$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f21da764-ff53-464b-94cf-445da18f0eff.roa File: f21da764-ff53-464b-94cf-445da18f0eff.roa (raw, json) Hash identifier: eEY6CQCIqm+P6duVF5IlVAAHyw+46Zh+8Jyfmveu0fc= Subject key identifier: BB:AE:E6:D7:DB:6F:73:36:8F:A0:FD:F5:BC:9B:17:28:20:B9:20:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 12C2ADB5066F77CF52BCE9E3125E149E2925654B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f21da764-ff53-464b-94cf-445da18f0eff.roa Signing time: Mon 19 May 2025 15:40:20 +0000 ROA not before: Mon 19 May 2025 15:40:20 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:2080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c2:ad:b5:06:6f:77:cf:52:bc:e9:e3:12:5e:14:9e:29:25:65:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 15:40:20 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=26c572748a7dc50ae146991e74f2aa559615529d7cf204844a02307169e621c0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:fb:5c:89:47:d8:b2:4e:17:7e:ea:fd:99: 0b:1a:65:a7:3d:68:a1:a7:a8:a6:85:b7:9b:38:92: 17:83:96:9e:aa:4e:7b:7b:93:0c:61:ac:71:a3:69: 79:4d:12:7c:a1:87:1d:d3:bc:60:66:b3:0a:1a:d4: 5c:c6:bb:ad:b7:af:34:aa:3a:87:e7:69:56:d1:fa: 55:f2:92:ec:56:ca:7e:6f:31:21:28:7d:ee:30:ad: 4f:66:a0:06:57:62:63:50:af:30:4c:56:cb:bc:a5: 35:f8:47:70:ac:a5:81:69:2c:b0:2b:6a:40:06:54: 4a:96:d0:58:05:00:42:b4:98:8b:7b:25:1c:81:0e: e8:2a:19:13:ed:46:5a:ce:95:2e:74:a4:22:56:5f: ba:b6:e5:61:f9:84:b3:cc:0a:1d:0d:da:8c:25:85: d3:91:eb:24:70:30:6b:4c:9e:a6:e4:2f:9a:af:ba: d7:be:08:89:c1:7c:f6:01:6b:d1:6c:2c:58:8d:3a: 51:03:1a:18:a1:16:57:d6:82:53:b2:8a:bc:b7:76: f2:45:79:af:16:b7:a5:1a:24:be:dd:e0:5c:7a:af: e1:e6:f6:1c:ee:e2:04:4e:1a:d0:07:f4:07:b2:67: cf:05:24:0e:91:ed:1e:8e:7f:eb:26:c9:ce:57:66: 13:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AE:E6:D7:DB:6F:73:36:8F:A0:FD:F5:BC:9B:17:28:20:B9:20:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f21da764-ff53-464b-94cf-445da18f0eff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:2080::/46 Signature Algorithm: sha256WithRSAEncryption 7b:62:9b:58:c6:ca:52:29:3c:14:1f:bf:75:a6:29:ad:5a:c7: 25:ab:5f:10:c2:29:eb:8a:8c:ff:00:d7:6a:2b:10:79:f2:8d: b7:41:80:30:9b:68:96:b5:ab:7f:43:e8:ac:c1:0f:de:02:00: ad:25:4b:f4:62:21:df:6f:94:08:ee:fc:cd:06:cc:3e:34:49: 86:69:74:1e:22:98:02:db:cc:4d:c7:d3:8d:b3:c6:b9:f1:17: e7:98:46:b0:91:7f:0e:25:b2:b6:ed:8f:49:92:18:af:41:85: 6e:90:71:60:a4:be:02:81:df:a5:09:ea:eb:d1:3d:57:63:6f: df:d9:25:86:19:b4:01:ae:38:1b:7e:c3:f1:36:dc:52:b0:e3: 8a:12:39:e6:5b:d7:1a:1e:87:92:fa:f4:90:0a:8a:e2:a2:31: da:34:c4:f6:fc:d6:89:1e:ca:38:f8:68:d2:d5:45:f2:1b:d7: 53:99:6b:aa:4b:99:14:ef:42:82:12:52:cb:c7:ee:7c:71:bd: 7f:37:7e:fd:92:69:39:37:05:cf:ea:74:28:4b:2d:21:56:26: 40:2f:74:63:5a:de:e1:0e:1f:20:d6:2a:0a:8c:5f:03:65:91: 95:6a:df:1e:21:09:4e:8c:8f:14:64:0f:6d:91:21:01:97:7a: 9f:1c:4e:56 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEsKttQZvd89SvOnjEl4UniklZUswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTU0MDIwWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNmM1NzI3NDhhN2RjNTBhZTE0Njk5MWU3NGYyYWE1NTk2 MTU1MjlkN2NmMjA0ODQ0YTAyMzA3MTY5ZTYyMWMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkM/tciUfYsk4Xfur9mQsaZac9aKGnqKaFt5s4kheDlp6q Tnt7kwxhrHGjaXlNEnyhhx3TvGBmswoa1FzGu623rzSqOofnaVbR+lXykuxWyn5v MSEofe4wrU9moAZXYmNQrzBMVsu8pTX4R3CspYFpLLArakAGVEqW0FgFAEK0mIt7 JRyBDugqGRPtRlrOlS50pCJWX7q25WH5hLPMCh0N2owlhdOR6yRwMGtMnqbkL5qv ute+CInBfPYBa9FsLFiNOlEDGhihFlfWglOyiry3dvJFea8Wt6UaJL7d4Fx6r+Hm 9hzu4gROGtAH9AeyZ88FJA6R7R6Of+smyc5XZhM3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUu67m19tvczaPoP31vJsXKCC5IGYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YyMWRhNzY0LWZmNTMtNDY0Yi05NGNmLTQ0NWRhMThmMGVmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3IIAwDQYJKoZIhvcNAQELBQADggEBAHtim1jGylIpPBQfv3WmKa1a xyWrXxDCKeuKjP8A12orEHnyjbdBgDCbaJa1q39D6KzBD94CAK0lS/RiId9vlAju /M0GzD40SYZpdB4imALbzE3H042zxrnxF+eYRrCRfw4lsrbtj0mSGK9BhW6QcWCk vgKB36UJ6uvRPVdjb9/ZJYYZtAGuOBt+w/E23FKw44oSOeZb1xoeh5L69JAKiuKi Mdo0xPb81okeyjj4aNLVRfIb11OZa6pLmRTvQoISUsvH7nxxvX83fv2SaTk3Bc/q dChLLSFWJkAvdGNa3uEOHyDWKgqMXwNlkZVq3x4hCU6MjxRkD22RIQGXep8cTlY= -----END CERTIFICATE-----Generated at Sun Jun 1 04:34:38 2025 by rpki-client