$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cecf97d0-f0a4-44f2-801b-384f580accd3.roa File: cecf97d0-f0a4-44f2-801b-384f580accd3.roa (raw, json) Hash identifier: /s3OoVyd43uPEV2F2HkIwbwSe2GIlyBkYtO6QCY4Sv0= Subject key identifier: 2D:2C:C1:D0:6D:5B:83:47:76:25:CB:16:3A:89:00:D4:CF:C1:5B:32 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48C613A485F0584366172952F8DBA9A8094A9E19 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cecf97d0-f0a4-44f2-801b-384f580accd3.roa Signing time: Tue 25 Mar 2025 17:00:22 +0000 ROA not before: Tue 25 Mar 2025 17:00:22 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c6:13:a4:85:f0:58:43:66:17:29:52:f8:db:a9:a8:09:4a:9e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 17:00:22 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=76a7851d23364759db76f59be2bd36e2ac44310f6e4374253ee7cd4ff19ce364, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:32:61:2a:d0:11:a5:f0:5a:b1:38:3b:77: 6a:16:86:81:ca:5c:6f:6c:d7:b6:9d:91:59:37:53: aa:7a:c4:4a:21:38:50:db:59:cb:19:ce:e4:be:b3: db:54:13:67:5a:5e:0a:ff:4e:a7:69:c7:01:28:90: 0a:e4:14:e8:8e:1c:d0:29:08:37:26:98:f6:62:97: a4:0e:f7:1b:5d:c8:35:b2:a0:1c:9f:a2:db:e3:a4: 0f:5a:99:64:9f:8e:a3:7a:62:eb:80:52:28:10:77: 11:21:cd:fc:d1:31:bc:0e:ed:e6:bd:8f:19:47:40: 8f:73:ac:ab:df:2c:6a:2a:9c:c4:f8:fe:f1:96:1c: 23:d6:ac:22:29:db:4a:ca:93:cd:57:83:9b:f2:e7: e1:3a:15:fe:5c:9e:48:3b:a1:f0:2b:b5:25:53:f0: 94:18:0f:57:59:8d:bf:62:cd:b4:1e:d8:4e:31:d7: a9:8b:94:19:29:a7:36:40:a8:87:ff:a6:66:14:c3: d1:16:5e:ed:34:20:8d:77:b5:84:24:a0:73:52:0b: 09:78:d0:7c:91:32:0a:cd:2d:b3:e8:26:7b:cb:38: 5c:0e:6a:75:d5:0c:9d:31:27:33:cd:53:df:70:a8: b8:8c:8a:41:ec:e6:b2:12:72:75:60:1f:c7:b5:ea: 06:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2C:C1:D0:6D:5B:83:47:76:25:CB:16:3A:89:00:D4:CF:C1:5B:32 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cecf97d0-f0a4-44f2-801b-384f580accd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8110::/48 Signature Algorithm: sha256WithRSAEncryption c8:86:65:b3:46:da:74:cd:19:36:92:9d:df:22:ad:88:a7:20: bb:38:4d:de:78:79:1f:9b:3d:42:6d:e1:7c:19:32:29:4a:db: f6:c5:35:a2:74:e8:65:89:ee:a3:d9:d7:85:4e:35:9b:ab:7f: df:d0:24:ea:c5:ad:38:70:77:13:b6:81:75:bf:02:93:03:7d: ce:67:1c:29:39:45:7e:d2:6c:83:67:f5:32:a5:b6:71:8e:53: 48:6d:ea:a1:51:7b:36:76:53:c5:fd:ad:d6:17:8d:e1:3d:41: 51:c4:a1:1d:3b:eb:f8:4d:f9:ed:eb:df:2d:8c:18:c0:14:dd: dd:d1:30:79:b4:48:9b:4f:f5:57:f1:40:d9:9b:5e:f4:f9:d5: 5d:ff:96:b9:17:bc:e3:cd:f1:ce:31:3d:db:94:2f:53:62:73: 70:68:a6:b3:10:12:3b:1c:63:48:e6:45:96:b1:0a:80:9e:50: c8:e3:88:3d:45:21:e1:9d:b3:10:01:1d:88:96:ec:f6:1f:e0: 54:16:ef:5b:30:99:89:9e:af:79:38:69:1e:86:9c:21:4d:a2: eb:07:d3:52:fd:a3:f3:dd:dd:ea:8e:40:c5:e1:ba:99:d6:12: 55:f4:1e:e3:eb:1c:56:fa:22:50:e9:2d:24:c1:bf:a6:3a:d2: 8d:96:a6:55 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSMYTpIXwWENmFylS+NupqAlKnhkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTcwMDIyWhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmE3ODUxZDIzMzY0NzU5ZGI3NmY1OWJlMmJkMzZlMmFj NDQzMTBmNmU0Mzc0MjUzZWU3Y2Q0ZmYxOWNlMzY0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClyTJhKtARpfBasTg7d2oWhoHKXG9s17adkVk3U6p6xEoh OFDbWcsZzuS+s9tUE2daXgr/TqdpxwEokArkFOiOHNApCDcmmPZil6QO9xtdyDWy oByfotvjpA9amWSfjqN6YuuAUigQdxEhzfzRMbwO7ea9jxlHQI9zrKvfLGoqnMT4 /vGWHCPWrCIp20rKk81Xg5vy5+E6Ff5cnkg7ofArtSVT8JQYD1dZjb9izbQe2E4x 16mLlBkppzZAqIf/pmYUw9EWXu00II13tYQkoHNSCwl40HyRMgrNLbPoJnvLOFwO anXVDJ0xJzPNU99wqLiMikHs5rIScnVgH8e16gbfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULSzB0G1bg0d2JcsWOokA1M/BWzIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlY2Y5N2QwLWYwYTQtNDRmMi04MDFiLTM4NGY1ODBhY2NkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gRAwDQYJKoZIhvcNAQELBQADggEBAMiGZbNG2nTNGTaSnd8irYin ILs4Td54eR+bPUJt4XwZMilK2/bFNaJ06GWJ7qPZ14VONZurf9/QJOrFrThwdxO2 gXW/ApMDfc5nHCk5RX7SbINn9TKltnGOU0ht6qFRezZ2U8X9rdYXjeE9QVHEoR07 6/hN+e3r3y2MGMAU3d3RMHm0SJtP9VfxQNmbXvT51V3/lrkXvOPN8c4xPduUL1Ni c3BoprMQEjscY0jmRZaxCoCeUMjjiD1FIeGdsxABHYiW7PYf4FQW71swmYmer3k4 aR6GnCFNousH01L9o/Pd3eqOQMXhupnWElX0HuPrHFb6IlDpLSTBv6Y60o2WplU= -----END CERTIFICATE-----Generated at Wed Apr 16 16:58:20 2025 by rpki-client