$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bf05dc7-a430-401f-b2ad-6d559f8c6242.roa File: 8bf05dc7-a430-401f-b2ad-6d559f8c6242.roa (raw, json) Hash identifier: mvLcgEt+6tLJOVZaYCCrfWG+mJe4rsFI5CT4gI7EZCo= Subject key identifier: 9A:64:DB:32:A8:B6:DB:A7:13:5D:6E:6F:04:90:33:7E:F5:11:EA:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2706EB4717633F8D2184C41B05F66300E8C29B81 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bf05dc7-a430-401f-b2ad-6d559f8c6242.roa Signing time: Wed 28 May 2025 00:11:32 +0000 ROA not before: Wed 28 May 2025 00:11:32 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff9:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:06:eb:47:17:63:3f:8d:21:84:c4:1b:05:f6:63:00:e8:c2:9b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:11:32 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=dddb6b2a4d7b5dbbfe7767c33a6684634d34bcd2de277dfc8b8f71ffe7bda820, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:64:3b:87:5f:1e:23:7b:52:80:00:7d:1b: 54:bf:06:c5:33:c9:36:4b:4f:eb:34:ee:8a:56:f5: 84:b3:06:4b:92:16:13:30:90:f6:1d:62:cc:eb:66: cf:86:3c:5d:37:17:dc:9f:65:86:06:7e:68:7a:b1: 1e:a4:ce:97:ac:d1:84:33:1b:40:f9:5d:7e:3d:e6: e3:5f:ad:f8:13:02:29:29:82:3a:d7:54:7c:85:10: 22:03:cd:90:98:58:f1:51:6a:b5:a0:6a:58:54:eb: bd:40:8a:91:c8:12:66:e0:51:2a:ca:d7:06:be:a6: 3b:b4:a3:ab:06:7c:84:8e:0d:1c:c0:bf:6f:70:03: 02:a3:1b:88:1b:f8:fb:19:16:70:93:b5:b7:77:db: ce:75:0f:41:8a:a8:03:fe:19:8e:cc:36:50:ef:d7: c3:c9:fb:b2:e9:4d:95:08:ff:c1:75:2c:3e:12:37: 88:35:e9:14:82:1c:29:57:71:e2:bc:5d:30:1c:ad: 41:90:28:9b:92:58:f3:f5:df:f6:10:15:17:b8:3b: 7a:f7:82:7d:48:93:11:09:5b:42:12:14:16:48:f0: 0f:5c:dc:a0:6e:c5:d5:87:96:a4:4d:a7:5c:c9:9e: fd:34:01:fa:ff:6b:da:1f:c3:6b:a0:f5:20:65:a4: 95:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:64:DB:32:A8:B6:DB:A7:13:5D:6E:6F:04:90:33:7E:F5:11:EA:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bf05dc7-a430-401f-b2ad-6d559f8c6242.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff9:5000::/40 Signature Algorithm: sha256WithRSAEncryption 55:3e:dc:de:a8:8a:92:44:9a:39:02:88:77:d4:79:ab:74:7c: 91:2b:a2:a6:f6:fc:03:01:bc:04:5b:e2:09:1c:c6:fc:3c:c1: c8:12:2c:27:83:dc:67:b3:d9:23:9f:b9:a7:06:24:8d:35:1d: 1a:38:85:b1:ff:2e:04:5f:10:e4:7f:d5:37:57:25:dd:c1:ac: 47:b5:f9:d1:6a:0e:7a:c1:d3:4d:9a:98:bb:84:0a:da:89:dc: 74:e0:ac:a9:2a:46:30:3c:0b:fe:26:00:f1:52:bd:e3:5d:5c: 83:c5:ae:05:45:77:93:46:b5:69:53:c1:64:dd:2b:3f:21:44: ee:7f:70:89:d2:69:3c:b2:6e:b3:57:fc:f1:8f:6f:50:26:f5: 79:07:3a:4d:7a:68:18:ad:8b:39:92:25:9f:ec:df:30:e6:c2: 88:0f:0e:c3:60:50:87:ac:42:9e:0f:f8:25:6d:9c:8f:53:79: 7a:a1:d9:b2:93:47:e6:1e:da:78:90:7e:e7:d3:a9:fb:66:07: 9a:50:cb:42:59:6e:45:93:6a:e8:b9:65:e8:06:b8:fd:be:31: 2c:d0:e5:ef:1b:e6:77:11:b3:77:e9:c9:07:31:61:8e:7b:ff: 3c:7e:b9:07:e9:b0:74:3c:8c:92:52:3b:5d:d3:67:16:0c:b2: 4c:22:85:19 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJwbrRxdjP40hhMQbBfZjAOjCm4EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAxMTMyWhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGRiNmIyYTRkN2I1ZGJiZmU3NzY3YzMzYTY2ODQ2MzRk MzRiY2QyZGUyNzdkZmM4YjhmNzFmZmU3YmRhODIwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwEWQ7h18eI3tSgAB9G1S/BsUzyTZLT+s07opW9YSzBkuS FhMwkPYdYszrZs+GPF03F9yfZYYGfmh6sR6kzpes0YQzG0D5XX495uNfrfgTAikp gjrXVHyFECIDzZCYWPFRarWgalhU671AipHIEmbgUSrK1wa+pju0o6sGfISODRzA v29wAwKjG4gb+PsZFnCTtbd32851D0GKqAP+GY7MNlDv18PJ+7LpTZUI/8F1LD4S N4g16RSCHClXceK8XTAcrUGQKJuSWPP13/YQFRe4O3r3gn1IkxEJW0ISFBZI8A9c 3KBuxdWHlqRNp1zJnv00Afr/a9ofw2ug9SBlpJXzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUmmTbMqi226cTXW5vBJAzfvUR6lMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiZjA1ZGM3LWE0MzAtNDAxZi1iMmFkLTZkNTU5ZjhjNjI0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/5UDANBgkqhkiG9w0BAQsFAAOCAQEAVT7c3qiKkkSaOQKId9R5q3R8 kSuipvb8AwG8BFviCRzG/DzByBIsJ4PcZ7PZI5+5pwYkjTUdGjiFsf8uBF8Q5H/V N1cl3cGsR7X50WoOesHTTZqYu4QK2oncdOCsqSpGMDwL/iYA8VK9411cg8WuBUV3 k0a1aVPBZN0rPyFE7n9widJpPLJus1f88Y9vUCb1eQc6TXpoGK2LOZIln+zfMObC iA8Ow2BQh6xCng/4JW2cj1N5eqHZspNH5h7aeJB+59Op+2YHmlDLQlluRZNq6Lll 6Aa4/b4xLNDl7xvmdxGzd+nJBzFhjnv/PH65B+mwdDyMklI7XdNnFgyyTCKFGQ== -----END CERTIFICATE-----Generated at Tue Jun 17 12:09:01 2025 by rpki-client