$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b47ae49-7e0d-437b-8132-173dee6fae95.roa File: 2b47ae49-7e0d-437b-8132-173dee6fae95.roa (raw, json) Hash identifier: 9c111psUM0tHAiHU22LyiZrliTwPn8gIsbYIMdgHSY0= Subject key identifier: 0B:E4:D4:1F:29:D8:CC:52:8F:C0:7E:F9:DA:E7:29:AC:E1:7C:D0:35 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A422F1C70049D2D5694D95D6692736AD8C63C92 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b47ae49-7e0d-437b-8132-173dee6fae95.roa Signing time: Tue 25 Mar 2025 17:00:23 +0000 ROA not before: Tue 25 Mar 2025 17:00:23 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:42:2f:1c:70:04:9d:2d:56:94:d9:5d:66:92:73:6a:d8:c6:3c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 17:00:23 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c5:d3:68:5a:71:4d:33:fb:73:4c:c3:19:0b: b5:fb:b6:3e:38:b0:10:6a:82:d3:9d:8d:be:96:71: 36:96:27:be:c4:ba:cd:5c:bb:cc:8f:0d:7a:f2:97: bf:64:45:76:81:c9:01:e2:f6:bb:b2:a2:c3:c2:74: 76:5d:44:bb:3e:6a:64:f8:f7:ef:db:97:cf:24:1e: 87:1d:e3:c9:64:dc:ed:e3:91:52:6f:e2:23:11:40: 2e:e7:44:c2:78:b0:00:33:d1:9f:73:e9:d4:5d:67: 98:94:ef:7e:dd:ad:88:ad:60:24:87:92:83:bc:da: 45:26:f2:12:b9:a4:38:80:59:43:8b:b0:7e:8d:db: c3:1d:8a:bf:35:32:1c:0b:57:aa:85:75:6d:8a:c0: 9b:92:60:9a:d3:4d:b3:60:e1:c5:d9:6c:2d:68:a5: d8:db:7f:97:91:a8:15:a1:c9:4e:e4:91:d1:da:bc: 7f:7e:37:f7:c1:52:ca:0f:2d:2e:cc:29:80:1a:f5: a3:60:48:08:57:40:af:b6:8f:0a:2a:01:10:32:1b: 1d:d9:30:a6:18:d4:58:af:ef:e7:52:d3:bc:35:0f: 2d:e9:86:d4:10:d9:c0:04:fc:71:71:f0:94:9b:6e: 98:9d:f8:f6:d2:a9:f6:a4:45:9b:d9:fd:06:e5:31: c9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E4:D4:1F:29:D8:CC:52:8F:C0:7E:F9:DA:E7:29:AC:E1:7C:D0:35 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b47ae49-7e0d-437b-8132-173dee6fae95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8110::/48 Signature Algorithm: sha256WithRSAEncryption a2:f6:a9:f4:13:d4:07:fe:cd:f6:0a:fb:64:28:c3:90:88:1b: c6:62:1e:3b:3f:5a:76:62:f8:e7:78:99:a4:40:53:1a:12:e5: 15:2e:d1:62:9a:07:06:25:2a:83:40:fd:84:95:b5:38:fe:19: ab:dd:40:68:15:2d:65:d7:ba:d2:8f:3c:8d:56:58:f2:c1:75: ef:a4:b7:e7:b6:82:e9:6c:d1:2a:c4:b4:2e:db:56:81:8d:6e: bc:65:a9:7d:ea:97:2f:79:81:a3:42:cf:5c:85:01:6b:f6:b8: fa:fd:12:e4:63:5f:8a:9e:d3:9c:1b:79:a2:c6:c7:a4:c4:a7: 78:7f:53:ae:cd:15:e2:15:ab:00:a2:08:5a:6e:36:93:db:13: 7c:af:7e:e8:d0:3c:9e:24:a7:22:be:b0:48:77:cc:9c:6f:25: 41:59:18:40:f4:cf:4b:4e:ce:6e:67:da:dc:a3:ef:bd:53:63: 7b:71:6a:61:0a:5b:d4:1f:72:e0:9c:23:39:f7:19:9d:58:3d: 88:61:2a:52:7a:87:48:b3:05:10:a8:c7:93:6a:ee:15:15:42: 19:07:e8:eb:8d:58:49:18:03:18:10:bb:b3:08:3f:89:69:7e: 80:43:61:59:bf:d5:e5:d3:93:04:3f:d2:55:aa:84:39:e3:91: 28:3f:04:fe -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKkIvHHAEnS1WlNldZpJzatjGPJIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTcwMDIzWhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTI4MWMyZTdiNjZjZTMxZGQ0YTM2YTMwN2U3MTBkOWM0 M2VmMTgyNzRiZDYwMjVlZjVhYTBkYmQ4NDhiYjc1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkxdNoWnFNM/tzTMMZC7X7tj44sBBqgtOdjb6WcTaWJ77E us1cu8yPDXryl79kRXaByQHi9ruyosPCdHZdRLs+amT49+/bl88kHocd48lk3O3j kVJv4iMRQC7nRMJ4sAAz0Z9z6dRdZ5iU737drYitYCSHkoO82kUm8hK5pDiAWUOL sH6N28Mdir81MhwLV6qFdW2KwJuSYJrTTbNg4cXZbC1opdjbf5eRqBWhyU7kkdHa vH9+N/fBUsoPLS7MKYAa9aNgSAhXQK+2jwoqARAyGx3ZMKYY1Fiv7+dS07w1Dy3p htQQ2cAE/HFx8JSbbpid+PbSqfakRZvZ/QblMckJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUC+TUHynYzFKPwH752ucprOF80DUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiNDdhZTQ5LTdlMGQtNDM3Yi04MTMyLTE3M2RlZTZmYWU5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gRAwDQYJKoZIhvcNAQELBQADggEBAKL2qfQT1Af+zfYK+2Qow5CI G8ZiHjs/WnZi+Od4maRAUxoS5RUu0WKaBwYlKoNA/YSVtTj+GavdQGgVLWXXutKP PI1WWPLBde+kt+e2guls0SrEtC7bVoGNbrxlqX3qly95gaNCz1yFAWv2uPr9EuRj X4qe05wbeaLGx6TEp3h/U67NFeIVqwCiCFpuNpPbE3yvfujQPJ4kpyK+sEh3zJxv JUFZGED0z0tOzm5n2tyj771TY3txamEKW9QfcuCcIzn3GZ1YPYhhKlJ6h0izBRCo x5Nq7hUVQhkH6OuNWEkYAxgQu7MIP4lpfoBDYVm/1eXTkwQ/0lWqhDnjkSg/BP4= -----END CERTIFICATE-----Generated at Sat Apr 5 19:34:08 2025 by rpki-client