$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d0e00f9-4fe7-42f8-b3f5-8a7ff43c5e5d.roa File: 9d0e00f9-4fe7-42f8-b3f5-8a7ff43c5e5d.roa (raw, json) Hash identifier: ti8oL6EBs+fj1bAxJCnhbVzMHe5p6JcLcNWYe4T5eN4= Subject key identifier: 77:8D:05:2C:99:7E:B0:C8:B6:50:2E:9A:6F:B9:11:5D:AF:18:CB:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E7300CC13F14370AB50DA7D782D78EF099149BF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d0e00f9-4fe7-42f8-b3f5-8a7ff43c5e5d.roa Signing time: Sat 17 May 2025 00:21:13 +0000 ROA not before: Sat 17 May 2025 00:21:13 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:73:00:cc:13:f1:43:70:ab:50:da:7d:78:2d:78:ef:09:91:49:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:21:13 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=bf03aadbf48a354405549a17105cd817713a192573e0357d2952545eff311202, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:c6:34:17:77:ac:b7:d4:1a:30:d8:7f:b6: a0:1e:e1:f4:f5:b2:72:a9:10:78:f1:0a:17:37:fe: ef:03:d2:ed:67:f9:b2:57:37:50:cc:e8:e6:b6:95: 2d:26:c5:c1:78:08:67:71:4c:78:c7:f5:fb:5d:8d: 7e:0a:58:ec:0c:de:18:ae:a1:db:9f:a6:68:24:b8: 34:c5:86:bf:86:4f:76:b6:fd:a8:75:10:dc:de:7a: a2:e9:f1:7b:b2:f4:7c:01:f1:20:c6:37:77:b2:d1: 36:39:09:b2:7a:ec:6a:d8:6f:61:82:06:5d:31:6e: a1:37:ed:6d:9e:c9:7a:29:f8:d6:9b:1c:f9:fc:ec: 99:14:27:d0:c1:c9:8f:96:7c:da:13:04:ad:b1:39: 95:4e:38:45:fa:f4:5e:57:18:e3:00:0c:34:15:c5: 31:d0:61:e2:e7:5b:ec:02:2f:4a:a3:62:b0:04:44: 9d:a6:15:c6:80:c8:34:03:88:41:6e:ca:8b:95:2f: 66:21:4f:2e:cc:30:f5:1b:67:87:46:4e:d3:ff:2e: 94:91:7f:22:23:91:8a:e7:be:41:d4:f2:2f:0e:ad: 3d:64:7a:20:72:ae:5d:80:d5:3f:3d:ad:4d:36:b5: 93:4a:aa:86:f5:3d:f5:d1:78:09:55:79:f0:42:98: 25:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8D:05:2C:99:7E:B0:C8:B6:50:2E:9A:6F:B9:11:5D:AF:18:CB:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d0e00f9-4fe7-42f8-b3f5-8a7ff43c5e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:1040::/48 Signature Algorithm: sha256WithRSAEncryption 6f:b3:86:80:51:8e:20:04:ea:f1:38:4f:b9:5b:9c:82:e0:43: 30:d1:ee:40:ef:0b:88:e7:7d:6a:00:ae:47:d0:37:a1:a3:80: c8:e1:79:08:c6:4f:40:ae:25:4f:9f:9f:df:30:bc:f0:3b:1f: 5d:10:4a:0d:62:26:c7:54:2e:f6:ad:c6:51:e4:21:22:b6:b6: 74:20:46:87:fb:d3:1f:ed:c1:53:ce:0c:20:1a:ec:a1:fb:c5: 3b:1e:b3:09:5d:b6:b5:85:b8:99:cc:7b:db:b5:52:b4:85:ea: 73:93:7b:24:14:84:3e:7c:a9:a0:ba:54:8e:69:0c:29:22:37: 08:87:ea:1e:c9:bb:4a:c7:ae:aa:5a:82:91:f5:73:56:7f:9b: e2:ea:cb:9a:de:7a:08:18:07:c9:ee:f3:73:39:b5:3b:15:96: 0b:57:f3:ac:f9:29:f8:70:c6:ee:60:6d:44:c4:41:d9:a0:c8: fd:30:0f:f6:45:10:be:90:44:7f:40:1a:3c:d1:8f:c5:1c:9a: fe:d7:27:31:15:bc:5f:a1:20:59:10:43:96:df:8c:6e:72:47: d2:b8:ae:32:0e:55:7c:8c:45:24:33:d7:c8:11:a1:5d:da:50: 96:64:28:56:6d:de:83:8a:6d:53:84:2d:b2:ba:c5:cd:81:4e: 9a:40:7a:d4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULnMAzBPxQ3CrUNp9eC147wmRSb8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDAyMTEzWhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjAzYWFkYmY0OGEzNTQ0MDU1NDlhMTcxMDVjZDgxNzcx M2ExOTI1NzNlMDM1N2QyOTUyNTQ1ZWZmMzExMjAyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/0cY0F3est9QaMNh/tqAe4fT1snKpEHjxChc3/u8D0u1n +bJXN1DM6Oa2lS0mxcF4CGdxTHjH9ftdjX4KWOwM3hiuodufpmgkuDTFhr+GT3a2 /ah1ENzeeqLp8Xuy9HwB8SDGN3ey0TY5CbJ67GrYb2GCBl0xbqE37W2eyXop+Nab HPn87JkUJ9DByY+WfNoTBK2xOZVOOEX69F5XGOMADDQVxTHQYeLnW+wCL0qjYrAE RJ2mFcaAyDQDiEFuyouVL2YhTy7MMPUbZ4dGTtP/LpSRfyIjkYrnvkHU8i8OrT1k eiByrl2A1T89rU02tZNKqob1PfXReAlVefBCmCVfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUd40FLJl+sMi2UC6ab7kRXa8Yy9AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlkMGUwMGY5LTRmZTctNDJmOC1iM2Y1LThhN2ZmNDNjNWU1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AEEAwDQYJKoZIhvcNAQELBQADggEBAG+zhoBRjiAE6vE4T7lbnILg QzDR7kDvC4jnfWoArkfQN6GjgMjheQjGT0CuJU+fn98wvPA7H10QSg1iJsdULvat xlHkISK2tnQgRof70x/twVPODCAa7KH7xTseswldtrWFuJnMe9u1UrSF6nOTeyQU hD58qaC6VI5pDCkiNwiH6h7Ju0rHrqpagpH1c1Z/m+Lqy5reeggYB8nu83M5tTsV lgtX86z5Kfhwxu5gbUTEQdmgyP0wD/ZFEL6QRH9AGjzRj8Ucmv7XJzEVvF+hIFkQ Q5bfjG5yR9K4rjIOVXyMRSQz18gRoV3aUJZkKFZt3oOKbVOELbK6xc2BTppAetQ= -----END CERTIFICATE-----Generated at Sun Jun 1 04:22:38 2025 by rpki-client