$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fe110a8-96c2-44a4-ac79-c41ae0552193.roa File: 0fe110a8-96c2-44a4-ac79-c41ae0552193.roa (raw, json) Hash identifier: sbSw6QKKKWfpqpEWaJ4A0iZEP0SomnmCMsaWvcgtFTI= Subject key identifier: 9B:6E:BA:8C:1E:FF:01:A2:3C:F7:2E:14:EB:16:05:3A:9F:C9:6F:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 593BBB8002B8569A25E77F1F9BB7E41E01E03932 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fe110a8-96c2-44a4-ac79-c41ae0552193.roa Signing time: Tue 22 Apr 2025 17:20:19 +0000 ROA not before: Tue 22 Apr 2025 17:20:19 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f28:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3b:bb:80:02:b8:56:9a:25:e7:7f:1f:9b:b7:e4:1e:01:e0:39:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:20:19 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=dbb72177da099b970bcea30e3ad23b0d8401d34d0a98dfea6067ed83c8bb70e7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4f:83:82:ff:0d:e3:b8:36:05:38:0b:17:96: f2:fb:ef:a8:b4:3d:03:d0:68:61:5a:f1:84:10:f1: 9c:56:05:cf:c6:d7:3f:41:13:5e:dd:9b:76:b4:27: 22:cd:9e:53:07:43:8d:64:aa:e1:ae:2e:73:4a:bc: 38:53:45:e2:7d:7a:4c:46:95:15:0c:ef:64:34:9f: 2f:44:0b:bd:1e:20:cb:94:61:74:da:2a:80:27:6f: 1e:15:e6:00:b1:f9:7d:04:f1:60:ea:be:a5:cd:e3: f2:12:34:9b:2d:43:c2:5b:83:b7:c5:da:4c:e0:8c: bb:d5:71:a9:8b:38:eb:d0:ee:9e:7e:0e:f4:ba:59: 44:18:10:2d:0c:a4:72:2c:97:b2:63:0e:34:21:da: ff:1f:c3:03:09:06:0c:95:48:43:d6:be:73:91:51: c5:72:b1:00:31:8b:ff:25:f2:29:12:df:7e:46:6d: 34:50:3e:33:1d:43:6d:b6:cd:ff:f3:ea:79:44:00: 47:2c:d0:a3:b8:08:2b:2b:16:60:2f:89:46:3b:82: ae:c1:90:db:37:5d:23:c1:ba:f2:dc:66:1e:65:d2: 76:a7:5e:6a:35:ad:eb:2a:a3:40:31:90:7f:6e:f5: 64:bb:77:12:b4:91:be:ee:2f:8c:67:6b:d6:d3:8f: 04:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6E:BA:8C:1E:FF:01:A2:3C:F7:2E:14:EB:16:05:3A:9F:C9:6F:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fe110a8-96c2-44a4-ac79-c41ae0552193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f28:c000::/36 Signature Algorithm: sha256WithRSAEncryption 76:ff:58:8f:da:3c:23:04:fe:b0:87:77:c8:ab:56:a6:5f:c5: b0:41:eb:51:9e:55:6a:84:0b:39:1b:c1:1e:34:c0:8d:95:77: 81:aa:8e:40:4c:b1:4a:c3:ef:5b:a2:7a:ee:b1:67:da:d1:d7: 62:30:58:5a:07:dd:0f:40:5a:f0:e2:3e:79:1f:80:0d:46:e6: a2:6d:82:95:e0:39:f9:1d:b0:9d:01:62:81:c7:5f:2e:47:89: c9:24:f5:7f:1c:53:e7:56:5e:9e:e3:e8:80:9f:20:e1:7f:8f: 23:2b:78:44:59:e4:e1:cd:02:94:19:89:97:cb:ef:c6:56:11: 2d:d7:99:c5:96:67:2a:43:c1:4e:c4:8c:9c:ce:cc:40:83:99: 29:93:74:1b:ea:95:c8:bc:fe:d2:12:28:35:88:28:25:1a:ef: cb:6b:5d:f1:c2:1e:9f:98:e3:3d:6c:0b:e8:4e:f1:4e:84:31: e0:95:ff:1e:b8:03:30:64:cf:4a:15:24:f4:8c:11:e1:42:f1: 46:5c:66:ee:d5:20:d4:85:24:31:36:ea:48:f5:81:52:77:86: 6c:fd:de:fa:80:27:a6:4e:66:c1:69:a0:85:08:2c:cf:63:64: 56:57:e2:2e:e0:84:9c:13:a5:b4:72:dd:f6:4e:dd:33:6a:61: a8:fd:7e:3f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWTu7gAK4Vpol538fm7fkHgHgOTIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcyMDE5WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmI3MjE3N2RhMDk5Yjk3MGJjZWEzMGUzYWQyM2IwZDg0 MDFkMzRkMGE5OGRmZWE2MDY3ZWQ4M2M4YmI3MGU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClT4OC/w3juDYFOAsXlvL776i0PQPQaGFa8YQQ8ZxWBc/G 1z9BE17dm3a0JyLNnlMHQ41kquGuLnNKvDhTReJ9ekxGlRUM72Q0ny9EC70eIMuU YXTaKoAnbx4V5gCx+X0E8WDqvqXN4/ISNJstQ8Jbg7fF2kzgjLvVcamLOOvQ7p5+ DvS6WUQYEC0MpHIsl7JjDjQh2v8fwwMJBgyVSEPWvnORUcVysQAxi/8l8ikS335G bTRQPjMdQ222zf/z6nlEAEcs0KO4CCsrFmAviUY7gq7BkNs3XSPBuvLcZh5l0nan Xmo1resqo0AxkH9u9WS7dxK0kb7uL4xna9bTjwS/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUm266jB7/AaI89y4U6xYFOp/Jb1owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmZTExMGE4LTk2YzItNDRhNC1hYzc5LWM0MWFlMDU1MjE5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8owDANBgkqhkiG9w0BAQsFAAOCAQEAdv9Yj9o8IwT+sId3yKtWpl/F sEHrUZ5VaoQLORvBHjTAjZV3gaqOQEyxSsPvW6J67rFn2tHXYjBYWgfdD0Ba8OI+ eR+ADUbmom2CleA5+R2wnQFigcdfLkeJyST1fxxT51ZenuPogJ8g4X+PIyt4RFnk 4c0ClBmJl8vvxlYRLdeZxZZnKkPBTsSMnM7MQIOZKZN0G+qVyLz+0hIoNYgoJRrv y2td8cIen5jjPWwL6E7xToQx4JX/HrgDMGTPShUk9IwR4ULxRlxm7tUg1IUkMTbq SPWBUneGbP3e+oAnpk5mwWmghQgsz2NkVlfiLuCEnBOltHLd9k7dM2phqP1+Pw== -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:20 2025 by rpki-client