$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/954fe8c8-f86c-46da-9ad1-2cb75fee8130.roa File: 954fe8c8-f86c-46da-9ad1-2cb75fee8130.roa (raw, json) Hash identifier: Qk+h6aPEp36s96TIrklPpieogzyU1St594nrVmPyyYQ= Subject key identifier: AD:8A:2C:6E:4E:BD:F3:5E:F6:59:D3:4E:EE:C3:E9:B9:FA:C5:B5:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6956787740907E32C7E006437D43553877850AE4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/954fe8c8-f86c-46da-9ad1-2cb75fee8130.roa Signing time: Tue 10 Jun 2025 17:01:57 +0000 ROA not before: Tue 10 Jun 2025 17:01:57 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:56:78:77:40:90:7e:32:c7:e0:06:43:7d:43:55:38:77:85:0a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 17:01:57 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=e92a94871a3fcb05788162043e1ebc14121d667d3b9e45085a162c1952341eda, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:49:7a:70:17:dc:6b:c0:a4:d2:06:b7:1e: 21:ea:c1:50:d6:c8:5a:40:f3:6b:2d:90:b7:1d:47: 24:50:8d:fc:8e:75:97:25:18:11:44:25:53:d5:a6: 8d:7b:f6:22:d1:ce:5f:2e:99:c7:2d:b6:b9:3a:dc: b3:a4:46:8d:06:61:3f:c4:2c:ea:69:5f:6b:a5:96: 2f:99:9a:aa:28:ef:64:26:a6:2f:ca:a2:29:73:e5: 5a:ce:89:09:a4:49:0c:66:f6:96:d4:3f:38:f4:6c: ba:42:d0:dc:29:1b:27:37:cf:49:2c:54:94:42:55: ec:6b:c9:98:e0:b3:2b:4e:1c:2f:d3:37:f3:bc:b6: d8:43:9a:63:99:25:00:a9:51:86:c7:68:bf:dd:9b: a2:95:f5:e2:91:17:b0:41:c8:74:7f:34:d4:95:e6: 39:8e:4f:85:2b:59:93:8b:37:56:8f:57:4b:b7:d2: a1:b6:34:34:ec:c9:cf:b6:66:f3:c0:27:51:c0:91: 84:9c:11:84:3d:fb:fd:e5:e8:7a:7b:ac:19:1b:db: 17:62:36:64:b9:28:cf:9b:6b:61:c8:91:e6:3b:2b: de:35:c0:a0:b0:d2:c1:2f:f8:ec:43:13:22:56:4f: be:1f:0b:d4:a3:54:55:a2:51:c5:34:0e:0b:c0:8b: eb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8A:2C:6E:4E:BD:F3:5E:F6:59:D3:4E:EE:C3:E9:B9:FA:C5:B5:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/954fe8c8-f86c-46da-9ad1-2cb75fee8130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:4020::/48 Signature Algorithm: sha256WithRSAEncryption 99:fb:ff:65:cd:4f:5d:cd:95:f5:26:16:3a:dd:43:cc:df:24: 40:1f:8b:72:35:cf:04:fb:06:3e:6f:83:1a:67:ba:bc:96:12: c8:b3:a7:85:03:aa:c3:06:68:18:f0:7e:c6:ca:dc:3a:14:ca: f2:11:b3:71:5f:af:f8:de:9b:33:ab:e6:7a:c4:ee:79:2c:b6: 5e:77:0e:0c:9c:09:6e:5e:6c:96:98:00:13:26:2d:de:ee:9a: 02:c4:f7:96:45:ce:c3:90:e6:04:c6:45:15:6f:7d:9a:ef:aa: 11:48:8a:4b:bc:c4:0e:74:ab:d5:40:8a:a5:63:ab:25:52:84: 92:bd:60:0c:a0:ce:a1:f0:a8:df:cf:bc:7c:37:d6:29:55:5c: 80:86:e2:c0:7e:b1:e0:83:3f:5a:bb:e2:48:81:21:93:30:fa: ca:3f:d8:2d:e7:ef:35:88:d8:a8:4e:7b:a4:e6:78:3e:8b:8a: 28:0d:c3:1a:ba:ed:0b:cd:85:e4:9a:ee:1b:f3:35:7c:6f:18: 56:39:aa:66:3d:6a:ab:70:c7:4c:86:fb:7c:84:3b:06:b4:1a: 02:3f:1d:df:86:bd:8e:49:de:e6:c3:c6:1d:e6:0c:98:4f:50: 11:10:02:74:48:91:cd:82:4a:cf:03:6d:ef:60:69:73:e8:3e: 40:db:9f:7f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaVZ4d0CQfjLH4AZDfUNVOHeFCuQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTcwMTU3WhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTJhOTQ4NzFhM2ZjYjA1Nzg4MTYyMDQzZTFlYmMxNDEy MWQ2NjdkM2I5ZTQ1MDg1YTE2MmMxOTUyMzQxZWRhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwDEl6cBfca8Ck0ga3HiHqwVDWyFpA82stkLcdRyRQjfyO dZclGBFEJVPVpo179iLRzl8umccttrk63LOkRo0GYT/ELOppX2ulli+Zmqoo72Qm pi/Koilz5VrOiQmkSQxm9pbUPzj0bLpC0NwpGyc3z0ksVJRCVexryZjgsytOHC/T N/O8tthDmmOZJQCpUYbHaL/dm6KV9eKRF7BByHR/NNSV5jmOT4UrWZOLN1aPV0u3 0qG2NDTsyc+2ZvPAJ1HAkYScEYQ9+/3l6Hp7rBkb2xdiNmS5KM+ba2HIkeY7K941 wKCw0sEv+OxDEyJWT74fC9SjVFWiUcU0DgvAi+u5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrYosbk698172WdNO7sPpufrFtSYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk1NGZlOGM4LWY4NmMtNDZkYS05YWQxLTJjYjc1ZmVlODEzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hQCAwDQYJKoZIhvcNAQELBQADggEBAJn7/2XNT13NlfUmFjrdQ8zf JEAfi3I1zwT7Bj5vgxpnuryWEsizp4UDqsMGaBjwfsbK3DoUyvIRs3Ffr/jemzOr 5nrE7nkstl53DgycCW5ebJaYABMmLd7umgLE95ZFzsOQ5gTGRRVvfZrvqhFIiku8 xA50q9VAiqVjqyVShJK9YAygzqHwqN/PvHw31ilVXICG4sB+seCDP1q74kiBIZMw +so/2C3n7zWI2KhOe6TmeD6LiigNwxq67QvNheSa7hvzNXxvGFY5qmY9aqtwx0yG +3yEOwa0GgI/Hd+GvY5J3ubDxh3mDJhPUBEQAnRIkc2CSs8Dbe9gaXPoPkDbn38= -----END CERTIFICATE-----Generated at Sat Jun 14 06:34:20 2025 by rpki-client