$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd4a16e-f5e8-4c2d-9d1d-66e408445e63.roa File: efd4a16e-f5e8-4c2d-9d1d-66e408445e63.roa (raw, json) Hash identifier: C3UL4nWX6Kum4Rx0tg06wneO2WIGctcb83oVWCAw748= Subject key identifier: 71:78:6B:61:B6:62:46:31:4D:46:34:5F:78:D0:1F:5C:B2:A9:6B:3D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 591CB6C3844060918DEA188355AF82AD7C5EAA89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd4a16e-f5e8-4c2d-9d1d-66e408445e63.roa Signing time: Fri 27 Jun 2025 00:20:58 +0000 ROA not before: Fri 27 Jun 2025 00:20:58 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffe:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1c:b6:c3:84:40:60:91:8d:ea:18:83:55:af:82:ad:7c:5e:aa:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 27 00:20:58 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=d6d5009fa9053753f05143b6e6c02ec4f25d0b694d957291b587cc4dbd92541b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:83:b1:7c:e2:95:41:9e:0b:83:13:7e:c6:54: 21:f7:ee:30:07:71:bc:c2:1d:85:6a:54:95:3b:b2: c7:af:e1:66:ef:1b:bd:72:a5:a6:79:05:43:ab:d0: 85:06:ac:37:bf:fe:3f:2b:5e:f6:c1:98:49:b7:15: 69:d6:2e:64:9c:a7:b8:b2:74:ee:63:86:30:6d:d6: 3b:be:f6:57:a8:ef:6e:2f:7d:52:0c:66:cb:4f:b8: 60:bb:7a:23:07:a2:95:6e:34:8b:42:5b:b7:39:06: a9:c2:80:da:2d:f1:bf:51:40:3f:04:9d:7a:d2:13: 51:07:d4:cd:9e:bb:c9:e3:6b:82:c2:42:92:3c:ab: 26:58:f5:1d:23:1e:ad:4f:4d:03:50:ad:6a:4a:0f: 9f:b2:3f:c5:ee:7b:10:0f:9c:4c:ff:72:6e:42:9e: 02:10:af:68:89:82:8f:65:ef:44:82:bd:01:52:22: 80:d9:54:a5:66:d8:e3:c6:c9:f4:03:57:d1:d0:3c: af:3e:52:11:95:3c:cf:04:79:c2:dd:23:bf:ff:e4: 40:93:f0:57:27:7e:16:fb:ce:a2:6e:f7:fd:46:2d: 84:2c:a6:a8:b7:ae:e1:7d:2c:04:c7:e0:1d:44:17: 45:8b:2f:01:4a:38:52:1e:87:ca:42:0b:a9:37:9d: 73:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:78:6B:61:B6:62:46:31:4D:46:34:5F:78:D0:1F:5C:B2:A9:6B:3D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efd4a16e-f5e8-4c2d-9d1d-66e408445e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffe:3400::/40 Signature Algorithm: sha256WithRSAEncryption 94:a0:44:ff:7b:f3:31:42:59:0e:ef:43:cc:97:99:58:61:e1: 99:cd:77:3d:76:95:b0:48:73:39:ac:31:e9:a6:6e:9b:7b:af: d0:9f:bc:f8:af:a8:9f:73:ef:f7:48:9c:6b:15:83:41:d4:6c: ef:5e:f4:cf:8a:64:96:b1:c2:aa:93:af:95:22:ce:3c:1f:6d: 61:0b:3a:9d:8b:92:68:20:dd:78:0a:7e:cb:8d:4c:f7:88:d0: ac:13:de:db:56:76:0a:40:da:01:68:2a:fa:ac:2e:40:67:48: 91:6d:84:df:04:1d:77:e7:45:93:40:62:1d:08:d4:ea:25:0c: 33:04:59:d7:07:b0:59:69:65:9a:db:06:38:bb:2a:f9:3e:1a: ba:24:f2:4d:3c:f4:95:31:54:14:6f:ec:b6:a8:ab:89:96:29: f1:ef:bd:53:c1:07:fd:a5:f4:e0:c9:18:a3:16:ed:a6:ab:de: 97:2d:43:a4:a3:89:c9:66:11:14:56:a2:ab:3a:cc:bf:60:1a: ad:91:e3:96:4c:2d:0d:4d:ed:1a:dd:3c:04:c9:78:d0:db:46: 00:26:fe:ba:76:e2:a6:ee:93:e4:02:a7:01:34:fe:c0:52:96: 2d:74:2f:68:3c:8e:3c:e8:f4:f6:bf:d8:5b:0d:ba:42:15:ac: 89:2b:3e:94 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWRy2w4RAYJGN6hiDVa+CrXxeqokwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI3MDAyMDU4WhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNmQ1MDA5ZmE5MDUzNzUzZjA1MTQzYjZlNmMwMmVjNGYy NWQwYjY5NGQ5NTcyOTFiNTg3Y2M0ZGJkOTI1NDFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTg7F84pVBnguDE37GVCH37jAHcbzCHYVqVJU7ssev4Wbv G71ypaZ5BUOr0IUGrDe//j8rXvbBmEm3FWnWLmScp7iydO5jhjBt1ju+9leo724v fVIMZstPuGC7eiMHopVuNItCW7c5BqnCgNot8b9RQD8EnXrSE1EH1M2eu8nja4LC QpI8qyZY9R0jHq1PTQNQrWpKD5+yP8XuexAPnEz/cm5CngIQr2iJgo9l70SCvQFS IoDZVKVm2OPGyfQDV9HQPK8+UhGVPM8EecLdI7//5ECT8Fcnfhb7zqJu9/1GLYQs pqi3ruF9LATH4B1EF0WLLwFKOFIeh8pCC6k3nXMjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUcXhrYbZiRjFNRjRfeNAfXLKpaz0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmZDRhMTZlLWY1ZTgtNGMyZC05ZDFkLTY2ZTQwODQ0NWU2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/+NDANBgkqhkiG9w0BAQsFAAOCAQEAlKBE/3vzMUJZDu9DzJeZWGHh mc13PXaVsEhzOawx6aZum3uv0J+8+K+on3Pv90icaxWDQdRs7170z4pklrHCqpOv lSLOPB9tYQs6nYuSaCDdeAp+y41M94jQrBPe21Z2CkDaAWgq+qwuQGdIkW2E3wQd d+dFk0BiHQjU6iUMMwRZ1wewWWllmtsGOLsq+T4auiTyTTz0lTFUFG/stqiriZYp 8e+9U8EH/aX04MkYoxbtpqvely1DpKOJyWYRFFaiqzrMv2AarZHjlkwtDU3tGt08 BMl40NtGACb+unbipu6T5AKnATT+wFKWLXQvaDyOPOj09r/YWw26QhWsiSs+lA== -----END CERTIFICATE-----Generated at Sun Jun 29 08:51:35 2025 by rpki-client