$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d2861a4-2160-4d5f-aa18-8a9321122721.roa File: 3d2861a4-2160-4d5f-aa18-8a9321122721.roa (raw, json) Hash identifier: l8flY3lu17DQHU+rOU6FHbAZ5c6jBpPXruKcXkA0Shs= Subject key identifier: 0F:BA:1B:3C:AA:28:72:90:4C:B4:F2:66:44:25:B0:36:17:7B:F3:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2B616D559EFF719C500F4C35E2050472EE22349E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d2861a4-2160-4d5f-aa18-8a9321122721.roa Signing time: Sat 12 Apr 2025 00:00:36 +0000 ROA not before: Sat 12 Apr 2025 00:00:36 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:61:6d:55:9e:ff:71:9c:50:0f:4c:35:e2:05:04:72:ee:22:34:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 12 00:00:36 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=9f70abe27808c4430df360f636d9d50d8c67a934e28e71d1a2fc4d0dcb14b3e2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:da:5a:21:56:2d:e2:b4:69:b9:a3:6f:7a:de: 30:01:93:6d:bd:3c:42:80:3c:d1:b1:51:45:b8:00: d8:c5:26:06:eb:94:c2:e1:ca:e2:8f:85:d3:72:ec: a0:a2:cf:e4:ae:96:d8:2f:32:dd:39:55:c9:f2:ce: 1e:4c:19:38:d6:e3:38:ce:87:d8:0f:4e:3d:df:aa: b5:f7:6f:e7:ff:10:49:c4:44:ed:c4:92:f4:ff:69: 3c:74:fa:17:55:9e:64:d9:fe:c1:d9:4c:50:09:95: d8:63:4b:a7:b7:16:38:45:9a:6b:f7:e7:27:bf:63: e2:ce:31:23:4e:26:1d:d1:6a:44:db:7b:74:66:1d: ee:99:b9:79:f2:b7:58:43:3a:7f:47:4a:e5:f6:6c: f0:59:c4:81:71:e8:eb:86:80:e2:b2:aa:ed:c0:d3: 04:24:27:1a:ba:0e:eb:87:79:82:d0:82:87:c8:c8: f9:61:b1:db:57:5d:7d:cf:65:e3:aa:eb:fa:6b:9c: 10:59:a9:cc:cf:05:3b:ab:6c:d3:6b:69:cb:0f:02: 1d:88:78:7f:9f:5e:7c:2c:5d:13:8c:45:1c:d4:0a: 66:b0:1c:4d:2f:c3:87:c3:77:41:75:12:26:81:75: 36:b6:14:48:a0:70:05:06:ac:23:23:15:12:6b:c7: 63:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BA:1B:3C:AA:28:72:90:4C:B4:F2:66:44:25:B0:36:17:7B:F3:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3d2861a4-2160-4d5f-aa18-8a9321122721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:a400::/40 Signature Algorithm: sha256WithRSAEncryption 2b:94:be:8a:cb:a5:c2:e7:7f:03:c5:a0:f1:2f:3b:4f:fc:01: df:76:a8:98:9c:f5:5c:b1:a1:e2:10:a8:e7:ef:39:93:b4:61: 44:09:79:63:3a:65:68:14:9e:ce:9c:65:c8:ec:ea:7a:c5:3b: db:a3:8f:2d:df:e6:43:31:21:84:e2:6d:57:62:25:45:18:43: 9f:98:ef:c9:8c:2f:44:0a:71:1e:e1:dc:fe:7c:1e:e5:dd:13: ba:e1:5a:23:97:ba:f6:da:b5:a9:88:b4:56:c6:63:0a:35:d3: 06:cf:72:b4:82:8e:bd:af:00:e0:f1:6e:ce:d6:98:3e:10:2e: 44:03:ce:3c:30:e8:9a:82:88:0a:33:b6:78:6a:7c:be:a9:58: 6f:cb:66:ae:d8:7a:61:b0:16:32:9c:53:9f:b1:d6:9c:f4:2b: 3b:5b:94:67:7e:98:7d:71:ac:b9:1b:86:18:92:7d:f0:30:e9: d4:20:92:8b:0e:b0:f9:ac:b6:12:7d:84:75:48:05:1d:6a:6c: f2:d8:b2:86:32:e8:97:01:9e:71:df:9d:a1:71:22:38:21:20: dd:46:53:1d:36:94:98:32:6b:70:cd:9d:16:e5:15:fa:19:92: e6:e4:db:d5:de:79:c4:2a:c1:06:a4:7f:63:0b:57:57:ad:d3: 0a:49:91:b5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUK2FtVZ7/cZxQD0w14gUEcu4iNJ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDEyMDAwMDM2WhcNMjUwNTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjcwYWJlMjc4MDhjNDQzMGRmMzYwZjYzNmQ5ZDUwZDhj NjdhOTM0ZTI4ZTcxZDFhMmZjNGQwZGNiMTRiM2UyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDq2lohVi3itGm5o2963jABk229PEKAPNGxUUW4ANjFJgbr lMLhyuKPhdNy7KCiz+SultgvMt05Vcnyzh5MGTjW4zjOh9gPTj3fqrX3b+f/EEnE RO3EkvT/aTx0+hdVnmTZ/sHZTFAJldhjS6e3FjhFmmv35ye/Y+LOMSNOJh3RakTb e3RmHe6ZuXnyt1hDOn9HSuX2bPBZxIFx6OuGgOKyqu3A0wQkJxq6DuuHeYLQgofI yPlhsdtXXX3PZeOq6/prnBBZqczPBTurbNNracsPAh2IeH+fXnwsXROMRRzUCmaw HE0vw4fDd0F1EiaBdTa2FEigcAUGrCMjFRJrx2MrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUD7obPKoocpBMtPJmRCWwNhd783MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNkMjg2MWE0LTIxNjAtNGQ1Zi1hYTE4LThhOTMyMTEyMjcyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4pDANBgkqhkiG9w0BAQsFAAOCAQEAK5S+isulwud/A8Wg8S87T/wB 33aomJz1XLGh4hCo5+85k7RhRAl5YzplaBSezpxlyOzqesU726OPLd/mQzEhhOJt V2IlRRhDn5jvyYwvRApxHuHc/nwe5d0TuuFaI5e69tq1qYi0VsZjCjXTBs9ytIKO va8A4PFuztaYPhAuRAPOPDDomoKICjO2eGp8vqlYb8tmrth6YbAWMpxTn7HWnPQr O1uUZ36YfXGsuRuGGJJ98DDp1CCSiw6w+ay2En2EdUgFHWps8tiyhjLolwGecd+d oXEiOCEg3UZTHTaUmDJrcM2dFuUV+hmS5uTb1d55xCrBBqR/YwtXV63TCkmRtQ== -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:46 2025 by rpki-client