$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b35e1422-797a-49b6-b1f5-bf9b752403e2.roa File: b35e1422-797a-49b6-b1f5-bf9b752403e2.roa (raw, json) Hash identifier: bPcn6GJuAxK+/vujBpiH8jLy+Yriw7Qf7G2zcaiQIEA= Subject key identifier: A4:2A:2E:A8:8F:D6:04:7D:0B:3C:F9:6B:8C:ED:02:D3:59:BE:75:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4B583EBEBB15D4B748EA46E95E97EC2D113838CE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b35e1422-797a-49b6-b1f5-bf9b752403e2.roa Signing time: Fri 16 May 2025 16:30:54 +0000 ROA not before: Fri 16 May 2025 16:30:54 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:5040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:58:3e:be:bb:15:d4:b7:48:ea:46:e9:5e:97:ec:2d:11:38:38:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 16:30:54 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=1aff678d017054db2801e82e66365f095b9cb590b5b1ea8dcda999f5a264abe6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:41:38:b4:f0:34:af:9d:19:c0:1a:c0:48: 23:0f:dc:cb:b9:94:30:e2:a0:12:c0:30:61:2a:b2: 67:16:0d:0b:b8:72:35:55:f0:33:6c:25:75:3f:74: 62:45:ac:15:62:46:22:d7:83:43:6b:cb:91:d2:ee: e8:39:f2:14:ac:24:02:da:4f:ee:9c:de:e7:15:18: 33:83:18:e3:0a:2c:39:c3:78:ac:e6:81:47:c4:17: 13:ab:57:db:3b:2b:94:d1:10:98:1d:61:6e:19:b5: cf:85:5d:ee:e6:90:f7:b0:17:bc:bf:a2:6e:ef:3b: bb:bf:d8:7d:5e:d5:75:eb:f2:af:d7:81:cc:9b:ec: a5:5b:6c:dd:c0:9f:cb:cb:b8:96:81:e0:a6:47:00: 7a:ae:5f:9c:a3:80:77:72:83:71:18:3b:97:ad:33: 4b:2b:ef:fb:86:bc:73:ff:07:ef:cd:5a:5d:7b:87: 45:2c:80:ac:8d:55:f7:fc:03:c4:5e:7a:f4:4a:00: 22:57:2b:b7:04:7e:7f:ef:c7:a2:9f:10:f0:5b:40: 12:70:e0:57:0c:b5:34:6a:8c:d8:22:c7:57:06:6e: 42:63:d8:01:00:5e:2d:81:cb:52:9b:db:ea:e7:31: a1:44:3f:b2:58:71:9e:0f:72:b3:04:42:f0:27:0e: 06:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2A:2E:A8:8F:D6:04:7D:0B:3C:F9:6B:8C:ED:02:D3:59:BE:75:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b35e1422-797a-49b6-b1f5-bf9b752403e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:5040::/48 Signature Algorithm: sha256WithRSAEncryption 37:11:3e:2e:95:35:4f:d6:f2:a6:ac:06:9e:5c:a4:10:45:92: 61:23:76:b5:6a:32:c3:60:1d:7d:c3:16:39:93:c5:c8:55:71: 24:33:82:11:2f:71:9e:20:c3:4a:1a:c8:05:9f:b0:7a:d8:c5: 96:8f:14:66:1b:66:d5:49:76:d8:2f:27:74:1d:7d:5b:3a:34: c5:3a:eb:d4:14:54:27:ad:60:70:30:4b:41:98:f4:79:41:26: 96:ff:21:11:1c:35:97:f6:1c:8e:2d:74:d1:e5:22:82:f7:85: e3:4a:3a:bf:a3:59:f8:4e:e8:02:b9:9d:3b:01:b5:de:4c:70: 70:92:a6:d6:fd:21:e0:a1:88:91:00:dc:55:58:0b:d3:17:a7: 1e:d0:72:f1:65:57:4b:ab:09:64:1e:b5:a1:0c:c4:ee:a5:5b: 0b:b4:6e:2d:29:77:54:06:6f:af:73:ef:f2:fe:0e:e5:53:c2: 96:d1:06:e4:95:f3:0a:de:fa:c2:e1:19:ce:75:5c:73:f5:bb: 15:f3:6e:05:e4:a8:a7:b0:bf:c6:b2:99:9e:22:77:f7:1b:e1: ad:86:2f:76:2a:ad:7b:4e:21:3e:03:9d:8a:e0:83:8b:a6:2f: 01:b7:6d:5a:5a:58:c9:a3:67:ed:e7:0a:be:62:ee:d1:62:fa: 8e:9d:8b:f0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUS1g+vrsV1LdI6kbpXpfsLRE4OM4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTYzMDU0WhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYWZmNjc4ZDAxNzA1NGRiMjgwMWU4MmU2NjM2NWYwOTVi OWNiNTkwYjViMWVhOGRjZGE5OTlmNWEyNjRhYmU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1wkE4tPA0r50ZwBrASCMP3Mu5lDDioBLAMGEqsmcWDQu4 cjVV8DNsJXU/dGJFrBViRiLXg0Nry5HS7ug58hSsJALaT+6c3ucVGDODGOMKLDnD eKzmgUfEFxOrV9s7K5TREJgdYW4Ztc+FXe7mkPewF7y/om7vO7u/2H1e1XXr8q/X gcyb7KVbbN3An8vLuJaB4KZHAHquX5yjgHdyg3EYO5etM0sr7/uGvHP/B+/NWl17 h0UsgKyNVff8A8ReevRKACJXK7cEfn/vx6KfEPBbQBJw4FcMtTRqjNgix1cGbkJj 2AEAXi2By1Kb2+rnMaFEP7JYcZ4PcrMEQvAnDgaFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpCouqI/WBH0LPPlrjO0C01m+dbQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzNWUxNDIyLTc5N2EtNDliNi1iMWY1LWJmOWI3NTI0MDNlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84UEAwDQYJKoZIhvcNAQELBQADggEBADcRPi6VNU/W8qasBp5cpBBF kmEjdrVqMsNgHX3DFjmTxchVcSQzghEvcZ4gw0oayAWfsHrYxZaPFGYbZtVJdtgv J3QdfVs6NMU669QUVCetYHAwS0GY9HlBJpb/IREcNZf2HI4tdNHlIoL3heNKOr+j WfhO6AK5nTsBtd5McHCSptb9IeChiJEA3FVYC9MXpx7QcvFlV0urCWQetaEMxO6l Wwu0bi0pd1QGb69z7/L+DuVTwpbRBuSV8wre+sLhGc51XHP1uxXzbgXkqKewv8ay mZ4id/cb4a2GL3YqrXtOIT4DnYrgg4umLwG3bVpaWMmjZ+3nCr5i7tFi+o6di/A= -----END CERTIFICATE-----Generated at Sun Jun 1 04:38:21 2025 by rpki-client