$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11922458-95a1-49eb-ab5f-e50a3e748405.roa File: 11922458-95a1-49eb-ab5f-e50a3e748405.roa (raw, json) Hash identifier: ZWFy2yxXp0EJsU4w0QmaJ9SPOTi/nZqxfOln28mSXQA= Subject key identifier: 48:0E:FC:36:86:78:DC:BB:5A:AE:7F:B7:C1:DD:EA:76:C9:F5:BA:6D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A5506B23459F2FEF8DA44BC3685DA48BEED2360 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11922458-95a1-49eb-ab5f-e50a3e748405.roa Signing time: Tue 22 Apr 2025 17:21:21 +0000 ROA not before: Tue 22 Apr 2025 17:21:21 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f15:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:55:06:b2:34:59:f2:fe:f8:da:44:bc:36:85:da:48:be:ed:23:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:21:21 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=8e28f49e7ead1595f4d00693d75c2f7057c4731ae7c142b4a2a4de0f834e4a86, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a4:c2:02:17:96:1d:aa:6c:fc:5e:42:29:4f: 22:7e:91:eb:85:6a:23:9a:a2:3a:83:85:c1:3e:33: a8:2b:ea:c9:17:53:21:64:0c:54:19:73:b3:c4:a3: 75:44:41:cb:80:18:c5:75:d0:0e:b1:30:02:74:b2: 9b:4c:23:3e:bb:93:9f:01:67:de:84:6e:0f:ce:1c: 80:11:5d:18:f1:f1:10:0a:1f:ae:25:36:8b:7c:0c: 62:f6:b7:68:c4:9a:41:7c:0f:70:21:c0:df:41:8c: c5:cc:be:56:0c:b2:19:e6:f7:1e:76:07:6f:c3:51: ff:3d:5f:6d:64:ac:e6:11:d3:d4:24:31:00:63:8b: a9:06:fa:71:49:12:1a:e0:43:28:1d:72:05:8c:e9: 3c:91:f3:b4:e5:06:11:4f:96:47:78:2d:ce:53:7f: ca:c4:e6:2f:d3:69:4d:d9:35:74:6a:d2:74:b4:4f: d5:dc:a3:16:0c:07:5d:e8:b7:77:d0:8f:83:1e:38: d9:0e:8e:c2:43:9f:8b:f1:a0:79:cd:3a:f9:7f:93: 15:32:b1:fd:c8:f6:46:94:14:cc:88:f4:fa:2c:9e: c7:c4:2b:f1:4e:c9:fe:dd:ab:60:69:b3:37:3b:58: 0c:b2:53:32:9f:14:ce:8a:92:35:67:5e:fb:eb:7e: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0E:FC:36:86:78:DC:BB:5A:AE:7F:B7:C1:DD:EA:76:C9:F5:BA:6D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11922458-95a1-49eb-ab5f-e50a3e748405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f15:8000::/36 Signature Algorithm: sha256WithRSAEncryption 58:8f:83:cb:fe:59:32:12:d2:d9:ab:f6:31:d1:01:c4:96:4b: b4:f8:2e:59:bd:3e:36:9d:ce:54:a0:d9:d4:c5:79:fc:e5:e1: 75:61:c7:93:56:0f:b0:89:2c:9f:b0:0c:b2:7e:e0:d9:d2:16: cd:15:8d:db:bb:54:90:08:d5:86:24:8e:f8:8a:16:2f:56:8a: 56:37:24:2a:58:c2:d5:e1:85:10:fb:9a:af:a5:08:72:90:78: 94:39:06:12:81:1c:a0:1a:70:44:9e:27:3e:05:9f:b5:2e:6f: 56:e1:f8:58:b5:0d:c6:ce:01:a5:29:e7:94:92:ff:a0:1a:2a: df:bd:c7:7a:32:e1:ab:7e:ae:66:24:bf:47:ce:76:5c:1b:9c: 2a:93:62:26:7d:9a:aa:57:a4:12:84:6b:02:26:f3:d0:44:b7: a1:70:5a:15:69:38:37:ec:cb:af:70:25:16:8d:89:47:d5:ce: 87:f3:3f:8b:b8:11:8f:92:36:81:20:51:e3:87:7e:df:2d:50: 25:e6:87:1e:29:80:d9:79:a4:6f:c2:d1:71:9f:bc:80:d5:da: a8:8f:18:f1:1c:91:0b:96:76:22:9e:a7:a8:92:42:77:c3:86: ac:3a:10:04:f6:2c:b1:20:a0:f9:e3:53:98:b8:c7:df:33:34: 41:a6:e4:dd -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWlUGsjRZ8v742kS8NoXaSL7tI2AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcyMTIxWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTI4ZjQ5ZTdlYWQxNTk1ZjRkMDA2OTNkNzVjMmY3MDU3 YzQ3MzFhZTdjMTQyYjRhMmE0ZGUwZjgzNGU0YTg2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9pMICF5Ydqmz8XkIpTyJ+keuFaiOaojqDhcE+M6gr6skX UyFkDFQZc7PEo3VEQcuAGMV10A6xMAJ0sptMIz67k58BZ96Ebg/OHIARXRjx8RAK H64lNot8DGL2t2jEmkF8D3AhwN9BjMXMvlYMshnm9x52B2/DUf89X21krOYR09Qk MQBji6kG+nFJEhrgQygdcgWM6TyR87TlBhFPlkd4Lc5Tf8rE5i/TaU3ZNXRq0nS0 T9XcoxYMB13ot3fQj4MeONkOjsJDn4vxoHnNOvl/kxUysf3I9kaUFMyI9PosnsfE K/FOyf7dq2Bpszc7WAyyUzKfFM6KkjVnXvvrfgKhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSA78NoZ43Ltarn+3wd3qdsn1um0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzExOTIyNDU4LTk1YTEtNDllYi1hYjVmLWU1MGEzZTc0ODQwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8VgDANBgkqhkiG9w0BAQsFAAOCAQEAWI+Dy/5ZMhLS2av2MdEBxJZL tPguWb0+Np3OVKDZ1MV5/OXhdWHHk1YPsIksn7AMsn7g2dIWzRWN27tUkAjVhiSO +IoWL1aKVjckKljC1eGFEPuar6UIcpB4lDkGEoEcoBpwRJ4nPgWftS5vVuH4WLUN xs4BpSnnlJL/oBoq373HejLhq36uZiS/R852XBucKpNiJn2aqlekEoRrAibz0ES3 oXBaFWk4N+zLr3AlFo2JR9XOh/M/i7gRj5I2gSBR44d+3y1QJeaHHimA2Xmkb8LR cZ+8gNXaqI8Y8RyRC5Z2Ip6nqJJCd8OGrDoQBPYssSCg+eNTmLjH3zM0Qabk3Q== -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:36 2025 by rpki-client