$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c191bee-9c14-4626-9b5b-5bd69befe93f.roa File: 5c191bee-9c14-4626-9b5b-5bd69befe93f.roa (raw, json) Hash identifier: k4HxaE6f5jS6Iwh6/EdYCg1exphmf2xWe+3tNtaxDyI= Subject key identifier: EA:37:AC:0B:01:81:DA:FE:97:8D:24:D6:09:60:AA:6A:48:2A:3D:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D96EE3B7A5360082FF84F462BA4BEDFEEC0D519 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c191bee-9c14-4626-9b5b-5bd69befe93f.roa Signing time: Fri 25 Apr 2025 00:41:45 +0000 ROA not before: Fri 25 Apr 2025 00:41:45 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f20::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:96:ee:3b:7a:53:60:08:2f:f8:4f:46:2b:a4:be:df:ee:c0:d5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 25 00:41:45 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=c7c9ebb679412102e5a0d681eb4d01b1493b29cd1481b8d1b3637e3774352a52, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:13:11:68:13:04:6a:57:81:3f:8f:84:d5:c0: 49:11:19:e8:6c:94:c5:f4:29:2e:c5:82:1f:77:87: 79:9a:f8:a5:6c:49:79:b9:d7:09:28:31:c3:a5:50: cb:ab:17:73:f3:5c:c1:2f:7d:81:ca:ef:c0:b6:a4: 2d:60:6d:59:58:6b:29:61:03:a7:a7:7c:65:41:43: e0:f5:ac:a0:42:70:04:0e:c6:1a:bf:6b:85:50:e6: 9a:d4:a3:fa:27:f3:79:e4:a2:57:aa:a9:2b:6c:91: da:52:5b:9f:e6:c7:d5:58:c8:ee:0e:5a:56:8a:2d: 66:13:e2:35:c6:82:df:6c:d1:95:21:64:69:fa:59: dc:d3:8f:60:53:25:e4:bd:31:d3:da:8e:88:a5:52: f3:c7:19:1a:c7:b1:d0:99:47:36:44:fb:e8:78:65: d8:fd:cc:fc:91:3a:c9:d1:ef:ba:a4:a4:a9:1a:43: d3:1c:21:30:c0:49:b0:86:13:e4:18:8e:d6:d3:52: 37:96:a5:88:5d:fe:43:70:51:e6:6f:cc:27:09:a1: 89:f7:83:95:00:89:45:0c:d8:34:13:60:25:7e:ee: 85:b5:c7:7b:2b:ad:dc:16:75:f7:9b:24:89:5d:72: c9:27:e4:4c:97:62:29:92:4c:11:0c:fd:5b:f9:05: 9a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:37:AC:0B:01:81:DA:FE:97:8D:24:D6:09:60:AA:6A:48:2A:3D:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c191bee-9c14-4626-9b5b-5bd69befe93f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f20::/28 Signature Algorithm: sha256WithRSAEncryption a7:6f:9b:57:5c:72:78:31:95:3d:f9:23:5e:0d:23:b1:ee:ab: bb:21:17:f5:8e:73:cf:3e:42:8f:fb:2d:f2:0e:8b:62:f1:42: 15:94:7c:62:b4:49:58:ac:ae:4a:0f:c9:11:ac:4e:f2:91:7b: 6e:1d:32:1e:c1:3a:cc:c7:cb:db:9e:e3:f7:d5:c9:cd:83:c1: 9a:c2:f8:ba:87:05:2a:a8:18:59:cd:c5:7d:45:d1:90:3c:1e: ff:8b:bb:72:cd:45:8e:83:0b:42:31:6f:e8:25:ed:16:17:d3: 24:2b:24:41:0a:01:86:da:21:67:97:3e:2c:21:55:13:61:e9: 25:0a:ab:d3:28:05:93:a9:b6:c2:94:84:f8:91:e3:8a:82:a0: ff:ab:6b:ba:39:d9:c3:05:8b:56:71:64:80:9e:0b:6f:d0:11: 4a:ee:4f:9d:8d:15:f2:6b:a0:9c:98:b2:7d:40:11:37:df:fc: 73:e8:ee:50:f3:c5:58:fd:60:79:ef:75:e6:b1:41:a3:9d:a2: b5:5c:fe:a2:e2:f3:98:d1:a8:ca:9c:c0:d7:bc:e6:97:d1:19: 9b:08:2f:7a:88:d4:10:cd:16:a4:de:c5:7a:2a:69:85:72:55: ae:4a:59:0e:46:31:a5:38:66:de:c5:bc:4c:93:00:0c:1d:3c: 4f:2c:8b:cd -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIULZbuO3pTYAgv+E9GK6S+3+7A1RkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI1MDA0MTQ1WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2M5ZWJiNjc5NDEyMTAyZTVhMGQ2ODFlYjRkMDFiMTQ5 M2IyOWNkMTQ4MWI4ZDFiMzYzN2UzNzc0MzUyYTUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGExFoEwRqV4E/j4TVwEkRGehslMX0KS7Fgh93h3ma+KVs SXm51wkoMcOlUMurF3PzXMEvfYHK78C2pC1gbVlYaylhA6enfGVBQ+D1rKBCcAQO xhq/a4VQ5prUo/on83nkoleqqStskdpSW5/mx9VYyO4OWlaKLWYT4jXGgt9s0ZUh ZGn6WdzTj2BTJeS9MdPajoilUvPHGRrHsdCZRzZE++h4Zdj9zPyROsnR77qkpKka Q9McITDASbCGE+QYjtbTUjeWpYhd/kNwUeZvzCcJoYn3g5UAiUUM2DQTYCV+7oW1 x3srrdwWdfebJIldcskn5EyXYimSTBEM/Vv5BZqJAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQU6jesCwGB2v6XjSTWCWCqakgqPUYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjMTkxYmVlLTljMTQtNDYyNi05YjViLTViZDY5YmVmZTkzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQQmAB8gMA0GCSqGSIb3DQEBCwUAA4IBAQCnb5tXXHJ4MZU9+SNeDSOx7qu7 IRf1jnPPPkKP+y3yDoti8UIVlHxitElYrK5KD8kRrE7ykXtuHTIewTrMx8vbnuP3 1cnNg8Gawvi6hwUqqBhZzcV9RdGQPB7/i7tyzUWOgwtCMW/oJe0WF9MkKyRBCgGG 2iFnlz4sIVUTYeklCqvTKAWTqbbClIT4keOKgqD/q2u6OdnDBYtWcWSAngtv0BFK 7k+djRXya6CcmLJ9QBE33/xz6O5Q88VY/WB573XmsUGjnaK1XP6i4vOY0ajKnMDX vOaX0RmbCC96iNQQzRak3sV6KmmFclWuSlkORjGlOGbexbxMkwAMHTxPLIvN -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:42 2025 by rpki-client