$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4967c52f-4fce-4524-95f6-4f8414082188.roa File: 4967c52f-4fce-4524-95f6-4f8414082188.roa (raw, json) Hash identifier: 4DkFfC8QsLhbosaR3j9J7CE266FO7n1191yC990hmi0= Subject key identifier: 5C:15:7D:53:B3:72:18:00:20:3B:B9:B3:42:B2:12:8D:1D:54:B9:E4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40AE4FBCF5438250599A24E8E4692FDC59AF8D14 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4967c52f-4fce-4524-95f6-4f8414082188.roa Signing time: Mon 21 Apr 2025 17:21:07 +0000 ROA not before: Mon 21 Apr 2025 17:21:07 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ae:4f:bc:f5:43:82:50:59:9a:24:e8:e4:69:2f:dc:59:af:8d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:21:07 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=f923f52ea59e3936ed4b0afb1b959698d5892ea03fac7c10759016c1b32615f1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:fa:89:37:ca:da:52:86:cb:5a:f7:e7:c1: 6b:6b:f8:12:ee:45:8d:e4:50:b2:e7:f0:18:07:ff: df:19:70:b8:45:5f:30:b4:97:1f:57:aa:d6:86:b6: 51:84:80:5e:86:87:29:62:9d:f0:4b:44:74:17:60: 90:96:11:6f:a6:12:fe:ec:8b:d4:96:4f:b6:aa:54: fe:9d:4b:59:e2:ed:4a:53:a8:d7:8b:7c:ed:3a:78: 72:f1:0d:4a:d8:8b:cb:5f:89:c1:71:5d:6b:28:30: 43:56:07:36:07:4a:c6:b0:2d:f3:f6:df:5e:93:c5: 18:dc:e1:d0:de:25:36:55:5b:a5:2c:65:89:72:ed: c8:05:d8:31:d5:06:33:3c:9d:16:31:75:43:e4:dd: 81:8c:21:9f:5e:39:43:56:ed:9c:99:50:f4:3a:4a: a0:c3:4e:68:39:ce:df:31:98:3f:38:7a:59:66:34: f3:3c:cf:52:9b:36:2d:b7:98:84:72:a0:3c:c0:fb: cc:3c:01:bc:cc:dd:01:9b:3f:e2:a0:69:6a:24:4b: 4e:1f:a3:3d:03:14:72:f3:32:65:ad:05:08:20:ac: 27:d4:77:ac:9a:ad:b5:12:12:62:73:e4:a6:3c:74: ee:49:fa:9b:5c:db:49:85:86:a6:b1:40:23:21:31: a0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:15:7D:53:B3:72:18:00:20:3B:B9:B3:42:B2:12:8D:1D:54:B9:E4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4967c52f-4fce-4524-95f6-4f8414082188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4040::/48 Signature Algorithm: sha256WithRSAEncryption 84:ed:6c:81:3c:2a:52:62:2a:d0:77:06:42:4c:7c:42:55:43: 7f:c3:7f:f3:51:58:81:16:74:5b:94:92:38:5f:32:37:94:50: 5b:3c:ba:f8:03:df:42:e5:dd:da:dc:55:62:6e:b8:f6:b1:f8: 9e:c1:b6:c1:17:80:af:12:da:d2:77:e4:92:ca:44:8b:dd:a7: 4d:d8:d1:5d:8e:da:53:e2:15:08:d5:48:67:41:63:ae:ea:35: fb:02:e8:49:03:03:d3:cc:43:dc:83:72:77:16:a3:14:0e:23: 65:f2:a7:e2:45:42:6b:02:29:a4:60:31:06:5e:c1:dd:b8:8e: 5c:b1:b3:18:0c:3d:8d:d6:01:f1:e7:f4:48:12:28:39:8d:3b: 0b:4b:3d:73:20:9f:25:d4:40:91:c4:36:01:4f:3a:ff:5b:27: ae:5e:6c:19:dd:f6:32:3d:61:cf:f2:b8:ab:2c:33:c3:6f:65: 95:2c:61:b9:8e:2b:27:49:2d:cd:a3:85:27:ea:68:fa:c5:a4: ca:c8:93:67:8d:07:24:db:7c:9f:67:4d:7d:81:6d:e4:d9:8f: e4:3a:c9:0d:72:35:c4:85:7b:d2:ac:23:44:5a:85:66:4d:bc: 93:32:6e:21:68:96:03:d4:cd:89:a3:54:32:83:82:87:12:5d: 17:02:89:c2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQK5PvPVDglBZmiTo5Gkv3FmvjRQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTcyMTA3WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTIzZjUyZWE1OWUzOTM2ZWQ0YjBhZmIxYjk1OTY5OGQ1 ODkyZWEwM2ZhYzdjMTA3NTkwMTZjMWIzMjYxNWYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/tfqJN8raUobLWvfnwWtr+BLuRY3kULLn8BgH/98ZcLhF XzC0lx9XqtaGtlGEgF6GhylinfBLRHQXYJCWEW+mEv7si9SWT7aqVP6dS1ni7UpT qNeLfO06eHLxDUrYi8tficFxXWsoMENWBzYHSsawLfP2316TxRjc4dDeJTZVW6Us ZYly7cgF2DHVBjM8nRYxdUPk3YGMIZ9eOUNW7ZyZUPQ6SqDDTmg5zt8xmD84ellm NPM8z1KbNi23mIRyoDzA+8w8AbzM3QGbP+KgaWokS04foz0DFHLzMmWtBQggrCfU d6yarbUSEmJz5KY8dO5J+ptc20mFhqaxQCMhMaC1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXBV9U7NyGAAgO7mzQrISjR1UueQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5NjdjNTJmLTRmY2UtNDUyNC05NWY2LTRmODQxNDA4MjE4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QEAwDQYJKoZIhvcNAQELBQADggEBAITtbIE8KlJiKtB3BkJMfEJV Q3/Df/NRWIEWdFuUkjhfMjeUUFs8uvgD30Ll3drcVWJuuPax+J7BtsEXgK8S2tJ3 5JLKRIvdp03Y0V2O2lPiFQjVSGdBY67qNfsC6EkDA9PMQ9yDcncWoxQOI2Xyp+JF QmsCKaRgMQZewd24jlyxsxgMPY3WAfHn9EgSKDmNOwtLPXMgnyXUQJHENgFPOv9b J65ebBnd9jI9Yc/yuKssM8NvZZUsYbmOKydJLc2jhSfqaPrFpMrIk2eNByTbfJ9n TX2BbeTZj+Q6yQ1yNcSFe9KsI0RahWZNvJMybiFolgPUzYmjVDKDgocSXRcCicI= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:57 2025 by rpki-client