$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e913152-1fba-499c-af37-e5935da09aca.roa File: 9e913152-1fba-499c-af37-e5935da09aca.roa (raw, json) Hash identifier: W04fo3EKpNe6Y6MOA/7auNwrXHWWiaXHSzmu6Zv3js4= Subject key identifier: 71:EB:7F:9B:7B:33:21:3C:08:BA:57:A8:1F:AA:B6:F6:0D:2F:5E:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 57B96BE5270DE78862B40A571EF19448330C57E8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e913152-1fba-499c-af37-e5935da09aca.roa Signing time: Tue 22 Apr 2025 15:21:37 +0000 ROA not before: Tue 22 Apr 2025 15:21:37 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:5040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b9:6b:e5:27:0d:e7:88:62:b4:0a:57:1e:f1:94:48:33:0c:57:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:21:37 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=fdd9ff2a8523b706433cd25dab6c1937d9359efa5faca0ebd4cf0ad7e3803351, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:42:ce:1f:81:45:f8:50:11:6a:db:78:1e: 05:9b:43:be:6c:70:d3:0c:ed:3a:93:93:8d:09:18: 73:d9:7d:a7:77:95:21:f6:16:7a:66:4a:73:64:5a: f9:f1:68:d2:8e:9b:6e:6c:ab:12:f9:85:1c:c9:20: f0:fb:bc:1a:90:97:5e:3b:62:e8:1a:50:29:35:ed: cf:bc:96:b3:55:ac:b3:b6:61:50:1d:b0:40:ec:8d: b9:7f:5b:a9:9f:ce:7b:08:94:54:22:cc:3e:d3:0f: ed:ff:07:9a:2f:67:32:44:52:a1:0e:00:b7:ae:a2: 6e:4a:81:f4:01:3b:6b:4b:71:74:52:c1:eb:a0:bb: b1:6b:44:76:05:c8:4d:79:ff:17:7b:ac:85:1c:33: e0:9c:da:b1:a5:3d:26:74:ba:ff:4d:34:b5:34:11: 7e:ce:19:d3:78:ab:16:e5:09:72:cc:bc:49:72:98: e3:09:2e:1e:6c:9e:ce:7c:7f:71:28:b9:d4:69:d4: 6d:28:c0:8e:c1:c7:98:a9:46:e5:be:11:fa:90:ca: c4:14:24:39:df:f6:a3:49:8c:38:d0:0a:ae:34:7c: 9f:43:bc:14:29:52:53:ad:28:1f:a8:3b:62:73:4f: f9:32:61:30:9b:63:c8:a3:e7:98:79:f0:45:fd:09: 1c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EB:7F:9B:7B:33:21:3C:08:BA:57:A8:1F:AA:B6:F6:0D:2F:5E:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e913152-1fba-499c-af37-e5935da09aca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:5040::/46 Signature Algorithm: sha256WithRSAEncryption 47:c3:1b:61:73:de:73:5f:cf:bc:de:f1:3d:cc:a5:e5:d5:c8: 6a:ee:df:eb:c5:69:7a:d5:3c:fd:57:90:50:d6:bb:d6:88:65: db:66:ba:bb:b0:ca:11:83:c5:3d:7f:08:88:2b:fb:9a:8f:f8: c0:18:48:4a:c2:d3:22:15:07:d4:17:ca:64:b5:84:5b:61:01: ca:b3:e1:a6:03:d3:6a:4e:dc:d9:0d:7e:a7:c3:aa:94:15:7e: 71:d3:cd:13:45:62:ee:1a:8b:f7:2b:c7:02:26:bc:2f:e4:7a: 83:74:cc:c2:4a:d1:65:c7:72:24:0d:46:73:91:cf:6a:1c:48: 48:7a:d6:e9:6c:dc:86:49:99:46:6b:7b:38:3f:8c:44:0f:d5: 5a:59:d6:aa:ec:ba:ad:13:f5:b4:8e:3a:f5:77:a8:10:ab:a8: 17:3d:0e:17:e3:86:9f:b4:80:5d:c7:db:12:bf:b2:0e:de:da: a5:3b:78:78:26:86:8f:a7:3e:02:de:52:82:56:12:35:fb:49: 5c:7d:2d:09:fa:6f:08:20:ae:01:11:15:d0:cf:e6:47:f4:0b: ff:42:c3:91:4d:bb:21:99:e0:ca:19:c7:b8:f0:7e:2d:fb:fd: dd:f6:8f:59:cf:77:d0:1a:86:18:09:5c:54:3a:1b:a0:63:aa: 5c:3a:de:1b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUV7lr5ScN54hitApXHvGUSDMMV+gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUyMTM3WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZGQ5ZmYyYTg1MjNiNzA2NDMzY2QyNWRhYjZjMTkzN2Q5 MzU5ZWZhNWZhY2EwZWJkNGNmMGFkN2UzODAzMzUxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC+ELOH4FF+FARatt4HgWbQ75scNMM7TqTk40JGHPZfad3 lSH2FnpmSnNkWvnxaNKOm25sqxL5hRzJIPD7vBqQl147YugaUCk17c+8lrNVrLO2 YVAdsEDsjbl/W6mfznsIlFQizD7TD+3/B5ovZzJEUqEOALeuom5KgfQBO2tLcXRS weugu7FrRHYFyE15/xd7rIUcM+Cc2rGlPSZ0uv9NNLU0EX7OGdN4qxblCXLMvEly mOMJLh5sns58f3EoudRp1G0owI7Bx5ipRuW+EfqQysQUJDnf9qNJjDjQCq40fJ9D vBQpUlOtKB+oO2JzT/kyYTCbY8ij55h58EX9CRyVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcet/m3szITwIuleoH6q29g0vXmYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzllOTEzMTUyLTFmYmEtNDk5Yy1hZjM3LWU1OTM1ZGEwOWFjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/7UEAwDQYJKoZIhvcNAQELBQADggEBAEfDG2Fz3nNfz7ze8T3MpeXV yGru3+vFaXrVPP1XkFDWu9aIZdtmuruwyhGDxT1/CIgr+5qP+MAYSErC0yIVB9QX ymS1hFthAcqz4aYD02pO3NkNfqfDqpQVfnHTzRNFYu4ai/crxwImvC/keoN0zMJK 0WXHciQNRnORz2ocSEh61uls3IZJmUZrezg/jEQP1VpZ1qrsuq0T9bSOOvV3qBCr qBc9Dhfjhp+0gF3H2xK/sg7e2qU7eHgmho+nPgLeUoJWEjX7SVx9LQn6bwggrgER FdDP5kf0C/9Cw5FNuyGZ4MoZx7jwfi37/d32j1nPd9AahhgJXFQ6G6Bjqlw63hs= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:55 2025 by rpki-client