$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ac4ff7b-0625-40ec-9df6-770e74fbb3f9.roa File: 8ac4ff7b-0625-40ec-9df6-770e74fbb3f9.roa (raw, json) Hash identifier: bFp1Ko8HfxChBt4HMcDeZT+47as9vLSqDeBf5Kx3mE0= Subject key identifier: 9F:0F:C6:4D:8B:BF:EF:EC:9B:EE:49:36:6E:C5:71:A4:9B:A4:84:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A71690765C99F5DC7C58EEF6C6865068F1E3F40 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ac4ff7b-0625-40ec-9df6-770e74fbb3f9.roa Signing time: Mon 05 May 2025 15:11:41 +0000 ROA not before: Mon 05 May 2025 15:11:41 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f32:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:71:69:07:65:c9:9f:5d:c7:c5:8e:ef:6c:68:65:06:8f:1e:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:11:41 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=a80004fd0a1eb5d00ddc62052ec5be32b7c5692bf5751da7b0d7863f6db70654, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:42:6f:65:71:7a:26:0b:dd:f7:bf:03:4b:3f: 12:18:3f:9c:51:49:d2:8f:3c:86:60:4a:ee:5c:c8: 10:13:f9:22:dc:39:6c:23:6f:e5:14:76:d1:b0:2b: 78:51:06:35:ad:73:c2:d3:4f:91:14:45:5a:12:02: 8e:50:5d:e6:7e:6c:c3:63:2a:18:7b:8c:3e:22:39: d1:9d:47:90:89:5b:ed:06:86:b1:b3:65:eb:1f:73: b8:94:d3:ec:a0:10:a0:9d:16:7f:40:e1:ec:14:f6: 72:24:9f:97:b0:6d:55:42:89:80:33:f1:d7:fc:d8: 61:25:8c:af:d6:41:28:b2:6b:f8:2c:88:1c:14:ac: b2:db:52:ec:d3:4e:d9:41:68:2a:46:64:37:4f:96: 95:f7:f6:2b:1b:20:0f:d0:48:ff:33:b3:83:97:2e: d4:1b:57:58:d1:3f:b5:e0:74:8d:ea:16:19:dd:43: 66:b9:a3:65:9c:e8:c7:d8:46:7c:6e:eb:dc:ab:a0: 22:5e:8e:0e:af:c6:09:68:46:d7:89:25:51:ea:7d: a9:dd:1b:97:93:61:ef:b6:6d:59:5b:63:33:70:7a: 1f:1d:e0:13:d0:60:0a:06:88:ff:21:4a:4a:a3:00: 30:22:9b:ff:8a:fe:92:7b:65:86:5b:84:1f:a0:64: e9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0F:C6:4D:8B:BF:EF:EC:9B:EE:49:36:6E:C5:71:A4:9B:A4:84:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ac4ff7b-0625-40ec-9df6-770e74fbb3f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32:5000::/40 Signature Algorithm: sha256WithRSAEncryption 5b:9f:1f:e5:18:bb:0d:22:50:a1:35:75:fe:16:ec:af:24:0a: f7:49:1e:98:82:02:66:74:e6:96:3a:9a:e3:b5:22:af:c1:29: 77:91:73:11:ba:53:ee:7c:65:26:49:53:c5:06:cc:33:07:92: 26:a4:0f:d7:c4:f6:e0:22:9d:c4:c9:4d:01:c2:63:66:bc:bd: 9b:c5:ae:e8:39:36:81:9f:40:7d:8f:0a:e7:f5:0a:ab:3a:0f: d8:8e:32:b7:86:be:3b:12:cc:a2:c1:c1:ec:e8:01:29:07:94: 08:cc:21:c9:2d:82:24:3c:8b:4f:59:3d:9a:f4:ec:20:aa:91: d8:85:4d:b3:a1:70:da:28:90:5d:45:90:5a:2e:e4:2e:03:16: b1:ca:e5:48:d5:93:ec:f0:79:68:32:44:c7:80:f9:99:e0:43: 8d:db:6f:47:fb:a1:47:37:bb:c7:a2:6a:05:34:d7:76:92:29: 0e:d1:af:91:49:0f:e7:e2:cb:d6:53:d0:43:c5:20:87:ad:33: ee:c9:76:24:c6:9a:46:2c:31:98:52:37:72:a1:10:8d:70:17: e6:19:c8:4d:e1:9c:82:30:63:84:b4:de:81:5a:14:dc:86:58: 5a:0b:4b:9b:47:fd:ce:8f:96:ff:ef:de:f1:25:f0:fe:d2:5d: 0e:ee:d2:35 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKnFpB2XJn13HxY7vbGhlBo8eP0AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTUxMTQxWhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhODAwMDRmZDBhMWViNWQwMGRkYzYyMDUyZWM1YmUzMmI3 YzU2OTJiZjU3NTFkYTdiMGQ3ODYzZjZkYjcwNjU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdQm9lcXomC933vwNLPxIYP5xRSdKPPIZgSu5cyBAT+SLc OWwjb+UUdtGwK3hRBjWtc8LTT5EURVoSAo5QXeZ+bMNjKhh7jD4iOdGdR5CJW+0G hrGzZesfc7iU0+ygEKCdFn9A4ewU9nIkn5ewbVVCiYAz8df82GEljK/WQSiya/gs iBwUrLLbUuzTTtlBaCpGZDdPlpX39isbIA/QSP8zs4OXLtQbV1jRP7XgdI3qFhnd Q2a5o2Wc6MfYRnxu69yroCJejg6vxgloRteJJVHqfandG5eTYe+2bVlbYzNweh8d 4BPQYAoGiP8hSkqjADAim/+K/pJ7ZYZbhB+gZOkNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUnw/GTYu/7+yb7kk2bsVxpJukhAQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhYzRmZjdiLTA2MjUtNDBlYy05ZGY2LTc3MGU3NGZiYjNmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8yUDANBgkqhkiG9w0BAQsFAAOCAQEAW58f5Ri7DSJQoTV1/hbsryQK 90kemIICZnTmljqa47Uir8Epd5FzEbpT7nxlJklTxQbMMweSJqQP18T24CKdxMlN AcJjZry9m8Wu6Dk2gZ9AfY8K5/UKqzoP2I4yt4a+OxLMosHB7OgBKQeUCMwhyS2C JDyLT1k9mvTsIKqR2IVNs6Fw2iiQXUWQWi7kLgMWscrlSNWT7PB5aDJEx4D5meBD jdtvR/uhRze7x6JqBTTXdpIpDtGvkUkP5+LL1lPQQ8Ugh60z7sl2JMaaRiwxmFI3 cqEQjXAX5hnITeGcgjBjhLTegVoU3IZYWgtLm0f9zo+W/+/e8SXw/tJdDu7SNQ== -----END CERTIFICATE-----Generated at Sun May 11 16:42:16 2025 by rpki-client