$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ff2640-a793-4301-bc54-f7a5bc4069db.roa File: 01ff2640-a793-4301-bc54-f7a5bc4069db.roa (raw, json) Hash identifier: Ml8gwGKDU30QF2KPtgxC0xa6Zci4RRMgsGCz23CxR9k= Subject key identifier: 9D:85:3A:53:D1:EE:DC:D5:8F:0E:89:81:E6:64:DC:DC:11:8C:66:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7DBBAD0F2C2D9CD35493192DC016D3DC28D51B83 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ff2640-a793-4301-bc54-f7a5bc4069db.roa Signing time: Tue 10 Jun 2025 16:21:38 +0000 ROA not before: Tue 10 Jun 2025 16:21:38 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:bb:ad:0f:2c:2d:9c:d3:54:93:19:2d:c0:16:d3:dc:28:d5:1b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:21:38 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=50af4385b18b0da8cd9e618dbcba9146ab45ac4d999ec011202fd53609f66697, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3c:6e:42:4e:6f:4b:f5:e5:d7:5d:dd:19:93: 7c:15:ee:c2:dd:3f:7e:b5:61:04:68:ef:ef:1d:ef: 3b:6f:61:59:07:5e:96:1f:bf:cf:89:a5:d7:a7:f5: 6b:ec:bc:6c:d7:22:71:a3:cc:5b:47:04:c3:45:42: 47:3d:6f:38:ef:4a:88:59:15:1b:1f:db:81:73:34: cf:b7:56:d9:a7:83:c3:d2:e2:0d:b0:08:87:59:e7: 39:bd:c3:67:3a:6a:d4:48:9a:0c:e4:58:17:b0:04: bd:40:fe:08:b6:0b:c3:61:39:c8:46:c2:3d:5a:01: 80:2d:a4:03:25:7b:f6:2a:e8:25:24:5d:99:56:9b: 62:69:45:a1:b8:e6:c0:9e:e6:dc:db:a6:25:f1:84: 83:8e:a3:41:8e:69:12:ce:0a:e4:bb:27:02:b9:9c: 53:b4:c9:a3:4d:17:e7:b4:29:c3:0a:99:9c:de:19: 97:e2:2f:37:19:da:8a:4e:c3:3e:58:d9:27:a0:67: cf:d5:1e:42:85:f8:bc:63:2f:83:6d:f6:82:5d:c8: 1f:2e:1a:6f:3f:cf:27:a1:1c:b4:bb:99:29:aa:b4: f0:6b:fe:b5:70:92:34:df:b8:90:98:70:6e:5e:59: 0f:8e:84:ce:66:61:51:24:6e:1d:a5:74:91:fe:db: 7d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:85:3A:53:D1:EE:DC:D5:8F:0E:89:81:E6:64:DC:DC:11:8C:66:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01ff2640-a793-4301-bc54-f7a5bc4069db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:8040::/48 Signature Algorithm: sha256WithRSAEncryption 41:6f:bb:e7:c1:83:c3:1d:f0:98:36:44:2b:6c:9f:90:ee:46: 7e:3e:90:93:d6:cf:10:0c:81:ec:57:8f:62:94:8b:dd:db:55: df:b1:8a:c9:48:e0:57:f0:15:a2:7a:0a:56:af:2c:1a:34:e9: e0:5c:2e:d8:75:ac:f5:23:bf:6e:cc:d6:c7:26:0f:37:eb:ef: 08:dd:8a:72:88:7a:d1:ba:d1:2d:25:82:dc:d3:aa:ff:e7:99: 91:2a:bd:1b:34:1e:3d:62:fb:a3:0f:f0:51:6f:3e:74:49:60: 63:26:37:a1:01:fd:e8:7e:35:85:9f:2a:2b:63:b3:80:51:bb: 78:a4:e6:d7:6e:18:63:cb:22:42:9e:98:9f:17:64:7d:df:8b: 19:9a:4d:11:f6:9e:73:d7:24:40:b1:a3:de:57:6f:63:f5:10: f9:9b:fe:3b:ef:2f:53:e2:00:dd:96:ae:04:83:68:2b:5b:71: af:7c:1a:9d:b6:d1:b0:5d:d7:18:1c:73:55:a1:40:b0:1b:c4: 99:77:72:6e:2e:7e:c3:10:87:46:ad:18:17:18:87:97:8d:f3: f8:1d:37:47:4e:92:a0:e0:d1:d9:69:84:ee:6d:f8:50:da:f3: c2:4d:48:56:5f:42:16:d0:04:ad:40:f7:63:18:5f:9d:de:50: 5d:a2:03:d9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfbutDywtnNNUkxktwBbT3CjVG4MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTYyMTM4WhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGFmNDM4NWIxOGIwZGE4Y2Q5ZTYxOGRiY2JhOTE0NmFi NDVhYzRkOTk5ZWMwMTEyMDJmZDUzNjA5ZjY2Njk3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYPG5CTm9L9eXXXd0Zk3wV7sLdP361YQRo7+8d7ztvYVkH XpYfv8+Jpden9WvsvGzXInGjzFtHBMNFQkc9bzjvSohZFRsf24FzNM+3Vtmng8PS 4g2wCIdZ5zm9w2c6atRImgzkWBewBL1A/gi2C8NhOchGwj1aAYAtpAMle/Yq6CUk XZlWm2JpRaG45sCe5tzbpiXxhIOOo0GOaRLOCuS7JwK5nFO0yaNNF+e0KcMKmZze GZfiLzcZ2opOwz5Y2SegZ8/VHkKF+LxjL4Nt9oJdyB8uGm8/zyehHLS7mSmqtPBr /rVwkjTfuJCYcG5eWQ+OhM5mYVEkbh2ldJH+232RAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnYU6U9Hu3NWPDomB5mTc3BGMZgcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAxZmYyNjQwLWE3OTMtNDMwMS1iYzU0LWY3YTViYzQwNjlkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ygEAwDQYJKoZIhvcNAQELBQADggEBAEFvu+fBg8Md8Jg2RCtsn5Du Rn4+kJPWzxAMgexXj2KUi93bVd+xislI4FfwFaJ6ClavLBo06eBcLth1rPUjv27M 1scmDzfr7wjdinKIetG60S0lgtzTqv/nmZEqvRs0Hj1i+6MP8FFvPnRJYGMmN6EB /eh+NYWfKitjs4BRu3ik5tduGGPLIkKemJ8XZH3fixmaTRH2nnPXJECxo95Xb2P1 EPmb/jvvL1PiAN2WrgSDaCtbca98Gp220bBd1xgcc1WhQLAbxJl3cm4ufsMQh0at GBcYh5eN8/gdN0dOkqDg0dlphO5t+FDa88JNSFZfQhbQBK1A92MYX53eUF2iA9k= -----END CERTIFICATE-----Generated at Sat Jun 14 07:10:21 2025 by rpki-client