$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa File: 5988892c-5d54-4e98-a5b0-3a2691a42a24.roa (raw, json) Hash identifier: 2eVdnJyODGo/bcozWPtXHrxM64dMMRKWOTjzeo7jSYw= Subject key identifier: 40:42:11:5C:FA:14:12:02:55:CB:46:96:E6:31:E7:03:99:90:89:9D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 770563BA59EAB8777112CF61F8800AFAA52BD08F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa Signing time: Wed 11 Jun 2025 00:40:22 +0000 ROA not before: Wed 11 Jun 2025 00:40:22 +0000 ROA not after: Wed 16 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:74c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:05:63:ba:59:ea:b8:77:71:12:cf:61:f8:80:0a:fa:a5:2b:d0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 11 00:40:22 2025 GMT Not After : Jul 16 23:59:59 2025 GMT Subject: serialNumber=dcbc8392d29cb3269327c43a080bdae30469cf9e6911c8b208694a52b77fdc9f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:52:db:e6:ac:ec:50:c5:32:60:0c:af:00: 08:92:cc:2f:ac:c3:af:32:0a:97:33:93:45:30:24: 97:4a:a1:92:aa:d2:8f:2f:c9:48:b3:8a:df:8c:97: 16:65:09:d6:13:15:cc:82:75:a8:b3:f6:c6:99:f0: 43:16:71:ac:91:bb:ed:f9:6a:8f:05:18:f9:60:37: 14:cf:b6:3d:bc:e6:2b:23:6d:7b:55:17:b0:f9:51: 39:26:18:4b:88:66:67:88:96:f3:2c:68:b7:98:61: a0:08:5b:35:9b:dd:42:3c:b6:42:e9:d5:f3:aa:7e: db:35:d6:1d:a5:b0:19:ca:dc:1a:de:40:fc:4f:74: af:7a:66:c8:36:60:2f:f6:fc:ab:7d:50:39:8b:fa: f1:32:a9:34:57:84:56:2d:f1:99:74:dc:83:b3:bd: ab:99:6c:0d:3d:cc:6d:94:8a:77:79:c7:62:6f:94: 44:37:8e:c0:a9:33:c7:04:cc:fb:53:d0:8f:6f:86: 5d:70:3b:3a:5b:98:5f:3b:19:7d:8c:69:45:d6:46: d8:2b:eb:1f:70:61:00:cc:02:4a:01:03:b3:08:ea: ed:93:d6:2e:c8:0d:32:61:e4:13:cd:89:56:2f:37: e6:cf:11:c6:d9:9b:af:89:0a:ec:f8:12:39:62:58: d3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:42:11:5C:FA:14:12:02:55:CB:46:96:E6:31:E7:03:99:90:89:9D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:74c0::/48 Signature Algorithm: sha256WithRSAEncryption af:ed:1f:7e:32:d4:fb:0a:38:73:6d:1c:58:b4:b5:43:c3:13: ee:55:2a:15:7a:01:db:29:56:5e:6e:9f:bd:f4:65:ba:9f:ae: 77:67:f0:38:51:2d:da:39:43:1d:c1:62:65:86:57:7b:a1:4a: 6a:d2:94:33:84:2d:93:5f:79:f0:49:26:41:35:43:5a:6b:75: 55:c2:37:66:14:59:d9:2d:71:f9:21:b7:8b:4f:83:80:02:b2: 0a:11:2f:3b:ac:42:50:73:7e:69:91:3c:d3:22:b6:ab:d6:63: cc:5f:bd:60:53:0a:e6:3c:54:7d:a5:b9:c4:e4:99:de:95:87: aa:3f:c3:1a:f8:4b:d8:47:dd:ed:1a:98:57:cf:5f:00:ba:4f: 4f:0c:4b:30:15:4a:02:de:df:ac:ca:64:4f:0d:db:35:50:59: eb:86:2f:12:00:e3:50:0b:2d:23:e4:62:98:3c:32:68:f2:18: 7e:78:2d:5a:00:f8:5a:ca:74:31:9a:60:13:4c:c9:1c:70:12: 16:f8:11:79:65:b9:36:1b:3a:3d:71:bf:26:41:b5:ff:13:ca: 05:a3:02:ef:f0:21:dc:b0:f1:1d:25:a0:5b:33:76:dd:80:0d: 94:12:b0:1d:34:fe:68:25:5b:3e:4a:1a:15:d3:64:8e:67:d0: a2:ba:4a:f8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdwVjulnquHdxEs9h+IAK+qUr0I8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDA0MDIyWhcNMjUwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2JjODM5MmQyOWNiMzI2OTMyN2M0M2EwODBiZGFlMzA0 NjljZjllNjkxMWM4YjIwODY5NGE1MmI3N2ZkYzlmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6hFLb5qzsUMUyYAyvAAiSzC+sw68yCpczk0UwJJdKoZKq 0o8vyUizit+MlxZlCdYTFcyCdaiz9saZ8EMWcayRu+35ao8FGPlgNxTPtj285isj bXtVF7D5UTkmGEuIZmeIlvMsaLeYYaAIWzWb3UI8tkLp1fOqfts11h2lsBnK3Bre QPxPdK96Zsg2YC/2/Kt9UDmL+vEyqTRXhFYt8Zl03IOzvauZbA09zG2Uind5x2Jv lEQ3jsCpM8cEzPtT0I9vhl1wOzpbmF87GX2MaUXWRtgr6x9wYQDMAkoBA7MI6u2T 1i7IDTJh5BPNiVYvN+bPEcbZm6+JCuz4EjliWNNzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQEIRXPoUEgJVy0aW5jHnA5mQiZ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5ODg4OTJjLTVkNTQtNGU5OC1hNWIwLTNhMjY5MWE0MmEyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AdMAwDQYJKoZIhvcNAQELBQADggEBAK/tH34y1PsKOHNtHFi0tUPD E+5VKhV6AdspVl5un730Zbqfrndn8DhRLdo5Qx3BYmWGV3uhSmrSlDOELZNfefBJ JkE1Q1prdVXCN2YUWdktcfkht4tPg4ACsgoRLzusQlBzfmmRPNMitqvWY8xfvWBT CuY8VH2lucTkmd6Vh6o/wxr4S9hH3e0amFfPXwC6T08MSzAVSgLe36zKZE8N2zVQ WeuGLxIA41ALLSPkYpg8MmjyGH54LVoA+FrKdDGaYBNMyRxwEhb4EXlluTYbOj1x vyZBtf8TygWjAu/wIdyw8R0loFszdt2ADZQSsB00/mglWz5KGhXTZI5n0KK6Svg= -----END CERTIFICATE-----Generated at Sat Jun 14 06:16:20 2025 by rpki-client