$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa File: 46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa (raw, json) Hash identifier: nljcJwhkuBNUIj8Ic3BvmgIxjkxGn7vYKt8hrZ5+wEE= Subject key identifier: 4F:C4:C5:5C:7C:DE:6D:AD:83:33:0B:B6:18:B7:5D:5E:04:1B:AE:AF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E6CE65A031E9C5AAB03C94FE71963B4D68556 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa Signing time: Tue 08 Apr 2025 00:11:42 +0000 ROA not before: Tue 08 Apr 2025 00:11:42 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6c:e6:5a:03:1e:9c:5a:ab:03:c9:4f:e7:19:63:b4:d6:85:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:11:42 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=d386dadfd7ec30fb46e3030d137ce7698922cf1547aaf10ed65341c32ed44989, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ea:d7:42:1e:2b:d7:98:25:c2:44:67:7e:3e: d8:83:bb:fc:e0:f8:e6:cc:c3:21:bc:5d:37:db:37: 3b:2b:9d:05:25:c1:21:c6:a9:44:c6:1d:97:25:d5: d5:43:ff:f4:8d:f2:d4:b1:ac:2b:7b:7f:bf:15:24: f2:7e:a8:84:4a:9b:4f:80:fb:b8:75:33:2b:f2:ad: 4d:a5:de:dd:33:ed:31:b3:68:df:1c:61:30:10:31: 84:b2:aa:e8:e8:62:f6:16:d9:da:a0:c6:93:b5:0e: f9:f4:e3:d1:01:9d:77:fc:da:af:ec:9d:a8:b3:c3: b4:6c:13:ec:fe:8f:c9:c3:a9:f8:e2:4e:be:d0:0b: e0:9e:fc:d9:1f:b4:f3:38:22:d3:fa:5c:b5:7c:13: 64:ab:92:0e:4f:c3:70:fd:06:9a:dd:73:a8:2d:66: 3b:84:42:d7:d8:54:a8:98:85:58:2a:4e:d7:ac:7f: fc:01:66:3e:31:bd:02:f2:99:64:ea:42:3a:63:f7: 96:83:c1:dc:db:0d:c8:c9:dd:16:56:a1:e9:fb:f4: f5:28:ba:f6:5f:f0:10:5e:62:07:48:2b:ab:1f:e9: dc:fb:21:ae:af:d8:e7:3b:f7:2b:65:ce:9d:b3:0d: 68:3c:29:e9:f4:41:cc:cc:2e:96:f8:68:11:4e:cf: e8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C4:C5:5C:7C:DE:6D:AD:83:33:0B:B6:18:B7:5D:5E:04:1B:AE:AF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:a400::/40 Signature Algorithm: sha256WithRSAEncryption cb:ac:ee:78:c5:0d:69:cc:2b:9d:a4:28:0b:6c:44:cd:0d:23: 6a:94:36:ea:77:29:09:66:a4:c8:65:cb:3f:3d:68:eb:14:7e: 45:1d:ca:2f:64:fd:07:67:f7:6b:fc:d8:2f:c8:2c:a7:13:4c: ee:8c:9d:17:9e:a9:85:ac:07:a9:5a:79:e4:5c:47:12:d8:62: 27:48:28:38:f7:10:cc:b1:cf:65:d4:00:be:cf:9e:88:ef:7f: f1:0a:f7:54:6e:1e:a8:64:4f:85:70:66:9f:6e:09:7f:b0:f8: 16:35:14:b2:21:2f:81:09:a9:da:52:a3:27:59:e3:19:54:b9: aa:5c:b5:90:8b:6b:37:30:c5:f6:df:8a:98:99:f6:15:44:d0: 6a:1a:31:0f:68:b9:4b:f4:bf:0d:86:73:c5:2f:0b:da:21:4e: ae:2b:13:d1:7d:46:8e:ab:87:8c:78:b7:c3:a0:3a:b9:c3:14: d8:ed:61:86:5b:d9:77:ce:df:44:3e:64:7f:07:c7:df:c5:e7: a4:15:5c:08:a3:ee:ac:3d:c1:bf:51:21:b7:d9:f9:c2:7c:dd: a0:59:71:00:c9:2f:7d:54:d9:8d:2d:46:a3:36:1b:a7:23:95: 32:91:ad:54:1c:de:fe:77:61:76:23:b4:4c:c2:77:59:19:b6: f7:9a:c9:12 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITLmzmWgMenFqrA8lP5xljtNaFVjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA0MDgwMDExNDJaFw0yNTA1MTMyMzU5NTla MHoxSTBHBgNVBAUTQGQzODZkYWRmZDdlYzMwZmI0NmUzMDMwZDEzN2NlNzY5ODky MmNmMTU0N2FhZjEwZWQ2NTM0MWMzMmVkNDQ5ODkxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAI/q10IeK9eYJcJEZ34+2IO7/OD45szDIbxdN9s3OyudBSXB IcapRMYdlyXV1UP/9I3y1LGsK3t/vxUk8n6ohEqbT4D7uHUzK/KtTaXe3TPtMbNo 3xxhMBAxhLKq6Ohi9hbZ2qDGk7UO+fTj0QGdd/zar+ydqLPDtGwT7P6PycOp+OJO vtAL4J782R+08zgi0/pctXwTZKuSDk/DcP0Gmt1zqC1mO4RC19hUqJiFWCpO16x/ /AFmPjG9AvKZZOpCOmP3loPB3NsNyMndFlah6fv09Si69l/wEF5iB0grqx/p3Psh rq/Y5zv3K2XOnbMNaDwp6fRBzMwulvhoEU7P6F0CAwEAAaOCArMwggKvMB0GA1Ud DgQWBBRPxMVcfN5trYMzC7YYt11eBBuurzAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvNDZlZGQ3ZmYtOTZjMC00ZGNiLWE3MmUtMmRkNDg5ZDY5NWViLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGACYAH/GkMA0GCSqGSIb3DQEBCwUAA4IBAQDLrO54xQ1pzCudpCgLbETNDSNq lDbqdykJZqTIZcs/PWjrFH5FHcovZP0HZ/dr/NgvyCynE0zujJ0XnqmFrAepWnnk XEcS2GInSCg49xDMsc9l1AC+z56I73/xCvdUbh6oZE+FcGafbgl/sPgWNRSyIS+B CanaUqMnWeMZVLmqXLWQi2s3MMX234qYmfYVRNBqGjEPaLlL9L8NhnPFLwvaIU6u KxPRfUaOq4eMeLfDoDq5wxTY7WGGW9l3zt9EPmR/B8ffxeekFVwIo+6sPcG/USG3 2fnCfN2gWXEAyS99VNmNLUajNhunI5Uyka1UHN7+d2F2I7RMwndZGbb3mskS -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:29 2025 by rpki-client