$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa File: 451673e6-334d-4e4b-b936-5534942489c1.roa (raw, json) Hash identifier: ZH/PkJ/Sx88J3KWQZxNShxOkQpgR/LJ3w8VmJdIfFgs= Subject key identifier: 62:F5:81:D8:2E:75:24:93:B5:BC:76:FD:3E:09:8E:50:62:B4:6B:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45609F2FCE35E80BECAFA848F4CD4BD47CC32593 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa Signing time: Sat 17 May 2025 00:42:05 +0000 ROA not before: Sat 17 May 2025 00:42:05 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fff:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:60:9f:2f:ce:35:e8:0b:ec:af:a8:48:f4:cd:4b:d4:7c:c3:25:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:42:05 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=b7d150a9aac8bb8cb48a45db6e025c4bda7de38cac4ea350a0d7cfc259ffcfbe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7a:4b:5b:6a:8d:a4:71:33:64:f3:02:d3:27: eb:12:99:ba:e0:af:3d:b2:39:77:72:55:1f:9c:0d: 81:c5:c3:f0:08:84:c5:95:eb:eb:fc:b4:1a:98:36: f6:63:29:3f:32:fe:44:f9:88:10:86:90:72:60:89: d6:c3:71:df:2f:60:cf:8e:5b:e3:26:a2:98:26:04: 87:b5:80:51:1d:08:be:05:13:e1:78:7d:3a:98:77: 11:81:f0:19:69:1a:b5:4e:fb:72:17:65:ab:95:24: a8:d7:7b:94:04:c4:28:9d:b2:0e:2a:a2:e9:49:ad: 52:f9:94:56:18:f1:43:e9:0d:82:c0:59:52:07:de: 08:04:30:6d:93:f5:57:84:22:b1:b0:4a:d8:6a:b0: f5:12:03:b9:35:14:45:5f:9d:a5:68:e7:24:bc:89: bd:a3:10:78:d4:f9:54:a7:27:2d:b4:c2:1d:21:fa: d8:b1:8c:c0:b4:32:8b:51:02:48:6b:b1:bc:ec:18: 1c:45:59:22:70:8a:46:23:03:f0:ad:d0:93:7b:b4: 0e:be:fd:f3:3a:0c:96:4e:26:c9:46:a5:6a:14:3a: de:0e:ce:53:dc:38:30:81:3b:6e:a5:eb:5d:77:27: 89:14:96:10:b1:7a:9f:7a:cc:51:35:5a:4e:37:b8: 8a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F5:81:D8:2E:75:24:93:B5:BC:76:FD:3E:09:8E:50:62:B4:6B:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:5000::/40 Signature Algorithm: sha256WithRSAEncryption 60:92:03:73:d1:b1:9f:4b:f8:78:0e:2a:8a:3f:94:d0:dd:1f: 0e:74:15:d9:4d:3b:1c:d6:a5:2a:61:77:3a:2f:6d:37:90:7c: 21:1b:36:f4:38:70:95:1d:d2:d9:d0:28:4b:e7:e3:c3:4b:3d: 00:bd:0b:9d:ce:ea:e0:a3:42:b0:60:4e:bc:b3:d4:10:65:5f: a8:bf:15:62:24:4f:86:59:d7:b6:cd:0a:b6:9f:18:8c:29:c6: 48:8d:7b:7f:45:19:d0:16:2c:4c:57:37:60:3d:81:cf:77:5a: 45:e1:3d:83:e8:46:bd:95:c3:55:42:c5:f1:d2:73:3f:ad:c4: fa:fc:16:00:6a:86:73:2a:d9:28:50:52:f0:6f:c5:de:91:bb: cd:ed:2a:65:58:5c:48:5d:ce:94:9f:b3:fe:38:81:44:25:9a: c3:2a:22:4a:8a:25:e3:ff:41:ef:33:2c:44:40:08:f9:6d:02: 71:b6:61:2f:3b:a4:cf:b1:b1:ae:12:a5:88:3b:20:e5:35:01: 50:53:49:af:c8:39:e8:94:09:46:27:49:96:09:1b:c0:26:aa: aa:fa:16:95:83:c5:df:fb:18:33:4c:46:d1:5b:fc:23:00:84: 80:cb:50:36:15:67:86:bc:92:0c:b9:be:72:aa:33:de:69:2f: fd:cf:f1:04 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURWCfL8416Avsr6hI9M1L1HzDJZMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDA0MjA1WhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2QxNTBhOWFhYzhiYjhjYjQ4YTQ1ZGI2ZTAyNWM0YmRh N2RlMzhjYWM0ZWEzNTBhMGQ3Y2ZjMjU5ZmZjZmJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlektbao2kcTNk8wLTJ+sSmbrgrz2yOXdyVR+cDYHFw/AI hMWV6+v8tBqYNvZjKT8y/kT5iBCGkHJgidbDcd8vYM+OW+MmopgmBIe1gFEdCL4F E+F4fTqYdxGB8BlpGrVO+3IXZauVJKjXe5QExCidsg4qoulJrVL5lFYY8UPpDYLA WVIH3ggEMG2T9VeEIrGwSthqsPUSA7k1FEVfnaVo5yS8ib2jEHjU+VSnJy20wh0h +tixjMC0MotRAkhrsbzsGBxFWSJwikYjA/Ct0JN7tA6+/fM6DJZOJslGpWoUOt4O zlPcODCBO26l6113J4kUlhCxep96zFE1Wk43uIqbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUYvWB2C51JJO1vHb9PgmOUGK0a5wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1MTY3M2U2LTMzNGQtNGU0Yi1iOTM2LTU1MzQ5NDI0ODljMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//UDANBgkqhkiG9w0BAQsFAAOCAQEAYJIDc9Gxn0v4eA4qij+U0N0f DnQV2U07HNalKmF3Oi9tN5B8IRs29DhwlR3S2dAoS+fjw0s9AL0Lnc7q4KNCsGBO vLPUEGVfqL8VYiRPhlnXts0Ktp8YjCnGSI17f0UZ0BYsTFc3YD2Bz3daReE9g+hG vZXDVULF8dJzP63E+vwWAGqGcyrZKFBS8G/F3pG7ze0qZVhcSF3OlJ+z/jiBRCWa wyoiSool4/9B7zMsREAI+W0CcbZhLzukz7GxrhKliDsg5TUBUFNJr8g56JQJRidJ lgkbwCaqqvoWlYPF3/sYM0xG0Vv8IwCEgMtQNhVnhrySDLm+cqoz3mkv/c/xBA== -----END CERTIFICATE-----Generated at Sun Jun 1 05:26:13 2025 by rpki-client