$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1c06e57-fc5f-4705-8c07-450199fb8ad7.roa File: a1c06e57-fc5f-4705-8c07-450199fb8ad7.roa (raw, json) Hash identifier: tss54/XdkPU5w9GRvla+pqKnjjyqzpO8r1mexwU7w2E= Subject key identifier: B8:40:45:CB:76:2D:7F:DA:85:F7:A4:0F:87:05:36:4C:FE:E8:78:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 448F8FC2DBC3BE788C0294177C3E02C1CFEFC7ED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1c06e57-fc5f-4705-8c07-450199fb8ad7.roa Signing time: Tue 10 Jun 2025 16:40:36 +0000 ROA not before: Tue 10 Jun 2025 16:40:36 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:81c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8f:8f:c2:db:c3:be:78:8c:02:94:17:7c:3e:02:c1:cf:ef:c7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:40:36 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=774512c2bb9c3022dd6cf324bda1c52922550e461e952d8311b3bc80a973f22b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:93:bb:98:89:68:b1:6d:3d:e7:61:a3:5a: 75:86:8f:20:00:c0:41:44:39:5d:5c:9b:8c:40:c1: 88:e2:ea:bf:ff:dc:4a:cf:79:db:a5:2c:8a:ba:18: 11:31:d3:53:53:c3:bb:20:a9:c7:9b:07:72:70:34: 23:6e:a0:95:94:41:0a:cf:b7:ff:e3:80:c9:4b:69: f4:61:db:3b:15:87:62:26:ec:68:b1:6c:78:7c:ab: 6b:08:e5:64:50:7b:37:a2:6e:f9:15:8e:28:84:c5: 3c:94:92:7c:9f:31:27:56:1b:fc:31:19:54:2e:43: 85:34:94:24:dc:81:1c:24:19:1c:27:50:3f:d6:20: db:5a:e8:30:b4:52:63:9f:a6:c1:ee:5e:4b:5f:81: fa:00:ad:ad:ff:42:6f:75:dd:80:3e:74:15:f9:e4: 16:2d:b4:09:2c:01:cc:d5:b1:d3:e3:2c:e1:bb:6b: 29:ac:e3:d3:eb:cb:ab:37:bc:22:0c:5d:bb:ac:d5: 6f:4a:0b:71:28:36:16:2f:bb:0e:96:85:de:f6:b9: 31:20:77:3f:51:c4:59:1b:b0:16:b3:53:00:16:2f: fc:bd:af:b4:53:18:c6:9d:57:c3:cf:94:8e:79:76: 86:fe:37:a0:48:47:ae:32:3a:42:18:3b:f0:f6:6a: 9f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:40:45:CB:76:2D:7F:DA:85:F7:A4:0F:87:05:36:4C:FE:E8:78:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1c06e57-fc5f-4705-8c07-450199fb8ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:81c0::/48 Signature Algorithm: sha256WithRSAEncryption ca:f2:d4:f1:42:e4:a0:3c:dd:be:33:cd:42:a1:a8:4e:b6:37: 03:07:e4:7d:20:a0:05:02:7c:54:7a:9e:63:21:6c:b9:d0:f6: 59:ea:ef:78:c9:bd:6c:6d:de:a4:96:6a:20:2a:e0:53:8d:67: 69:aa:6f:69:35:08:0f:cc:84:13:e5:e7:be:5f:97:c6:fc:1b: 76:ec:c5:09:85:f2:e6:9c:4a:56:02:80:cb:f5:88:a4:dd:52: cc:8a:a5:8e:07:36:4b:90:db:6e:e8:62:4d:71:3c:d7:60:3f: 01:f6:79:34:ca:2f:4f:c7:42:33:c5:88:b8:b2:fd:97:c9:e3: f2:ef:b5:82:b2:be:d4:31:07:98:23:31:07:dc:53:b2:f8:78: 1a:f9:d1:d4:d9:71:af:1c:a8:7a:a2:aa:50:2b:86:b9:13:9a: ea:0b:70:40:eb:a8:65:8a:44:6e:f0:06:9d:0a:97:ed:8f:08: d6:d3:2c:53:b8:cf:4d:3f:5f:64:65:67:dc:40:36:15:e6:88: 26:ea:ab:fd:e0:b8:ce:95:1d:78:fc:9b:8e:b2:19:27:25:ce: e1:7b:48:4b:0b:35:4c:de:e3:50:99:85:61:51:33:8f:10:c6: 6f:cc:df:2d:fa:2d:ea:30:cf:02:49:ff:7b:17:66:4f:e9:43: 1d:d1:91:f3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURI+PwtvDvniMApQXfD4Cwc/vx+0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTY0MDM2WhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NzQ1MTJjMmJiOWMzMDIyZGQ2Y2YzMjRiZGExYzUyOTIy NTUwZTQ2MWU5NTJkODMxMWIzYmM4MGE5NzNmMjJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC37pO7mIlosW0952GjWnWGjyAAwEFEOV1cm4xAwYji6r// 3ErPedulLIq6GBEx01NTw7sgqcebB3JwNCNuoJWUQQrPt//jgMlLafRh2zsVh2Im 7GixbHh8q2sI5WRQezeibvkVjiiExTyUknyfMSdWG/wxGVQuQ4U0lCTcgRwkGRwn UD/WINta6DC0UmOfpsHuXktfgfoAra3/Qm913YA+dBX55BYttAksAczVsdPjLOG7 ayms49Pry6s3vCIMXbus1W9KC3EoNhYvuw6Whd72uTEgdz9RxFkbsBazUwAWL/y9 r7RTGMadV8PPlI55dob+N6BIR64yOkIYO/D2ap81AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuEBFy3Ytf9qF96QPhwU2TP7oePowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ExYzA2ZTU3LWZjNWYtNDcwNS04YzA3LTQ1MDE5OWZiOGFkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgcAwDQYJKoZIhvcNAQELBQADggEBAMry1PFC5KA83b4zzUKhqE62 NwMH5H0goAUCfFR6nmMhbLnQ9lnq73jJvWxt3qSWaiAq4FONZ2mqb2k1CA/MhBPl 575fl8b8G3bsxQmF8uacSlYCgMv1iKTdUsyKpY4HNkuQ227oYk1xPNdgPwH2eTTK L0/HQjPFiLiy/ZfJ4/LvtYKyvtQxB5gjMQfcU7L4eBr50dTZca8cqHqiqlArhrkT muoLcEDrqGWKRG7wBp0Kl+2PCNbTLFO4z00/X2RlZ9xANhXmiCbqq/3guM6VHXj8 m46yGSclzuF7SEsLNUze41CZhWFRM48Qxm/M3y36LeowzwJJ/3sXZk/pQx3RkfM= -----END CERTIFICATE-----Generated at Sun Jun 29 08:54:05 2025 by rpki-client