$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da88867a-2f97-4b55-ac42-59565327eeb4.roa File: da88867a-2f97-4b55-ac42-59565327eeb4.roa (raw, json) Hash identifier: vTtThu1znl+mvQlGjVIkXwtf299Qi4hEKID6ylGX5y8= Subject key identifier: CF:A0:9A:07:1A:4D:08:9A:56:60:C1:92:1F:A3:69:72:0B:8C:E0:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4D0E34BE72A550A4698EA3C4E051A5E014ABA566 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da88867a-2f97-4b55-ac42-59565327eeb4.roa Signing time: Fri 28 Mar 2025 15:02:11 +0000 ROA not before: Fri 28 Mar 2025 15:02:11 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f69:2040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0e:34:be:72:a5:50:a4:69:8e:a3:c4:e0:51:a5:e0:14:ab:a5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 15:02:11 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: serialNumber=4e4bda13953a5044c138ef59b08df3bb1674a3756bfbfc327837baa8987a1292, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:3a:50:d9:84:da:63:d6:58:16:2d:f4:df: dd:51:f3:9a:68:9b:3d:5a:7e:00:90:65:90:42:51: dd:68:46:33:31:89:93:cf:f5:fa:cd:0c:d1:58:3e: 51:35:5d:c7:97:45:b1:a5:fb:8a:d3:95:3c:d6:6e: 10:39:4d:9f:8f:eb:a6:ef:7b:f0:7d:c1:ae:aa:b3: 8d:c7:10:8f:4b:bd:94:07:ba:12:2b:3b:27:15:61: 11:95:e2:99:87:a7:10:c9:ef:2c:79:0e:74:6c:6e: 57:4f:a0:df:05:34:ce:f8:30:4c:b6:77:80:5c:f3: e7:2e:59:b9:67:b7:ef:09:b3:ad:36:d4:fa:5a:0c: af:ed:9f:36:a5:07:61:81:6e:8c:89:6a:0c:fb:77: 62:da:5b:ab:0f:4a:d0:a4:30:e6:94:1c:4c:36:f5: 04:70:18:07:cf:e0:f2:20:90:00:6c:18:dd:20:43: 0a:0e:ed:9b:f9:97:25:df:d7:e4:b3:46:3a:02:40: f4:ef:0b:80:47:a8:ff:d2:85:38:99:7a:f1:65:bd: 8d:65:37:74:71:d4:5e:2c:ae:69:72:a4:b1:67:9a: 86:4b:e4:a5:c0:39:37:ef:b6:fb:b6:61:3a:4c:aa: 3b:fb:63:5c:05:54:89:a7:14:18:8e:f9:b1:77:fd: 65:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A0:9A:07:1A:4D:08:9A:56:60:C1:92:1F:A3:69:72:0B:8C:E0:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da88867a-2f97-4b55-ac42-59565327eeb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:2040::/46 Signature Algorithm: sha256WithRSAEncryption 24:9a:f8:4b:3b:7a:7e:13:ef:c2:7b:76:40:3c:58:f0:60:f2: c6:7f:b0:94:dd:0b:38:11:13:ce:2a:af:f1:50:61:55:46:f5: 5d:e9:a8:ce:07:d8:ec:36:af:5f:f8:e1:88:75:ad:eb:f5:3c: 71:0f:31:4e:8a:cb:b4:ce:f0:89:30:97:8a:ad:b0:6c:7a:e3: b0:f8:c3:a9:5d:1a:58:c4:89:0b:02:f9:ca:cd:41:cf:e3:a9: 76:3d:33:0a:7a:17:e6:6b:14:30:9e:dd:06:99:ab:09:b8:b8: db:e8:3d:f5:2b:45:43:31:42:94:79:15:7d:6a:be:3a:e7:1f: 22:3e:73:19:2c:b4:8d:b8:02:bd:1a:bc:ee:0d:ed:bf:60:01: 08:9a:67:7e:31:06:d7:a2:26:ac:d5:63:70:ae:64:49:cf:ab: dd:18:f5:60:83:c9:40:2a:ca:12:c2:1a:0a:64:00:40:95:8e: 2d:a0:44:8b:bc:2f:63:96:60:b2:e0:d1:71:2f:a4:85:00:06: 19:98:f0:aa:35:3d:1a:a4:5b:a7:6e:50:cf:98:62:a9:63:56: 0a:f3:19:74:81:16:52:28:75:16:5d:40:cd:72:2c:fd:7d:13: 53:6e:29:21:20:8b:e7:6d:18:2c:a3:95:a1:26:78:04:22:91: 20:3c:84:bc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTQ40vnKlUKRpjqPE4FGl4BSrpWYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTUwMjExWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTRiZGExMzk1M2E1MDQ0YzEzOGVmNTliMDhkZjNiYjE2 NzRhMzc1NmJmYmZjMzI3ODM3YmFhODk4N2ExMjkyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz0jpQ2YTaY9ZYFi30391R85pomz1afgCQZZBCUd1oRjMx iZPP9frNDNFYPlE1XceXRbGl+4rTlTzWbhA5TZ+P66bve/B9wa6qs43HEI9LvZQH uhIrOycVYRGV4pmHpxDJ7yx5DnRsbldPoN8FNM74MEy2d4Bc8+cuWblnt+8Js602 1PpaDK/tnzalB2GBboyJagz7d2LaW6sPStCkMOaUHEw29QRwGAfP4PIgkABsGN0g QwoO7Zv5lyXf1+SzRjoCQPTvC4BHqP/ShTiZevFlvY1lN3Rx1F4srmlypLFnmoZL 5KXAOTfvtvu2YTpMqjv7Y1wFVImnFBiO+bF3/WXxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUz6CaBxpNCJpWYMGSH6NpcguM4IswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RhODg4NjdhLTJmOTctNGI1NS1hYzQyLTU5NTY1MzI3ZWViNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pIEAwDQYJKoZIhvcNAQELBQADggEBACSa+Es7en4T78J7dkA8WPBg 8sZ/sJTdCzgRE84qr/FQYVVG9V3pqM4H2Ow2r1/44Yh1rev1PHEPMU6Ky7TO8Ikw l4qtsGx647D4w6ldGljEiQsC+crNQc/jqXY9Mwp6F+ZrFDCe3QaZqwm4uNvoPfUr RUMxQpR5FX1qvjrnHyI+cxkstI24Ar0avO4N7b9gAQiaZ34xBteiJqzVY3CuZEnP q90Y9WCDyUAqyhLCGgpkAECVji2gRIu8L2OWYLLg0XEvpIUABhmY8Ko1PRqkW6du UM+YYqljVgrzGXSBFlIodRZdQM1yLP19E1NuKSEgi+dtGCyjlaEmeAQikSA8hLw= -----END CERTIFICATE-----Generated at Wed Apr 16 17:19:27 2025 by rpki-client