$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2229bc5-9ad2-48a5-bcc8-8eba56b063d6.roa File: c2229bc5-9ad2-48a5-bcc8-8eba56b063d6.roa (raw, json) Hash identifier: EWGWfMex2mud84mYekME6kBFze3hTq2DXbIhh1Mp5nI= Subject key identifier: 95:C1:B7:5D:F0:B4:C6:50:C6:ED:E8:E4:DD:34:0A:85:86:14:09:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39EEB120F75199A6D3E3953212FDFC388580F4A5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2229bc5-9ad2-48a5-bcc8-8eba56b063d6.roa Signing time: Fri 28 Mar 2025 16:50:23 +0000 ROA not before: Fri 28 Mar 2025 16:50:23 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f13:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ee:b1:20:f7:51:99:a6:d3:e3:95:32:12:fd:fc:38:85:80:f4:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 16:50:23 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6e:b2:04:77:82:c5:3c:05:01:0e:b9:8e:48: a7:ed:39:ea:02:d7:f6:a3:01:4b:2d:f5:5e:fa:76: e3:fc:61:7c:37:3e:26:20:ee:77:8a:30:92:c7:94: c6:61:68:96:b0:d7:bc:3e:1a:b8:f2:71:e0:8e:c9: fb:97:2a:bb:54:74:46:51:ab:96:db:b0:ad:16:33: 28:7c:f6:e8:91:65:40:39:27:ec:72:dd:e6:59:bd: 8b:6f:31:b2:b5:a0:e0:3e:06:16:f9:0b:62:5f:79: 4f:26:4e:1f:25:11:2e:d9:23:cd:56:0b:fc:99:60: f4:79:e1:62:2f:62:84:26:be:81:a3:9d:aa:8c:b3: c8:3f:e5:40:48:3b:02:5e:66:5e:59:95:00:84:4e: 70:04:74:04:78:ba:e6:c2:94:7b:e8:6e:39:10:0e: 4a:0f:a8:93:40:89:53:de:c0:e8:4d:61:0b:46:5f: 3a:58:a7:46:de:92:0a:4b:f6:9c:26:28:ff:88:c9: 07:a0:4f:b9:17:96:4c:a3:b3:d0:21:d6:de:90:6b: 15:8a:bf:54:24:56:bc:66:cf:3f:69:4c:f2:52:98: b3:2b:09:60:20:73:b0:12:6b:dc:26:86:a7:af:71: 0b:c8:0d:7f:bb:46:eb:3b:73:a2:b0:4c:1e:60:94: f9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C1:B7:5D:F0:B4:C6:50:C6:ED:E8:E4:DD:34:0A:85:86:14:09:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c2229bc5-9ad2-48a5-bcc8-8eba56b063d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f13:4000::/36 Signature Algorithm: sha256WithRSAEncryption 5e:57:77:31:1b:b7:e5:e6:d5:98:64:d1:66:9d:bd:c1:39:45: b7:bf:fa:40:cc:02:85:cf:61:1c:59:69:7c:99:60:ec:0e:bb: 89:2b:b7:3c:91:d8:5f:f1:d2:c6:56:6e:78:a4:a2:c2:17:03: 4f:14:54:fa:0c:c8:4b:1e:52:9e:48:a1:13:28:5c:d8:82:02: b3:f5:12:0f:1a:6b:25:04:e9:b1:e0:15:9a:f4:69:1c:db:e6: 06:80:32:12:32:cf:ed:af:76:8d:ca:a3:01:82:73:74:94:e1: b2:8e:ea:22:30:77:e0:23:c4:e8:70:8e:93:9b:33:96:1b:c6: cc:cc:ca:65:ba:80:c7:91:6c:d7:eb:02:c5:e5:f8:4a:af:84: 6d:e6:68:33:fd:33:60:a4:13:b9:d1:f5:83:69:c4:bf:9d:01: 45:69:93:3f:69:31:7a:59:2a:28:5d:ac:de:01:a9:c0:80:d9: a7:8b:cf:76:2e:cd:6b:91:79:41:32:47:b0:a6:18:1c:db:23: 8a:1a:3a:bc:80:d2:82:c8:5f:59:0b:51:03:e6:88:e1:65:fc: 4f:73:24:24:d3:98:67:ac:0f:63:c7:8b:a2:35:59:1d:8f:97: 2b:51:55:5f:40:85:f0:27:ab:5b:07:82:62:45:29:8b:d3:a6: 7e:32:0e:3b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOe6xIPdRmabT45UyEv38OIWA9KUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTY1MDIzWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGNlYmExY2NiOTFkM2YzZmMxNzY4Yjk2MjI3ZmFjOTMx NmM2MzlhMjZkOWRhZjEwZGFkM2NiOGNjYzZjNWU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCibrIEd4LFPAUBDrmOSKftOeoC1/ajAUst9V76duP8YXw3 PiYg7neKMJLHlMZhaJaw17w+GrjyceCOyfuXKrtUdEZRq5bbsK0WMyh89uiRZUA5 J+xy3eZZvYtvMbK1oOA+Bhb5C2JfeU8mTh8lES7ZI81WC/yZYPR54WIvYoQmvoGj naqMs8g/5UBIOwJeZl5ZlQCETnAEdAR4uubClHvobjkQDkoPqJNAiVPewOhNYQtG XzpYp0bekgpL9pwmKP+IyQegT7kXlkyjs9Ah1t6QaxWKv1QkVrxmzz9pTPJSmLMr CWAgc7ASa9wmhqevcQvIDX+7Rus7c6KwTB5glPkVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUlcG3XfC0xlDG7ejk3TQKhYYUCVAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyMjI5YmM1LTlhZDItNDhhNS1iY2M4LThlYmE1NmIwNjNkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8TQDANBgkqhkiG9w0BAQsFAAOCAQEAXld3MRu35ebVmGTRZp29wTlF t7/6QMwChc9hHFlpfJlg7A67iSu3PJHYX/HSxlZueKSiwhcDTxRU+gzISx5Snkih Eyhc2IICs/USDxprJQTpseAVmvRpHNvmBoAyEjLP7a92jcqjAYJzdJThso7qIjB3 4CPE6HCOk5szlhvGzMzKZbqAx5Fs1+sCxeX4Sq+EbeZoM/0zYKQTudH1g2nEv50B RWmTP2kxelkqKF2s3gGpwIDZp4vPdi7Na5F5QTJHsKYYHNsjiho6vIDSgshfWQtR A+aI4WX8T3MkJNOYZ6wPY8eLojVZHY+XK1FVX0CF8CerWweCYkUpi9OmfjIOOw== -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:24 2025 by rpki-client