$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deea364b-9e92-4fa6-a021-a1d02bd92804.roa File: deea364b-9e92-4fa6-a021-a1d02bd92804.roa (raw, json) Hash identifier: Q6UT+0TQwINNQc080xCbpqQQSXkF+umBDzS/N8ZKAqU= Subject key identifier: CF:F7:41:E9:68:10:74:1A:19:AF:74:0B:E2:78:6C:3A:96:B1:7E:24 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 46CFC3114F4F81DC5054340076F3E9218A18B028 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deea364b-9e92-4fa6-a021-a1d02bd92804.roa Signing time: Fri 28 Mar 2025 00:21:01 +0000 ROA not before: Fri 28 Mar 2025 00:21:01 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:cf:c3:11:4f:4f:81:dc:50:54:34:00:76:f3:e9:21:8a:18:b0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 00:21:01 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:25:7c:a6:8a:dc:d5:b2:8d:9b:4b:2b:33: c3:e8:47:8a:56:a7:f7:3f:86:03:43:22:9d:10:c9: d4:dc:90:36:f3:b7:2b:07:41:23:5c:a4:a8:67:92: a1:6e:ca:1a:e3:d1:e9:bc:44:ec:a2:4e:96:86:35: 7e:34:b7:b2:03:ef:4c:6b:98:19:87:c3:c3:09:69: 94:e1:92:15:47:5e:ad:d1:25:1b:f4:96:43:cd:fe: fe:f8:0c:1c:c8:76:38:62:ba:ef:ca:3c:31:ea:63: c0:33:a9:ae:13:fc:74:9f:d1:10:50:65:d5:f8:86: b4:82:d7:28:da:b9:26:d9:8d:3f:06:9c:32:b7:74: 2e:9a:6a:c2:80:f3:2d:86:9b:94:ed:88:73:2f:66: a9:87:44:fb:e4:6a:d7:fd:41:3e:11:d3:75:5e:e5: 39:fb:9c:d0:23:ab:ae:2a:c5:e0:b4:d2:fe:e7:7f: 55:20:47:ae:da:16:01:a7:27:44:9d:f7:51:c7:fa: 29:6e:87:80:21:23:a4:ee:ef:ca:5b:f9:c4:08:ac: 18:b5:25:f7:81:03:71:95:9b:5a:82:eb:42:74:e9: 4f:17:a1:3e:da:5f:d6:58:f5:1c:9a:55:19:e3:3c: 85:27:86:75:c1:af:87:d4:77:36:0a:39:5b:3d:2c: d6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F7:41:E9:68:10:74:1A:19:AF:74:0B:E2:78:6C:3A:96:B1:7E:24 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deea364b-9e92-4fa6-a021-a1d02bd92804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:3400::/40 Signature Algorithm: sha256WithRSAEncryption 80:10:2c:56:22:54:dd:61:ab:22:63:54:48:a2:17:39:6c:dd: f5:6b:b3:91:be:f4:6b:db:d7:22:89:0e:c2:22:ee:b7:8d:a7: 99:70:bb:3f:ea:cf:29:db:96:f2:96:55:60:58:ad:78:2b:fe: 97:c7:ae:3d:48:42:d2:6f:73:a9:70:10:39:0d:36:a7:7d:72: 65:91:15:09:21:aa:ad:dc:bd:e8:2b:86:8a:cd:ce:84:c7:bf: 48:cd:49:b2:21:36:79:01:9e:1c:c1:d1:b5:f2:44:71:13:48: d1:69:e7:f2:ef:c4:dd:3b:d6:2f:d4:da:15:4b:c7:ac:26:8c: 58:6d:19:63:e7:b2:68:3a:0e:28:af:26:60:3f:df:b5:e9:90: 96:22:29:c5:71:c6:bd:8d:e5:6d:cd:87:c6:e9:65:1c:24:00: cc:58:93:e4:b9:49:2a:55:a6:05:0c:2b:b3:ed:8d:bc:29:db: c4:34:4c:2a:db:f2:e9:33:6f:82:89:77:07:57:00:9a:3c:4b: 41:35:75:7f:38:f9:59:d7:15:b2:1f:59:35:02:47:92:fa:a4: 50:7c:d4:d0:f2:75:20:48:cb:1d:a4:37:7a:a9:83:58:b7:72: 16:eb:c9:9d:39:1a:09:93:54:aa:b9:64:d6:c2:fd:5c:9a:b1: 91:a2:0c:f3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURs/DEU9PgdxQVDQAdvPpIYoYsCgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDAyMTAxWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMmVjMjk2NzVhYTMwYTBjNDQ0NmM5ODQ0OTZhMzNjNTM4 MjIxNTU1MTM3MmMxZWFkMDYxOTgwNzIyNTk4YzQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+8CV8porc1bKNm0srM8PoR4pWp/c/hgNDIp0QydTckDbz tysHQSNcpKhnkqFuyhrj0em8ROyiTpaGNX40t7ID70xrmBmHw8MJaZThkhVHXq3R JRv0lkPN/v74DBzIdjhiuu/KPDHqY8Azqa4T/HSf0RBQZdX4hrSC1yjauSbZjT8G nDK3dC6aasKA8y2Gm5TtiHMvZqmHRPvkatf9QT4R03Ve5Tn7nNAjq64qxeC00v7n f1UgR67aFgGnJ0Sd91HH+iluh4AhI6Tu78pb+cQIrBi1JfeBA3GVm1qC60J06U8X oT7aX9ZY9RyaVRnjPIUnhnXBr4fUdzYKOVs9LNZzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUz/dB6WgQdBoZr3QL4nhsOpaxfiQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RlZWEzNjRiLTllOTItNGZhNi1hMDIxLWExZDAyYmQ5MjgwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//NDANBgkqhkiG9w0BAQsFAAOCAQEAgBAsViJU3WGrImNUSKIXOWzd 9Wuzkb70a9vXIokOwiLut42nmXC7P+rPKduW8pZVYFiteCv+l8euPUhC0m9zqXAQ OQ02p31yZZEVCSGqrdy96CuGis3OhMe/SM1JsiE2eQGeHMHRtfJEcRNI0Wnn8u/E 3TvWL9TaFUvHrCaMWG0ZY+eyaDoOKK8mYD/ftemQliIpxXHGvY3lbc2HxullHCQA zFiT5LlJKlWmBQwrs+2NvCnbxDRMKtvy6TNvgol3B1cAmjxLQTV1fzj5WdcVsh9Z NQJHkvqkUHzU0PJ1IEjLHaQ3eqmDWLdyFuvJnTkaCZNUqrlk1sL9XJqxkaIM8w== -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:49 2025 by rpki-client