$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa File: 5988892c-5d54-4e98-a5b0-3a2691a42a24.roa (raw, json) Hash identifier: uFAFyQh97A6MEC1a9kBjWUCoVmItK/oGR1AuPjVfTpA= Subject key identifier: A6:91:56:5D:E2:E6:AA:D3:6F:81:09:80:57:63:51:4E:21:F2:07:92 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F5364BEE18D01B2D7AEC9E744F1AE12ABBFB407 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa Signing time: Tue 22 Apr 2025 00:41:03 +0000 ROA not before: Tue 22 Apr 2025 00:41:03 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:74c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:53:64:be:e1:8d:01:b2:d7:ae:c9:e7:44:f1:ae:12:ab:bf:b4:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:41:03 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=b0a1ebbf5308d08df0bc7a170c081e4a0d85bd0fd6a8367f8eeb9e2a723e43b3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7a:78:e2:d3:cd:98:f5:f6:03:a2:81:22:24: 0e:3c:8f:26:03:ca:15:d1:2e:b3:6f:49:9f:39:73: 1f:7b:40:22:30:01:4a:c3:a0:61:9d:11:55:de:d3: ba:1e:29:7e:98:6d:63:00:59:c8:74:07:e8:1b:93: ee:2c:a7:b2:f2:17:e8:47:1f:78:8d:a3:eb:38:99: 37:64:1f:b1:f9:81:e7:13:a0:fc:79:70:1b:85:f3: bd:6e:0d:42:8a:78:ab:2a:2c:08:b7:eb:cf:4f:60: c7:12:8c:a5:3f:74:f3:37:94:d4:f0:d7:2f:1d:1f: 1c:7c:58:8c:e9:88:17:53:cb:ae:e2:53:ce:e3:24: 9a:7b:c8:12:8e:0a:f5:8e:4a:e6:08:b7:13:d2:12: 6f:28:31:8f:c5:86:0f:d1:48:9b:6d:8a:c7:9d:9e: d7:b2:a5:38:31:b5:8e:56:ed:72:f7:80:39:92:e8: 34:d8:82:22:ca:d3:ab:56:2f:66:c9:b6:e1:7e:51: da:ac:95:d7:24:0e:78:07:4f:c8:08:04:6b:ee:63: 17:34:a4:c9:d8:5b:d3:4e:f2:3b:09:52:6b:2a:08: a1:78:c6:a7:6a:2d:37:05:c5:40:e9:be:73:18:a7: a9:47:b5:fe:32:02:92:d0:96:5d:64:27:e0:f1:76: 7d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:91:56:5D:E2:E6:AA:D3:6F:81:09:80:57:63:51:4E:21:F2:07:92 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5988892c-5d54-4e98-a5b0-3a2691a42a24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 90:c3:1c:8a:76:5f:f7:2b:3b:f6:be:77:f4:d2:98:09:7b:83: 62:de:e7:97:c9:1f:79:f5:fc:95:4e:ff:9a:93:1c:21:66:b4: 6b:92:e2:03:a2:aa:a3:38:7b:65:dc:33:f1:0c:65:bf:63:a1: 1d:38:27:d9:75:38:94:07:aa:4c:5e:38:29:05:df:2c:ff:ce: 20:26:a2:9f:a5:a5:78:a9:d9:d7:c1:15:0e:18:ab:83:8c:37: 31:93:30:c1:de:6b:23:07:93:e5:c8:c4:0d:26:f2:89:73:47: 5b:36:5c:e5:9b:68:57:83:23:f4:0d:59:bc:fe:d6:e3:13:6f: 17:60:67:4c:61:9f:02:f4:25:72:2d:a1:b0:f2:50:7a:fe:8a: 43:1c:2b:c5:45:69:b3:cd:dd:74:c0:f9:b9:b7:ac:ed:02:d0: 82:22:81:59:17:3d:73:09:cd:f8:3b:04:23:84:a6:b6:f8:17: ad:19:5b:c0:7c:0b:49:4b:75:76:06:79:cc:4c:41:88:0c:db: 29:b6:38:61:f1:ac:1e:ed:e1:88:cb:7d:eb:a2:7f:78:7c:2b: de:29:a5:f5:27:92:9f:9c:78:bb:30:f7:69:fe:ac:22:21:58: 41:0f:56:db:e7:51:a6:80:1c:d1:97:a4:53:a9:5e:58:ab:27: 50:46:87:2d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUX1NkvuGNAbLXrsnnRPGuEqu/tAcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDA0MTAzWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMGExZWJiZjUzMDhkMDhkZjBiYzdhMTcwYzA4MWU0YTBk ODViZDBmZDZhODM2N2Y4ZWViOWUyYTcyM2U0M2IzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQenji082Y9fYDooEiJA48jyYDyhXRLrNvSZ85cx97QCIw AUrDoGGdEVXe07oeKX6YbWMAWch0B+gbk+4sp7LyF+hHH3iNo+s4mTdkH7H5gecT oPx5cBuF871uDUKKeKsqLAi3689PYMcSjKU/dPM3lNTw1y8dHxx8WIzpiBdTy67i U87jJJp7yBKOCvWOSuYItxPSEm8oMY/Fhg/RSJttisednteypTgxtY5W7XL3gDmS 6DTYgiLK06tWL2bJtuF+UdqsldckDngHT8gIBGvuYxc0pMnYW9NO8jsJUmsqCKF4 xqdqLTcFxUDpvnMYp6lHtf4yApLQll1kJ+Dxdn1/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUppFWXeLmqtNvgQmAV2NRTiHyB5IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU5ODg4OTJjLTVkNTQtNGU5OC1hNWIwLTNhMjY5MWE0MmEyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AdMAwDQYJKoZIhvcNAQELBQADggEBAJDDHIp2X/crO/a+d/TSmAl7 g2Le55fJH3n1/JVO/5qTHCFmtGuS4gOiqqM4e2XcM/EMZb9joR04J9l1OJQHqkxe OCkF3yz/ziAmop+lpXip2dfBFQ4Yq4OMNzGTMMHeayMHk+XIxA0m8olzR1s2XOWb aFeDI/QNWbz+1uMTbxdgZ0xhnwL0JXItobDyUHr+ikMcK8VFabPN3XTA+bm3rO0C 0IIigVkXPXMJzfg7BCOEprb4F60ZW8B8C0lLdXYGecxMQYgM2ym2OGHxrB7t4YjL feuif3h8K94ppfUnkp+ceLsw92n+rCIhWEEPVtvnUaaAHNGXpFOpXlirJ1BGhy0= -----END CERTIFICATE-----Generated at Sat Apr 26 15:59:02 2025 by rpki-client