$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa0cdf03-f696-40a7-847d-f9de13932c95.roa File: fa0cdf03-f696-40a7-847d-f9de13932c95.roa (raw, json) Hash identifier: MHgDL61e0MQv1yzK8ZFmu0xUYO7bJVvjEa8bOUDlBLs= Subject key identifier: 70:D7:5C:B1:9E:AA:5A:DE:94:5C:AB:72:95:E1:01:6D:11:D0:98:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1160A8B2CBAAB8F91BF8A6D47DAB95312246FEEC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa0cdf03-f696-40a7-847d-f9de13932c95.roa Signing time: Fri 16 May 2025 16:31:29 +0000 ROA not before: Fri 16 May 2025 16:31:29 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:60:a8:b2:cb:aa:b8:f9:1b:f8:a6:d4:7d:ab:95:31:22:46:fe:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 16:31:29 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=6c8cda3787012a9da82abe3a36488bc97408823aaa3e39631ffff911f949ea91, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:49:ab:7e:ab:24:5c:9e:35:63:84:99:1c:95: af:4f:e9:06:77:fa:8e:49:11:be:54:5c:03:3c:ae: 47:64:48:18:32:9d:94:b2:ea:05:13:f5:0c:21:dc: f6:24:f2:bf:93:63:dd:17:3f:96:8a:58:a3:a5:57: 4e:c7:33:65:40:81:66:4f:a5:da:ad:84:09:60:9c: ef:b0:34:e5:f5:49:b0:81:c6:6e:ad:ab:60:eb:60: f6:52:75:92:14:89:26:d1:46:84:85:2b:9e:c8:ed: 5c:3d:77:46:21:51:e2:7a:64:d0:e9:10:ac:ba:8b: 7e:52:65:d6:19:5d:48:af:1f:73:23:e3:ae:3a:a4: bb:5f:71:72:82:7f:c3:d4:75:3d:c6:d4:d1:c9:cc: b0:89:6a:1c:ae:4a:b3:97:c0:89:22:0c:64:dc:d7: 16:70:bd:03:9b:97:fe:0c:a7:bc:dd:7d:8a:6a:b2: c7:5d:c4:f6:18:8e:bd:e2:5b:33:00:ce:ef:02:b0: f1:cb:31:89:d5:ef:6a:55:8b:c7:84:40:77:52:5b: fb:96:ad:b3:65:a4:07:e6:78:9a:ba:60:cb:a5:e8: c5:ab:7f:76:29:d4:83:0f:25:75:dd:00:f9:58:5d: f5:45:97:89:b3:85:39:c8:2c:a6:df:47:cc:b6:32: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D7:5C:B1:9E:AA:5A:DE:94:5C:AB:72:95:E1:01:6D:11:D0:98:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa0cdf03-f696-40a7-847d-f9de13932c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8120::/48 Signature Algorithm: sha256WithRSAEncryption 74:ce:bb:44:a3:25:bc:05:d4:e0:22:cb:f7:9a:fe:4b:04:db: 15:a8:a2:31:3d:06:04:41:bc:3b:25:0d:1b:50:73:71:0f:6d: d6:e6:f6:7a:da:7d:06:07:13:df:56:02:5c:69:6c:1d:d6:b0: 4c:38:05:9a:69:39:7c:12:0e:f8:8a:a2:2a:ff:2f:6d:66:8a: bd:63:3c:a2:5b:33:46:cb:11:7b:ac:b1:c4:22:0e:e7:df:06: c8:a2:67:a3:0a:0d:f0:e4:56:f3:52:73:fb:32:03:97:7d:9b: d7:17:94:be:89:4a:32:7f:77:96:bb:d8:14:a0:9c:c9:fb:22: e6:36:4c:cf:19:dd:2c:4a:03:cb:fe:14:87:21:9c:70:b3:60: 00:f6:bf:b4:b5:ec:fa:bc:77:1f:28:fc:bf:6b:fe:4f:7e:f2: 61:5d:fd:c2:3b:26:72:5a:9c:72:1e:38:99:2e:80:8c:cd:0b: 1b:36:3e:7f:20:4d:4d:31:45:59:bc:8a:41:e3:3e:a3:0b:da: a1:7d:eb:cb:74:fc:ab:86:02:c9:d3:fa:69:07:49:c1:3e:d0: ba:6d:c3:7f:e4:26:28:93:68:61:41:04:8e:4a:00:63:bc:5b: 09:33:c8:16:4e:12:fb:5f:c4:10:19:36:2a:50:fa:1b:8a:12: 23:c8:a2:d3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEWCossuquPkb+KbUfauVMSJG/uwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTYzMTI5WhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzhjZGEzNzg3MDEyYTlkYTgyYWJlM2EzNjQ4OGJjOTc0 MDg4MjNhYWEzZTM5NjMxZmZmZjkxMWY5NDllYTkxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvSat+qyRcnjVjhJkcla9P6QZ3+o5JEb5UXAM8rkdkSBgy nZSy6gUT9Qwh3PYk8r+TY90XP5aKWKOlV07HM2VAgWZPpdqthAlgnO+wNOX1SbCB xm6tq2DrYPZSdZIUiSbRRoSFK57I7Vw9d0YhUeJ6ZNDpEKy6i35SZdYZXUivH3Mj 4646pLtfcXKCf8PUdT3G1NHJzLCJahyuSrOXwIkiDGTc1xZwvQObl/4Mp7zdfYpq ssddxPYYjr3iWzMAzu8CsPHLMYnV72pVi8eEQHdSW/uWrbNlpAfmeJq6YMul6MWr f3Yp1IMPJXXdAPlYXfVFl4mzhTnILKbfR8y2Ml/zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcNdcsZ6qWt6UXKtyleEBbRHQmIAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZhMGNkZjAzLWY2OTYtNDBhNy04NDdkLWY5ZGUxMzkzMmM5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gSAwDQYJKoZIhvcNAQELBQADggEBAHTOu0SjJbwF1OAiy/ea/ksE 2xWoojE9BgRBvDslDRtQc3EPbdbm9nrafQYHE99WAlxpbB3WsEw4BZppOXwSDviK oir/L21mir1jPKJbM0bLEXusscQiDuffBsiiZ6MKDfDkVvNSc/syA5d9m9cXlL6J SjJ/d5a72BSgnMn7IuY2TM8Z3SxKA8v+FIchnHCzYAD2v7S17Pq8dx8o/L9r/k9+ 8mFd/cI7JnJanHIeOJkugIzNCxs2Pn8gTU0xRVm8ikHjPqML2qF968t0/KuGAsnT +mkHScE+0Lptw3/kJiiTaGFBBI5KAGO8WwkzyBZOEvtfxBAZNipQ+huKEiPIotM= -----END CERTIFICATE-----Generated at Sun Jun 1 04:38:23 2025 by rpki-client