$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a677dc2c-8382-4694-9424-d567d3904503.roa File: a677dc2c-8382-4694-9424-d567d3904503.roa (raw, json) Hash identifier: NrgUI7A/LKNuKV7UE6XO2pDbCZXgkvObZPZTNkZllZ0= Subject key identifier: 05:A0:8F:84:24:2E:46:A9:90:73:F9:76:A7:1E:F8:FF:BE:84:75:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 59B567A68F86942527AFEFE1D00DA1AA149ED027 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a677dc2c-8382-4694-9424-d567d3904503.roa Signing time: Mon 21 Apr 2025 17:30:18 +0000 ROA not before: Mon 21 Apr 2025 17:30:18 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff2:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b5:67:a6:8f:86:94:25:27:af:ef:e1:d0:0d:a1:aa:14:9e:d0:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:30:18 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=51c243ad7987fc1cd0dc8e64d812dbcb04835cfd733bec4e80ad8a94ed208426, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e7:eb:e5:db:a6:49:0f:55:cd:fa:59:16:51: 5e:9b:aa:16:38:68:b3:e9:65:d1:a0:b6:3e:96:0f: 50:94:50:bc:6b:e7:83:70:36:b5:cd:ee:3e:a9:22: da:ee:21:cd:0c:63:d5:60:1c:8a:f6:ac:ad:1c:dd: 62:14:7d:cc:68:e7:5f:86:aa:31:a4:dd:04:b5:b6: 93:e3:28:e8:ad:35:72:d6:8b:00:11:1b:85:b6:55: 1d:1d:e7:a7:81:4c:9a:87:e3:d1:a3:f4:85:39:cc: 39:d6:10:68:0c:57:5d:52:a8:b9:11:fa:81:d2:a1: f9:a1:64:15:5f:fa:af:a5:d1:78:d7:ea:fe:e4:af: f9:18:f2:9e:07:63:07:0d:f4:14:84:48:31:aa:d5: a2:7a:58:cf:c1:7c:0a:98:47:b4:7d:e3:12:f6:06: b6:c7:86:97:16:6c:9d:fd:c6:75:be:f3:92:50:30: 37:20:64:ce:a9:c3:9a:72:9c:73:21:1f:09:42:d6: 16:ce:7b:dd:f6:5e:9d:a6:ed:f9:9e:0e:ab:13:5c: 5a:4d:a9:ec:05:07:93:68:48:97:96:04:36:a6:75: 79:5a:b1:d0:47:c1:38:5c:3f:de:b7:77:da:2b:55: 32:47:20:45:e9:8d:a6:59:98:ca:44:f6:8c:c1:02: 15:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A0:8F:84:24:2E:46:A9:90:73:F9:76:A7:1E:F8:FF:BE:84:75:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a677dc2c-8382-4694-9424-d567d3904503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 06:ee:78:e7:1d:94:e3:a0:6b:9a:b2:d9:7a:63:a3:10:d1:6a: b5:ae:43:1e:21:55:0a:c6:85:47:4b:77:78:ea:11:04:de:f1: 7f:ab:ba:55:c5:71:19:7d:be:a2:b5:af:49:ee:08:f9:79:92: aa:91:63:81:8c:6a:ed:10:d0:8c:52:9a:69:67:f5:2a:eb:94: 82:ce:8b:44:04:aa:9b:8a:df:9a:36:98:ca:2a:e6:2d:8f:60: b4:55:ee:7a:58:cf:bc:c4:6d:1b:89:35:7a:27:35:87:fe:03: 2a:9b:52:23:94:21:3f:32:1b:6d:0f:9c:80:23:b6:8d:d1:a9: 5a:64:89:fe:7d:fa:77:de:93:10:70:9b:9e:99:d9:af:b4:3e: ce:e9:74:5a:85:a9:df:1a:dd:ae:34:3f:92:76:c8:8f:bd:09: 77:93:0e:d2:02:97:9e:7a:4e:1e:9f:19:1a:72:90:70:31:c1: 82:50:60:b5:11:04:e4:3d:88:85:2b:32:ab:f3:14:39:82:3c: f7:a7:ba:e2:33:f5:ba:9f:b2:99:47:62:37:2c:b3:24:e9:63: f4:6e:95:13:f2:13:17:ea:d5:1a:69:c0:f7:7f:c3:ce:6b:7f: 9d:86:40:ea:b5:3c:6b:cb:02:ef:2f:20:b9:44:e8:5f:95:c4: 6c:81:22:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWbVnpo+GlCUnr+/h0A2hqhSe0CcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTczMDE4WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWMyNDNhZDc5ODdmYzFjZDBkYzhlNjRkODEyZGJjYjA0 ODM1Y2ZkNzMzYmVjNGU4MGFkOGE5NGVkMjA4NDI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf5+vl26ZJD1XN+lkWUV6bqhY4aLPpZdGgtj6WD1CUULxr 54NwNrXN7j6pItruIc0MY9VgHIr2rK0c3WIUfcxo51+GqjGk3QS1tpPjKOitNXLW iwARG4W2VR0d56eBTJqH49Gj9IU5zDnWEGgMV11SqLkR+oHSofmhZBVf+q+l0XjX 6v7kr/kY8p4HYwcN9BSESDGq1aJ6WM/BfAqYR7R94xL2BrbHhpcWbJ39xnW+85JQ MDcgZM6pw5pynHMhHwlC1hbOe932Xp2m7fmeDqsTXFpNqewFB5NoSJeWBDamdXla sdBHwThcP963d9orVTJHIEXpjaZZmMpE9ozBAhUZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBaCPhCQuRqmQc/l2px74/76EdSYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2NzdkYzJjLTgzODItNDY5NC05NDI0LWQ1NjdkMzkwNDUwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yIMAwDQYJKoZIhvcNAQELBQADggEBAAbueOcdlOOga5qy2XpjoxDR arWuQx4hVQrGhUdLd3jqEQTe8X+rulXFcRl9vqK1r0nuCPl5kqqRY4GMau0Q0IxS mmln9SrrlILOi0QEqpuK35o2mMoq5i2PYLRV7npYz7zEbRuJNXonNYf+AyqbUiOU IT8yG20PnIAjto3RqVpkif59+nfekxBwm56Z2a+0Ps7pdFqFqd8a3a40P5J2yI+9 CXeTDtICl556Th6fGRpykHAxwYJQYLURBOQ9iIUrMqvzFDmCPPenuuIz9bqfsplH YjcssyTpY/RulRPyExfq1RppwPd/w85rf52GQOq1PGvLAu8vILlE6F+VxGyBIrY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:21 2025 by rpki-client