$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd329a01-d801-4d55-bb04-128c81630812.roa File: cd329a01-d801-4d55-bb04-128c81630812.roa (raw, json) Hash identifier: mZIwhmyj+mgCvpH+vfftClx6F9I38Gu+IEK79siJE8Y= Subject key identifier: B1:3F:FC:B6:01:78:48:25:EB:77:92:EF:0A:D5:04:64:94:1F:E8:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 20D59B3D3EC61325E990108C04BDD84E775B85A4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd329a01-d801-4d55-bb04-128c81630812.roa Signing time: Mon 19 May 2025 17:51:25 +0000 ROA not before: Mon 19 May 2025 17:51:25 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f68:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d5:9b:3d:3e:c6:13:25:e9:90:10:8c:04:bd:d8:4e:77:5b:85:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 17:51:25 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=d698d5e3dc398dfb2d8fa9553aed2d02715ca66c4a90fb087a698f01cec87176, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:25:30:0d:e2:b9:70:6c:a5:10:19:31:57: 40:0e:ee:d5:3e:85:2b:30:59:57:2f:27:a6:20:2a: fd:e5:30:53:f4:19:07:93:65:97:d0:2f:b3:24:38: 06:30:10:a8:c8:ed:4e:19:b4:a2:2d:08:a2:93:e4: bc:25:e2:6b:a7:2a:2a:ab:ef:dd:ca:e6:4f:7b:88: 68:7b:75:3f:24:92:1b:8d:18:8d:b0:53:47:11:73: 4e:10:93:b7:8c:7e:d2:93:87:1d:f6:07:dc:7c:2d: ab:21:c5:66:6f:61:c9:17:33:9d:8b:58:f5:6d:db: 72:a2:9b:44:a5:2f:94:f7:3f:ee:82:23:20:93:c2: 87:da:1b:f6:ca:26:50:37:19:7b:80:4c:7e:4f:8d: 70:4c:17:36:09:46:e9:e1:67:a3:1d:a1:e2:fb:fe: 8c:13:59:62:c4:35:d8:fe:c6:4d:c6:35:bf:66:b5: 60:ec:09:7d:4f:08:7c:bc:bd:06:0a:c1:e5:d3:8d: 6e:82:92:c1:2a:58:5a:8c:4a:c3:b2:c0:02:b7:97: ff:6b:4f:6a:4f:e6:7c:0f:62:31:fe:b4:ef:9a:e9: 8c:e1:47:c2:4e:64:61:14:59:28:37:83:90:8f:f5: 54:10:ca:af:d5:db:d7:39:4d:cd:51:b7:b7:4d:18: 60:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3F:FC:B6:01:78:48:25:EB:77:92:EF:0A:D5:04:64:94:1F:E8:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd329a01-d801-4d55-bb04-128c81630812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:8000::/39 Signature Algorithm: sha256WithRSAEncryption 81:68:15:a7:1b:3c:da:16:93:62:26:ce:75:35:db:ed:c0:c2: f5:47:12:2e:e3:a0:8b:f1:15:c0:0c:fa:46:fd:69:56:20:4a: 4a:3c:cc:da:bb:94:58:55:4c:20:52:8f:28:b4:b6:71:34:2b: 7e:df:ef:44:fa:42:4a:56:18:db:bc:da:ab:5b:c4:9f:7f:6e: 2d:2a:0a:3a:ac:06:51:25:a0:bb:30:a0:a3:98:22:24:82:a7: 14:bf:2b:67:9f:ec:be:28:0e:bd:26:58:29:14:5c:dd:47:dd: 6d:34:9a:76:6d:e4:1e:31:69:66:c8:7c:a7:32:46:fa:98:71: 7e:5e:f4:fe:69:38:51:19:cc:0c:44:8e:e4:a4:a5:ad:21:59: 70:5e:8a:5b:cb:fd:01:02:1b:82:80:61:a9:60:dd:ea:3f:bc: 8e:02:a5:1f:eb:54:29:a7:62:5e:2d:94:04:00:21:c0:35:50: 12:e4:6d:73:09:39:68:b7:7b:c1:15:62:c1:fd:fa:42:7f:6c: 8d:e8:3e:45:c3:a7:c2:e1:a4:50:8a:48:66:05:11:51:51:bf: 71:cd:47:c3:61:f1:85:9e:c5:fe:77:35:16:a1:40:e3:a9:0f: c1:33:98:7c:04:b6:fc:57:73:44:92:6f:4f:4f:37:19:1d:9d: ce:43:5e:d2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUINWbPT7GEyXpkBCMBL3YTndbhaQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTc1MTI1WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjk4ZDVlM2RjMzk4ZGZiMmQ4ZmE5NTUzYWVkMmQwMjcx NWNhNjZjNGE5MGZiMDg3YTY5OGYwMWNlYzg3MTc2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoOyUwDeK5cGylEBkxV0AO7tU+hSswWVcvJ6YgKv3lMFP0 GQeTZZfQL7MkOAYwEKjI7U4ZtKItCKKT5Lwl4munKiqr793K5k97iGh7dT8kkhuN GI2wU0cRc04Qk7eMftKThx32B9x8LashxWZvYckXM52LWPVt23Kim0SlL5T3P+6C IyCTwofaG/bKJlA3GXuATH5PjXBMFzYJRunhZ6MdoeL7/owTWWLENdj+xk3GNb9m tWDsCX1PCHy8vQYKweXTjW6CksEqWFqMSsOywAK3l/9rT2pP5nwPYjH+tO+a6Yzh R8JOZGEUWSg3g5CP9VQQyq/V29c5Tc1Rt7dNGGA3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUsT/8tgF4SCXrd5LvCtUEZJQf6AcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkMzI5YTAxLWQ4MDEtNGQ1NS1iYjA0LTEyOGM4MTYzMDgxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB9ogDANBgkqhkiG9w0BAQsFAAOCAQEAgWgVpxs82haTYibOdTXb7cDC 9UcSLuOgi/EVwAz6Rv1pViBKSjzM2ruUWFVMIFKPKLS2cTQrft/vRPpCSlYY27za q1vEn39uLSoKOqwGUSWguzCgo5giJIKnFL8rZ5/svigOvSZYKRRc3UfdbTSadm3k HjFpZsh8pzJG+phxfl70/mk4URnMDESO5KSlrSFZcF6KW8v9AQIbgoBhqWDd6j+8 jgKlH+tUKadiXi2UBAAhwDVQEuRtcwk5aLd7wRViwf36Qn9sjeg+RcOnwuGkUIpI ZgURUVG/cc1Hw2HxhZ7F/nc1FqFA46kPwTOYfAS2/FdzRJJvT083GR2dzkNe0g== -----END CERTIFICATE-----Generated at Sun Jun 1 05:01:17 2025 by rpki-client