$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/222bfa2f-992f-44ff-9e71-10172e166f88.roa File: 222bfa2f-992f-44ff-9e71-10172e166f88.roa (raw, json) Hash identifier: 2vVciuE/kzdu9qInPmCjabdAQ2Xd/547jYNQplp2xxw= Subject key identifier: 4F:A7:80:A8:59:B3:AF:0C:A1:8D:F9:7E:49:96:AE:2E:F5:1D:EE:4A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 35BCD7940005AD21451B4D00202FA871DE720C8C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/222bfa2f-992f-44ff-9e71-10172e166f88.roa Signing time: Tue 22 Apr 2025 15:32:59 +0000 ROA not before: Tue 22 Apr 2025 15:32:59 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:bc:d7:94:00:05:ad:21:45:1b:4d:00:20:2f:a8:71:de:72:0c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:32:59 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=12dd7f1ebc16057b9ea84837cf95c37add463338acca5578c7e51082c6ccd26a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:e9:64:9f:e8:d2:68:57:d6:42:12:60:6d: b2:bc:b0:fd:cf:78:1b:40:bb:d7:8f:30:d0:1a:de: c4:6b:41:a8:d8:7b:87:30:d5:40:28:bb:57:c2:f9: ca:3a:1b:c3:13:ff:b1:f8:cd:f3:f5:81:3d:56:48: ef:c7:82:74:a8:09:76:0b:32:46:c1:50:b3:6a:43: 1c:3e:72:55:2b:62:9a:de:07:c8:11:66:4a:ad:e5: 13:b2:47:12:44:b5:35:6e:57:a2:43:59:a4:00:f9: 03:50:eb:a8:c0:0c:c7:e3:cd:69:f9:a8:a8:f3:e1: c3:69:90:07:00:2a:01:f7:1d:aa:15:5d:01:08:72: ee:cb:58:f7:39:dc:44:ab:61:57:17:a4:30:ce:bc: ec:23:f3:6b:b1:ae:43:d3:54:af:67:35:44:e6:b4: 52:6c:88:be:e5:03:18:5c:5a:86:1c:f3:e8:b6:fd: 4c:c4:3f:19:af:ea:62:f1:d1:4a:cd:95:cc:ce:d4: cc:b4:70:40:40:bf:a1:78:7c:bb:cf:4b:20:3f:99: 8b:85:7b:2b:5b:49:42:2e:b6:13:a4:3d:b0:23:89: 92:4c:2b:b4:fc:f5:f8:fc:d5:65:7a:77:c1:9a:f5: 8d:04:e5:7f:00:3f:6d:41:ab:f6:79:fc:69:c8:36: d9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A7:80:A8:59:B3:AF:0C:A1:8D:F9:7E:49:96:AE:2E:F5:1D:EE:4A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/222bfa2f-992f-44ff-9e71-10172e166f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:2000::/40 Signature Algorithm: sha256WithRSAEncryption 8e:35:e9:20:3e:a1:a0:80:68:42:71:bf:8f:d9:c3:2b:84:15: aa:b3:cd:83:df:26:4f:9a:68:c7:91:47:95:4e:af:2c:86:94: bb:52:05:52:f5:00:1e:4a:78:65:36:84:31:9f:2c:e1:0f:bf: a6:a1:b4:51:e0:d4:1a:e8:c8:38:1c:49:d1:74:46:e1:b3:17: f1:7f:12:6b:56:17:a4:eb:3d:07:b8:3b:b1:d3:ee:62:ed:f4: 0a:88:69:a4:c8:e1:d9:9d:ea:f1:f8:39:b7:bd:d2:6c:47:89: ff:63:dc:17:c4:29:e7:69:5c:a3:f8:7e:ca:72:61:e1:2e:5f: e8:2d:6f:11:32:a0:ec:8b:11:04:0d:1d:ae:68:73:38:e1:cd: 42:4c:d8:b7:13:d0:f2:12:66:ed:90:3b:57:7c:96:f2:28:bd: d5:b8:6c:42:b8:6d:20:f1:bc:86:7b:fa:97:00:a4:b7:f0:99: ff:68:d0:ee:63:51:2e:c4:42:bf:32:b3:ee:66:4c:62:14:ae: ea:fd:7d:70:26:b1:e2:04:3a:79:45:5f:f9:84:a7:12:94:ec: 1c:03:f7:15:0f:3c:dc:11:b5:ea:9c:29:1f:f2:d6:95:be:66: d8:e8:6e:c5:47:af:0c:ce:c5:53:43:7c:e2:4f:46:de:cf:3d: 4d:08:57:80 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNbzXlAAFrSFFG00AIC+ocd5yDIwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUzMjU5WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMmRkN2YxZWJjMTYwNTdiOWVhODQ4MzdjZjk1YzM3YWRk NDYzMzM4YWNjYTU1NzhjN2U1MTA4MmM2Y2NkMjZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0E+lkn+jSaFfWQhJgbbK8sP3PeBtAu9ePMNAa3sRrQajY e4cw1UAou1fC+co6G8MT/7H4zfP1gT1WSO/HgnSoCXYLMkbBULNqQxw+clUrYpre B8gRZkqt5ROyRxJEtTVuV6JDWaQA+QNQ66jADMfjzWn5qKjz4cNpkAcAKgH3HaoV XQEIcu7LWPc53ESrYVcXpDDOvOwj82uxrkPTVK9nNUTmtFJsiL7lAxhcWoYc8+i2 /UzEPxmv6mLx0UrNlczO1My0cEBAv6F4fLvPSyA/mYuFeytbSUIuthOkPbAjiZJM K7T89fj81WV6d8Ga9Y0E5X8AP21Bq/Z5/GnINtmxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUT6eAqFmzrwyhjfl+SZauLvUd7kowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIyMmJmYTJmLTk5MmYtNDRmZi05ZTcxLTEwMTcyZTE2NmY4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/0IDANBgkqhkiG9w0BAQsFAAOCAQEAjjXpID6hoIBoQnG/j9nDK4QV qrPNg98mT5pox5FHlU6vLIaUu1IFUvUAHkp4ZTaEMZ8s4Q+/pqG0UeDUGujIOBxJ 0XRG4bMX8X8Sa1YXpOs9B7g7sdPuYu30CohppMjh2Z3q8fg5t73SbEeJ/2PcF8Qp 52lco/h+ynJh4S5f6C1vETKg7IsRBA0drmhzOOHNQkzYtxPQ8hJm7ZA7V3yW8ii9 1bhsQrhtIPG8hnv6lwCkt/CZ/2jQ7mNRLsRCvzKz7mZMYhSu6v19cCax4gQ6eUVf +YSnEpTsHAP3FQ883BG16pwpH/LWlb5m2OhuxUevDM7FU0N84k9G3s89TQhXgA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:06 2025 by rpki-client