$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3404ab36-6ac3-4cf0-b08c-f44f0e1cc660.roa File: 3404ab36-6ac3-4cf0-b08c-f44f0e1cc660.roa (raw, json) Hash identifier: vqXopx/Sf9MUMJb7b/DYK07xTmYLpLYTYRjlLQPmBWQ= Subject key identifier: 4A:8C:9F:0C:F8:96:6E:33:5F:2F:01:75:1B:FE:8B:B8:DD:DE:8C:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1466F0DF35BFC5DD8FBA7C25D91C20EE3A48339E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3404ab36-6ac3-4cf0-b08c-f44f0e1cc660.roa Signing time: Tue 22 Apr 2025 16:31:59 +0000 ROA not before: Tue 22 Apr 2025 16:31:59 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fb8:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:66:f0:df:35:bf:c5:dd:8f:ba:7c:25:d9:1c:20:ee:3a:48:33:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:31:59 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=af53f9ba539bd74b1e922c37e0a2d769bd71e09fb9a3f5047edc36cb650822ba, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:ec:2a:02:f9:3e:27:a5:79:9b:30:09:ba: 4b:89:7a:f2:85:b1:f6:b8:19:1d:cb:78:e3:72:42: 87:da:46:f9:ee:6a:e4:d8:61:79:3a:e0:63:26:9f: a3:35:5d:cd:38:9f:40:89:35:e5:f2:9a:5f:1c:d5: c0:94:33:de:3b:9b:46:1d:45:62:df:81:a5:08:5c: bb:8e:33:59:ee:f7:98:3f:48:55:69:3e:5c:26:56: 88:e4:d2:74:2f:de:e6:f4:0a:e9:3e:33:64:9b:19: e0:27:41:bd:e0:69:3c:5b:2a:61:48:36:74:02:e0: c0:4d:a0:88:04:13:ab:3b:95:73:4a:ca:7b:c9:61: a1:19:80:de:b6:e4:eb:bf:fb:d4:f3:15:cb:8a:95: 02:cc:81:72:cf:14:a8:6c:d6:cc:93:3d:28:43:55: 58:d4:e7:fe:b4:53:5d:20:85:ad:63:a5:9e:eb:9c: da:8b:7e:ca:60:c8:8a:4f:06:be:66:c7:9c:ee:96: d0:b5:ad:89:6d:f3:29:ce:62:a5:f4:89:97:db:39: fd:70:c9:89:9c:be:14:1b:d1:a1:aa:2f:7c:ef:01: 8f:73:29:35:7f:06:4d:09:43:56:ba:f3:b8:ee:ef: 38:bb:9c:fc:63:86:de:4d:67:84:12:86:7f:7b:11: c6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8C:9F:0C:F8:96:6E:33:5F:2F:01:75:1B:FE:8B:B8:DD:DE:8C:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3404ab36-6ac3-4cf0-b08c-f44f0e1cc660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:2000::/40 Signature Algorithm: sha256WithRSAEncryption d6:1c:c4:17:7a:10:51:0c:3e:8d:ae:11:a8:68:ca:a1:e0:34: 73:45:a3:ba:59:ec:ae:68:cb:2d:d8:eb:23:ec:1f:bb:66:28: d1:70:5f:8b:a0:18:58:fc:b6:e7:ed:20:36:2d:95:4b:af:f3: 78:7e:f4:73:42:66:db:6b:e5:a8:61:7b:b5:d8:b9:19:4d:3e: 55:0f:54:9c:ac:f8:c6:76:90:d5:d6:76:10:73:09:f1:5c:fa: bf:8d:8f:a6:78:1f:6b:b3:6b:52:c3:53:32:3a:3d:80:0b:93: 6f:78:6e:5b:b4:e0:e5:55:f3:41:2d:54:f8:6c:02:9a:2e:5e: 63:03:9c:1b:ea:a0:39:60:8f:b1:8d:ad:8a:b1:bf:6b:e1:7e: 62:eb:b8:f5:81:b6:e0:1c:f4:21:4e:8a:c5:5b:62:50:5a:f0: 17:a7:00:54:6b:24:9f:0f:49:11:11:5f:8a:69:da:51:4b:6a: bb:e9:77:07:5f:d4:1d:24:34:7b:76:ba:90:50:25:99:e6:33: db:e1:2d:80:8b:f6:b2:7c:a4:2b:75:f4:fd:57:f5:82:25:fc: 36:1a:2e:c4:93:cf:e4:a7:97:42:a0:34:23:03:04:26:53:47: b3:fd:f7:83:a9:ec:94:71:58:48:01:49:fe:a9:56:bf:55:8e: 0e:59:dd:ce -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFGbw3zW/xd2Punwl2Rwg7jpIM54wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYzMTU5WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjUzZjliYTUzOWJkNzRiMWU5MjJjMzdlMGEyZDc2OWJk NzFlMDlmYjlhM2Y1MDQ3ZWRjMzZjYjY1MDgyMmJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXPOwqAvk+J6V5mzAJukuJevKFsfa4GR3LeONyQofaRvnu auTYYXk64GMmn6M1Xc04n0CJNeXyml8c1cCUM947m0YdRWLfgaUIXLuOM1nu95g/ SFVpPlwmVojk0nQv3ub0Cuk+M2SbGeAnQb3gaTxbKmFINnQC4MBNoIgEE6s7lXNK ynvJYaEZgN625Ou/+9TzFcuKlQLMgXLPFKhs1syTPShDVVjU5/60U10gha1jpZ7r nNqLfspgyIpPBr5mx5zultC1rYlt8ynOYqX0iZfbOf1wyYmcvhQb0aGqL3zvAY9z KTV/Bk0JQ1a687ju7zi7nPxjht5NZ4QShn97EcYRAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSoyfDPiWbjNfLwF1G/6LuN3ejFgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0MDRhYjM2LTZhYzMtNGNmMC1iMDhjLWY0NGYwZTFjYzY2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4IDANBgkqhkiG9w0BAQsFAAOCAQEA1hzEF3oQUQw+ja4RqGjKoeA0 c0WjulnsrmjLLdjrI+wfu2Yo0XBfi6AYWPy25+0gNi2VS6/zeH70c0Jm22vlqGF7 tdi5GU0+VQ9UnKz4xnaQ1dZ2EHMJ8Vz6v42Ppngfa7NrUsNTMjo9gAuTb3huW7Tg 5VXzQS1U+GwCmi5eYwOcG+qgOWCPsY2tirG/a+F+Yuu49YG24Bz0IU6KxVtiUFrw F6cAVGsknw9JERFfimnaUUtqu+l3B1/UHSQ0e3a6kFAlmeYz2+EtgIv2snykK3X0 /Vf1giX8NhouxJPP5KeXQqA0IwMEJlNHs/33g6nslHFYSAFJ/qlWv1WODlndzg== -----END CERTIFICATE-----Generated at Sat Apr 26 17:47:37 2025 by rpki-client