$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7077e2ea-9e27-49fd-b57f-a743c75ad425.roa File: 7077e2ea-9e27-49fd-b57f-a743c75ad425.roa (raw, json) Hash identifier: fW1JiTo1rN40VwSMCv9W/prqcjTJc6yy+kQLd3HmO1o= Subject key identifier: A1:19:04:EC:2D:34:3A:EF:BD:7A:E9:56:FA:28:24:FD:26:48:E0:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D3C30AD5C71B2DC17CF1E08C0A0F13A683DFFD9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7077e2ea-9e27-49fd-b57f-a743c75ad425.roa Signing time: Mon 21 Apr 2025 17:51:00 +0000 ROA not before: Mon 21 Apr 2025 17:51:00 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fff:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3c:30:ad:5c:71:b2:dc:17:cf:1e:08:c0:a0:f1:3a:68:3d:ff:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:51:00 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=8f648f66c7ddcc77610a34ba90d99b9b47df3758275fe08443fe760903750cc6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e3:83:f8:df:8f:87:06:e9:5b:32:fa:d5:52: 01:fc:ff:2d:dc:de:74:84:1b:0e:d4:4e:27:da:86: 3d:d6:dc:0e:c5:91:13:ac:bb:0f:b7:57:2b:44:24: 0e:bf:fc:f3:a8:6c:94:a8:fb:00:8a:15:7e:24:7e: ff:ad:22:69:2d:43:11:f6:0a:d2:8a:6e:46:4d:97: eb:14:5e:6b:0a:c6:4a:5e:b4:39:79:55:3b:9e:5c: ef:c1:38:13:ef:d7:be:0e:f4:50:83:47:5b:1c:2e: 60:bf:07:b8:00:78:91:0b:18:21:40:d5:ca:f8:62: eb:da:07:5f:4d:fe:53:09:4f:28:25:3c:20:a7:7e: a2:78:ff:d6:5e:36:6f:96:a0:7b:15:77:fc:43:32: 04:9a:2b:f3:1e:2b:b5:82:73:13:18:c9:0f:68:c2: 79:fb:5f:b6:9e:db:a3:65:db:39:4f:f1:42:2f:41: ce:b8:45:84:b0:1a:9d:2c:93:45:7f:4c:a9:1d:a3: 85:be:31:f6:c5:55:cd:5b:a8:d0:c7:fb:01:03:7e: 52:41:b1:78:7f:18:09:e2:74:7b:3f:2c:c2:8d:55: 0b:a5:32:19:db:d7:03:c6:b0:64:ce:ce:67:bc:09: d5:eb:67:43:79:1d:06:69:7f:f9:e8:fc:5a:57:1e: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:19:04:EC:2D:34:3A:EF:BD:7A:E9:56:FA:28:24:FD:26:48:E0:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7077e2ea-9e27-49fd-b57f-a743c75ad425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:2040::/48 Signature Algorithm: sha256WithRSAEncryption c1:c5:16:22:77:df:11:1a:60:07:d2:8d:6b:56:97:93:01:6c: d7:ec:b4:fd:9f:a0:25:76:64:e4:80:0f:c6:e0:df:e0:60:e1: bd:a0:98:64:8f:e3:cf:5a:ee:db:bc:94:cb:f5:15:91:19:ee: 1d:8b:64:7e:67:d7:d0:4b:a8:42:7a:6d:c0:3d:4a:97:f4:ae: ce:8f:5f:53:2c:92:4f:4a:73:ad:92:5d:0f:d3:2a:d4:8d:6c: 6a:9f:7f:52:5b:09:cc:cd:f1:49:3b:3e:fd:b8:1f:0e:a4:57: fc:39:92:25:1b:70:5c:c4:f6:ad:dd:2a:03:3c:f8:cf:e4:ae: 3d:af:0c:4a:79:0c:df:29:9a:0f:a3:c8:4e:86:df:1b:a5:79: 12:08:ea:82:f4:91:a7:f1:5d:62:f7:ad:43:9c:fc:1b:4e:d9: 66:36:7f:c2:94:6e:2d:50:59:ed:18:bb:91:17:b7:a1:54:98: 24:a7:79:10:e5:aa:00:e0:e7:ce:66:1d:1e:ea:a5:6f:42:71: 24:03:15:3d:b0:95:34:9c:eb:fe:ce:9d:20:3f:8a:de:6a:07: c1:98:4d:a7:87:45:f2:e8:48:1d:25:53:21:f4:d2:53:d2:f4: 53:e4:e2:af:6a:c5:c7:66:78:ee:42:ce:ac:08:9f:fc:a6:63: 94:1d:d2:7b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULTwwrVxxstwXzx4IwKDxOmg9/9kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTc1MTAwWhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZjY0OGY2NmM3ZGRjYzc3NjEwYTM0YmE5MGQ5OWI5YjQ3 ZGYzNzU4Mjc1ZmUwODQ0M2ZlNzYwOTAzNzUwY2M2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJ44P434+HBulbMvrVUgH8/y3c3nSEGw7UTifahj3W3A7F kROsuw+3VytEJA6//POobJSo+wCKFX4kfv+tImktQxH2CtKKbkZNl+sUXmsKxkpe tDl5VTueXO/BOBPv174O9FCDR1scLmC/B7gAeJELGCFA1cr4YuvaB19N/lMJTygl PCCnfqJ4/9ZeNm+WoHsVd/xDMgSaK/MeK7WCcxMYyQ9ownn7X7ae26Nl2zlP8UIv Qc64RYSwGp0sk0V/TKkdo4W+MfbFVc1bqNDH+wEDflJBsXh/GAnidHs/LMKNVQul Mhnb1wPGsGTOzme8CdXrZ0N5HQZpf/no/FpXHodbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoRkE7C00Ou+9eulW+igk/SZI4GQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwNzdlMmVhLTllMjctNDlmZC1iNTdmLWE3NDNjNzVhZDQyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//IEAwDQYJKoZIhvcNAQELBQADggEBAMHFFiJ33xEaYAfSjWtWl5MB bNfstP2foCV2ZOSAD8bg3+Bg4b2gmGSP489a7tu8lMv1FZEZ7h2LZH5n19BLqEJ6 bcA9Spf0rs6PX1Mskk9Kc62SXQ/TKtSNbGqff1JbCczN8Uk7Pv24Hw6kV/w5kiUb cFzE9q3dKgM8+M/krj2vDEp5DN8pmg+jyE6G3xuleRII6oL0kafxXWL3rUOc/BtO 2WY2f8KUbi1QWe0Yu5EXt6FUmCSneRDlqgDg585mHR7qpW9CcSQDFT2wlTSc6/7O nSA/it5qB8GYTaeHRfLoSB0lUyH00lPS9FPk4q9qxcdmeO5CzqwIn/ymY5Qd0ns= -----END CERTIFICATE-----Generated at Sat Apr 26 16:34:50 2025 by rpki-client