$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9cbac2-4749-4385-b952-5b4d9b9484d0.roa File: ce9cbac2-4749-4385-b952-5b4d9b9484d0.roa (raw, json) Hash identifier: BjN+GFVucvPTgfoMNiTAzGBuZ/nSXThOc8d/L5hk/TI= Subject key identifier: DE:5D:FA:8C:A7:84:CA:D2:FB:68:06:B0:22:29:54:69:E8:8F:BD:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D46336326A5DF05F811DD146D1522E05937F4D8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9cbac2-4749-4385-b952-5b4d9b9484d0.roa Signing time: Fri 30 May 2025 00:10:55 +0000 ROA not before: Fri 30 May 2025 00:10:55 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffa:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:46:33:63:26:a5:df:05:f8:11:dd:14:6d:15:22:e0:59:37:f4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 30 00:10:55 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=49e12b221da00377a0c63452ca69304fb12ac468bb6f337bebdb5912a36b8818, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:75:b4:b6:f2:66:75:f7:da:9f:ad:cd:3b: dc:35:c8:c3:27:df:03:fa:67:c1:ad:31:10:43:c7: 70:6a:57:df:3d:eb:67:be:42:4c:2a:2d:7b:7d:32: 47:58:16:62:11:0d:cf:7d:ae:4c:e8:72:d7:35:3d: 4c:67:70:44:56:18:0a:54:a4:aa:86:85:91:81:eb: 15:09:22:35:b1:26:82:56:9b:e2:ba:5d:b9:c8:02: 5c:bf:c0:8e:50:b3:b7:8a:da:ae:f4:d1:05:c5:d3: 2f:62:b3:dd:86:21:0f:3a:d8:9b:1f:26:4d:fa:2a: 8c:f1:d5:63:fe:67:7a:05:8a:46:0c:96:5b:86:13: c9:2c:0e:61:f5:39:74:40:83:c4:c1:6e:2e:09:fa: eb:be:c9:be:1d:5f:0f:3b:84:e8:a7:81:09:bf:cf: 09:26:e2:ae:17:ac:32:da:cd:4c:b5:5c:52:4f:f2: 85:4d:75:d1:42:de:8d:a2:97:b4:b1:5e:5a:d4:e9: dd:ff:00:b7:bf:77:11:99:9b:6f:5f:7d:4f:ed:5b: 95:eb:25:73:d9:0a:02:a8:ce:46:41:59:ce:f7:5c: b3:25:77:9b:2d:46:13:df:22:71:7f:87:0d:8c:36: 0b:58:4e:34:cb:f1:63:b8:ed:8d:eb:63:4a:5d:9a: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5D:FA:8C:A7:84:CA:D2:FB:68:06:B0:22:29:54:69:E8:8F:BD:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce9cbac2-4749-4385-b952-5b4d9b9484d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffa:4000::/40 Signature Algorithm: sha256WithRSAEncryption 0b:26:08:bf:cc:fc:32:8f:de:a7:e5:a8:00:a0:1e:9c:04:81: 25:bf:c7:3b:b9:5a:48:ab:90:18:92:aa:8b:14:34:e8:0c:aa: 89:6d:b6:2c:90:4a:28:55:c8:bc:bf:94:12:e9:81:75:c6:bd: d4:d9:35:a4:dc:12:51:97:50:3a:49:1d:5b:6c:86:c8:25:90: 9d:fe:c7:60:54:df:2e:4e:6e:66:93:78:98:10:d2:21:d4:1d: 1d:6d:a4:1e:72:8c:07:b6:4e:4d:3d:c6:05:ff:c8:01:cf:fb: 95:85:f2:e6:01:dd:95:3c:16:9f:40:19:32:0b:ca:ef:78:5e: 03:60:61:d1:12:3a:4e:08:59:79:6f:e0:c6:c1:aa:82:7b:a4: 77:bc:93:c1:59:d6:7d:b2:4a:12:5c:7a:c9:83:ab:0f:4c:7a: 4c:37:68:b9:a7:79:54:8f:cb:fa:7e:64:43:ef:24:12:c3:4f: fc:43:04:cb:86:91:50:9d:43:bf:b6:59:62:35:71:58:cc:fe: af:14:08:1d:da:0a:74:c9:a7:61:7b:f1:5a:6e:6f:4d:38:45: e7:2b:21:ca:7e:00:98:79:7d:bf:94:61:03:d2:31:18:b9:e7: 70:1b:ea:5f:d6:da:5c:3b:39:20:38:9a:fb:8d:47:d8:e6:c3: 43:4c:74:58 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfUYzYyal3wX4Ed0UbRUi4Fk39NgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDAxMDU1WhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OWUxMmIyMjFkYTAwMzc3YTBjNjM0NTJjYTY5MzA0ZmIx MmFjNDY4YmI2ZjMzN2JlYmRiNTkxMmEzNmI4ODE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCulXW0tvJmdffan63NO9w1yMMn3wP6Z8GtMRBDx3BqV989 62e+QkwqLXt9MkdYFmIRDc99rkzoctc1PUxncERWGApUpKqGhZGB6xUJIjWxJoJW m+K6XbnIAly/wI5Qs7eK2q700QXF0y9is92GIQ862JsfJk36Kozx1WP+Z3oFikYM lluGE8ksDmH1OXRAg8TBbi4J+uu+yb4dXw87hOingQm/zwkm4q4XrDLazUy1XFJP 8oVNddFC3o2il7SxXlrU6d3/ALe/dxGZm29ffU/tW5XrJXPZCgKozkZBWc73XLMl d5stRhPfInF/hw2MNgtYTjTL8WO47Y3rY0pdmu/BAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU3l36jKeEytL7aAawIilUaeiPvWMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlOWNiYWMyLTQ3NDktNDM4NS1iOTUyLTViNGQ5Yjk0ODRkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/6QDANBgkqhkiG9w0BAQsFAAOCAQEACyYIv8z8Mo/ep+WoAKAenASB Jb/HO7laSKuQGJKqixQ06AyqiW22LJBKKFXIvL+UEumBdca91Nk1pNwSUZdQOkkd W2yGyCWQnf7HYFTfLk5uZpN4mBDSIdQdHW2kHnKMB7ZOTT3GBf/IAc/7lYXy5gHd lTwWn0AZMgvK73heA2Bh0RI6TghZeW/gxsGqgnukd7yTwVnWfbJKElx6yYOrD0x6 TDdouad5VI/L+n5kQ+8kEsNP/EMEy4aRUJ1Dv7ZZYjVxWMz+rxQIHdoKdMmnYXvx Wm5vTThF5yshyn4AmHl9v5RhA9IxGLnncBvqX9baXDs5IDia+41H2ObDQ0x0WA== -----END CERTIFICATE-----Generated at Sun Jun 1 05:17:00 2025 by rpki-client