$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa File: 64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa (raw, json) Hash identifier: XgrCqKBNxr3izH9tUnAy/gF0/Jx5CH2Czeyw3euX8Zo= Subject key identifier: 1E:27:E5:F4:80:B8:CF:27:44:97:EB:62:A4:F0:56:13:DB:1A:E4:43 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4EE61D0D484D7398364E0CB9AA8A24FD9B7D49F2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa Signing time: Fri 28 Mar 2025 16:31:56 +0000 ROA not before: Fri 28 Mar 2025 16:31:56 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e6:1d:0d:48:4d:73:98:36:4e:0c:b9:aa:8a:24:fd:9b:7d:49:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 16:31:56 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:f8:5b:9d:4e:e8:b3:9b:a8:54:ff:1f:3a: 1c:8f:8a:89:58:55:5f:a0:d6:c4:68:8d:e2:34:9f: e2:fd:b8:f3:ad:31:ab:f7:55:d8:16:2e:b7:41:f8: 30:d2:21:dd:b0:66:2e:4b:82:e6:c9:f7:4f:b5:0b: e0:31:5e:6f:7c:4b:08:b8:5b:bd:0a:6f:db:4b:45: 64:b6:3e:b1:31:7b:8f:bf:81:4c:14:51:c7:55:27: d9:2b:97:23:64:b0:73:6e:97:42:0e:9c:c1:b9:81: ab:79:4d:9d:ae:0b:cf:fc:8e:78:69:d6:7c:3d:fa: 03:49:ea:52:29:f3:ef:12:ae:d7:28:99:dd:2f:b2: 1a:17:0c:de:44:06:ab:66:f5:d3:22:82:07:0b:f4: 69:ad:49:ef:25:62:b0:0b:56:fb:ee:83:4a:82:44: 4b:f1:8b:51:28:94:c9:a4:97:5e:6d:9c:77:00:b3: 00:37:d6:01:0b:41:58:35:c2:2c:f0:f5:ee:4d:92: c7:a4:14:f9:37:0b:24:d0:82:2a:a1:99:c7:e3:11: dd:7b:93:5e:43:df:b7:6a:cd:28:bf:06:e5:6c:0a: 49:65:5e:20:b2:b3:c4:d9:f4:99:1d:66:ef:80:ad: 43:f2:7b:1d:e6:85:b7:7a:6a:c5:2c:d4:67:18:56: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:27:E5:F4:80:B8:CF:27:44:97:EB:62:A4:F0:56:13:DB:1A:E4:43 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8::/32 Signature Algorithm: sha256WithRSAEncryption 5e:50:c3:6f:a5:82:e0:ed:82:8f:60:d0:17:1e:b4:17:fc:ef: 73:b8:08:e0:15:0f:5d:ff:3c:75:1e:72:e1:a2:c1:44:28:73: 21:9b:7d:e8:7b:68:aa:33:0c:40:50:36:27:73:b2:60:0d:78: 3d:16:eb:b9:e3:7d:27:d3:44:21:49:b3:e8:82:b5:1a:cd:59: 12:74:be:26:d9:cc:8a:ff:0c:0e:fc:ac:22:07:8f:e5:bf:7d: 56:c6:71:5c:ef:5d:6a:b5:d1:eb:11:0b:5a:11:a2:13:29:82: 5e:74:50:2a:c5:b5:01:b5:e7:52:74:ed:e4:44:99:87:3d:f4: d0:e8:71:c8:4a:61:1b:c8:be:f5:2e:c2:ba:02:66:40:d7:7d: 6e:f4:ea:13:07:7a:3a:93:5e:27:e5:16:ba:ec:2b:6e:15:ac: c9:db:c5:a7:c3:b6:39:09:35:fa:cb:6c:cc:a2:45:07:df:97: 22:28:14:0d:81:f9:ad:de:7c:0b:b4:07:f3:1b:79:0e:1a:20: 16:5f:bb:1d:16:3a:d3:74:e6:51:e9:ed:7b:65:ea:b6:a0:a2: 39:26:5d:0f:ea:a9:01:9a:5e:d2:d0:cf:43:4a:92:ab:e3:8e: c2:51:62:fc:25:9a:aa:5a:a1:85:b9:74:59:c3:7d:e3:3e:74: ed:41:c7:39 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUTuYdDUhNc5g2Tgy5qook/Zt9SfIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTYzMTU2WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTJkMWYzNGE5ZjMwYmQxYzc5YWU0YzllMzhkMDk4ZTc2 MzRmMjg5M2I0Yjk3MmJlZDQ1MTE0ZDJiOWU5YmU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqHfhbnU7os5uoVP8fOhyPiolYVV+g1sRojeI0n+L9uPOt Mav3VdgWLrdB+DDSId2wZi5LgubJ90+1C+AxXm98Swi4W70Kb9tLRWS2PrExe4+/ gUwUUcdVJ9krlyNksHNul0IOnMG5gat5TZ2uC8/8jnhp1nw9+gNJ6lIp8+8Srtco md0vshoXDN5EBqtm9dMiggcL9GmtSe8lYrALVvvug0qCREvxi1EolMmkl15tnHcA swA31gELQVg1wizw9e5NksekFPk3CyTQgiqhmcfjEd17k15D37dqzSi/BuVsCkll XiCys8TZ9JkdZu+ArUPyex3mhbd6asUs1GcYVr/hAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUHifl9IC4zydEl+tipPBWE9sa5EMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY0YzRjYWM1LWJkNmMtNGNhNS04NGNiLWYyMzVhNDYyMDFjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB+4MA0GCSqGSIb3DQEBCwUAA4IBAQBeUMNvpYLg7YKPYNAXHrQX/O9z uAjgFQ9d/zx1HnLhosFEKHMhm33oe2iqMwxAUDYnc7JgDXg9Fuu5430n00QhSbPo grUazVkSdL4m2cyK/wwO/KwiB4/lv31WxnFc711qtdHrEQtaEaITKYJedFAqxbUB tedSdO3kRJmHPfTQ6HHISmEbyL71LsK6AmZA131u9OoTB3o6k14n5Ra67CtuFazJ 28Wnw7Y5CTX6y2zMokUH35ciKBQNgfmt3nwLtAfzG3kOGiAWX7sdFjrTdOZR6e17 Zeq2oKI5Jl0P6qkBml7S0M9DSpKr447CUWL8JZqqWqGFuXRZw33jPnTtQcc5 -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:43 2025 by rpki-client