$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa File: 2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa (raw, json) Hash identifier: OiF+bAxRgg10YwQwmi5JvTMIATvM0aoYdvAgY8SIQBI= Subject key identifier: 54:DC:BD:AC:45:A5:3A:35:B6:27:DB:71:2D:E8:50:F8:92:9D:8B:37 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5DAD802174D0487B06DD8652E603B7162C123815 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa Signing time: Sat 24 May 2025 00:30:08 +0000 ROA not before: Sat 24 May 2025 00:30:08 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 699 IP address blocks: 2606:7b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ad:80:21:74:d0:48:7b:06:dd:86:52:e6:03:b7:16:2c:12:38:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 24 00:30:08 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=cd1a89fba58e37724abdc4457a762250dc7485b57f893fa9f6f04c3b73fdd14b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9b:d1:26:55:d9:84:bc:6f:5f:8e:a5:d7:b5: 51:90:1d:86:0e:dc:61:18:6c:59:a3:08:05:b4:dc: 1e:4a:d1:a4:f5:68:39:25:ff:69:e1:26:ca:26:b7: a1:67:24:cc:56:01:95:00:de:0b:c5:48:7d:7b:a7: ba:09:1a:2f:89:14:e2:ec:6c:b1:0c:87:a5:75:cd: 83:2a:43:f4:a3:6e:ba:f3:75:2c:f3:c7:44:02:0b: 95:f8:71:e0:d8:34:65:f1:d8:5e:6e:3c:dd:9b:e8: 26:be:d3:b8:15:45:45:c7:74:d9:a3:cb:40:29:1d: d3:10:35:50:52:ee:9e:30:5b:ae:6d:4b:6d:1d:e6: 0f:2a:e6:a6:be:d4:3f:2b:18:d1:57:30:90:43:ef: 9c:b4:e0:52:1d:22:59:f8:bd:1b:cb:6f:70:bd:ca: b6:ad:62:4b:b2:c2:45:b9:a6:95:d3:06:2d:17:f1: 83:aa:fb:6b:aa:1c:39:75:98:e6:77:ee:50:ea:97: 68:75:5c:1f:b7:2d:1b:29:85:7d:a0:02:3d:75:d9: cb:8d:c8:5a:41:43:9b:15:33:27:28:96:90:66:07: 2c:03:e9:d3:70:6d:65:92:3b:7e:91:b5:8d:8b:94: a0:79:03:f2:44:ea:59:8a:90:a8:ba:45:70:00:18: 24:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DC:BD:AC:45:A5:3A:35:B6:27:DB:71:2D:E8:50:F8:92:9D:8B:37 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2da90c2b-8bea-40c6-8dc8-5765b67fc610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:7b40::/32 Signature Algorithm: sha256WithRSAEncryption 0e:de:b6:bb:e0:ed:bb:91:6e:7c:0e:66:5a:72:bd:6d:40:a3: 8c:6a:c6:e0:24:c1:04:34:45:2b:8c:46:9f:8f:89:0d:f2:cc: 54:e0:b1:f3:85:64:0c:69:8b:4b:21:86:7d:6b:bc:96:52:14: ea:1b:b5:c6:74:db:49:51:08:3a:62:b9:d1:cc:2b:5c:d7:dd: 8c:98:d7:1c:e6:23:17:95:b5:c6:22:26:b0:60:1e:84:ee:dc: 93:8d:ae:50:cf:8a:53:68:66:f1:6f:3d:d4:35:b5:3f:d1:de: 0d:bc:da:12:4a:ce:c6:5f:3a:ec:b4:2e:52:ad:2c:13:59:fb: 40:d2:af:34:7a:b5:2e:00:bd:9f:a4:0c:3a:93:19:69:5f:f6: 7a:66:b2:e7:dc:13:4d:d0:70:c2:f7:01:52:84:73:c7:07:77: 62:9e:4b:86:97:6b:98:a1:f2:c2:06:19:53:7f:89:02:23:12: f9:6e:01:13:ce:d7:3a:a7:b8:66:f1:95:89:11:cf:6d:3c:eb: 88:93:dc:5e:09:8a:bb:98:75:c5:6c:24:58:de:56:8c:ba:9a: 70:4a:3c:be:81:5a:c3:1c:ad:a8:75:7b:95:db:89:8a:f9:65: e7:16:75:5a:54:b0:9c:07:01:be:86:bc:ec:ac:5f:29:f6:70: bb:b6:d8:b3 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUXa2AIXTQSHsG3YZS5gO3FiwSOBUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTI0MDAzMDA4WhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDFhODlmYmE1OGUzNzcyNGFiZGM0NDU3YTc2MjI1MGRj NzQ4NWI1N2Y4OTNmYTlmNmYwNGMzYjczZmRkMTRiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkm9EmVdmEvG9fjqXXtVGQHYYO3GEYbFmjCAW03B5K0aT1 aDkl/2nhJsomt6FnJMxWAZUA3gvFSH17p7oJGi+JFOLsbLEMh6V1zYMqQ/Sjbrrz dSzzx0QCC5X4ceDYNGXx2F5uPN2b6Ca+07gVRUXHdNmjy0ApHdMQNVBS7p4wW65t S20d5g8q5qa+1D8rGNFXMJBD75y04FIdIln4vRvLb3C9yratYkuywkW5ppXTBi0X 8YOq+2uqHDl1mOZ37lDql2h1XB+3LRsphX2gAj112cuNyFpBQ5sVMycolpBmBywD 6dNwbWWSO36RtY2LlKB5A/JE6lmKkKi6RXAAGCR1AgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUVNy9rEWlOjW2J9txLehQ+JKdizcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJkYTkwYzJiLThiZWEtNDBjNi04ZGM4LTU3NjViNjdmYzYxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBntAMA0GCSqGSIb3DQEBCwUAA4IBAQAO3ra74O27kW58DmZacr1tQKOM asbgJMEENEUrjEafj4kN8sxU4LHzhWQMaYtLIYZ9a7yWUhTqG7XGdNtJUQg6YrnR zCtc192MmNcc5iMXlbXGIiawYB6E7tyTja5Qz4pTaGbxbz3UNbU/0d4NvNoSSs7G XzrstC5SrSwTWftA0q80erUuAL2fpAw6kxlpX/Z6ZrLn3BNN0HDC9wFShHPHB3di nkuGl2uYofLCBhlTf4kCIxL5bgETztc6p7hm8ZWJEc9tPOuIk9xeCYq7mHXFbCRY 3laMuppwSjy+gVrDHK2odXuV24mK+WXnFnVaVLCcBwG+hrzsrF8p9nC7ttiz -----END CERTIFICATE-----Generated at Sun Jun 8 07:33:47 2025 by rpki-client