$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62d73b12-bd72-4fc5-8d0d-b0fd6b055927.roa File: 62d73b12-bd72-4fc5-8d0d-b0fd6b055927.roa (raw, json) Hash identifier: UmM4LXmMEtKZh5/wrMM9tjQfeH7c6YYKsMKd7LiysM0= Subject key identifier: 6D:0A:92:4F:24:D0:3F:2B:3A:FB:F6:2E:76:91:C3:67:83:4E:3D:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3E09C0D534A4C0DCC2458C53081BCEC3B2AE8E8F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62d73b12-bd72-4fc5-8d0d-b0fd6b055927.roa Signing time: Fri 04 Apr 2025 00:02:11 +0000 ROA not before: Fri 04 Apr 2025 00:02:11 +0000 ROA not after: Fri 09 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00::/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:09:c0:d5:34:a4:c0:dc:c2:45:8c:53:08:1b:ce:c3:b2:ae:8e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 4 00:02:11 2025 GMT Not After : May 9 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:df:7d:48:0a:5f:b5:11:86:89:a9:0f:88: da:8a:3b:5f:13:bb:42:3d:15:33:65:86:30:d6:ff: bf:c4:06:7d:c4:da:51:bb:c4:ff:a7:94:c6:6a:0a: 53:10:50:6c:dd:18:da:84:a1:36:cf:7d:48:5f:bb: 55:c8:7c:25:9f:e6:03:a3:68:94:f9:d1:9a:c8:02: 13:f2:1d:03:b3:9f:40:f3:55:0f:97:da:d6:3b:0b: 38:53:69:7c:5a:26:d4:66:12:72:30:0f:23:61:d1: df:3d:32:7c:1a:d9:21:35:be:95:2b:3a:75:05:f3: 2a:39:92:74:a9:56:83:70:6b:3d:1a:74:53:e7:85: 66:f7:34:4d:f2:60:f9:8f:49:65:a6:28:ae:af:65: 6a:a2:17:38:02:33:ab:24:7a:58:2d:ab:91:0a:70: 14:42:69:37:59:66:a4:b6:87:68:2f:bd:43:82:67: 24:f3:c6:dd:8f:5b:8f:e5:8c:cc:f4:a8:e4:a3:2b: df:53:c3:f4:a4:35:cd:13:1b:02:fb:0e:9c:78:70: 35:22:b9:fa:82:f2:6f:45:a6:e7:1a:a2:95:5e:a4: 59:16:33:60:2f:01:00:72:e4:24:85:98:be:cd:46: 21:eb:b2:fd:b8:58:06:45:c3:50:12:64:79:7c:4e: 7c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0A:92:4F:24:D0:3F:2B:3A:FB:F6:2E:76:91:C3:67:83:4E:3D:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62d73b12-bd72-4fc5-8d0d-b0fd6b055927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00::/24 Signature Algorithm: sha256WithRSAEncryption 0e:69:bf:a3:b7:35:27:30:93:1f:f1:55:4f:86:9f:c0:3a:2a: 65:5d:bf:d6:da:03:64:35:94:e3:f5:44:bd:14:bf:a1:6e:81: 47:89:84:99:ed:0c:43:a2:03:a9:bb:3e:b0:7e:d4:02:87:93: e0:dd:05:e0:65:60:c2:b7:ac:53:34:4c:95:e1:07:e5:9f:64: 41:7d:b2:c9:03:64:3e:e7:ef:2b:8d:a5:2d:b5:c4:a2:7b:35: 66:5f:97:1b:29:3e:4e:27:e1:ae:53:89:4a:23:c1:6e:25:ac: 17:09:fa:d0:86:b5:64:64:4c:13:e4:a9:ca:e9:1c:e8:22:45: 2c:9e:be:65:cf:7a:76:e1:96:c0:b5:c0:7b:a3:4b:77:fa:f3: 84:19:d4:54:ae:38:bb:8d:87:1f:52:8b:f1:04:39:78:f5:85: 68:f7:ca:f9:3d:8f:d5:5f:ae:19:43:fb:0e:ea:81:b9:20:18: c9:8d:ee:60:85:d4:fa:e8:fe:10:92:7d:00:0c:b4:64:e8:f3: a2:21:a8:f3:13:c7:9a:51:ba:4b:c5:1d:6b:1a:6d:a9:15:82: f4:1a:ff:fd:e9:e2:a7:56:82:f0:d1:1a:05:60:56:bb:a0:f4: 6a:29:ef:ae:7e:d6:f1:08:4e:7c:75:0d:91:29:b7:27:df:72: 8a:23:e0:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPgnA1TSkwNzCRYxTCBvOw7Kujo8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA0MDAwMjExWhcNMjUwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTc0YjI2YzIxYTYzMzU0YTQ5NDU2ODljMjM2NDE1MGEx OTNkODM5Nzg1ZTk5MmU3MWQ3ODUxZjIyNWZjZjExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBEd99SApftRGGiakPiNqKO18Tu0I9FTNlhjDW/7/EBn3E 2lG7xP+nlMZqClMQUGzdGNqEoTbPfUhfu1XIfCWf5gOjaJT50ZrIAhPyHQOzn0Dz VQ+X2tY7CzhTaXxaJtRmEnIwDyNh0d89Mnwa2SE1vpUrOnUF8yo5knSpVoNwaz0a dFPnhWb3NE3yYPmPSWWmKK6vZWqiFzgCM6skelgtq5EKcBRCaTdZZqS2h2gvvUOC ZyTzxt2PW4/ljMz0qOSjK99Tw/SkNc0TGwL7Dpx4cDUiufqC8m9FpucaopVepFkW M2AvAQBy5CSFmL7NRiHrsv24WAZFw1ASZHl8TnyhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbQqSTyTQPys6+/YudpHDZ4NOPQ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYyZDczYjEyLWJkNzItNGZjNS04ZDBkLWIwZmQ2YjA1NTkyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC MAYDBAAmAB8wDQYJKoZIhvcNAQELBQADggEBAA5pv6O3NScwkx/xVU+Gn8A6KmVd v9baA2Q1lOP1RL0Uv6FugUeJhJntDEOiA6m7PrB+1AKHk+DdBeBlYMK3rFM0TJXh B+WfZEF9sskDZD7n7yuNpS21xKJ7NWZflxspPk4n4a5TiUojwW4lrBcJ+tCGtWRk TBPkqcrpHOgiRSyevmXPenbhlsC1wHujS3f684QZ1FSuOLuNhx9Si/EEOXj1hWj3 yvk9j9VfrhlD+w7qgbkgGMmN7mCF1Pro/hCSfQAMtGTo86IhqPMTx5pRukvFHWsa bakVgvQa//3p4qdWgvDRGgVgVrug9Gop765+1vEITnx1DZEptyffcooj4AA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:01 2025 by rpki-client