$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ecf03-8344-40b3-b6e9-02cbee7fa1f5.roa File: ba0ecf03-8344-40b3-b6e9-02cbee7fa1f5.roa (raw, json) Hash identifier: bVXl68HI3pG5630ujOmQR6IKAkG9NSG2peEDR8LQxRc= Subject key identifier: C1:2E:33:01:8D:C4:A2:9D:FC:81:05:F8:57:21:9C:E1:BD:C1:18:D0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A0BD3C19DA5AAD1859C986EE89BEF405B6F820D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ecf03-8344-40b3-b6e9-02cbee7fa1f5.roa Signing time: Fri 28 Mar 2025 15:00:23 +0000 ROA not before: Fri 28 Mar 2025 15:00:23 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff6:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0b:d3:c1:9d:a5:aa:d1:85:9c:98:6e:e8:9b:ef:40:5b:6f:82:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 15:00:23 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: serialNumber=86ff1ba7f37c07ea49679b2e542eb40e56d1ceb6b770caca63ddb18febe03b1c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6a:84:dd:b2:27:cf:e2:62:ca:f0:50:c0:36: 76:08:00:70:38:5a:83:1c:9b:f2:6d:26:9b:f2:36: 0a:f7:bf:b5:54:f9:e6:e0:8f:57:0f:84:22:48:7d: 52:bf:ef:64:5a:bf:26:bc:9e:3a:ae:56:17:77:78: d2:db:ea:3b:0c:7c:d6:78:04:56:a2:35:ae:6e:08: 06:66:e5:ce:e8:3d:d2:1e:ea:ee:6f:b3:25:3c:d8: 94:91:78:50:da:68:b0:4c:8f:48:a2:1b:06:7c:a1: b0:a5:99:3e:d8:9c:db:1d:ea:5e:e0:57:83:4b:18: 6f:c5:d8:6e:91:52:6d:ac:b8:72:22:71:d7:32:96: 3f:2c:40:b1:03:c9:f0:8d:a6:ee:f7:b6:9d:27:71: 69:22:3e:c3:a9:46:1c:52:18:61:72:23:c9:d7:d0: 43:26:9b:68:d9:7c:c6:dd:a8:09:f2:53:69:b9:b3: af:31:c7:86:64:10:25:c1:c9:bd:0a:ae:c2:38:33: e5:2a:b6:5e:93:2f:f0:29:ee:55:0e:60:85:1b:38: d2:f4:7e:1f:de:a5:a7:5c:2f:fd:e4:44:9b:d1:50: c4:2a:91:ba:58:12:5f:17:2f:36:1b:70:d5:35:01: cd:62:40:19:9d:76:0e:12:3e:c7:44:c1:b3:f3:e4: 29:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2E:33:01:8D:C4:A2:9D:FC:81:05:F8:57:21:9C:E1:BD:C1:18:D0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ecf03-8344-40b3-b6e9-02cbee7fa1f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:2000::/48 Signature Algorithm: sha256WithRSAEncryption 7f:c0:50:fb:d1:52:9b:7e:aa:7e:58:10:9d:a3:4a:8b:68:fe: e1:ff:bc:e7:1d:37:97:3e:28:d3:d5:2f:53:6b:39:d1:1b:35: e4:62:d2:4c:ab:b1:54:97:43:5f:95:4e:22:5f:d2:6c:f1:a8: 83:2d:2c:98:f5:9d:8e:7c:af:65:58:9e:6e:52:ef:9e:1e:4e: 3b:cf:d9:02:38:8c:c8:d4:98:e2:ae:0e:50:09:da:66:70:81: 07:db:7e:36:a5:e1:2d:29:de:e4:d6:6a:39:31:3f:a5:36:fa: 7e:e7:e4:69:86:f1:9e:0b:3b:31:dd:4e:91:92:00:10:b7:78: 7b:77:7f:75:a6:0f:8a:9b:92:45:1c:73:7d:ee:fb:d0:90:3d: 54:73:1b:ad:4d:6f:85:9e:0b:38:a9:b0:73:33:79:2d:cb:db: 7c:02:c3:84:ee:79:1e:b2:b5:cc:06:49:fc:87:3e:8f:64:f7: 34:4f:96:50:27:9e:39:14:6a:38:97:a1:c0:c8:49:13:55:1a: d0:71:74:ac:64:2a:cd:65:3b:37:27:71:21:14:89:96:d1:75: 55:45:71:bf:ab:3d:7b:b9:17:21:a6:60:d0:09:b0:d5:2e:b0: 42:14:b6:7c:32:5e:80:df:e4:dd:81:5f:3c:95:c3:1a:d2:d3: 82:93:82:37 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWgvTwZ2lqtGFnJhu6JvvQFtvgg0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTUwMDIzWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmZmMWJhN2YzN2MwN2VhNDk2NzliMmU1NDJlYjQwZTU2 ZDFjZWI2Yjc3MGNhY2E2M2RkYjE4ZmViZTAzYjFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCraoTdsifP4mLK8FDANnYIAHA4WoMcm/JtJpvyNgr3v7VU +ebgj1cPhCJIfVK/72Ravya8njquVhd3eNLb6jsMfNZ4BFaiNa5uCAZm5c7oPdIe 6u5vsyU82JSReFDaaLBMj0iiGwZ8obClmT7YnNsd6l7gV4NLGG/F2G6RUm2suHIi cdcylj8sQLEDyfCNpu73tp0ncWkiPsOpRhxSGGFyI8nX0EMmm2jZfMbdqAnyU2m5 s68xx4ZkECXByb0KrsI4M+Uqtl6TL/Ap7lUOYIUbONL0fh/epadcL/3kRJvRUMQq kbpYEl8XLzYbcNU1Ac1iQBmddg4SPsdEwbPz5CkXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwS4zAY3Eop38gQX4VyGc4b3BGNAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhMGVjZjAzLTgzNDQtNDBiMy1iNmU5LTAyY2JlZTdmYTFmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/2IAAwDQYJKoZIhvcNAQELBQADggEBAH/AUPvRUpt+qn5YEJ2jSoto /uH/vOcdN5c+KNPVL1NrOdEbNeRi0kyrsVSXQ1+VTiJf0mzxqIMtLJj1nY58r2VY nm5S754eTjvP2QI4jMjUmOKuDlAJ2mZwgQfbfjal4S0p3uTWajkxP6U2+n7n5GmG 8Z4LOzHdTpGSABC3eHt3f3WmD4qbkkUcc33u+9CQPVRzG61Nb4WeCzipsHMzeS3L 23wCw4TueR6ytcwGSfyHPo9k9zRPllAnnjkUajiXocDISRNVGtBxdKxkKs1lOzcn cSEUiZbRdVVFcb+rPXu5FyGmYNAJsNUusEIUtnwyXoDf5N2BXzyVwxrS04KTgjc= -----END CERTIFICATE-----Generated at Wed Apr 16 16:42:23 2025 by rpki-client