$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aaf7d9e0-ff4b-4d48-91da-02c8965c2bdb.roa File: aaf7d9e0-ff4b-4d48-91da-02c8965c2bdb.roa (raw, json) Hash identifier: Tcs7ac+gF+SKiJljpF/VGMagWSe0MSMpfjiSgQqoPsc= Subject key identifier: 62:43:EF:A8:5E:FB:EF:F4:6B:6A:C6:08:DB:4D:FC:0A:CF:22:DC:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D1A6B63E7E11BE249F5CDA363D6CA8EBBEF4B27 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aaf7d9e0-ff4b-4d48-91da-02c8965c2bdb.roa Signing time: Mon 19 May 2025 15:41:22 +0000 ROA not before: Mon 19 May 2025 15:41:22 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1a:6b:63:e7:e1:1b:e2:49:f5:cd:a3:63:d6:ca:8e:bb:ef:4b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 15:41:22 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=4629e7813b99abbce6fab2bef2bfaf4c1cb7e2f0c552dad018c04b78ac04d41f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e5:92:57:0c:b7:5c:11:91:ac:fb:15:e8:31: 89:16:4f:ab:7d:8f:ae:e8:09:b0:1f:ea:8c:cc:7a: ec:36:64:1a:61:85:df:29:bb:75:de:35:3b:c2:d0: 59:34:3b:05:cb:52:c6:4f:fa:9b:1b:a1:fc:45:24: 01:fc:62:c2:78:b6:54:72:86:ce:56:32:5a:b2:bc: 16:43:7c:62:43:0a:c1:74:44:f3:4a:12:33:da:03: b9:19:9d:dd:1b:09:c0:74:55:ad:90:cd:7d:62:e2: 0a:cd:22:64:d7:10:fb:cd:f9:ac:fd:0a:df:30:5a: f9:51:0a:27:da:ca:16:20:06:8d:40:00:e6:70:a2: e3:65:07:85:bb:4a:f6:4b:19:73:3a:3c:b1:63:e5: 14:6d:72:c0:68:a0:80:90:4d:2d:47:bf:39:c5:bb: e7:bb:d3:3a:89:fd:74:c8:90:0f:f5:f6:de:52:28: c9:4a:09:a9:53:41:1e:52:e0:2a:a8:18:fc:49:ba: 7f:84:75:0b:f0:2b:ca:23:42:41:cb:17:21:bd:b3: 87:ba:cd:cb:4b:eb:b7:b4:15:5a:de:4b:04:37:a1: e6:b7:a0:b6:b3:5b:a5:22:dd:15:a6:99:16:ab:0f: 14:e8:fa:78:f2:41:a2:59:53:7f:46:b3:90:25:67: 9c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:43:EF:A8:5E:FB:EF:F4:6B:6A:C6:08:DB:4D:FC:0A:CF:22:DC:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aaf7d9e0-ff4b-4d48-91da-02c8965c2bdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:1080::/48 Signature Algorithm: sha256WithRSAEncryption 28:5b:19:e0:6a:0d:6b:5c:5b:7a:33:e4:01:6e:3c:73:18:d2: 8b:37:dc:e8:6e:2e:b1:3c:e5:9c:06:d0:54:4d:cc:fb:6a:fa: 72:22:74:18:37:78:3f:80:d9:e3:7c:ec:3d:c1:5d:6c:8e:cb: ae:51:a7:f9:32:19:78:05:57:5d:bc:6d:f3:63:33:e7:3d:28: f7:e0:17:57:31:ff:28:f8:4e:c7:09:37:40:74:d2:2d:a9:17: 02:61:3c:88:17:b5:4a:99:70:79:a5:bd:15:43:02:7c:de:52: c4:7c:f6:9f:27:a3:e7:09:24:2b:81:ce:fc:24:18:db:27:2d: 6b:16:86:a1:62:75:43:56:7e:8c:19:d4:f9:56:10:59:3e:76: 3e:6c:5d:2a:09:f7:e3:31:3e:2c:1d:84:56:b1:94:fe:8c:4f: f6:b1:5d:53:e2:2c:d8:aa:0d:6c:0f:3b:42:c9:61:ff:f5:7b: 51:f5:63:12:a0:5f:83:32:ce:d8:2c:e1:3e:d4:5a:fe:51:ee: 14:42:d0:5a:0c:dc:91:81:7d:52:04:ca:1a:4c:f6:4f:e8:01: 0d:f0:0a:c8:ef:6d:e4:36:63:f0:f2:b1:18:73:dc:c4:07:e8: 92:b4:d4:30:71:a3:50:04:b9:bc:af:72:86:1a:05:f1:b1:5e: b2:d6:54:21 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHRprY+fhG+JJ9c2jY9bKjrvvSycwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTU0MTIyWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjI5ZTc4MTNiOTlhYmJjZTZmYWIyYmVmMmJmYWY0YzFj YjdlMmYwYzU1MmRhZDAxOGMwNGI3OGFjMDRkNDFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS5ZJXDLdcEZGs+xXoMYkWT6t9j67oCbAf6ozMeuw2ZBph hd8pu3XeNTvC0Fk0OwXLUsZP+psbofxFJAH8YsJ4tlRyhs5WMlqyvBZDfGJDCsF0 RPNKEjPaA7kZnd0bCcB0Va2QzX1i4grNImTXEPvN+az9Ct8wWvlRCifayhYgBo1A AOZwouNlB4W7SvZLGXM6PLFj5RRtcsBooICQTS1HvznFu+e70zqJ/XTIkA/19t5S KMlKCalTQR5S4CqoGPxJun+EdQvwK8ojQkHLFyG9s4e6zctL67e0FVreSwQ3oea3 oLazW6Ui3RWmmRarDxTo+njyQaJZU39Gs5AlZ5xlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYkPvqF777/RrasYI2038Cs8i3HwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhZjdkOWUwLWZmNGItNGQ0OC05MWRhLTAyYzg5NjVjMmJkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/0EIAwDQYJKoZIhvcNAQELBQADggEBAChbGeBqDWtcW3oz5AFuPHMY 0os33OhuLrE85ZwG0FRNzPtq+nIidBg3eD+A2eN87D3BXWyOy65Rp/kyGXgFV128 bfNjM+c9KPfgF1cx/yj4TscJN0B00i2pFwJhPIgXtUqZcHmlvRVDAnzeUsR89p8n o+cJJCuBzvwkGNsnLWsWhqFidUNWfowZ1PlWEFk+dj5sXSoJ9+MxPiwdhFaxlP6M T/axXVPiLNiqDWwPO0LJYf/1e1H1YxKgX4Myztgs4T7UWv5R7hRC0FoM3JGBfVIE yhpM9k/oAQ3wCsjvbeQ2Y/DysRhz3MQH6JK01DBxo1AEubyvcoYaBfGxXrLWVCE= -----END CERTIFICATE-----Generated at Sun Jun 1 05:04:10 2025 by rpki-client