$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0233ae0-0e1e-4136-a54b-f0ab70af5a69.roa File: d0233ae0-0e1e-4136-a54b-f0ab70af5a69.roa (raw, json) Hash identifier: 4I3AxNJkl2zV4PzZau0aKFZpMCtAd6pWbus5DaGUwDQ= Subject key identifier: 14:79:12:C3:27:46:FA:53:77:6E:99:AA:6E:2E:D1:1A:13:D7:D9:FF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D111A80A6AA5DDE826FED4E2DE45BED758F8C55 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0233ae0-0e1e-4136-a54b-f0ab70af5a69.roa Signing time: Fri 28 Mar 2025 00:31:40 +0000 ROA not before: Fri 28 Mar 2025 00:31:40 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:81a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:11:1a:80:a6:aa:5d:de:82:6f:ed:4e:2d:e4:5b:ed:75:8f:8c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 00:31:40 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:63:56:21:57:25:68:fe:ee:c1:0a:be:f6: 76:e5:df:a7:47:53:bf:05:5d:71:98:eb:ab:2a:45: 16:a5:5a:88:e8:1b:4d:14:52:7f:36:14:9e:9f:a8: d5:91:c6:07:2f:04:bd:a0:55:97:c7:7b:f2:6f:d3: 45:ca:39:10:97:eb:74:44:32:d6:76:f7:d2:29:e6: 10:e8:23:78:4c:11:e4:f7:1a:b0:74:50:5a:25:6d: 14:2d:d2:b4:b2:17:1a:02:08:e4:1b:c7:3b:fd:6e: 5c:83:15:4d:0e:59:8f:44:5a:4f:2f:f9:d6:33:34: 41:f4:02:73:00:a1:ce:86:f6:82:3e:9a:5e:d2:d7: 17:12:33:d8:3e:8a:6a:7d:30:56:51:b8:1d:cd:5f: d7:ea:48:33:9c:4a:13:92:80:c2:3e:60:a9:c0:1d: c9:c9:d1:52:1e:ba:96:1f:6a:1a:4f:af:9d:8f:52: af:7d:2d:1c:2e:55:bf:8c:2d:e0:c0:af:31:bc:83: 33:3d:49:2d:49:12:61:61:f1:7d:21:ea:45:1f:3a: 7b:6d:9a:a9:e2:6b:aa:51:74:2d:37:c1:9c:d0:d2: 48:a8:f0:0c:18:df:e9:54:64:a4:96:97:55:9b:55: 0e:76:e8:82:70:d2:23:b7:25:a5:cb:75:f4:ac:f7: 90:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:79:12:C3:27:46:FA:53:77:6E:99:AA:6E:2E:D1:1A:13:D7:D9:FF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0233ae0-0e1e-4136-a54b-f0ab70af5a69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:81a0::/48 Signature Algorithm: sha256WithRSAEncryption b5:3a:15:23:f1:1e:55:07:02:1b:b4:5f:e7:5c:c3:77:40:d9: e0:40:2a:61:a1:94:3a:e6:34:cb:59:34:a6:35:b0:dd:5e:aa: e3:d2:06:0d:99:82:12:61:b4:38:bc:02:0b:b9:71:a0:8e:17: c9:16:66:bb:61:3e:38:c1:ef:a2:2d:5b:3a:73:f6:c0:c7:d5: 8d:77:74:36:53:8f:ab:88:ad:fe:15:c0:b5:f9:12:36:ed:76: f8:34:95:99:1c:bd:2f:fd:72:18:57:7b:3e:86:18:95:62:33: 1a:98:79:d6:1f:63:cb:05:b8:56:f2:bd:f5:e3:6e:84:d9:1a: 5f:75:2a:4f:eb:4c:ac:86:eb:c3:6c:75:64:ea:a9:9c:32:57: 3f:e8:8a:95:3e:d5:c3:79:9d:09:fc:e2:1e:59:f3:12:18:9e: fa:10:47:b2:1d:23:25:0c:c7:35:93:5f:09:77:1e:56:b1:3e: fe:8a:08:66:15:f4:3f:d0:7d:d5:33:d5:a5:d2:63:5b:3c:01: ef:a8:77:65:c4:a9:8f:05:ef:12:d3:01:b6:d8:4c:0a:b9:de: cb:50:14:8e:63:eb:f0:8a:5f:18:c1:fe:c7:9b:6d:24:80:08: 23:55:94:fa:eb:af:63:c7:9e:ac:a4:4e:6a:6a:3e:dc:ad:f4: 51:15:29:3c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHREagKaqXd6Cb+1OLeRb7XWPjFUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDAzMTQwWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGFkZTQxOGZlYTBmZmIzYTY0NmI1ZThmMTNkMTI2NjMx NGRlZDRiYzcxYjVlYTNlZjc5Yzg4M2I3OTI4ZDM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9amNWIVclaP7uwQq+9nbl36dHU78FXXGY66sqRRalWojo G00UUn82FJ6fqNWRxgcvBL2gVZfHe/Jv00XKORCX63REMtZ299Ip5hDoI3hMEeT3 GrB0UFolbRQt0rSyFxoCCOQbxzv9blyDFU0OWY9EWk8v+dYzNEH0AnMAoc6G9oI+ ml7S1xcSM9g+imp9MFZRuB3NX9fqSDOcShOSgMI+YKnAHcnJ0VIeupYfahpPr52P Uq99LRwuVb+MLeDArzG8gzM9SS1JEmFh8X0h6kUfOnttmqnia6pRdC03wZzQ0kio 8AwY3+lUZKSWl1WbVQ526IJw0iO3JaXLdfSs95BbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFHkSwydG+lN3bpmqbi7RGhPX2f8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QwMjMzYWUwLTBlMWUtNDEzNi1hNTRiLWYwYWI3MGFmNWE2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gaAwDQYJKoZIhvcNAQELBQADggEBALU6FSPxHlUHAhu0X+dcw3dA 2eBAKmGhlDrmNMtZNKY1sN1equPSBg2ZghJhtDi8Agu5caCOF8kWZrthPjjB76It Wzpz9sDH1Y13dDZTj6uIrf4VwLX5Ejbtdvg0lZkcvS/9chhXez6GGJViMxqYedYf Y8sFuFbyvfXjboTZGl91Kk/rTKyG68NsdWTqqZwyVz/oipU+1cN5nQn84h5Z8xIY nvoQR7IdIyUMxzWTXwl3HlaxPv6KCGYV9D/QfdUz1aXSY1s8Ae+od2XEqY8F7xLT AbbYTAq53stQFI5j6/CKXxjB/sebbSSACCNVlPrrr2PHnqykTmpqPtyt9FEVKTw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:44 2025 by rpki-client