$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa400fa5-7af4-49a1-a0c8-cf41ab563bca.roa File: aa400fa5-7af4-49a1-a0c8-cf41ab563bca.roa (raw, json) Hash identifier: I9PoeGZd9IC02g79/5HsIcbq/5QBGOdGjBXoJryeqWA= Subject key identifier: 0E:4D:31:5A:C3:C9:85:DF:31:A2:80:51:00:B4:5A:47:57:BF:AB:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 120743F972FB93B2B3A2BA3AD76EFECCB1356D17 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa400fa5-7af4-49a1-a0c8-cf41ab563bca.roa Signing time: Mon 19 May 2025 18:20:30 +0000 ROA not before: Mon 19 May 2025 18:20:30 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f2f:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:07:43:f9:72:fb:93:b2:b3:a2:ba:3a:d7:6e:fe:cc:b1:35:6d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:20:30 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=bf9718e582a48ccae6e5baee565e5b167023f72b10ff5737862c6a4ced399140, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:37:a1:16:52:38:1b:96:0b:ac:78:31:1d: 10:71:67:10:76:36:79:63:e1:a0:73:f5:b6:39:c6: fc:40:81:a7:d2:01:f5:64:45:27:16:18:c8:7d:cb: 84:47:97:06:42:c0:a2:e4:ce:c9:e8:f1:03:fe:23: 1b:cd:bb:df:51:3f:4b:67:c7:e8:75:97:ec:0e:bc: 69:d4:0a:de:f2:93:ba:62:a7:2b:f7:09:84:40:ad: d5:b1:9b:73:46:d6:f7:53:4e:77:2f:55:e3:dc:51: 01:3b:52:f9:47:92:5f:c9:c5:f8:59:cf:c5:55:80: ef:17:04:42:93:b1:36:71:6e:4c:70:10:e9:d5:25: 82:59:01:15:fa:45:b8:22:76:54:a4:8c:0d:fa:8d: 6c:b4:0f:08:2a:f0:8c:a1:a2:a9:d3:69:b8:67:c1: fa:26:d0:72:9e:e9:ff:12:08:fb:80:5e:02:34:38: 71:35:de:8c:b5:44:17:7e:a5:d4:38:49:b2:8e:18: 55:bd:79:d9:f2:9b:e7:d8:85:6a:2d:eb:04:8d:af: d2:31:bb:5a:4e:3d:16:06:a1:5c:26:81:7b:44:bb: 6d:2d:82:23:e0:50:aa:a8:25:39:89:97:1b:76:63: 0e:09:4c:1a:cf:65:3e:71:8d:84:e8:0a:7c:9c:b5: b7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4D:31:5A:C3:C9:85:DF:31:A2:80:51:00:B4:5A:47:57:BF:AB:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa400fa5-7af4-49a1-a0c8-cf41ab563bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2f:4000::/36 Signature Algorithm: sha256WithRSAEncryption 5a:4f:99:f6:13:68:05:2c:02:1d:84:a7:c6:42:e9:34:dc:85: 26:ab:8f:aa:55:1c:47:48:03:5c:8d:5a:93:38:d5:15:33:69: cf:c9:aa:be:ea:f0:46:54:0e:dd:fb:99:6a:21:b1:62:1a:07: ed:76:96:92:25:f0:d9:57:b1:f7:8b:31:3f:ac:f2:6f:a3:ee: af:a1:4c:3a:3a:7e:c5:31:17:b4:21:fe:85:a0:93:6e:5c:fd: c1:1e:17:0e:ac:54:23:0a:c4:29:b2:b6:ee:b9:0d:70:91:ef: 1f:18:ce:99:8a:9c:d2:a9:1a:12:2d:df:13:7b:41:c3:9f:57: d1:21:a6:f4:cb:5b:fd:62:1c:1d:db:49:b2:cf:02:36:74:c8: 6b:6f:bf:c8:4e:9f:62:06:c1:58:0d:34:72:e8:6d:9c:1b:0b: b5:d5:1b:3f:1b:1f:78:e0:0c:b7:a6:29:00:4f:2e:1b:85:d7: 78:d8:61:c0:ed:e2:2e:10:c7:f2:61:97:c5:5c:9c:68:8d:5a: 60:0a:5a:ce:ee:76:5b:f5:db:ab:68:c1:41:7f:53:23:49:0a: d4:c3:fe:b9:2f:ca:e6:bb:65:25:c9:00:a2:ad:f3:47:b1:d1: de:56:7c:57:90:c3:a3:06:52:14:89:00:c2:ef:18:84:bc:25: 64:50:6b:6b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEgdD+XL7k7Kzoro6127+zLE1bRcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgyMDMwWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjk3MThlNTgyYTQ4Y2NhZTZlNWJhZWU1NjVlNWIxNjcw MjNmNzJiMTBmZjU3Mzc4NjJjNmE0Y2VkMzk5MTQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy3DehFlI4G5YLrHgxHRBxZxB2Nnlj4aBz9bY5xvxAgafS AfVkRScWGMh9y4RHlwZCwKLkzsno8QP+IxvNu99RP0tnx+h1l+wOvGnUCt7yk7pi pyv3CYRArdWxm3NG1vdTTncvVePcUQE7UvlHkl/JxfhZz8VVgO8XBEKTsTZxbkxw EOnVJYJZARX6RbgidlSkjA36jWy0Dwgq8IyhoqnTabhnwfom0HKe6f8SCPuAXgI0 OHE13oy1RBd+pdQ4SbKOGFW9ednym+fYhWot6wSNr9Ixu1pOPRYGoVwmgXtEu20t giPgUKqoJTmJlxt2Yw4JTBrPZT5xjYToCnyctbcnAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUDk0xWsPJhd8xooBRALRaR1e/q3EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhNDAwZmE1LTdhZjQtNDlhMS1hMGM4LWNmNDFhYjU2M2JjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8vQDANBgkqhkiG9w0BAQsFAAOCAQEAWk+Z9hNoBSwCHYSnxkLpNNyF JquPqlUcR0gDXI1akzjVFTNpz8mqvurwRlQO3fuZaiGxYhoH7XaWkiXw2Vex94sx P6zyb6Pur6FMOjp+xTEXtCH+haCTblz9wR4XDqxUIwrEKbK27rkNcJHvHxjOmYqc 0qkaEi3fE3tBw59X0SGm9Mtb/WIcHdtJss8CNnTIa2+/yE6fYgbBWA00cuhtnBsL tdUbPxsfeOAMt6YpAE8uG4XXeNhhwO3iLhDH8mGXxVycaI1aYApazu52W/Xbq2jB QX9TI0kK1MP+uS/K5rtlJckAoq3zR7HR3lZ8V5DDowZSFIkAwu8YhLwlZFBraw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:26:02 2025 by rpki-client