$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40d34c5a-5089-4544-85d2-37c75af53934.roa File: 40d34c5a-5089-4544-85d2-37c75af53934.roa (raw, json) Hash identifier: M6vnH10CzmtqUzgIHu6aDDlHHHmPa5IGoY9sJ0rxD8Y= Subject key identifier: E5:E0:B8:74:9D:D9:F9:3D:44:17:95:E9:45:0B:AB:64:D9:95:EC:34 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6B521862BE105F48277E921F8510F122E7C8EB0E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40d34c5a-5089-4544-85d2-37c75af53934.roa Signing time: Tue 22 Apr 2025 17:11:10 +0000 ROA not before: Tue 22 Apr 2025 17:11:10 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f10:c000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:52:18:62:be:10:5f:48:27:7e:92:1f:85:10:f1:22:e7:c8:eb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:11:10 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=601fcdd5f267f76a922ac4ae4206f70361857dbd796497206419e54e631acc40, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:50:ae:8a:0c:5a:f6:ed:4c:8a:19:d1:30: b3:91:eb:41:3d:9c:d8:e0:36:11:16:bd:0c:bb:76: cc:76:3f:11:16:d0:45:a7:0b:43:7b:f1:d3:6e:43: 97:35:ea:9b:9b:af:5d:fc:97:a5:f1:c1:7f:23:50: 84:14:a4:08:1a:d7:88:e2:cb:13:ef:de:f0:c1:d5: 62:5c:f1:5a:a0:49:c5:bd:7b:07:65:2d:e3:c1:6f: dc:df:70:4e:b7:4b:17:51:73:42:16:91:4e:a6:f2: ca:47:62:4a:fa:a8:96:0a:c2:fc:76:df:fd:fd:9d: 47:14:aa:95:00:0a:e5:2b:4a:05:7c:8e:22:4a:90: 9b:11:be:50:39:26:d5:94:cc:6d:c8:1c:bb:9e:d8: 91:37:4b:75:7c:4d:57:9c:a9:34:3c:d9:a8:72:0e: 25:1d:51:52:0c:9f:d3:3c:ff:60:ab:d5:1f:a8:82: dc:b0:d7:e1:7a:3b:9d:6c:e2:42:16:d7:6d:a8:d6: c4:82:ae:b5:9e:52:4c:c5:23:23:d2:7d:2d:66:4f: 3f:8b:98:f0:bd:34:bb:2d:a0:82:6e:51:26:21:54: c5:fa:d4:30:87:7b:61:e6:56:54:ea:70:94:4b:39: 2e:d4:9a:3c:13:5f:f7:ea:6c:07:c4:1d:49:1f:01: 33:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E0:B8:74:9D:D9:F9:3D:44:17:95:E9:45:0B:AB:64:D9:95:EC:34 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40d34c5a-5089-4544-85d2-37c75af53934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f10:c000::/37 Signature Algorithm: sha256WithRSAEncryption 50:86:73:e3:c5:a7:1f:ae:9d:7e:67:5e:41:66:5b:cf:ae:d7: 8c:5f:a8:12:12:32:35:9f:01:e6:35:26:1d:e7:34:8e:0f:01: 39:8e:37:b2:0b:d9:16:a1:71:e5:dd:e8:d8:fa:f6:86:80:97: f1:07:90:5b:ce:a9:e1:1e:21:8e:2a:ae:6e:fb:3e:1a:85:c9: c4:3c:c3:2d:d0:4d:e0:f2:8f:7a:68:d7:a0:a3:05:5c:51:8c: d9:d4:38:82:35:2c:d1:75:96:06:eb:65:26:1b:93:f0:dd:d3: 22:b2:24:9d:4d:15:93:87:da:59:9b:bd:07:2e:f2:ea:d3:bd: 50:e6:5e:82:8b:d9:5d:f8:ed:75:54:0f:51:9b:05:14:dc:65: 80:d7:c4:b2:7e:c5:52:de:ef:ee:32:00:aa:92:e7:7e:3e:37: 14:b3:cb:39:6c:8f:41:46:2c:44:18:97:b4:64:ea:08:44:9b: da:ca:fc:6b:bc:c4:c1:5c:2b:89:c5:44:e2:de:5c:49:b9:bf: 7e:35:3b:15:19:cb:9a:96:76:69:67:99:3f:2a:53:c4:76:5a: fc:6d:59:23:29:82:2b:4c:8d:64:10:b8:b0:64:f8:6d:a0:af: 86:48:e1:09:7f:11:a2:d6:af:f5:ee:26:f0:83:09:b4:7b:52: 2b:a3:9a:1a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUa1IYYr4QX0gnfpIfhRDxIufI6w4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcxMTEwWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDFmY2RkNWYyNjdmNzZhOTIyYWM0YWU0MjA2ZjcwMzYx ODU3ZGJkNzk2NDk3MjA2NDE5ZTU0ZTYzMWFjYzQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4L1Cuigxa9u1MihnRMLOR60E9nNjgNhEWvQy7dsx2PxEW 0EWnC0N78dNuQ5c16pubr138l6XxwX8jUIQUpAga14jiyxPv3vDB1WJc8VqgScW9 ewdlLePBb9zfcE63SxdRc0IWkU6m8spHYkr6qJYKwvx23/39nUcUqpUACuUrSgV8 jiJKkJsRvlA5JtWUzG3IHLue2JE3S3V8TVecqTQ82ahyDiUdUVIMn9M8/2Cr1R+o gtyw1+F6O51s4kIW122o1sSCrrWeUkzFIyPSfS1mTz+LmPC9NLstoIJuUSYhVMX6 1DCHe2HmVlTqcJRLOS7UmjwTX/fqbAfEHUkfATMTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU5eC4dJ3Z+T1EF5XpRQurZNmV7DQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQwZDM0YzVhLTUwODktNDU0NC04NWQyLTM3Yzc1YWY1MzkzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8QwDANBgkqhkiG9w0BAQsFAAOCAQEAUIZz48WnH66dfmdeQWZbz67X jF+oEhIyNZ8B5jUmHec0jg8BOY43sgvZFqFx5d3o2Pr2hoCX8QeQW86p4R4hjiqu bvs+GoXJxDzDLdBN4PKPemjXoKMFXFGM2dQ4gjUs0XWWButlJhuT8N3TIrIknU0V k4faWZu9By7y6tO9UOZegovZXfjtdVQPUZsFFNxlgNfEsn7FUt7v7jIAqpLnfj43 FLPLOWyPQUYsRBiXtGTqCESb2sr8a7zEwVwricVE4t5cSbm/fjU7FRnLmpZ2aWeZ PypTxHZa/G1ZIymCK0yNZBC4sGT4baCvhkjhCX8Rotav9e4m8IMJtHtSK6OaGg== -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:49 2025 by rpki-client