$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d738f0c4-b45b-4ffe-a0ef-4be44cf7fee6.roa File: d738f0c4-b45b-4ffe-a0ef-4be44cf7fee6.roa (raw, json) Hash identifier: b4ngJcXJ2yHfO80J8yY/7JCwYGWL+tCOxoSe0SvDPCY= Subject key identifier: 85:AB:BF:42:3C:0E:30:06:93:EC:DB:1A:31:DB:2B:7F:07:D8:60:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72DB8FD5CCCF0722DEA5F4E9B5D2A8ED3661BC80 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d738f0c4-b45b-4ffe-a0ef-4be44cf7fee6.roa Signing time: Tue 22 Apr 2025 17:11:01 +0000 ROA not before: Tue 22 Apr 2025 17:11:01 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f29:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:db:8f:d5:cc:cf:07:22:de:a5:f4:e9:b5:d2:a8:ed:36:61:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:11:01 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=09a9f0c722a6a58818a438ff06ff841cde563862289ca8835ab24e6f38e16d9c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:70:3d:5c:90:43:90:19:3f:24:a2:3d:b3: b4:97:cb:27:d7:81:72:29:78:86:2d:c9:03:05:08: 91:34:cf:83:de:8d:f2:75:81:fe:ef:da:c7:61:a7: 4b:3b:3c:83:eb:0f:ea:d2:5f:c4:52:72:54:ad:86: 70:db:54:a1:40:e9:4f:b6:9a:06:43:52:1d:1f:73: 04:8e:a8:32:b7:13:9f:28:77:ab:55:8e:22:35:8e: a1:1a:6c:07:c1:6d:ed:16:18:c7:43:9f:05:0d:16: eb:66:e4:69:a0:d8:81:8d:4d:bc:99:a1:2e:02:8a: e1:a9:16:b2:58:ba:55:7b:7b:50:1c:c1:06:a9:99: 80:cc:b7:dd:a3:34:8b:c3:e9:71:46:83:32:8c:07: 8d:e7:5e:b0:fd:47:44:33:56:01:92:89:f8:66:0f: a1:b1:59:7a:31:f3:cb:e9:72:5c:53:4c:07:70:e9: 19:da:ce:ea:2c:6b:55:6b:9e:59:ab:7f:b0:a1:21: 2a:4f:a3:71:a0:ae:11:f3:53:04:d1:19:5b:1c:55: 4f:e3:36:aa:2f:74:9b:dc:97:0b:18:97:d8:9c:ac: 68:a9:08:03:a5:59:d6:94:24:a9:65:00:1e:86:3e: 29:e8:b4:bf:7e:77:0f:29:4c:1e:42:4d:25:cb:9b: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AB:BF:42:3C:0E:30:06:93:EC:DB:1A:31:DB:2B:7F:07:D8:60:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d738f0c4-b45b-4ffe-a0ef-4be44cf7fee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f29:4000::/37 Signature Algorithm: sha256WithRSAEncryption ce:b3:d4:e2:b0:dc:9b:40:27:13:3a:ce:c2:b3:d0:92:82:09: 8c:1c:7f:be:85:4d:f1:42:b0:99:62:4a:61:5d:ba:dd:f4:24: 6b:96:db:ab:3b:44:db:e8:9c:21:8f:7e:3c:a1:46:c5:25:80: 32:db:6c:b0:95:7f:53:ea:78:de:c9:83:dc:ef:c2:6a:6b:b0: 30:b3:5c:b4:54:c3:1b:72:8d:8c:55:33:75:7d:6b:c9:ac:00: f5:c5:c5:b8:b3:c4:74:02:36:d9:8f:94:f8:05:ca:2a:7d:0a: 31:a5:8e:01:50:9d:09:bb:33:11:4f:43:ad:b2:e6:d7:63:49: b2:5c:b5:a4:12:41:fa:32:6a:72:05:e8:fe:79:98:94:8b:59: 75:f6:76:39:cb:14:53:46:8c:f6:ad:e8:d8:bc:be:28:37:e5: 38:ce:b0:96:02:e0:02:b8:3a:98:3e:92:6a:14:f6:dd:66:b8: 50:40:b7:af:b5:87:6c:78:b1:75:3b:18:ba:c4:5c:96:41:bd: 5e:7b:30:f7:9d:13:ff:24:43:c3:97:c4:15:96:0f:10:e5:91: 30:2f:be:2e:eb:10:4c:08:ab:19:49:65:4b:c3:40:de:54:01: 9e:b4:79:90:14:a8:2f:51:d0:33:42:97:d9:6e:e4:21:10:06: 24:b1:80:02 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUctuP1czPByLepfTptdKo7TZhvIAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcxMTAxWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOWE5ZjBjNzIyYTZhNTg4MThhNDM4ZmYwNmZmODQxY2Rl NTYzODYyMjg5Y2E4ODM1YWIyNGU2ZjM4ZTE2ZDljMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVA3A9XJBDkBk/JKI9s7SXyyfXgXIpeIYtyQMFCJE0z4Pe jfJ1gf7v2sdhp0s7PIPrD+rSX8RSclSthnDbVKFA6U+2mgZDUh0fcwSOqDK3E58o d6tVjiI1jqEabAfBbe0WGMdDnwUNFutm5Gmg2IGNTbyZoS4CiuGpFrJYulV7e1Ac wQapmYDMt92jNIvD6XFGgzKMB43nXrD9R0QzVgGSifhmD6GxWXox88vpclxTTAdw 6Rnazuosa1Vrnlmrf7ChISpPo3GgrhHzUwTRGVscVU/jNqovdJvclwsYl9icrGip CAOlWdaUJKllAB6GPinotL9+dw8pTB5CTSXLmwFlAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUhau/QjwOMAaT7NsaMdsrfwfYYGMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q3MzhmMGM0LWI0NWItNGZmZS1hMGVmLTRiZTQ0Y2Y3ZmVlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8pQDANBgkqhkiG9w0BAQsFAAOCAQEAzrPU4rDcm0AnEzrOwrPQkoIJ jBx/voVN8UKwmWJKYV263fQka5bbqztE2+icIY9+PKFGxSWAMttssJV/U+p43smD 3O/CamuwMLNctFTDG3KNjFUzdX1ryawA9cXFuLPEdAI22Y+U+AXKKn0KMaWOAVCd CbszEU9DrbLm12NJsly1pBJB+jJqcgXo/nmYlItZdfZ2OcsUU0aM9q3o2Ly+KDfl OM6wlgLgArg6mD6SahT23Wa4UEC3r7WHbHixdTsYusRclkG9Xnsw950T/yRDw5fE FZYPEOWRMC++LusQTAirGUllS8NA3lQBnrR5kBSoL1HQM0KX2W7kIRAGJLGAAg== -----END CERTIFICATE-----Generated at Sat Apr 26 15:53:48 2025 by rpki-client