$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98a4f4f7-0f38-4f2e-8855-ef7c11d857cb.roa File: 98a4f4f7-0f38-4f2e-8855-ef7c11d857cb.roa (raw, json) Hash identifier: qVn73zmuXpdOgpovvWXaILam0/W0JLohR3i1wKg6M0w= Subject key identifier: 0C:CE:7F:F7:9A:88:5E:D9:87:4B:39:2C:E3:45:69:C7:E3:33:93:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 712E87C59A533F99DE98C18CD5D558BA6DC86007 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98a4f4f7-0f38-4f2e-8855-ef7c11d857cb.roa Signing time: Tue 22 Apr 2025 16:30:35 +0000 ROA not before: Tue 22 Apr 2025 16:30:35 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2e:87:c5:9a:53:3f:99:de:98:c1:8c:d5:d5:58:ba:6d:c8:60:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:30:35 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=c51b1ef292fa5a2eb95ca7b226c4fc64f269d83fd730f6a8bc492e0517ab1494, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:41:8c:f1:16:43:83:6f:f2:0d:86:9d:01: cb:77:7b:16:e4:10:26:3e:d0:0c:9c:f5:bb:5c:6d: bc:95:3b:83:ba:97:4c:ed:41:b4:db:b5:48:d8:3e: fe:b8:16:7b:7a:fc:37:1c:11:dd:d3:5d:66:d2:81: ee:32:3e:3f:ce:f9:98:72:f8:08:bc:02:55:12:9a: 3c:b8:50:8c:b5:4f:5c:15:01:5c:91:af:8c:2f:08: 1e:f9:5b:c9:bb:7b:62:42:df:98:d3:bf:ca:ef:8d: 4a:f7:42:f6:59:16:7d:11:67:d6:f4:a9:b3:3b:98: 00:6b:d5:47:7e:32:28:69:e3:29:14:5a:af:04:e8: e4:9d:0b:df:12:9b:29:44:79:de:ed:0f:52:2a:0a: 6b:29:2b:a9:97:b6:01:b1:0f:d8:0f:bc:81:40:5a: 9c:6b:ca:8f:82:56:fb:07:f1:43:c7:62:5f:e6:97: 02:06:6a:22:8e:bd:b6:36:3a:ca:63:61:da:b9:ab: 91:14:f7:47:87:1e:f4:34:70:82:66:a1:bc:d2:37: 04:e6:91:31:08:83:1d:fb:76:e3:90:69:ca:1c:03: 42:b2:bf:15:ff:92:db:fe:33:3e:b1:5a:4b:e2:95: 48:7e:84:5a:72:99:9c:c6:d0:08:56:ae:2c:59:fc: c4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CE:7F:F7:9A:88:5E:D9:87:4B:39:2C:E3:45:69:C7:E3:33:93:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98a4f4f7-0f38-4f2e-8855-ef7c11d857cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1::/32 Signature Algorithm: sha256WithRSAEncryption ce:94:7a:32:95:0b:e2:84:45:67:d3:65:47:86:c5:e3:44:33: cb:bd:6f:81:6a:92:5c:ab:07:ae:df:8d:a9:60:46:fb:4e:b9: 68:e1:06:d7:8f:34:d8:82:88:2c:08:af:25:9c:77:53:6a:cb: f5:12:52:4a:de:98:0b:da:c2:96:b5:a1:53:6f:3b:64:8f:5a: 73:cb:15:d6:bb:0b:34:9d:d1:57:1e:ec:f7:ee:00:c1:22:f2: 74:bf:a3:ad:43:5b:86:b4:37:6e:31:64:95:f2:19:f3:72:64: f4:7a:93:97:e0:aa:09:70:a1:5b:5c:9d:86:d9:f8:ec:67:d4: f3:bf:37:c6:cc:e3:c7:7d:8c:7e:7e:cd:cb:ee:08:a5:1c:98: 3b:6b:75:62:2e:93:82:81:7f:71:a0:b0:81:ef:f5:66:6c:c1: 06:25:30:eb:ed:b2:6d:ef:77:55:08:c8:7d:cb:16:7d:d7:6a: 12:2c:11:d4:b8:cd:48:2a:27:b1:fd:64:44:39:6a:61:d1:2d: 2e:74:58:fe:d1:07:b8:b8:94:75:b4:9d:a8:06:41:9b:4d:0a: ca:92:33:25:e9:a4:e3:d5:9d:86:da:ad:51:2d:c5:de:db:98: 9b:8d:97:db:c2:36:94:74:59:37:a9:e8:74:17:a6:14:61:82: 67:19:c5:6f -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUcS6HxZpTP5nemMGM1dVYum3IYAcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYzMDM1WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTFiMWVmMjkyZmE1YTJlYjk1Y2E3YjIyNmM0ZmM2NGYy NjlkODNmZDczMGY2YThiYzQ5MmUwNTE3YWIxNDk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUKkGM8RZDg2/yDYadAct3exbkECY+0Ayc9btcbbyVO4O6 l0ztQbTbtUjYPv64Fnt6/DccEd3TXWbSge4yPj/O+Zhy+Ai8AlUSmjy4UIy1T1wV AVyRr4wvCB75W8m7e2JC35jTv8rvjUr3QvZZFn0RZ9b0qbM7mABr1Ud+Mihp4ykU Wq8E6OSdC98SmylEed7tD1IqCmspK6mXtgGxD9gPvIFAWpxryo+CVvsH8UPHYl/m lwIGaiKOvbY2OspjYdq5q5EU90eHHvQ0cIJmobzSNwTmkTEIgx37duOQacocA0Ky vxX/ktv+Mz6xWkvilUh+hFpymZzG0AhWrixZ/MRxAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUDM5/95qIXtmHSzks40Vpx+Mzk7MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4YTRmNGY3LTBmMzgtNGYyZS04ODU1LWVmN2MxMWQ4NTdjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB/xMA0GCSqGSIb3DQEBCwUAA4IBAQDOlHoylQvihEVn02VHhsXjRDPL vW+BapJcqweu342pYEb7Trlo4QbXjzTYgogsCK8lnHdTasv1ElJK3pgL2sKWtaFT bztkj1pzyxXWuws0ndFXHuz37gDBIvJ0v6OtQ1uGtDduMWSV8hnzcmT0epOX4KoJ cKFbXJ2G2fjsZ9TzvzfGzOPHfYx+fs3L7gilHJg7a3ViLpOCgX9xoLCB7/VmbMEG JTDr7bJt73dVCMh9yxZ912oSLBHUuM1IKiex/WREOWph0S0udFj+0Qe4uJR1tJ2o BkGbTQrKkjMl6aTj1Z2G2q1RLcXe25ibjZfbwjaUdFk3qeh0F6YUYYJnGcVv -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:18 2025 by rpki-client