$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78055da-d21e-4985-bee2-fe5b70f3c493.roa File: f78055da-d21e-4985-bee2-fe5b70f3c493.roa (raw, json) Hash identifier: NFYm4vCCWAwnDOifKo31g2y+fFVFd3zcN55SWIsnmFI= Subject key identifier: 3F:55:E3:06:B6:48:34:E6:83:CB:3A:A6:0D:FF:1A:7F:DB:59:CD:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E7A6ABB7E56033D8F521934A23F50F46F9246B7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78055da-d21e-4985-bee2-fe5b70f3c493.roa Signing time: Mon 19 May 2025 18:31:16 +0000 ROA not before: Mon 19 May 2025 18:31:16 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f14:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:7a:6a:bb:7e:56:03:3d:8f:52:19:34:a2:3f:50:f4:6f:92:46:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:31:16 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=f9d8e0344f8d9633df2e49fccab73af8c7347289026d16a83ed8e50d3a203bd1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:66:57:75:ed:8b:59:cd:8b:f9:df:33:85: 28:0c:01:d0:2d:4e:11:ea:3d:3f:be:a4:d5:c9:40: 1b:7d:35:a3:13:5f:5c:5e:6a:27:59:6b:34:d2:53: ab:62:dc:36:5f:71:00:09:a8:3e:29:c8:a6:e3:1c: 3c:f3:97:9d:4d:e1:c4:66:89:59:9e:4e:42:a1:b5: 4f:07:fe:a0:4e:7c:b0:f7:20:0e:9f:e5:c8:db:cd: 12:75:57:64:35:17:b7:01:f2:e5:36:d8:df:bc:99: 77:50:49:88:1d:40:bf:3c:e9:32:33:bd:73:6b:0b: 50:2b:46:fd:87:d5:ac:c7:b5:d8:0e:04:21:e7:20: a7:85:98:fe:1f:4c:45:7d:33:fe:70:ab:7f:d5:06: e7:51:26:92:e3:de:61:ef:ba:5d:e5:d4:d9:bf:49: 8a:57:30:50:b1:0c:01:da:df:de:32:8b:9e:b8:3c: ff:0d:3e:c9:9f:f9:08:49:75:2e:0b:4c:b0:ad:6b: d3:e4:e2:90:2d:41:21:46:10:69:cb:83:8c:56:f7: b6:93:80:41:6d:d0:e0:38:1c:3b:9b:16:be:18:e4: c8:51:6f:06:34:73:35:62:13:0b:eb:88:6d:db:fb: 39:aa:4a:da:9a:74:f9:32:d9:a4:b7:f4:27:38:67: 7d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:55:E3:06:B6:48:34:E6:83:CB:3A:A6:0D:FF:1A:7F:DB:59:CD:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78055da-d21e-4985-bee2-fe5b70f3c493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14:4000::/37 Signature Algorithm: sha256WithRSAEncryption 8c:a2:b5:b8:97:8a:6e:b6:8b:80:5b:01:b5:10:29:b8:74:7d: a9:36:a4:0b:fb:01:2e:f2:0f:ab:ca:ef:3d:3b:13:61:c3:d9: 0e:f3:e9:2c:3b:9a:ed:3a:16:11:1f:9a:3f:97:09:5f:53:b7: 31:a3:05:25:79:c3:ac:bd:b5:cf:79:78:c7:2d:4b:50:86:66: 43:96:3d:5f:0c:ad:cc:95:ae:48:61:da:ba:e0:39:83:46:9f: d2:1d:ee:5c:3d:56:ea:6a:de:2a:60:20:83:6c:9c:b0:9c:64: bf:78:53:f7:f0:9e:74:c0:ee:17:ea:ec:02:db:7a:19:f7:d7: 8c:c7:10:79:da:5d:aa:76:82:e5:1f:f5:42:fb:fc:5d:a4:04: ee:72:9d:2f:af:96:fd:2d:8a:4d:a3:b0:63:a4:e0:c1:97:fd: af:6e:55:34:2f:7e:6d:fa:39:79:c8:5e:38:b6:f5:75:96:74: 36:af:c6:66:6d:d3:db:ce:f6:88:44:e8:de:22:2b:00:1e:39: ec:81:8e:8f:b3:7b:df:17:d6:b1:c8:5d:b0:75:59:6b:ee:08: 5b:0a:9a:b5:26:df:4b:c8:be:e0:b1:10:c8:95:63:59:bc:fc: 6d:62:66:14:5f:b8:c8:5b:44:b8:d9:27:38:53:96:f3:35:9f: 3a:ed:fe:6d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTnpqu35WAz2PUhk0oj9Q9G+SRrcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgzMTE2WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOWQ4ZTAzNDRmOGQ5NjMzZGYyZTQ5ZmNjYWI3M2FmOGM3 MzQ3Mjg5MDI2ZDE2YTgzZWQ4ZTUwZDNhMjAzYmQxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD2GZXde2LWc2L+d8zhSgMAdAtThHqPT++pNXJQBt9NaMT X1xeaidZazTSU6ti3DZfcQAJqD4pyKbjHDzzl51N4cRmiVmeTkKhtU8H/qBOfLD3 IA6f5cjbzRJ1V2Q1F7cB8uU22N+8mXdQSYgdQL886TIzvXNrC1ArRv2H1azHtdgO BCHnIKeFmP4fTEV9M/5wq3/VBudRJpLj3mHvul3l1Nm/SYpXMFCxDAHa394yi564 PP8NPsmf+QhJdS4LTLCta9Pk4pAtQSFGEGnLg4xW97aTgEFt0OA4HDubFr4Y5MhR bwY0czViEwvriG3b+zmqStqadPky2aS39Cc4Z31/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUP1XjBrZINOaDyzqmDf8af9tZzfowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3ODA1NWRhLWQyMWUtNDk4NS1iZWUyLWZlNWI3MGYzYzQ5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8UQDANBgkqhkiG9w0BAQsFAAOCAQEAjKK1uJeKbraLgFsBtRApuHR9 qTakC/sBLvIPq8rvPTsTYcPZDvPpLDua7ToWER+aP5cJX1O3MaMFJXnDrL21z3l4 xy1LUIZmQ5Y9XwytzJWuSGHauuA5g0af0h3uXD1W6mreKmAgg2ycsJxkv3hT9/Ce dMDuF+rsAtt6GffXjMcQedpdqnaC5R/1Qvv8XaQE7nKdL6+W/S2KTaOwY6TgwZf9 r25VNC9+bfo5echeOLb1dZZ0Nq/GZm3T2872iETo3iIrAB457IGOj7N73xfWschd sHVZa+4IWwqatSbfS8i+4LEQyJVjWbz8bWJmFF+4yFtEuNknOFOW8zWfOu3+bQ== -----END CERTIFICATE-----Generated at Sun Jun 1 05:25:46 2025 by rpki-client