$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa400fa5-7af4-49a1-a0c8-cf41ab563bca.roa File: aa400fa5-7af4-49a1-a0c8-cf41ab563bca.roa (raw, json) Hash identifier: nSK4bdzeuKTbf4XnCf5rCAkM2g1ED2cOGTHeVIGAXDw= Subject key identifier: 55:CA:C0:4C:CF:E0:83:13:47:22:BF:12:71:52:B8:AA:EA:72:2F:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2CEFB5B6D71D12A1E79566627826F9939934B6C9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa400fa5-7af4-49a1-a0c8-cf41ab563bca.roa Signing time: Fri 28 Mar 2025 17:11:44 +0000 ROA not before: Fri 28 Mar 2025 17:11:44 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f2f:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ef:b5:b6:d7:1d:12:a1:e7:95:66:62:78:26:f9:93:99:34:b6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 17:11:44 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: serialNumber=758cba3516fdadfdf12d50f1699a70d67f70a59265d506beee3c35a2b994a78d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d5:32:84:2f:27:be:d8:ad:f0:ce:c6:00:16: 4a:4c:94:3e:08:33:52:6c:b5:85:b7:8f:35:03:83: 05:9b:14:fa:e9:59:5a:07:93:f5:a6:13:2c:79:fd: 70:3d:15:62:d9:fc:05:7b:fc:d1:c8:4f:b9:18:0e: 7f:f2:4a:aa:d4:06:36:15:58:49:c0:76:ef:12:73: 7d:20:ee:01:e6:b9:8f:3a:37:68:4e:55:67:d6:85: b9:aa:58:0b:e4:2e:72:3d:3e:1a:e5:41:d8:62:0d: 8f:57:b4:fa:ac:09:f1:99:19:3f:29:8e:ab:c4:2a: f8:85:89:ac:63:29:75:68:0a:df:87:e8:1d:64:0a: ce:be:01:43:52:8d:22:81:f2:da:ef:70:4a:c9:96: d9:da:9f:20:79:f1:51:15:12:22:6a:41:23:7f:ea: 0b:7a:87:64:34:30:c3:61:5f:e4:0e:d4:f3:cf:c1: eb:d3:0d:86:64:54:05:57:99:63:48:f2:6e:5c:43: fc:ec:89:1a:6f:5e:9e:81:b8:8f:1b:6e:4d:1a:c9: 65:d4:b5:51:70:72:1b:f0:c4:f5:52:be:a8:e6:ca: 65:9d:65:90:93:88:39:88:81:1a:34:aa:80:11:0f: ab:c0:43:98:17:32:da:18:07:a0:bb:9d:c2:e7:0b: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CA:C0:4C:CF:E0:83:13:47:22:BF:12:71:52:B8:AA:EA:72:2F:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa400fa5-7af4-49a1-a0c8-cf41ab563bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2f:4000::/36 Signature Algorithm: sha256WithRSAEncryption c1:00:d5:19:46:09:4d:fa:1c:d9:32:64:73:00:de:19:f0:94: 5e:3f:95:0e:3a:44:25:a4:60:78:7d:8f:a1:e9:f7:f0:ac:74: 25:d2:14:99:2f:a2:81:ad:72:87:3a:e3:6d:c2:0d:98:37:0b: 2b:99:1c:4a:0b:69:f1:26:85:22:68:1e:65:9d:05:a1:ba:e3: f5:ce:7b:e7:ba:45:fc:1d:92:77:c4:6f:76:13:d3:04:80:bc: 85:4d:f0:de:22:cd:d8:81:03:30:b7:ce:1f:52:e6:5d:5b:d4: e7:06:12:95:4f:c8:12:01:f1:bd:e3:3b:8c:20:11:26:0f:45: 83:e1:d9:6d:f4:46:b4:c3:ab:e8:69:2a:52:54:b0:2b:57:13: 60:3d:47:0b:e0:f5:57:65:ce:32:c7:a5:af:2f:89:db:c8:66: 28:e4:35:47:74:6c:d4:fd:ef:e3:d4:ec:04:cd:cd:34:78:78: 5e:0d:a1:58:70:a0:5d:d3:5e:a4:b2:59:6d:f1:f1:e8:2a:1b: 4e:6b:d0:82:fe:58:05:a9:85:40:d0:15:12:b4:c1:c8:b0:df: 97:e0:08:6a:0b:46:be:03:0e:43:90:72:7f:ed:4c:9c:eb:23: e3:46:2e:bc:bb:c3:56:03:ec:87:94:26:ae:50:56:6c:e3:31: d4:c6:bb:93 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULO+1ttcdEqHnlWZieCb5k5k0tskwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTcxMTQ0WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NThjYmEzNTE2ZmRhZGZkZjEyZDUwZjE2OTlhNzBkNjdm NzBhNTkyNjVkNTA2YmVlZTNjMzVhMmI5OTRhNzhkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc1TKELye+2K3wzsYAFkpMlD4IM1JstYW3jzUDgwWbFPrp WVoHk/WmEyx5/XA9FWLZ/AV7/NHIT7kYDn/ySqrUBjYVWEnAdu8Sc30g7gHmuY86 N2hOVWfWhbmqWAvkLnI9PhrlQdhiDY9XtPqsCfGZGT8pjqvEKviFiaxjKXVoCt+H 6B1kCs6+AUNSjSKB8trvcErJltnanyB58VEVEiJqQSN/6gt6h2Q0MMNhX+QO1PPP wevTDYZkVAVXmWNI8m5cQ/zsiRpvXp6BuI8bbk0ayWXUtVFwchvwxPVSvqjmymWd ZZCTiDmIgRo0qoARD6vAQ5gXMtoYB6C7ncLnC2ehAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUVcrATM/ggxNHIr8ScVK4qupyL/AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhNDAwZmE1LTdhZjQtNDlhMS1hMGM4LWNmNDFhYjU2M2JjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8vQDANBgkqhkiG9w0BAQsFAAOCAQEAwQDVGUYJTfoc2TJkcwDeGfCU Xj+VDjpEJaRgeH2Poen38Kx0JdIUmS+iga1yhzrjbcINmDcLK5kcSgtp8SaFImge ZZ0Fobrj9c5757pF/B2Sd8RvdhPTBIC8hU3w3iLN2IEDMLfOH1LmXVvU5wYSlU/I EgHxveM7jCARJg9Fg+HZbfRGtMOr6GkqUlSwK1cTYD1HC+D1V2XOMselry+J28hm KOQ1R3Rs1P3v49TsBM3NNHh4Xg2hWHCgXdNepLJZbfHx6CobTmvQgv5YBamFQNAV ErTByLDfl+AIagtGvgMOQ5Byf+1MnOsj40YuvLvDVgPsh5QmrlBWbOMx1Ma7kw== -----END CERTIFICATE-----Generated at Wed Apr 16 16:41:00 2025 by rpki-client