$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b588cfa2-f60b-46f7-9f9a-af276c1edc37.roa File: b588cfa2-f60b-46f7-9f9a-af276c1edc37.roa (raw, json) Hash identifier: 7rAN4ohvXTLh7GxINPbhGh+ci+0ln0LuaI2dcZx5QVU= Subject key identifier: 0C:D9:CB:05:76:11:E6:33:02:4F:C8:70:9B:28:B3:14:27:05:FA:9A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 62016838F89C0195850E2050058295EBD2F8E942 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b588cfa2-f60b-46f7-9f9a-af276c1edc37.roa Signing time: Fri 23 May 2025 00:21:32 +0000 ROA not before: Fri 23 May 2025 00:21:32 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fef:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:01:68:38:f8:9c:01:95:85:0e:20:50:05:82:95:eb:d2:f8:e9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 23 00:21:32 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=66b107bbad5ee0c82e2a47530a535d3dd03696e492458d5fa5096555ebe9b491, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:a4:29:fb:c6:14:7a:d2:f6:21:8d:b7:62: 86:bc:20:9c:9f:2b:fb:6c:95:f9:4b:a8:3f:50:71: e7:94:52:59:0d:3e:ef:0c:d7:aa:69:86:31:ff:26: eb:d0:be:fc:b4:9a:89:99:77:73:13:b5:74:bf:38: b4:78:05:67:05:d6:a0:22:97:1e:34:25:f0:b3:76: 94:ce:8e:90:2f:9a:3c:c0:eb:4d:96:b0:fb:f7:db: 3f:11:8b:1c:40:02:5d:8a:c0:55:f7:54:8f:ec:13: b6:35:ce:d6:e9:17:27:8d:ce:f0:bd:57:a8:bb:43: d8:ad:5e:09:c5:a6:ea:f7:21:bc:d8:5c:82:91:80: e7:08:fe:7e:c7:46:b3:60:83:9b:17:5a:6f:bd:96: af:22:b5:85:5b:15:6b:8e:08:f0:90:f2:e4:59:db: ff:82:6b:83:4e:d8:02:5c:7f:f1:77:43:97:bb:9f: 11:83:75:64:23:91:b7:b4:8e:87:6e:33:f8:89:91: 25:13:31:21:20:00:ce:e4:51:c7:05:e4:b4:cb:8d: 34:f2:c6:19:1c:28:5f:47:cf:af:d1:bb:bc:b4:15: 5a:cb:e3:57:1e:fe:33:b1:83:d7:38:86:7a:50:b8: 09:63:9c:f6:30:a9:a6:97:69:04:7d:8b:95:7c:16: 38:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D9:CB:05:76:11:E6:33:02:4F:C8:70:9B:28:B3:14:27:05:FA:9A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b588cfa2-f60b-46f7-9f9a-af276c1edc37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:2000::/40 Signature Algorithm: sha256WithRSAEncryption 5f:b3:fd:50:d6:0f:6e:81:23:0a:3d:35:3e:4c:47:0f:37:03: dd:2a:9b:7d:0b:db:24:46:41:fe:c5:e4:d1:19:59:16:c1:2e: d5:ea:cb:10:0a:b2:2a:57:a7:94:e2:16:89:9e:54:92:ac:17: c8:32:57:80:9a:a2:f9:44:8c:e3:4c:f4:0a:20:41:c0:8b:85: ec:3e:ba:c4:8f:38:da:5c:b8:dc:ac:7a:9e:a7:c6:3e:85:bc: c8:85:e5:dd:23:b2:46:0e:86:49:68:74:30:16:8d:39:dc:59: b3:f3:6d:61:c0:39:d1:b7:09:ae:8b:c7:19:e8:a4:b5:c0:82: 8e:83:de:2f:56:ed:fb:5a:b7:13:31:30:a0:13:80:f8:4a:b2: 93:8e:7b:17:51:7b:1b:17:67:d0:39:d9:f3:28:45:1b:21:65: 60:dd:97:21:30:13:29:5e:6f:c3:a1:5e:16:54:0b:64:12:5a: 8a:44:75:57:8a:46:ff:93:3b:08:ca:f4:10:c2:12:91:07:9e: 38:1e:cb:47:59:e3:de:aa:2d:a1:15:95:bf:32:23:4e:a2:01: 30:f2:ba:a5:4d:87:dd:b7:0c:2a:e3:c9:62:3a:5c:90:02:ed: d2:76:94:14:0a:e2:5b:83:44:e2:28:bc:64:c4:89:31:02:62: 55:d0:f0:bf -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYgFoOPicAZWFDiBQBYKV69L46UIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIzMDAyMTMyWhcNMjUwNjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmIxMDdiYmFkNWVlMGM4MmUyYTQ3NTMwYTUzNWQzZGQw MzY5NmU0OTI0NThkNWZhNTA5NjU1NWViZTliNDkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmv6Qp+8YUetL2IY23Yoa8IJyfK/tslflLqD9QceeUUlkN Pu8M16pphjH/JuvQvvy0momZd3MTtXS/OLR4BWcF1qAilx40JfCzdpTOjpAvmjzA 602WsPv32z8RixxAAl2KwFX3VI/sE7Y1ztbpFyeNzvC9V6i7Q9itXgnFpur3IbzY XIKRgOcI/n7HRrNgg5sXWm+9lq8itYVbFWuOCPCQ8uRZ2/+Ca4NO2AJcf/F3Q5e7 nxGDdWQjkbe0joduM/iJkSUTMSEgAM7kUccF5LTLjTTyxhkcKF9Hz6/Ru7y0FVrL 41ce/jOxg9c4hnpQuAljnPYwqaaXaQR9i5V8FjjfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUDNnLBXYR5jMCT8hwmyizFCcF+powHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I1ODhjZmEyLWY2MGItNDZmNy05ZjlhLWFmMjc2YzFlZGMzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vIDANBgkqhkiG9w0BAQsFAAOCAQEAX7P9UNYPboEjCj01PkxHDzcD 3SqbfQvbJEZB/sXk0RlZFsEu1erLEAqyKlenlOIWiZ5UkqwXyDJXgJqi+USM40z0 CiBBwIuF7D66xI842ly43Kx6nqfGPoW8yIXl3SOyRg6GSWh0MBaNOdxZs/NtYcA5 0bcJrovHGeiktcCCjoPeL1bt+1q3EzEwoBOA+Eqyk457F1F7Gxdn0DnZ8yhFGyFl YN2XITATKV5vw6FeFlQLZBJaikR1V4pG/5M7CMr0EMISkQeeOB7LR1nj3qotoRWV vzIjTqIBMPK6pU2H3bcMKuPJYjpckALt0naUFAriW4NE4ii8ZMSJMQJiVdDwvw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:46:55 2025 by rpki-client