$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/911ade29-d4fc-4b00-a2ba-b9edfb6138b3.roa File: 911ade29-d4fc-4b00-a2ba-b9edfb6138b3.roa (raw, json) Hash identifier: tBXVp6sHVGQ4zKCiRlAHaYnz2Ilb/oY6WwltIthETbA= Subject key identifier: 91:9E:3B:31:22:89:47:B9:02:E3:09:4D:3C:4B:57:B5:F5:7A:D0:8C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 34E59F54EA67215EBFA6F17982E29021DE43FF28 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/911ade29-d4fc-4b00-a2ba-b9edfb6138b3.roa Signing time: Tue 22 Apr 2025 00:41:24 +0000 ROA not before: Tue 22 Apr 2025 00:41:24 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff4:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e5:9f:54:ea:67:21:5e:bf:a6:f1:79:82:e2:90:21:de:43:ff:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:41:24 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=1bad351c3e991ea3f23b23468be4da76299901d247587e12373e42f80726f36a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2a:14:7f:12:98:b0:87:16:f3:f7:60:9b:7e: a0:25:9e:6a:15:2f:89:26:63:5d:a8:06:2b:e8:db: 99:a6:9f:c6:df:75:7f:e3:91:01:d2:91:43:90:7c: 97:f6:01:a4:29:83:75:b8:ae:ca:12:10:1e:d9:12: 29:d8:5f:44:5b:f1:51:28:e3:1e:d8:c0:2b:d8:55: ca:ae:f2:25:43:fd:a2:1d:a8:d5:d9:fd:ed:b4:86: 26:8b:0a:0e:ec:64:c8:2e:ac:45:c6:de:7d:1b:30: f7:dd:97:4a:33:87:0a:98:eb:a1:63:3b:de:7c:9b: 62:50:d7:47:8c:b5:1d:e9:4d:02:9f:fd:05:47:43: a8:66:65:f1:ea:c4:c1:de:59:7a:1e:61:82:ef:ee: 84:a8:2f:38:e5:20:2e:ac:78:18:94:e6:90:de:58: ca:d4:c8:0f:e0:51:4d:40:73:02:e4:d2:e7:6c:69: e9:00:8d:86:69:97:61:a5:36:4a:9c:59:b4:f6:95: 39:2b:c5:dc:3a:57:7c:9f:6c:1a:66:7d:db:6e:e2: 49:71:59:ae:80:4a:fd:7a:31:1e:2a:d1:a7:48:e3: e9:56:cc:43:60:b6:68:f3:9f:0a:09:76:36:a7:ba: 55:61:7a:0a:a9:c8:b5:e6:29:3f:92:0d:7b:15:0d: aa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9E:3B:31:22:89:47:B9:02:E3:09:4D:3C:4B:57:B5:F5:7A:D0:8C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/911ade29-d4fc-4b00-a2ba-b9edfb6138b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:5000::/40 Signature Algorithm: sha256WithRSAEncryption 12:12:10:f8:ea:02:0f:07:b9:47:54:e5:95:b1:83:7b:04:de: e5:78:ec:5b:bb:10:48:c6:9f:f7:ce:96:77:a1:48:74:6c:fd: 84:6b:0d:de:03:2e:05:03:dd:e5:e4:fe:2a:61:1d:57:fc:f1: a1:71:22:2f:c7:29:7f:21:80:da:18:18:bb:04:08:0e:c7:ef: 20:73:68:a6:f8:52:c0:4b:0d:82:11:27:81:a1:38:3d:18:e7: 86:03:3b:52:2a:2b:17:cc:ad:65:d7:4b:2a:68:56:6c:2a:1e: 91:46:36:e6:0c:bd:64:3f:0b:ed:1e:aa:52:4c:b5:72:e6:9e: 9e:ac:44:c8:d9:8a:b9:e2:66:a8:38:5c:da:31:5f:d2:2b:c5: 94:8a:e5:e0:9f:cf:ae:9d:a6:a3:13:6e:19:43:84:6b:1b:8c: 12:36:98:f3:ea:86:03:6b:5a:d0:49:b9:31:8a:1e:71:a1:bc: 54:27:bd:91:c9:01:1e:12:14:7a:cf:3a:ac:7a:b0:de:e5:97: 4b:86:ec:2e:ef:87:ef:20:6c:d7:37:40:f9:f8:03:d2:42:a0: 4d:05:7b:3d:74:1a:3e:28:da:57:fa:e8:38:82:c5:ee:23:dc: 1c:b7:4a:f4:85:ba:fb:e3:17:e3:40:95:d9:67:5f:47:d4:ff: 58:c1:96:b0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNOWfVOpnIV6/pvF5guKQId5D/ygwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDA0MTI0WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYmFkMzUxYzNlOTkxZWEzZjIzYjIzNDY4YmU0ZGE3NjI5 OTkwMWQyNDc1ODdlMTIzNzNlNDJmODA3MjZmMzZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTKhR/Epiwhxbz92CbfqAlnmoVL4kmY12oBivo25mmn8bf dX/jkQHSkUOQfJf2AaQpg3W4rsoSEB7ZEinYX0Rb8VEo4x7YwCvYVcqu8iVD/aId qNXZ/e20hiaLCg7sZMgurEXG3n0bMPfdl0ozhwqY66FjO958m2JQ10eMtR3pTQKf /QVHQ6hmZfHqxMHeWXoeYYLv7oSoLzjlIC6seBiU5pDeWMrUyA/gUU1AcwLk0uds aekAjYZpl2GlNkqcWbT2lTkrxdw6V3yfbBpmfdtu4klxWa6ASv16MR4q0adI4+lW zENgtmjznwoJdjanulVhegqpyLXmKT+SDXsVDao1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUkZ47MSKJR7kC4wlNPEtXtfV60IwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkxMWFkZTI5LWQ0ZmMtNGIwMC1hMmJhLWI5ZWRmYjYxMzhiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/0UDANBgkqhkiG9w0BAQsFAAOCAQEAEhIQ+OoCDwe5R1TllbGDewTe 5XjsW7sQSMaf986Wd6FIdGz9hGsN3gMuBQPd5eT+KmEdV/zxoXEiL8cpfyGA2hgY uwQIDsfvIHNopvhSwEsNghEngaE4PRjnhgM7UiorF8ytZddLKmhWbCoekUY25gy9 ZD8L7R6qUky1cuaenqxEyNmKueJmqDhc2jFf0ivFlIrl4J/Prp2moxNuGUOEaxuM EjaY8+qGA2ta0Em5MYoecaG8VCe9kckBHhIUes86rHqw3uWXS4bsLu+H7yBs1zdA +fgD0kKgTQV7PXQaPijaV/roOILF7iPcHLdK9IW6++MX40CV2WdfR9T/WMGWsA== -----END CERTIFICATE-----Generated at Sat Apr 26 18:05:30 2025 by rpki-client