$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c890bdba-dc81-43f8-82ba-c70cff9080e1.roa File: c890bdba-dc81-43f8-82ba-c70cff9080e1.roa (raw, json) Hash identifier: 9tuaN/N+//qJM0P0OfBXkNTDSqCUQCf9akOAeyTxSg0= Subject key identifier: 74:05:D7:21:DB:41:5B:AA:DD:3A:A8:F0:53:BA:D1:FF:0D:88:9B:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5530E7B8F1D7999A6310B72EE616B1856AC589A7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c890bdba-dc81-43f8-82ba-c70cff9080e1.roa Signing time: Fri 28 Mar 2025 00:21:55 +0000 ROA not before: Fri 28 Mar 2025 00:21:55 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:30:e7:b8:f1:d7:99:9a:63:10:b7:2e:e6:16:b1:85:6a:c5:89:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 00:21:55 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: serialNumber=b9fec57ead65494aec37ee11f1ca07b25394535d6c28e32cf670029454e05adf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:50:78:65:c7:6f:52:63:0a:b7:51:12:50:7d: ed:cf:de:66:e6:58:45:f5:27:05:a0:e3:56:43:be: 8f:91:1e:40:af:1b:7e:9e:a3:a8:77:9f:f3:15:8f: d8:72:20:b1:7d:db:15:f2:84:27:52:79:cd:61:72: 9c:42:1a:67:e1:36:4a:4a:9c:17:95:f1:40:0c:7f: 7d:d7:1d:45:46:98:46:e2:c7:29:b6:88:64:63:47: e3:82:ad:a8:6a:9c:09:8a:63:fa:58:9f:01:dc:72: 46:29:dc:d1:13:52:9b:a5:27:d1:01:69:76:f7:c3: aa:2f:b5:13:b7:12:01:40:b7:15:90:c5:e8:66:19: c7:4b:a9:b4:38:cb:03:fe:40:b9:03:e1:6f:32:83: 14:4b:20:dd:4e:0a:f9:5e:39:38:30:02:80:16:36: a7:3c:8e:d7:81:57:20:21:fa:3c:43:97:64:41:55: 56:e4:f5:60:2d:d7:29:09:4d:4b:cd:5e:e0:e9:79: dc:35:8f:1a:00:55:4c:84:fe:ad:10:4a:23:dc:55: d4:e3:38:c5:24:52:78:cc:2d:af:f6:22:c3:f2:f7: 5c:3b:9b:c0:35:9b:16:11:eb:b2:05:38:13:77:21: a5:0d:5b:84:73:26:4e:8e:f6:ec:9c:1b:0a:f0:39: a8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:05:D7:21:DB:41:5B:AA:DD:3A:A8:F0:53:BA:D1:FF:0D:88:9B:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c890bdba-dc81-43f8-82ba-c70cff9080e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8180::/48 Signature Algorithm: sha256WithRSAEncryption 36:98:d3:ee:17:79:a5:2c:ec:4f:5b:2c:e0:21:fb:26:3a:aa: 46:c0:25:73:16:3d:40:95:7e:58:0a:79:b2:84:63:00:97:c2: 92:a1:20:6e:d2:14:09:01:65:e1:3d:b4:ac:a9:21:c0:e1:17: df:41:32:12:ba:14:ec:95:f2:e4:b3:9f:79:51:29:ce:a3:30: 00:2f:f5:d7:a5:39:2a:46:87:1c:9d:44:53:a0:6b:f8:70:05: fd:43:49:37:7c:45:59:54:98:35:fd:c0:d7:10:3a:9b:95:01: 2e:e1:e3:9e:3f:1d:63:d6:ad:cb:50:1a:21:8a:db:ba:9a:de: 19:f3:46:24:42:49:98:7b:8c:9e:5c:40:4c:4c:62:c1:c3:06: 34:07:72:12:66:fe:02:fe:08:83:5f:ff:a2:d0:ee:f0:3e:fe: 85:a6:e2:28:2d:57:12:5d:18:5c:93:e0:72:d9:46:ca:f7:dc: a5:6e:4d:1c:bb:80:77:4b:ec:ac:36:a4:75:93:c4:66:87:d9: 68:0b:78:dd:e4:22:bc:a3:dc:39:9e:93:a4:fd:82:27:46:9a: 06:95:85:01:4d:9a:b8:22:07:c8:ec:2e:2c:6f:c0:4a:b4:d9: e3:1c:96:f0:66:d6:9b:7a:8b:a1:ff:76:67:3d:fd:cd:a9:65: 78:bf:b7:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVTDnuPHXmZpjELcu5haxhWrFiacwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDAyMTU1WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOWZlYzU3ZWFkNjU0OTRhZWMzN2VlMTFmMWNhMDdiMjUz OTQ1MzVkNmMyOGUzMmNmNjcwMDI5NDU0ZTA1YWRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIUHhlx29SYwq3URJQfe3P3mbmWEX1JwWg41ZDvo+RHkCv G36eo6h3n/MVj9hyILF92xXyhCdSec1hcpxCGmfhNkpKnBeV8UAMf33XHUVGmEbi xym2iGRjR+OCrahqnAmKY/pYnwHcckYp3NETUpulJ9EBaXb3w6ovtRO3EgFAtxWQ xehmGcdLqbQ4ywP+QLkD4W8ygxRLIN1OCvleOTgwAoAWNqc8jteBVyAh+jxDl2RB VVbk9WAt1ykJTUvNXuDpedw1jxoAVUyE/q0QSiPcVdTjOMUkUnjMLa/2IsPy91w7 m8A1mxYR67IFOBN3IaUNW4RzJk6O9uycGwrwOaivAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdAXXIdtBW6rdOqjwU7rR/w2ImxMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4OTBiZGJhLWRjODEtNDNmOC04MmJhLWM3MGNmZjkwODBlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gYAwDQYJKoZIhvcNAQELBQADggEBADaY0+4XeaUs7E9bLOAh+yY6 qkbAJXMWPUCVflgKebKEYwCXwpKhIG7SFAkBZeE9tKypIcDhF99BMhK6FOyV8uSz n3lRKc6jMAAv9delOSpGhxydRFOga/hwBf1DSTd8RVlUmDX9wNcQOpuVAS7h454/ HWPWrctQGiGK27qa3hnzRiRCSZh7jJ5cQExMYsHDBjQHchJm/gL+CINf/6LQ7vA+ /oWm4igtVxJdGFyT4HLZRsr33KVuTRy7gHdL7Kw2pHWTxGaH2WgLeN3kIryj3Dme k6T9gidGmgaVhQFNmrgiB8jsLixvwEq02eMclvBm1pt6i6H/dmc9/c2pZXi/t/U= -----END CERTIFICATE-----Generated at Wed Apr 16 16:42:31 2025 by rpki-client