$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21474df8-6b21-4eb1-9680-20a1d401e8e1.roa File: 21474df8-6b21-4eb1-9680-20a1d401e8e1.roa (raw, json) Hash identifier: kAUYIdv6MB7ZlKCT+UWv4lqtNlriksStYW5IUgY7xUY= Subject key identifier: 66:A2:1C:42:55:A6:45:7C:F6:E9:56:B6:5D:43:40:B9:7A:AE:16:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 119FFA2874E46E90ED34C16807C918567B28F8C7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21474df8-6b21-4eb1-9680-20a1d401e8e1.roa Signing time: Tue 22 Apr 2025 15:51:24 +0000 ROA not before: Tue 22 Apr 2025 15:51:24 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:7440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9f:fa:28:74:e4:6e:90:ed:34:c1:68:07:c9:18:56:7b:28:f8:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:51:24 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=3769dac91bb698ee1df0154dac1f35c768bf459e6116e0691b222662f2f65ef6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:ab:a7:ce:36:88:c7:21:a9:30:5e:85:41: f6:aa:5b:63:dd:b4:da:eb:cd:3f:18:9a:7d:1c:9f: 20:a9:72:4b:3a:af:80:c7:04:96:9f:43:d3:77:f7: 96:b2:d3:92:ea:e9:4d:41:d2:f1:02:28:c4:11:95: f1:c8:b1:08:6b:90:5e:25:35:c2:20:c3:d0:89:d5: f1:35:6d:07:a6:0c:fd:7a:21:31:97:d5:2a:79:47: ba:5f:05:1a:31:02:c8:15:08:2a:a1:2d:70:95:d0: f2:71:60:d6:88:d5:32:41:49:c5:92:43:16:46:2b: d7:1d:cd:87:ce:26:58:72:3a:42:da:00:26:1e:db: ce:3b:df:18:8f:66:b1:1f:a7:01:33:db:ea:40:1d: 0a:53:22:97:15:35:59:cd:10:00:df:bb:99:b6:76: a2:d3:ba:d2:95:81:25:58:65:8d:b0:e5:8d:0c:b3: 19:e3:3f:54:04:b3:24:6f:32:6e:9d:6e:fc:97:49: 9f:1f:96:3c:48:7b:e9:b9:d8:2d:49:78:d5:6e:b8: 8e:d5:04:5f:df:17:e3:21:de:d9:9b:00:c0:88:8a: c9:98:3a:03:b4:ca:98:87:e0:98:5b:64:0d:11:7d: f8:62:0e:10:72:32:b1:a7:4a:43:9f:ce:30:11:2a: 86:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A2:1C:42:55:A6:45:7C:F6:E9:56:B6:5D:43:40:B9:7A:AE:16:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21474df8-6b21-4eb1-9680-20a1d401e8e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:7440::/48 Signature Algorithm: sha256WithRSAEncryption 1f:39:70:15:a7:c2:6b:ef:a3:d3:a9:26:c7:a8:69:c1:0e:40: f5:6d:06:16:bc:de:6f:96:3c:9b:0f:bf:7c:b6:a7:cf:1d:a9: e7:89:29:5d:20:e1:4c:01:a5:bc:29:28:8b:95:01:85:20:57: 2d:84:d4:f7:be:4e:bb:6a:66:2c:c6:5f:ef:80:63:40:5e:f8: 84:15:b6:af:0d:31:02:12:b6:8e:b8:87:3c:8f:01:f2:2a:40: 62:8e:b6:48:66:16:ef:bd:3b:38:d1:21:f6:2a:f6:f9:10:d9: f1:a8:65:41:e4:b8:cb:a1:92:17:c6:91:f3:3a:8e:a3:fe:ad: 07:79:61:bd:6c:ed:b6:f9:77:82:d8:21:94:85:65:8b:3a:39: 76:5f:07:2d:5e:64:bf:99:32:16:8b:7b:bc:c7:3f:75:46:ff: ce:17:30:89:67:b7:17:af:7d:28:df:af:3a:68:b8:ba:f8:7f: 2c:04:17:47:e3:42:70:71:5e:ac:5a:80:d5:0e:c9:68:c8:cd: c3:b6:d5:7a:86:14:0b:1f:18:cb:71:82:d2:c8:9a:0e:53:8c: f4:04:a9:7e:cb:ee:3d:41:6e:04:76:47:66:7d:49:ea:19:5f: cd:6a:e5:5a:fb:39:0e:ae:7f:fc:1d:c3:28:5e:3b:ba:b2:25: 04:62:ce:b0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEZ/6KHTkbpDtNMFoB8kYVnso+McwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTU1MTI0WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNzY5ZGFjOTFiYjY5OGVlMWRmMDE1NGRhYzFmMzVjNzY4 YmY0NTllNjExNmUwNjkxYjIyMjY2MmYyZjY1ZWY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgOaunzjaIxyGpMF6FQfaqW2PdtNrrzT8Ymn0cnyCpcks6 r4DHBJafQ9N395ay05Lq6U1B0vECKMQRlfHIsQhrkF4lNcIgw9CJ1fE1bQemDP16 ITGX1Sp5R7pfBRoxAsgVCCqhLXCV0PJxYNaI1TJBScWSQxZGK9cdzYfOJlhyOkLa ACYe28473xiPZrEfpwEz2+pAHQpTIpcVNVnNEADfu5m2dqLTutKVgSVYZY2w5Y0M sxnjP1QEsyRvMm6dbvyXSZ8fljxIe+m52C1JeNVuuI7VBF/fF+Mh3tmbAMCIismY OgO0ypiH4JhbZA0RffhiDhByMrGnSkOfzjARKoalAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZqIcQlWmRXz26Va2XUNAuXquFjYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxNDc0ZGY4LTZiMjEtNGViMS05NjgwLTIwYTFkNDAxZThlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/0dEAwDQYJKoZIhvcNAQELBQADggEBAB85cBWnwmvvo9OpJseoacEO QPVtBha83m+WPJsPv3y2p88dqeeJKV0g4UwBpbwpKIuVAYUgVy2E1Pe+TrtqZizG X++AY0Be+IQVtq8NMQISto64hzyPAfIqQGKOtkhmFu+9OzjRIfYq9vkQ2fGoZUHk uMuhkhfGkfM6jqP+rQd5Yb1s7bb5d4LYIZSFZYs6OXZfBy1eZL+ZMhaLe7zHP3VG /84XMIlntxevfSjfrzpouLr4fywEF0fjQnBxXqxagNUOyWjIzcO21XqGFAsfGMtx gtLImg5TjPQEqX7L7j1BbgR2R2Z9SeoZX81q5Vr7OQ6uf/wdwyheO7qyJQRizrA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:05 2025 by rpki-client