$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272b5d0e-b2a1-4f29-aaca-90b6c39a006a.roa File: 272b5d0e-b2a1-4f29-aaca-90b6c39a006a.roa (raw, json) Hash identifier: vYxP/c8W1kzlC1RL/1srgZnVpzjcFrA0ITiS5qSAMFo= Subject key identifier: 52:98:5B:6C:15:E2:B2:0E:86:FA:5D:40:BC:CE:B4:70:CC:16:77:D9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 27D2EBA6C9A87BB6F41C0CCBE62B200C4053AE29 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272b5d0e-b2a1-4f29-aaca-90b6c39a006a.roa Signing time: Fri 28 Mar 2025 16:31:47 +0000 ROA not before: Fri 28 Mar 2025 16:31:47 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb9:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d2:eb:a6:c9:a8:7b:b6:f4:1c:0c:cb:e6:2b:20:0c:40:53:ae:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 16:31:47 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: serialNumber=16facfe9c2dedeebc96e292937a21c378f78d51445408b06ec86939eda6a2742, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a3:04:5f:36:e0:f4:7e:f6:42:d3:2c:c8:f9: 00:d3:78:9e:e0:ce:bf:ed:58:04:f1:c4:76:90:a6: d8:cf:f7:8f:b8:c0:b6:e7:1d:b7:ae:29:b7:26:f5: 28:c7:f1:b5:20:08:aa:80:da:b0:cf:81:4a:97:86: 56:60:46:65:95:d5:a6:32:da:dc:e0:37:e6:25:83: af:9a:c3:91:63:a8:d0:ad:62:3a:d4:e2:92:21:8f: 2a:88:5c:fc:b4:be:b4:a5:86:08:77:25:92:7c:57: 22:fe:82:ed:09:f1:10:18:5c:34:b9:36:2f:dd:a5: 22:78:c9:3a:44:f2:63:84:9c:29:4b:02:06:9f:71: 59:55:c9:89:85:63:48:73:14:89:5b:4a:1a:e5:20: 75:6f:dc:86:dc:9b:e4:e2:b7:a9:94:af:7b:f7:9b: 21:34:7a:1b:eb:97:af:83:6f:bb:9c:19:4f:70:d7: 4a:a8:ef:a2:22:75:91:92:00:6e:c0:f0:54:b2:2b: 97:3a:a9:ed:2e:03:a7:e3:41:bb:bc:d4:4b:43:89: 2a:24:d4:f4:52:53:40:3b:36:15:30:58:7b:6c:a5: ad:05:72:f8:e0:bc:a5:af:cd:14:57:3e:a6:4d:87: de:e1:e7:9f:bc:e0:73:57:be:f4:c9:69:24:48:d5: f3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:98:5B:6C:15:E2:B2:0E:86:FA:5D:40:BC:CE:B4:70:CC:16:77:D9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272b5d0e-b2a1-4f29-aaca-90b6c39a006a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb9:3400::/40 Signature Algorithm: sha256WithRSAEncryption 44:f2:03:0c:e2:f2:c4:c9:37:f2:46:28:80:c1:6d:f9:a3:75: 31:da:82:5b:2e:82:5f:5f:8c:53:34:f2:b5:38:ae:72:88:3b: 25:f8:a8:4d:12:e0:b2:55:db:54:5d:34:1a:e9:90:dc:d8:df: 43:0e:58:54:5f:60:a9:94:a9:fd:4c:45:4a:6c:59:1b:20:c5: f3:5d:51:6f:e9:40:f4:54:d9:64:a3:5f:fe:de:c0:bd:6f:3e: 17:92:b6:cd:40:0b:d0:ca:5a:17:84:97:71:ef:2e:0f:ef:44: c3:0a:cd:ed:e0:68:00:88:26:47:00:0e:c7:0a:02:52:51:83: 81:df:e4:43:cb:6f:e0:9e:91:50:68:a9:6d:43:49:8b:a7:94: 98:5a:8d:71:4a:f8:3f:2f:65:4e:fd:59:a8:a2:9d:54:d6:37: 00:e8:a1:b7:0f:12:8a:1d:18:cc:8d:f8:7a:3e:44:9a:02:82: 0c:9a:03:d8:4f:6b:bc:74:2b:67:21:a1:7d:52:d4:0b:b8:b4: cb:1e:d6:b0:57:b3:cf:08:3f:ce:ab:c4:23:19:6b:01:28:64: 20:88:fb:33:7a:d2:a2:2d:59:3e:c2:8e:47:f5:a8:13:47:10: d2:30:9a:06:88:a5:a7:a6:e1:02:95:f2:a1:d8:16:82:ed:f3: ce:08:63:66 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJ9Lrpsmoe7b0HAzL5isgDEBTrikwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTYzMTQ3WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNmZhY2ZlOWMyZGVkZWViYzk2ZTI5MjkzN2EyMWMzNzhm NzhkNTE0NDU0MDhiMDZlYzg2OTM5ZWRhNmEyNzQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrowRfNuD0fvZC0yzI+QDTeJ7gzr/tWATxxHaQptjP94+4 wLbnHbeuKbcm9SjH8bUgCKqA2rDPgUqXhlZgRmWV1aYy2tzgN+Ylg6+aw5FjqNCt YjrU4pIhjyqIXPy0vrSlhgh3JZJ8VyL+gu0J8RAYXDS5Ni/dpSJ4yTpE8mOEnClL AgafcVlVyYmFY0hzFIlbShrlIHVv3Ibcm+Tit6mUr3v3myE0ehvrl6+Db7ucGU9w 10qo76IidZGSAG7A8FSyK5c6qe0uA6fjQbu81EtDiSok1PRSU0A7NhUwWHtspa0F cvjgvKWvzRRXPqZNh97h55+84HNXvvTJaSRI1fPlAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUUphbbBXisg6G+l1AvM60cMwWd9kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI3MmI1ZDBlLWIyYTEtNGYyOS1hYWNhLTkwYjZjMzlhMDA2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+5NDANBgkqhkiG9w0BAQsFAAOCAQEARPIDDOLyxMk38kYogMFt+aN1 MdqCWy6CX1+MUzTytTiucog7JfioTRLgslXbVF00GumQ3NjfQw5YVF9gqZSp/UxF SmxZGyDF811Rb+lA9FTZZKNf/t7AvW8+F5K2zUAL0MpaF4SXce8uD+9EwwrN7eBo AIgmRwAOxwoCUlGDgd/kQ8tv4J6RUGipbUNJi6eUmFqNcUr4Py9lTv1ZqKKdVNY3 AOihtw8Sih0YzI34ej5EmgKCDJoD2E9rvHQrZyGhfVLUC7i0yx7WsFezzwg/zqvE IxlrAShkIIj7M3rSoi1ZPsKOR/WoE0cQ0jCaBoilp6bhApXyodgWgu3zzghjZg== -----END CERTIFICATE-----Generated at Wed Apr 16 16:49:59 2025 by rpki-client