$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/974e6dfc-61bf-4f05-b26a-c4ebcc875cfc.roa File: 974e6dfc-61bf-4f05-b26a-c4ebcc875cfc.roa (raw, json) Hash identifier: 4SJVGAfVHr2U6TyAwdQ35niCRt/qr//ixJVrLQaG7sY= Subject key identifier: B7:5B:F1:1F:4B:68:60:AF:CF:2B:36:BB:B5:24:2D:60:17:E5:49:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 64874A2F6CB5191028D5A310EDA0ACACE75C99 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/974e6dfc-61bf-4f05-b26a-c4ebcc875cfc.roa Signing time: Mon 23 Jun 2025 15:20:34 +0000 ROA not before: Mon 23 Jun 2025 15:20:34 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f21::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:87:4a:2f:6c:b5:19:10:28:d5:a3:10:ed:a0:ac:ac:e7:5c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 15:20:34 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=b1b5f68595177c80303e811b27f6eff69ba14ee8cbf0655e232dfbf4f83d080b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:9c:ef:7d:eb:aa:89:17:aa:5d:92:3c:f6: d0:04:20:85:84:27:dc:fe:49:48:df:fc:5a:d6:71: d6:dc:74:5d:f2:4e:b8:13:7c:8f:67:09:94:08:30: 21:24:eb:69:82:29:ca:77:36:67:4e:8a:73:80:45: 96:24:67:09:33:2e:06:39:0c:48:4f:a0:69:ee:71: 4c:d7:72:73:2b:d2:8b:bb:c5:69:46:42:98:f7:e6: 5f:c7:c3:a1:27:d0:da:09:2c:4a:53:be:a1:6e:5b: 11:a1:05:50:3c:48:d9:21:80:4a:49:bc:a7:f3:4a: 76:a5:5f:73:2b:a5:a5:41:c0:1f:0e:e4:67:e8:cb: 6c:fb:64:ff:4d:f2:49:3e:d8:da:de:e0:c7:3f:14: d5:0e:85:0b:83:27:0b:b3:4e:ec:61:ad:dd:48:a3: 70:af:98:27:ea:9d:46:d8:d2:61:59:ce:d1:08:d9: ed:d7:de:26:97:2f:4d:5a:71:55:b9:6b:a9:e9:b8: 80:70:93:c8:e8:76:55:82:b6:ac:df:19:51:36:79: 76:53:81:76:31:11:d9:7f:59:94:e2:a9:15:95:ba: 94:3c:13:20:dc:6d:01:01:fb:3d:cc:74:68:5f:e2: 73:4e:cf:a9:d2:b1:b3:d6:55:0c:2a:1d:8d:e1:14: a6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5B:F1:1F:4B:68:60:AF:CF:2B:36:BB:B5:24:2D:60:17:E5:49:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/974e6dfc-61bf-4f05-b26a-c4ebcc875cfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f21::/36 Signature Algorithm: sha256WithRSAEncryption 40:3d:d9:3f:36:1b:a5:43:4c:8b:fc:b1:46:ce:0e:dd:ac:9b: 01:b7:2e:c4:03:7b:31:2f:46:4d:83:f3:cf:60:93:41:5e:4c: 91:cb:53:5f:29:7c:35:39:ea:ca:df:d5:aa:d0:a7:04:64:ac: cc:6a:bd:33:5a:5b:5a:8c:7c:c6:76:56:67:fa:d9:a3:8f:27: 69:2f:2c:a3:49:6e:c7:6d:c7:f6:a3:0d:62:88:4d:90:c3:6b: a3:71:e4:07:c5:05:42:1f:0c:e0:04:bd:2a:0a:9c:a1:57:41: 67:f2:e3:d0:ab:21:e8:c0:8b:3e:a0:a4:48:c7:0b:01:d0:7e: 6a:57:15:cf:3b:61:b2:76:79:06:ff:c8:b7:39:3c:ae:e2:48: 85:44:69:3a:65:59:6a:3a:da:25:a5:3d:7e:af:60:3d:59:9d: 0f:54:61:1d:3a:3a:3c:8b:ff:f0:fd:d0:e5:26:03:a5:3f:d8: 0e:68:c1:1a:70:ec:dd:b8:00:29:57:36:2d:33:0f:16:9f:04: 99:60:4d:ce:81:6b:59:d4:dd:84:50:da:a4:c1:66:a0:0f:c5: d5:cc:b2:1c:d4:14:b3:28:90:85:56:51:36:8e:64:fd:09:4c: 41:43:ef:bb:c6:51:b0:66:a6:74:95:5c:2e:cc:5a:ac:95:8a: f0:5f:34:39 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITZIdKL2y1GRAo1aMQ7aCsrOdcmTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA2MjMxNTIwMzRaFw0yNTA3MjgyMzU5NTla MHoxSTBHBgNVBAUTQGIxYjVmNjg1OTUxNzdjODAzMDNlODExYjI3ZjZlZmY2OWJh MTRlZThjYmYwNjU1ZTIzMmRmYmY0ZjgzZDA4MGIxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALaTnO9966qJF6pdkjz20AQghYQn3P5JSN/8WtZx1tx0XfJO uBN8j2cJlAgwISTraYIpync2Z06Kc4BFliRnCTMuBjkMSE+gae5xTNdycyvSi7vF aUZCmPfmX8fDoSfQ2gksSlO+oW5bEaEFUDxI2SGASkm8p/NKdqVfcyulpUHAHw7k Z+jLbPtk/03yST7Y2t7gxz8U1Q6FC4MnC7NO7GGt3UijcK+YJ+qdRtjSYVnO0QjZ 7dfeJpcvTVpxVblrqem4gHCTyOh2VYK2rN8ZUTZ5dlOBdjER2X9ZlOKpFZW6lDwT INxtAQH7Pcx0aF/ic07PqdKxs9ZVDCodjeEUpvcCAwEAAaOCArMwggKvMB0GA1Ud DgQWBBS3W/EfS2hgr88rNru1JC1gF+VJuTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvOTc0ZTZkZmMtNjFiZi00ZjA1LWIyNmEtYzRlYmNjODc1Y2ZjLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGBCYAHyEAMA0GCSqGSIb3DQEBCwUAA4IBAQBAPdk/NhulQ0yL/LFGzg7drJsB ty7EA3sxL0ZNg/PPYJNBXkyRy1NfKXw1OerK39Wq0KcEZKzMar0zWltajHzGdlZn +tmjjydpLyyjSW7Hbcf2ow1iiE2Qw2ujceQHxQVCHwzgBL0qCpyhV0Fn8uPQqyHo wIs+oKRIxwsB0H5qVxXPO2GydnkG/8i3OTyu4kiFRGk6ZVlqOtolpT1+r2A9WZ0P VGEdOjo8i//w/dDlJgOlP9gOaMEacOzduAApVzYtMw8WnwSZYE3OgWtZ1N2EUNqk wWagD8XVzLIc1BSzKJCFVlE2jmT9CUxBQ++7xlGwZqZ0lVwuzFqslYrwXzQ5 -----END CERTIFICATE-----Generated at Sun Jun 29 04:30:26 2025 by rpki-client