$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9222ea42-a8d2-4777-9833-1b122c425c55.roa File: 9222ea42-a8d2-4777-9833-1b122c425c55.roa (raw, json) Hash identifier: OdMOgZztQBiK5HvA7xfYBeXNXx8uBwAT9Wu/QnqAogE= Subject key identifier: 01:9D:78:65:6C:59:85:8C:C7:EC:44:61:76:11:FF:50:17:A6:65:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40A2EB90B0CF6A8AD4FAC55CC6DCFEFE7729AA82 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9222ea42-a8d2-4777-9833-1b122c425c55.roa Signing time: Tue 22 Apr 2025 16:01:50 +0000 ROA not before: Tue 22 Apr 2025 16:01:50 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a2:eb:90:b0:cf:6a:8a:d4:fa:c5:5c:c6:dc:fe:fe:77:29:aa:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:01:50 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=91261a71176bd782a880b8eeae94201a0b185a3112d6285cd833c751db34d32a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ee:46:96:f7:ec:95:a3:62:b4:e0:fb:49:3d: 47:83:65:fb:f5:b2:63:e3:87:1b:60:8b:2e:18:8e: b7:6a:fc:2e:fe:88:99:67:0f:f2:85:1f:1f:58:91: 44:8b:ba:36:c0:49:39:c6:65:84:47:e1:da:be:66: 18:92:2b:7e:ea:50:8d:dd:32:3a:4d:da:45:9d:3a: 4b:10:ad:01:65:f0:7b:0f:bc:70:6d:7f:4e:80:05: 7f:c1:7c:5f:09:f9:f2:92:b3:53:bc:d0:1d:27:25: 99:8b:7b:99:91:ea:c1:db:a0:50:08:5f:4a:06:72: 7f:14:70:e8:27:58:95:5e:4e:bb:52:31:8f:c1:c6: 38:a1:8c:fc:99:96:8b:11:97:fa:29:30:aa:33:38: e7:0f:16:4f:70:95:76:27:e6:16:47:de:21:c3:70: 6d:14:ce:08:32:a0:5f:3e:2c:57:00:8e:d6:7c:a8: 3e:91:e4:c6:63:6f:b0:c1:04:7d:bf:73:b8:af:a1: 2c:8b:b2:b8:a7:a2:15:1b:91:f6:88:60:9d:1b:a3: a8:40:1e:63:62:2d:52:c5:e0:48:6e:d2:5d:28:86: a4:6a:40:91:9a:dc:2c:db:e3:1c:1d:cd:44:80:d6: 00:6b:79:b7:ef:aa:d0:e7:44:e9:f4:83:66:3b:2b: 82:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9D:78:65:6C:59:85:8C:C7:EC:44:61:76:11:FF:50:17:A6:65:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9222ea42-a8d2-4777-9833-1b122c425c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:1000::/40 Signature Algorithm: sha256WithRSAEncryption 58:99:6b:dc:75:54:aa:2f:c6:62:3b:f4:e7:19:ce:f0:7a:14: 24:b6:31:d1:c7:15:60:36:24:b0:e5:9b:43:33:2c:25:9c:71: 26:d9:78:27:1a:d0:7d:cc:46:ba:0f:43:df:41:07:66:1f:71: c7:25:19:c3:fc:c2:cc:d0:14:ef:07:6e:ea:d3:9a:b2:53:34: b1:34:eb:3a:a8:65:1f:6a:ca:63:e3:8e:54:d4:d3:28:90:5a: 2f:36:14:c9:67:50:3a:9c:35:cf:8d:5a:e2:cc:16:e0:69:c6: bc:41:eb:4f:ef:28:f8:2a:b4:b3:73:82:93:d4:1b:06:c7:3d: 04:2c:a7:ad:df:33:17:f5:d9:5c:e2:bf:a9:0d:c2:6a:a9:44: a8:4d:01:c2:d7:cf:2e:9e:e8:f3:ad:90:c2:19:4f:2f:55:16: 41:87:a9:84:7f:6e:ff:7a:37:75:a5:61:b3:fa:80:da:a7:58: 8c:a2:5c:97:f4:e2:fd:85:f3:3e:9a:01:d8:44:9d:42:7c:ea: c9:d3:d0:0d:d5:5f:01:55:90:01:de:12:e7:12:e6:80:e3:13: bd:6f:88:0e:64:45:6a:87:34:20:0b:d2:05:91:86:42:31:04: ff:cc:ad:33:a0:4e:9b:64:b9:62:38:db:9f:e8:c4:e5:10:67: 58:6c:c5:06 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQKLrkLDPaorU+sVcxtz+/ncpqoIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYwMTUwWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTI2MWE3MTE3NmJkNzgyYTg4MGI4ZWVhZTk0MjAxYTBi MTg1YTMxMTJkNjI4NWNkODMzYzc1MWRiMzRkMzJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDT7kaW9+yVo2K04PtJPUeDZfv1smPjhxtgiy4Yjrdq/C7+ iJlnD/KFHx9YkUSLujbASTnGZYRH4dq+ZhiSK37qUI3dMjpN2kWdOksQrQFl8HsP vHBtf06ABX/BfF8J+fKSs1O80B0nJZmLe5mR6sHboFAIX0oGcn8UcOgnWJVeTrtS MY/BxjihjPyZlosRl/opMKozOOcPFk9wlXYn5hZH3iHDcG0UzggyoF8+LFcAjtZ8 qD6R5MZjb7DBBH2/c7ivoSyLsrinohUbkfaIYJ0bo6hAHmNiLVLF4Ehu0l0ohqRq QJGa3Czb4xwdzUSA1gBrebfvqtDnROn0g2Y7K4LpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUAZ14ZWxZhYzH7ERhdhH/UBemZUEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyMjJlYTQyLWE4ZDItNDc3Ny05ODMzLTFiMTIyYzQyNWM1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/3EDANBgkqhkiG9w0BAQsFAAOCAQEAWJlr3HVUqi/GYjv05xnO8HoU JLYx0ccVYDYksOWbQzMsJZxxJtl4JxrQfcxGug9D30EHZh9xxyUZw/zCzNAU7wdu 6tOaslM0sTTrOqhlH2rKY+OOVNTTKJBaLzYUyWdQOpw1z41a4swW4GnGvEHrT+8o +Cq0s3OCk9QbBsc9BCynrd8zF/XZXOK/qQ3CaqlEqE0BwtfPLp7o862QwhlPL1UW QYephH9u/3o3daVhs/qA2qdYjKJcl/Ti/YXzPpoB2ESdQnzqydPQDdVfAVWQAd4S 5xLmgOMTvW+IDmRFaoc0IAvSBZGGQjEE/8ytM6BOm2S5Yjjbn+jE5RBnWGzFBg== -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:49 2025 by rpki-client