$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f9d8322-0490-4bca-afaa-6cdbd79b9c30.roa File: 2f9d8322-0490-4bca-afaa-6cdbd79b9c30.roa (raw, json) Hash identifier: Femsz6KIMFbx4LI5NG2ZuNcnaiSZDwxux+iQJj+KVNU= Subject key identifier: 32:17:C3:93:A2:17:46:23:80:31:EB:44:56:B3:AE:4B:07:7A:F7:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0EC305A1D710D549D3E1E1BFC9934ECA2C109860 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f9d8322-0490-4bca-afaa-6cdbd79b9c30.roa Signing time: Tue 22 Apr 2025 00:31:27 +0000 ROA not before: Tue 22 Apr 2025 00:31:27 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c3:05:a1:d7:10:d5:49:d3:e1:e1:bf:c9:93:4e:ca:2c:10:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:31:27 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=219ea19cfbcb4f44904e1966ac99f4319b65cd5e4b6d3b53aa88d1912b2158fb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:a8:c4:47:6c:79:5b:f9:5a:64:fe:fd:ef: f2:14:cb:5a:1f:40:eb:27:04:af:7d:77:dc:d4:27: b1:3a:0f:00:75:96:d2:b8:4b:5c:b4:85:02:6c:2c: 0a:6e:c3:3a:f6:86:22:02:50:4b:a6:8c:26:9d:41: 2b:91:eb:3a:e0:4e:a0:2a:e1:eb:5a:41:26:25:c0: 98:36:9f:e4:dd:6d:f2:2f:a2:f6:b4:f9:37:4d:4c: 17:a1:67:a6:6d:d5:8b:50:5b:98:07:e2:c5:93:a8: 04:93:0f:50:31:b3:bb:5d:c2:74:db:59:a2:e4:17: 7f:8a:da:c2:d0:69:1d:3f:ce:14:b8:67:4e:ba:fc: d9:b8:90:08:ec:9e:93:31:80:c3:c9:a6:7d:99:e5: 8c:08:89:89:41:da:a5:97:96:19:55:10:00:fa:62: b9:bb:a9:e2:73:45:7e:3c:20:57:bb:87:8f:fb:b9: 44:68:7f:de:10:96:a0:a0:18:e7:88:7c:ce:5f:2d: 8b:dc:90:cf:6a:3c:90:70:d6:a8:38:f4:ea:b6:08: dd:8b:79:e7:a0:eb:cf:28:9c:5c:17:ed:f2:b5:78: 38:07:a9:84:b9:e4:e2:43:02:bf:ff:65:6e:f4:8d: 78:df:d0:41:20:af:db:20:a8:79:be:40:62:ef:0d: 78:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:17:C3:93:A2:17:46:23:80:31:EB:44:56:B3:AE:4B:07:7A:F7:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f9d8322-0490-4bca-afaa-6cdbd79b9c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption 9b:d5:6d:24:98:c6:1b:4b:bf:e8:14:12:5a:cf:1c:c0:74:2b: 42:48:1f:db:18:82:c4:7f:23:55:ec:dd:ad:64:95:a6:f2:65: 81:d9:41:d8:3c:00:09:f4:b2:a7:af:b7:8c:f5:9b:fb:b9:26: 34:8a:c7:70:fd:0e:5f:35:f9:6c:c1:1e:43:86:27:e4:36:13: 7f:b1:a2:f8:4f:c9:c2:ef:a6:7d:28:37:bf:17:b4:6d:c8:be: 95:18:27:4e:4e:96:d0:32:c9:e6:ec:15:a6:3d:3b:83:4a:4d: a5:de:79:a1:92:2a:d6:90:e5:cf:f0:fc:61:49:5f:57:8e:46: 11:c4:01:c2:d0:22:19:9e:87:f7:62:cb:10:2e:f7:32:41:f1: f1:57:01:54:6f:b3:6f:93:bd:5a:f5:53:9d:8f:5b:6d:3b:86: 76:15:d5:88:a1:37:0c:4e:6f:53:36:5b:bc:3f:bc:9a:6f:49: 0b:91:c7:d3:18:c9:5b:b9:71:08:5c:0a:d4:37:09:c1:71:18: 30:28:19:19:00:de:75:19:cc:68:ea:42:97:a2:52:4d:c2:7a: 89:2b:31:5f:42:61:9d:95:7a:60:45:23:48:4e:a4:e6:ba:36: 6c:b3:cc:af:49:4d:77:09:e8:67:14:34:e4:9e:5b:de:20:ca: 7e:d7:3f:2a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDsMFodcQ1UnT4eG/yZNOyiwQmGAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAzMTI3WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTllYTE5Y2ZiY2I0ZjQ0OTA0ZTE5NjZhYzk5ZjQzMTli NjVjZDVlNGI2ZDNiNTNhYTg4ZDE5MTJiMjE1OGZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCowqjER2x5W/laZP797/IUy1ofQOsnBK99d9zUJ7E6DwB1 ltK4S1y0hQJsLApuwzr2hiICUEumjCadQSuR6zrgTqAq4etaQSYlwJg2n+TdbfIv ova0+TdNTBehZ6Zt1YtQW5gH4sWTqASTD1Axs7tdwnTbWaLkF3+K2sLQaR0/zhS4 Z066/Nm4kAjsnpMxgMPJpn2Z5YwIiYlB2qWXlhlVEAD6Yrm7qeJzRX48IFe7h4/7 uURof94QlqCgGOeIfM5fLYvckM9qPJBw1qg49Oq2CN2Leeeg688onFwX7fK1eDgH qYS55OJDAr//ZW70jXjf0EEgr9sgqHm+QGLvDXgXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMhfDk6IXRiOAMetEVrOuSwd69y0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmOWQ4MzIyLTA0OTAtNGJjYS1hZmFhLTZjZGJkNzliOWMzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/y4MAwDQYJKoZIhvcNAQELBQADggEBAJvVbSSYxhtLv+gUElrPHMB0 K0JIH9sYgsR/I1Xs3a1klabyZYHZQdg8AAn0sqevt4z1m/u5JjSKx3D9Dl81+WzB HkOGJ+Q2E3+xovhPycLvpn0oN78XtG3IvpUYJ05OltAyyebsFaY9O4NKTaXeeaGS KtaQ5c/w/GFJX1eORhHEAcLQIhmeh/diyxAu9zJB8fFXAVRvs2+TvVr1U52PW207 hnYV1YihNwxOb1M2W7w/vJpvSQuRx9MYyVu5cQhcCtQ3CcFxGDAoGRkA3nUZzGjq QpeiUk3CeokrMV9CYZ2VemBFI0hOpOa6NmyzzK9JTXcJ6GcUNOSeW94gyn7XPyo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:37:17 2025 by rpki-client