$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1550332d-5bb8-49e9-8b4d-5938de6455c1.roa File: 1550332d-5bb8-49e9-8b4d-5938de6455c1.roa (raw, json) Hash identifier: 5k0HLzemOehDIzNWCJuod3X+ItVzvuUR+FrTDEeHECA= Subject key identifier: E3:99:2E:0B:22:65:5B:8E:49:08:98:09:EA:57:36:A6:84:AF:8A:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13C282FA082DEE11481AD3FAEAB0C2D1D1ADD6B8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1550332d-5bb8-49e9-8b4d-5938de6455c1.roa Signing time: Sat 14 Jun 2025 00:40:28 +0000 ROA not before: Sat 14 Jun 2025 00:40:28 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f28:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c2:82:fa:08:2d:ee:11:48:1a:d3:fa:ea:b0:c2:d1:d1:ad:d6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:40:28 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=bbc267573dd0fd40764e60df33824e72ba6e5ecbb61069408a81f54bae42c05d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dc:52:8e:5e:3b:8b:2a:89:ea:54:36:2d:d5: 50:48:57:84:bd:3d:50:cc:c3:e1:27:77:1c:2d:1e: 88:27:a0:61:41:ee:e8:30:0d:a0:ab:4e:34:65:43: 69:fa:01:54:0b:b2:1f:55:cc:a5:d0:18:4a:27:25: 60:85:1a:db:89:0d:0b:d5:13:ac:8f:61:c5:67:d8: 83:4e:e6:32:4f:87:e4:bc:cf:df:28:a4:2c:d0:9d: d0:81:a3:5e:ba:2a:08:ef:19:05:fb:c8:ee:47:b2: 06:13:45:82:44:28:d0:ca:bd:56:f6:56:b8:77:98: ac:b8:0e:1b:8e:8d:b6:8f:e4:13:fc:8f:b7:c5:49: 05:23:91:24:c3:bd:5b:4c:db:b3:82:c2:3d:3e:0f: fc:b5:20:a6:e0:4c:17:79:89:98:23:80:c9:cd:4c: b7:f5:55:f0:ca:7c:db:8e:ac:74:57:c0:df:b4:25: c7:cb:f3:b2:70:9c:02:7f:99:32:86:f2:56:2d:dc: fa:f7:85:89:16:6f:a1:4d:d7:b2:90:8c:97:05:70: 0b:80:c2:2e:92:c7:61:2c:7b:73:82:e4:a8:d2:42: 25:cf:63:13:61:0b:d0:27:62:dc:cd:bf:17:ed:43: d5:db:bc:92:56:41:2d:1e:c6:86:fb:d1:58:68:98: d0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:99:2E:0B:22:65:5B:8E:49:08:98:09:EA:57:36:A6:84:AF:8A:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1550332d-5bb8-49e9-8b4d-5938de6455c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f28:8000::/36 Signature Algorithm: sha256WithRSAEncryption bc:71:2a:22:e6:e9:ae:46:39:53:8c:8f:36:d2:6d:97:3f:55: 22:10:8d:5c:35:ab:27:1b:4a:1f:f6:8e:2c:50:e8:3f:06:75: 35:77:10:b5:c6:98:0e:60:cd:01:be:4d:db:da:cd:eb:5e:6c: 15:95:57:47:1c:26:e4:b8:79:78:e4:fc:93:7f:9c:06:ef:de: dc:4d:a4:d8:5c:14:f9:06:b7:09:c9:6a:0f:06:64:75:a6:31: c2:4a:81:53:9e:b5:3f:03:ef:d4:9e:fe:43:1b:73:cc:a9:27: 11:02:3a:fe:5c:0a:ef:7a:cd:5d:56:3f:e9:ff:e7:08:f5:a4: dc:ec:ff:6a:d6:6f:39:71:5d:c7:fb:7e:43:76:ff:1d:6d:9c: b0:83:87:29:c9:ad:c9:d9:76:60:7e:d7:9d:0f:63:97:39:d9: 09:52:52:e8:06:f8:f6:67:a6:48:cf:7c:5f:24:53:56:1b:fb: a2:cd:bd:d5:59:d7:2f:d5:bb:ca:c3:88:2b:d6:82:86:56:10: ed:ab:ec:fb:ba:18:68:8c:9e:82:f2:1c:7e:e0:fb:15:41:97: b4:28:4e:7e:51:cd:7a:ee:28:35:d7:f0:2c:e7:30:0b:42:83: a8:1d:17:fa:2a:6d:86:f8:79:40:f2:89:a9:e0:18:60:8f:ea: 8d:de:7b:8b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUE8KC+ggt7hFIGtP66rDC0dGt1rgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDA0MDI4WhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmMyNjc1NzNkZDBmZDQwNzY0ZTYwZGYzMzgyNGU3MmJh NmU1ZWNiYjYxMDY5NDA4YTgxZjU0YmFlNDJjMDVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDb3FKOXjuLKonqVDYt1VBIV4S9PVDMw+EndxwtHognoGFB 7ugwDaCrTjRlQ2n6AVQLsh9VzKXQGEonJWCFGtuJDQvVE6yPYcVn2INO5jJPh+S8 z98opCzQndCBo166KgjvGQX7yO5HsgYTRYJEKNDKvVb2Vrh3mKy4DhuOjbaP5BP8 j7fFSQUjkSTDvVtM27OCwj0+D/y1IKbgTBd5iZgjgMnNTLf1VfDKfNuOrHRXwN+0 JcfL87JwnAJ/mTKG8lYt3Pr3hYkWb6FN17KQjJcFcAuAwi6Sx2Ese3OC5KjSQiXP YxNhC9AnYtzNvxftQ9XbvJJWQS0exob70VhomNCPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU45kuCyJlW45JCJgJ6lc2poSvikMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE1NTAzMzJkLTViYjgtNDllOS04YjRkLTU5MzhkZTY0NTVjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8ogDANBgkqhkiG9w0BAQsFAAOCAQEAvHEqIubprkY5U4yPNtJtlz9V IhCNXDWrJxtKH/aOLFDoPwZ1NXcQtcaYDmDNAb5N29rN615sFZVXRxwm5Lh5eOT8 k3+cBu/e3E2k2FwU+Qa3CclqDwZkdaYxwkqBU561PwPv1J7+QxtzzKknEQI6/lwK 73rNXVY/6f/nCPWk3Oz/atZvOXFdx/t+Q3b/HW2csIOHKcmtydl2YH7XnQ9jlznZ CVJS6Ab49memSM98XyRTVhv7os291VnXL9W7ysOIK9aChlYQ7avs+7oYaIyegvIc fuD7FUGXtChOflHNeu4oNdfwLOcwC0KDqB0X+ipthvh5QPKJqeAYYI/qjd57iw== -----END CERTIFICATE-----Generated at Sat Jun 14 07:04:50 2025 by rpki-client