$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bfcd23b-ba2a-4567-a170-41cef08a2a1d.roa File: 8bfcd23b-ba2a-4567-a170-41cef08a2a1d.roa (raw, json) Hash identifier: hmVzNi00SbRDKyGQZuRmET42HY1eUKllzv7n5W37oug= Subject key identifier: B0:81:2F:4E:00:EF:E4:14:B1:FF:61:33:08:E4:71:F8:0B:A4:95:B7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4991FAA29535E025D2553771C3F47CA47DBC046F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bfcd23b-ba2a-4567-a170-41cef08a2a1d.roa Signing time: Fri 16 May 2025 17:11:47 +0000 ROA not before: Fri 16 May 2025 17:11:47 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:91:fa:a2:95:35:e0:25:d2:55:37:71:c3:f4:7c:a4:7d:bc:04:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 17:11:47 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=a4824a23921230ba3cec2181ef535838161e32581ca729d91fd4516e213eb725, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f2:12:00:1b:2b:0a:fa:fc:b5:35:26:01:87: 18:2c:46:df:bf:b5:27:37:6d:09:1b:67:ef:16:4b: 34:d6:92:90:c8:7b:b0:5d:f3:fc:10:cf:5e:e6:f8: 33:e5:ce:ff:c2:78:30:45:36:a0:10:9f:3c:d1:b8: b4:b6:5b:ed:7d:a9:7e:44:67:13:51:10:e0:08:80: 61:89:15:84:8a:49:52:bf:4e:c1:64:38:41:08:5d: db:c7:6b:53:f7:fd:a3:2d:a6:c3:fe:ab:c1:85:57: f9:99:6c:1b:70:fc:3c:98:55:8f:b3:99:04:66:16: ad:69:d0:75:6a:6d:bc:08:18:77:86:02:63:95:a1: ee:46:d5:69:a2:c8:0f:01:6a:df:cb:46:35:87:f3: 09:e4:47:27:18:04:74:7c:0f:3d:8e:f9:80:f7:0b: cf:3a:74:31:bb:39:9e:42:0b:05:38:f1:8e:a8:dc: 0b:5e:10:98:b1:54:db:05:37:5e:fd:4f:4c:3e:f9: 07:c2:2e:73:1a:4e:5e:3c:ff:92:97:14:5d:a8:44: 0b:5d:05:f7:e1:89:c2:24:85:5a:61:57:0e:b2:56: cc:2d:12:28:04:af:69:e1:70:10:9f:10:c0:f1:f3: 6f:4e:f8:7c:c1:b5:46:90:0f:7a:f7:17:cb:fb:5e: 68:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:81:2F:4E:00:EF:E4:14:B1:FF:61:33:08:E4:71:F8:0B:A4:95:B7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bfcd23b-ba2a-4567-a170-41cef08a2a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 8a:3f:24:36:80:25:0e:01:03:c2:91:71:d2:f0:ef:3b:24:49: 68:a8:94:70:14:84:6a:28:e3:ca:67:c0:d8:49:1d:10:87:9f: 22:5d:13:7b:4f:4a:b1:bd:02:79:48:c4:ee:87:22:36:aa:3a: 13:8c:15:1d:cc:34:a8:a8:37:41:99:8c:47:73:12:0a:9e:2b: ab:42:49:41:f8:d5:18:55:5c:71:d3:07:7a:a9:1e:ee:b8:7d: 5a:b1:6c:84:14:f3:e5:9b:37:f7:80:a0:41:de:a7:55:a7:ad: 5b:dc:af:37:5e:68:6c:57:5e:82:37:5c:73:5f:39:9a:73:7d: 81:61:ee:12:b2:1a:aa:6e:0a:87:a9:98:d6:1a:83:ff:a5:68: 33:f4:95:07:99:02:ea:44:d6:ae:1e:3f:0e:54:ea:49:a3:6c: 4d:af:9c:de:10:3b:e2:30:73:7e:e9:db:2c:a5:04:d7:47:d7: cc:a0:e2:0b:e8:a0:59:c7:97:66:c1:d6:b5:12:4f:c9:5e:68: 4d:85:ea:52:64:6b:6f:f0:09:f0:f8:4f:91:a2:62:32:f4:82: 10:6d:3a:aa:a7:28:ad:42:7b:6e:88:3d:07:41:50:0b:80:87: 6f:66:5d:57:25:cc:3a:13:f5:8a:68:19:0e:c4:b2:f3:07:84: 4f:7c:3b:83 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSZH6opU14CXSVTdxw/R8pH28BG8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTcxMTQ3WhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDgyNGEyMzkyMTIzMGJhM2NlYzIxODFlZjUzNTgzODE2 MWUzMjU4MWNhNzI5ZDkxZmQ0NTE2ZTIxM2ViNzI1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC28hIAGysK+vy1NSYBhxgsRt+/tSc3bQkbZ+8WSzTWkpDI e7Bd8/wQz17m+DPlzv/CeDBFNqAQnzzRuLS2W+19qX5EZxNREOAIgGGJFYSKSVK/ TsFkOEEIXdvHa1P3/aMtpsP+q8GFV/mZbBtw/DyYVY+zmQRmFq1p0HVqbbwIGHeG AmOVoe5G1WmiyA8Bat/LRjWH8wnkRycYBHR8Dz2O+YD3C886dDG7OZ5CCwU48Y6o 3AteEJixVNsFN179T0w++QfCLnMaTl48/5KXFF2oRAtdBffhicIkhVphVw6yVswt EigEr2nhcBCfEMDx829O+HzBtUaQD3r3F8v7XmjRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsIEvTgDv5BSx/2EzCORx+AuklbcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiZmNkMjNiLWJhMmEtNDU2Ny1hMTcwLTQxY2VmMDhhMmExZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/0EMAwDQYJKoZIhvcNAQELBQADggEBAIo/JDaAJQ4BA8KRcdLw7zsk SWiolHAUhGoo48pnwNhJHRCHnyJdE3tPSrG9AnlIxO6HIjaqOhOMFR3MNKioN0GZ jEdzEgqeK6tCSUH41RhVXHHTB3qpHu64fVqxbIQU8+WbN/eAoEHep1WnrVvcrzde aGxXXoI3XHNfOZpzfYFh7hKyGqpuCoepmNYag/+laDP0lQeZAupE1q4ePw5U6kmj bE2vnN4QO+Iwc37p2yylBNdH18yg4gvooFnHl2bB1rUST8leaE2F6lJka2/wCfD4 T5GiYjL0ghBtOqqnKK1Ce26IPQdBUAuAh29mXVclzDoT9YpoGQ7EsvMHhE98O4M= -----END CERTIFICATE-----Generated at Sun Jun 1 04:39:22 2025 by rpki-client