$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/561dfaff-0d62-4d0f-8223-365a2175ed6b.roa File: 561dfaff-0d62-4d0f-8223-365a2175ed6b.roa (raw, json) Hash identifier: PmRnmwiIDZ5OEY9wSUwdBTKA7nv6r/mzw+1H/INwzQ4= Subject key identifier: 32:1B:C0:88:7A:0B:EF:CC:27:99:E3:BD:3F:F3:E3:DD:C2:99:57:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A3E5D2A330047EC8C6CAF7D5DD29B6CCABE32C0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/561dfaff-0d62-4d0f-8223-365a2175ed6b.roa Signing time: Mon 21 Apr 2025 18:10:28 +0000 ROA not before: Mon 21 Apr 2025 18:10:28 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3e:5d:2a:33:00:47:ec:8c:6c:af:7d:5d:d2:9b:6c:ca:be:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 18:10:28 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=04d40d40593d939724d235ed798e5f4cc998a5524c61d38e9918cf79243d777b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:df:66:4a:dd:0f:c8:86:32:da:23:32:a2: 1b:22:88:b2:4d:75:8e:55:e3:79:a8:8f:92:b3:ed: 73:e8:e3:12:aa:cf:6c:3c:d6:16:f7:a1:80:23:58: ef:7c:13:20:19:38:ed:f4:0e:ca:17:ed:57:75:d5: d1:be:aa:fd:6b:a8:33:2e:68:6b:2e:d8:fd:0c:48: 07:31:c6:2c:c2:26:6a:a5:bd:67:3d:46:6c:09:c1: 8f:b3:aa:fa:ed:7e:96:66:63:09:3e:16:27:dd:55: 25:05:9f:65:56:4d:9c:9f:b8:45:a2:2a:7a:d0:90: 55:21:6a:db:a9:66:50:f9:31:7d:ed:60:9c:0e:b7: 2b:df:ea:12:e1:f2:11:85:11:bf:06:b7:08:01:75: 6c:9b:bf:88:f8:f6:d0:f1:a8:64:03:ee:3c:f9:2f: 46:b1:8f:5c:6c:c4:6b:9f:ea:5c:18:43:94:67:b1: 3d:3f:93:ec:d1:43:c0:4b:93:37:59:5f:da:f6:8a: 52:6a:60:ec:62:f9:1a:7e:19:c6:fb:85:0b:f4:f0: d1:c0:8f:ff:d0:9d:11:ca:6e:a8:f3:d3:f1:2a:75: 43:bf:6c:65:a4:f7:d5:3b:2d:42:1d:b6:5f:29:ea: c6:8d:29:6a:38:e7:82:74:d6:45:e0:07:44:17:fc: 4c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1B:C0:88:7A:0B:EF:CC:27:99:E3:BD:3F:F3:E3:DD:C2:99:57:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/561dfaff-0d62-4d0f-8223-365a2175ed6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:4080::/48 Signature Algorithm: sha256WithRSAEncryption 90:67:2b:bb:3a:5b:41:ff:74:ca:5b:5c:6b:fb:d8:7c:0b:8e: a3:2c:73:30:45:ba:79:86:6b:1a:20:5d:86:5d:89:11:a2:a8: 4e:a4:53:ed:30:75:e8:35:08:41:0b:b5:90:3b:72:07:a0:14: 4f:cf:b6:f9:d1:d8:83:14:1e:f8:9e:35:b4:d7:88:e3:42:b9: fb:c2:a1:8f:0e:3f:bd:df:f0:16:59:06:46:25:ab:23:69:6f: 7a:b9:0a:4d:0b:bb:d4:78:38:34:94:a7:6f:41:1a:c2:d3:26: 63:4c:ed:58:e9:7f:4e:d2:7c:23:7d:b0:30:0e:12:f7:12:a3: d9:1c:d7:29:9d:71:43:cd:a8:d0:37:12:a3:e0:db:1b:79:93: 08:95:d9:71:79:e6:23:9e:80:3c:11:22:18:dd:5c:cf:d6:0d: ef:ed:ce:4e:20:ab:a8:13:f8:61:44:39:ea:68:f8:ad:e1:16: 2c:15:3f:a3:71:a1:22:66:e1:4f:96:43:9f:58:f5:e1:dd:94: 6b:98:bb:d0:a8:46:b3:ae:ed:ea:b6:07:8b:42:06:9d:92:37: ac:6a:a9:8c:3a:d3:10:67:f1:6b:b7:cd:93:c7:1c:9b:4a:52: 77:d1:d1:9c:c5:75:d1:19:16:c0:f1:fe:12:5b:91:d9:92:eb: b5:77:56:40 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWj5dKjMAR+yMbK99XdKbbMq+MsAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTgxMDI4WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNGQ0MGQ0MDU5M2Q5Mzk3MjRkMjM1ZWQ3OThlNWY0Y2M5 OThhNTUyNGM2MWQzOGU5OTE4Y2Y3OTI0M2Q3NzdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQConN9mSt0PyIYy2iMyohsiiLJNdY5V43moj5Kz7XPo4xKq z2w81hb3oYAjWO98EyAZOO30DsoX7Vd11dG+qv1rqDMuaGsu2P0MSAcxxizCJmql vWc9RmwJwY+zqvrtfpZmYwk+FifdVSUFn2VWTZyfuEWiKnrQkFUhatupZlD5MX3t YJwOtyvf6hLh8hGFEb8GtwgBdWybv4j49tDxqGQD7jz5L0axj1xsxGuf6lwYQ5Rn sT0/k+zRQ8BLkzdZX9r2ilJqYOxi+Rp+Gcb7hQv08NHAj//QnRHKbqjz0/EqdUO/ bGWk99U7LUIdtl8p6saNKWo454J01kXgB0QX/Ey1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMhvAiHoL78wnmeO9P/Pj3cKZVxcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2MWRmYWZmLTBkNjItNGQwZi04MjIzLTM2NWEyMTc1ZWQ2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84QIAwDQYJKoZIhvcNAQELBQADggEBAJBnK7s6W0H/dMpbXGv72HwL jqMsczBFunmGaxogXYZdiRGiqE6kU+0wdeg1CEELtZA7cgegFE/PtvnR2IMUHvie NbTXiONCufvCoY8OP73f8BZZBkYlqyNpb3q5Ck0Lu9R4ODSUp29BGsLTJmNM7Vjp f07SfCN9sDAOEvcSo9kc1ymdcUPNqNA3EqPg2xt5kwiV2XF55iOegDwRIhjdXM/W De/tzk4gq6gT+GFEOepo+K3hFiwVP6NxoSJm4U+WQ59Y9eHdlGuYu9CoRrOu7eq2 B4tCBp2SN6xqqYw60xBn8Wu3zZPHHJtKUnfR0ZzFddEZFsDx/hJbkdmS67V3VkA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:14 2025 by rpki-client