$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5adca02c-6787-4a0f-ae64-8edefab86421.roa File: 5adca02c-6787-4a0f-ae64-8edefab86421.roa (raw, json) Hash identifier: Lu5fyQzPV837nSREabrNVk2OppiQAFLFRX//nu72tDU= Subject key identifier: A7:4E:F9:73:E5:23:3B:F6:C8:0B:52:D8:43:94:0B:FC:FF:20:1E:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 495DFEC891B5086DE50A434C7CEF80FEC63BD7B1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5adca02c-6787-4a0f-ae64-8edefab86421.roa Signing time: Tue 22 Apr 2025 17:22:00 +0000 ROA not before: Tue 22 Apr 2025 17:22:00 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f25:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:5d:fe:c8:91:b5:08:6d:e5:0a:43:4c:7c:ef:80:fe:c6:3b:d7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:22:00 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=8f6d1b57cf4594046d9efd71d295c5c6acf55a99adc3f342c208a2956e59e7a6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ad:00:6f:eb:1a:b2:e6:bf:00:7b:a8:bd:20: 29:c2:28:03:13:f9:68:0e:be:b4:bf:b0:18:f2:78: f8:2b:b0:6e:c4:d0:e5:a2:21:b2:42:7b:49:04:8d: 97:00:3e:5e:3c:0b:b6:61:f5:76:09:9e:25:ff:38: 93:65:5d:ee:f9:12:0e:49:99:3d:89:a8:74:5c:bd: 40:23:ed:f9:d9:c7:d4:28:60:4d:82:16:ab:d6:08: f1:40:1a:94:31:bd:ef:80:f0:54:89:d7:a4:5b:d3: 23:d8:ef:00:3c:c8:c7:9e:4d:46:aa:44:b8:b7:e6: 07:c5:f3:04:37:3d:9f:04:48:53:bc:c9:53:5e:01: 4a:76:c9:11:db:9b:43:45:5b:1e:e4:b1:0f:e4:c3: a2:c4:67:2a:db:3a:00:08:46:59:e7:19:c2:8d:96: c2:f2:34:2b:20:f3:56:bc:e8:d6:17:87:bf:77:49: d9:ec:ae:8b:8e:82:f7:4e:17:a1:2b:ca:f3:8c:4e: 4c:28:74:eb:ce:e0:25:99:cd:2d:52:e4:fa:a7:d7: 88:15:b0:37:dd:e0:af:b7:9a:4e:a1:1c:a6:42:d0: 36:2a:60:5a:c0:a6:d0:53:66:c5:4b:18:d9:7b:78: fc:90:eb:04:c3:3b:c2:ba:a1:83:79:d3:87:c9:33: af:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4E:F9:73:E5:23:3B:F6:C8:0B:52:D8:43:94:0B:FC:FF:20:1E:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5adca02c-6787-4a0f-ae64-8edefab86421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f25:4000::/37 Signature Algorithm: sha256WithRSAEncryption 2d:27:09:cc:27:61:4d:5c:03:99:72:83:8c:d3:de:3e:5b:b5: ec:93:ba:71:3e:2e:9a:d0:b2:be:88:b5:4f:1c:4b:99:5d:a5: 7e:81:3d:6c:2d:5b:ec:13:e8:c1:bf:d0:1c:42:f1:cc:bb:36: 24:4b:43:20:a5:b2:91:7a:7c:91:52:14:b3:3a:87:e8:11:85: 9d:1a:2f:48:02:b1:35:4f:9b:c5:dc:da:6a:2f:df:24:f3:5a: 2a:1f:bf:d3:71:c8:71:a9:f6:20:bf:77:db:85:e3:40:23:7a: 7b:fc:28:5c:a3:6c:ce:f4:a3:34:16:86:e1:06:38:bb:db:57: 13:13:de:e7:94:3a:83:cb:18:c2:12:82:47:95:a8:3e:12:f6: 4f:28:ec:f3:f6:0e:df:d0:df:2e:51:90:99:7e:34:d2:70:d8: e0:1a:ad:36:48:26:88:8e:02:1b:91:ad:58:df:42:a4:3e:9c: 25:79:95:b5:76:47:30:30:60:16:13:32:5c:c9:ec:ee:b1:16: 77:89:f4:f0:a2:76:55:10:be:e6:d2:63:d2:6f:af:aa:8e:b1: 52:e8:d4:5f:ca:cd:96:8a:45:fd:c9:9a:30:86:6e:72:1a:da: dd:cd:70:13:32:e0:08:67:25:cf:68:23:fd:01:f0:fa:3d:d8: 14:bc:dd:7c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSV3+yJG1CG3lCkNMfO+A/sY717EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcyMjAwWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjZkMWI1N2NmNDU5NDA0NmQ5ZWZkNzFkMjk1YzVjNmFj ZjU1YTk5YWRjM2YzNDJjMjA4YTI5NTZlNTllN2E2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdrQBv6xqy5r8Ae6i9ICnCKAMT+WgOvrS/sBjyePgrsG7E 0OWiIbJCe0kEjZcAPl48C7Zh9XYJniX/OJNlXe75Eg5JmT2JqHRcvUAj7fnZx9Qo YE2CFqvWCPFAGpQxve+A8FSJ16Rb0yPY7wA8yMeeTUaqRLi35gfF8wQ3PZ8ESFO8 yVNeAUp2yRHbm0NFWx7ksQ/kw6LEZyrbOgAIRlnnGcKNlsLyNCsg81a86NYXh793 SdnsrouOgvdOF6EryvOMTkwodOvO4CWZzS1S5Pqn14gVsDfd4K+3mk6hHKZC0DYq YFrAptBTZsVLGNl7ePyQ6wTDO8K6oYN504fJM68RAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUp075c+UjO/bIC1LYQ5QL/P8gHhkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhZGNhMDJjLTY3ODctNGEwZi1hZTY0LThlZGVmYWI4NjQyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8lQDANBgkqhkiG9w0BAQsFAAOCAQEALScJzCdhTVwDmXKDjNPePlu1 7JO6cT4umtCyvoi1TxxLmV2lfoE9bC1b7BPowb/QHELxzLs2JEtDIKWykXp8kVIU szqH6BGFnRovSAKxNU+bxdzaai/fJPNaKh+/03HIcan2IL9324XjQCN6e/woXKNs zvSjNBaG4QY4u9tXExPe55Q6g8sYwhKCR5WoPhL2Tyjs8/YO39DfLlGQmX400nDY 4BqtNkgmiI4CG5GtWN9CpD6cJXmVtXZHMDBgFhMyXMns7rEWd4n08KJ2VRC+5tJj 0m+vqo6xUujUX8rNlopF/cmaMIZuchra3c1wEzLgCGclz2gj/QHw+j3YFLzdfA== -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:52 2025 by rpki-client