$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c16d7c2-1ca4-472c-9636-4063650360c0.roa File: 7c16d7c2-1ca4-472c-9636-4063650360c0.roa (raw, json) Hash identifier: ytjIK2i2p0Zzua850sPrOKxrpMJXswkrPQfIPBtbqOo= Subject key identifier: 0D:58:7E:46:05:FF:4E:52:FE:E9:0A:BD:D7:F3:CA:0B:4D:4F:91:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 263EEAA4C5C22BE3E84BE95C39E9B986A2AD1C19 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c16d7c2-1ca4-472c-9636-4063650360c0.roa Signing time: Tue 22 Apr 2025 17:11:56 +0000 ROA not before: Tue 22 Apr 2025 17:11:56 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f19:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3e:ea:a4:c5:c2:2b:e3:e8:4b:e9:5c:39:e9:b9:86:a2:ad:1c:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:11:56 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=d5848ec20c33aed4a81e283b29315327559052bbea788986f5c847ab59137d0b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:74:65:64:27:0c:fe:e5:06:79:89:69:6c: ea:67:49:bc:1f:31:2c:57:72:d8:93:11:54:ba:4c: 8c:50:64:61:aa:93:81:ea:aa:8f:e0:2d:63:fd:e9: 70:c4:e8:27:08:cd:cf:12:07:a9:d8:a2:f2:0d:9b: f1:64:d2:f4:4b:07:65:52:a0:7b:e9:36:65:da:b9: c6:dd:16:9d:28:02:8b:0c:7f:05:5b:9e:87:f9:4c: ca:58:ed:e2:7f:a5:79:6e:55:de:f2:78:2d:8b:48: e8:80:c2:66:c6:07:ee:f3:43:39:a9:83:19:bc:30: 08:05:1b:39:e2:97:29:cb:4c:10:06:96:ba:16:02: 44:49:1e:fc:e7:62:3d:04:2c:e2:76:c0:28:d9:fa: 83:b2:4e:65:7a:8e:b2:7d:0d:a0:42:ae:dd:27:fe: c6:4c:ca:82:e1:6e:6d:e0:7b:b8:dc:dc:eb:02:93: 63:0b:05:d2:c0:f9:d6:1f:b9:c4:40:e6:a6:4b:d7: 87:e2:17:fb:6d:66:25:ff:4e:d2:6a:ef:fc:34:0a: ff:7e:56:d8:7f:dc:35:6c:b1:26:bf:83:ba:7b:28: 1d:1c:ae:fd:a3:ac:8f:cf:6f:d8:21:1a:d3:6f:b3: 43:45:ee:f6:c7:56:51:6e:10:4d:d3:d7:44:af:1a: 0c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:58:7E:46:05:FF:4E:52:FE:E9:0A:BD:D7:F3:CA:0B:4D:4F:91:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c16d7c2-1ca4-472c-9636-4063650360c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f19:4000::/36 Signature Algorithm: sha256WithRSAEncryption 46:ee:74:7d:00:45:fe:18:13:3f:1c:5d:b8:94:eb:c4:ec:7b: 53:f5:78:ad:a1:8c:5c:dc:ba:03:e9:20:8e:84:6f:0f:84:4d: 9e:57:ce:b4:a9:f0:d7:bf:b9:e1:02:69:19:23:7c:ac:ca:bd: 9d:cd:63:e9:14:0c:4d:8e:43:94:1d:ce:38:b8:f5:35:f8:91: 4c:50:e3:dc:d5:c8:23:cd:44:5c:df:fe:03:2e:ec:65:1f:dc: 66:9b:2a:ec:5d:1e:d3:0d:18:05:87:0e:52:6d:df:8b:02:e3: 0e:54:23:5c:d8:3f:c6:74:19:eb:37:ca:5e:87:4d:fa:e6:fb: cf:25:5c:dc:8e:53:91:00:a4:3b:84:8b:15:77:bb:9d:08:8a: 07:d8:c2:fd:5b:c4:91:51:66:a2:31:c0:94:b2:a6:aa:f3:26: 6f:98:95:98:d2:5a:cb:ba:b8:e5:f2:ed:3a:ca:55:57:86:59: 44:ed:46:24:55:03:f6:e0:b2:0b:48:0e:b8:ca:ea:ed:0d:99: 70:e3:83:96:a9:5e:9a:a5:83:80:0a:2e:c9:31:a2:d3:48:21: 2e:7f:c1:ea:5f:28:67:39:66:3f:0d:e3:14:6f:84:29:b4:ee: 34:50:18:73:55:52:ad:bb:9a:09:05:1e:0f:66:9d:61:24:ff: 7f:27:bf:86 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJj7qpMXCK+PoS+lcOem5hqKtHBkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcxMTU2WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTg0OGVjMjBjMzNhZWQ0YTgxZTI4M2IyOTMxNTMyNzU1 OTA1MmJiZWE3ODg5ODZmNWM4NDdhYjU5MTM3ZDBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkAnRlZCcM/uUGeYlpbOpnSbwfMSxXctiTEVS6TIxQZGGq k4Hqqo/gLWP96XDE6CcIzc8SB6nYovINm/Fk0vRLB2VSoHvpNmXaucbdFp0oAosM fwVbnof5TMpY7eJ/pXluVd7yeC2LSOiAwmbGB+7zQzmpgxm8MAgFGznilynLTBAG lroWAkRJHvznYj0ELOJ2wCjZ+oOyTmV6jrJ9DaBCrt0n/sZMyoLhbm3ge7jc3OsC k2MLBdLA+dYfucRA5qZL14fiF/ttZiX/TtJq7/w0Cv9+Vth/3DVssSa/g7p7KB0c rv2jrI/Pb9ghGtNvs0NF7vbHVlFuEE3T10SvGgwxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUDVh+RgX/TlL+6Qq91/PKC01PkTcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjMTZkN2MyLTFjYTQtNDcyYy05NjM2LTQwNjM2NTAzNjBjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8ZQDANBgkqhkiG9w0BAQsFAAOCAQEARu50fQBF/hgTPxxduJTrxOx7 U/V4raGMXNy6A+kgjoRvD4RNnlfOtKnw17+54QJpGSN8rMq9nc1j6RQMTY5DlB3O OLj1NfiRTFDj3NXII81EXN/+Ay7sZR/cZpsq7F0e0w0YBYcOUm3fiwLjDlQjXNg/ xnQZ6zfKXodN+ub7zyVc3I5TkQCkO4SLFXe7nQiKB9jC/VvEkVFmojHAlLKmqvMm b5iVmNJay7q45fLtOspVV4ZZRO1GJFUD9uCyC0gOuMrq7Q2ZcOODlqlemqWDgAou yTGi00ghLn/B6l8oZzlmPw3jFG+EKbTuNFAYc1VSrbuaCQUeD2adYST/fye/hg== -----END CERTIFICATE-----Generated at Sat Apr 26 18:11:00 2025 by rpki-client