b:10:a9:7f:af:02:b5:d3:6a:26: 0b:16:fe:1b:2f:7d:5f:37:e2:34:e4:93:ec:26:16: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6A:31:28:C6:F8:0B:BE:81:99:52:4C:C3:F6:0D:8A:9F:C6:4D:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88e60927-76e0-4587-a9cb-c00951418852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:c040::/46 Signature Algorithm: sha256WithRSAEncryption 24:ac:b2:30:f9:81:b8:0b:bc:dc:d3:dd:f9:f5:12:b3:7c:71: 89:2e:1d:fb:ab:7b:71:3b:2f:85:b4:bd:f5:a8:db:0f:af:5f: f6:d5:27:a8:6e:7b:4d:c9:5d:6c:ea:c1:3b:48:e2:d6:a2:a8: ec:30:12:07:9a:aa:84:e0:f1:bb:09:4f:5a:4a:00:36:b1:6f: 87:40:1e:6a:e8:d3:0e:bb:d9:82:93:74:5b:4a:0a:5d:a2:88: 08:76:65:89:2e:55:70:4d:83:ac:5d:e8:20:52:be:34:2f:d7: d7:b5:98:3c:22:f0:f0:24:08:06:6c:90:07:8e:49:1c:21:8e: 44:cd:43:84:14:ad:8b:2a:21:80:4f:fc:5b:9c:5e:64:94:12: 72:d2:a8:ed:6b:89:8d:11:ee:28:a3:f2:21:be:13:13:fa:f4: a7:f8:71:63:f2:c5:69:17:e5:e8:47:94:f3:5b:4d:08:29:8e: c0:3d:e0:f8:ef:ec:7a:6b:b5:dd:09:3a:62:39:89:d2:56:de: 8d:25:99:38:fd:cf:f9:11:7f:9f:f9:73:0a:9f:4f:e8:c8:80: c9:6f:96:95:f0:d6:40:7c:5a:54:13:ad:db:25:b6:32:84:8c: b9:40:fe:f8:9f:a5:8e:11:5c:5f:4d:00:c4:34:69:b7:76:1a: 19:c8:7f:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYeT6hom/3NLS0eTk8GJXMCOMHXwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTYzMDE4WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTAzOTc1NzBkZmM3YzcxZGRjOTMyNWUzNWZiZjgwMGU1 NTUyMzUwODU0NjlmMTkzNDg0YmZmOTdiNjQ4YzhjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9hwtP7Pq02ImlXADmE3+8LgFBmYNGZ42EEUJIEY1zuioE Q00mp42jzPwzlMl1vT9mlaXd19ZcM/DmWIvNY3tvqlKkcWiISGFxC44AJGpRnQxk +gOqa2cURcs2h6DgiWa2fjPn1blSfzJSKldzKEq5LC2urzAWzql7vzly5jlUPfrS 8JYSfP4KQQV0DZUzPEfQv+dsPQkFq3xD1WHSoEbjSv9Mwku2Rm8FMo6AUKlHPXLy OwS2ZoyQVBcUiOf+3J0iGFjai/IBVjmOXGsbGwsQCf533LB7/16tZPAUxXK+aV+N 6gvfKxCpf68CtdNqJgsW/hsvfV834jTkk+wmFm2vAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUS2oxKMb4C76BmVJMw/YNip/GTZowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg4ZTYwOTI3LTc2ZTAtNDU4Ny1hOWNiLWMwMDk1MTQxODg1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3wEAwDQYJKoZIhvcNAQELBQADggEBACSssjD5gbgLvNzT3fn1ErN8 cYkuHfure3E7L4W0vfWo2w+vX/bVJ6hue03JXWzqwTtI4taiqOwwEgeaqoTg8bsJ T1pKADaxb4dAHmro0w672YKTdFtKCl2iiAh2ZYkuVXBNg6xd6CBSvjQv19e1mDwi 8PAkCAZskAeOSRwhjkTNQ4QUrYsqIYBP/FucXmSUEnLSqO1riY0R7iij8iG+ExP6 9Kf4cWPyxWkX5ehHlPNbTQgpjsA94Pjv7Hprtd0JOmI5idJW3o0lmTj9z/kRf5/5 cwqfT+jIgMlvlpXw1kB8WlQTrdsltjKEjLlA/vifpY4RXF9NAMQ0abd2GhnIf/Q= -----END CERTIFICATE-----Generated at Sun Jun 1 05:30:30 2025 by rpki-client