$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/759eee0f-c645-4460-bc81-76005e6422b4.roa File: 759eee0f-c645-4460-bc81-76005e6422b4.roa (raw, json) Hash identifier: V54x541+jzyM4dY/WQKBGNNYqOXkKDufooE9wQ/3BWo= Subject key identifier: A1:FD:16:5F:08:7A:85:53:84:BF:AB:EB:B2:6D:EE:80:CB:5C:C6:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 22B76C1CDDAA5FC0272C4D0EE766833D63A98EF7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/759eee0f-c645-4460-bc81-76005e6422b4.roa Signing time: Tue 22 Apr 2025 17:11:37 +0000 ROA not before: Tue 22 Apr 2025 17:11:37 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1d:4800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b7:6c:1c:dd:aa:5f:c0:27:2c:4d:0e:e7:66:83:3d:63:a9:8e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:11:37 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=038f4a9c5652c06fc8a6a52eae14cdd9f74b8f6740c3c83d2cba905a5b420589, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7d:b8:18:1e:bb:49:c9:f7:de:be:a0:d8:ee: 4e:60:56:23:8d:a3:4d:08:0c:5d:e0:10:6e:57:25: da:44:74:f5:57:8f:71:64:4e:11:da:b9:06:ac:2f: 23:ff:f0:40:a4:bb:4a:95:07:c2:ae:bc:77:e3:7c: fb:e1:22:e6:a4:a0:d5:02:dd:88:6d:af:3a:04:97: 99:5f:9a:83:36:ff:62:01:2b:3c:56:97:bf:f2:ce: e4:11:26:7d:d2:88:c9:ad:2e:15:cc:f4:7b:3d:8b: 3f:d7:85:61:d7:d4:26:6b:43:e2:b3:c0:e6:09:4e: 15:6a:25:72:17:42:c7:7c:6a:c9:4a:d3:88:96:4d: 82:36:ae:7e:51:d9:fa:b6:fb:52:0c:1f:5b:18:eb: ce:84:7f:6c:04:71:43:d6:17:e8:33:7c:90:b3:a4: 85:42:d8:1a:83:35:ad:3c:8e:aa:df:6f:0e:1f:fd: 6f:45:c6:15:85:49:f6:36:20:9a:3a:1f:28:ae:f6: ee:99:87:e6:63:ce:8a:71:99:94:8d:bf:77:aa:a2: fb:52:a7:ea:c0:9d:8c:dd:6e:f6:03:a2:fb:d2:e1: 03:36:4b:87:d7:f9:28:a3:55:6d:c5:90:18:4d:51: bf:a6:05:1a:45:cf:51:db:6a:87:1e:da:0d:de:5a: 11:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FD:16:5F:08:7A:85:53:84:BF:AB:EB:B2:6D:EE:80:CB:5C:C6:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/759eee0f-c645-4460-bc81-76005e6422b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1d:4800::/37 Signature Algorithm: sha256WithRSAEncryption 34:19:97:22:4c:0d:60:19:41:91:e1:fc:3e:3a:a8:9a:8c:77: 6c:f5:7f:24:c3:04:27:46:bd:e8:a4:94:9f:46:11:12:94:43: 79:60:94:90:a1:fa:60:4c:88:0f:f5:91:80:4e:c5:75:86:c1: 47:1a:c2:53:83:be:c0:33:a4:d9:f6:c4:a7:a7:f0:98:b3:2f: 0d:84:d3:ff:bd:36:e2:45:24:ef:19:60:0f:0b:06:4d:5a:ac: ef:25:74:3b:9c:ee:53:54:7a:a5:08:92:fa:49:25:20:42:42: a1:87:d3:b1:b3:1f:fd:ff:21:27:68:b6:d8:99:0f:47:a7:36: c2:d0:bd:11:f5:ab:bc:7d:3f:dc:f4:f9:cf:20:33:a8:41:3b: 94:c4:51:6f:10:43:bd:1d:64:b6:57:26:de:55:1f:c2:d3:cb: 84:e8:e6:c5:e4:8d:19:0b:53:65:df:7a:5f:64:fb:6d:66:70: ca:dc:22:d0:78:8b:f6:db:1c:74:21:06:ce:1a:2f:f1:a4:8e: 84:06:d5:83:f7:97:70:35:da:79:62:38:82:65:29:c4:09:ab: d9:f8:90:07:20:93:34:dd:1b:ee:51:17:91:6d:47:7c:a0:53: 2a:bf:91:61:d5:08:56:a8:21:5b:b2:1a:f8:ee:a2:b7:6a:a6: b5:72:24:d9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUIrdsHN2qX8AnLE0O52aDPWOpjvcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcxMTM3WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzhmNGE5YzU2NTJjMDZmYzhhNmE1MmVhZTE0Y2RkOWY3 NGI4ZjY3NDBjM2M4M2QyY2JhOTA1YTViNDIwNTg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvfbgYHrtJyffevqDY7k5gViONo00IDF3gEG5XJdpEdPVX j3FkThHauQasLyP/8ECku0qVB8KuvHfjfPvhIuakoNUC3YhtrzoEl5lfmoM2/2IB KzxWl7/yzuQRJn3SiMmtLhXM9Hs9iz/XhWHX1CZrQ+KzwOYJThVqJXIXQsd8aslK 04iWTYI2rn5R2fq2+1IMH1sY686Ef2wEcUPWF+gzfJCzpIVC2BqDNa08jqrfbw4f /W9FxhWFSfY2IJo6Hyiu9u6Zh+ZjzopxmZSNv3eqovtSp+rAnYzdbvYDovvS4QM2 S4fX+SijVW3FkBhNUb+mBRpFz1Hbaoce2g3eWhHnAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUof0WXwh6hVOEv6vrsm3ugMtcxhwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1OWVlZTBmLWM2NDUtNDQ2MC1iYzgxLTc2MDA1ZTY0MjJiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8dSDANBgkqhkiG9w0BAQsFAAOCAQEANBmXIkwNYBlBkeH8Pjqomox3 bPV/JMMEJ0a96KSUn0YREpRDeWCUkKH6YEyID/WRgE7FdYbBRxrCU4O+wDOk2fbE p6fwmLMvDYTT/7024kUk7xlgDwsGTVqs7yV0O5zuU1R6pQiS+kklIEJCoYfTsbMf /f8hJ2i22JkPR6c2wtC9EfWrvH0/3PT5zyAzqEE7lMRRbxBDvR1ktlcm3lUfwtPL hOjmxeSNGQtTZd96X2T7bWZwytwi0HiL9tscdCEGzhov8aSOhAbVg/eXcDXaeWI4 gmUpxAmr2fiQByCTNN0b7lEXkW1HfKBTKr+RYdUIVqghW7Ia+O6it2qmtXIk2Q== -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:00 2025 by rpki-client