$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea9c6a85-f01c-4fe9-a868-b17c9f055ae8.roa File: ea9c6a85-f01c-4fe9-a868-b17c9f055ae8.roa (raw, json) Hash identifier: CRsl+op6jYdPx/rcnJAnQSwxKvCNOxnw+s5Y7gEgjH8= Subject key identifier: DF:46:37:4D:0E:35:AA:70:67:1F:89:59:0C:95:F0:DD:97:B2:CB:09 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E1A5B8A0B13B7E469218DAF3B5253AEE5D25B10 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea9c6a85-f01c-4fe9-a868-b17c9f055ae8.roa Signing time: Tue 22 Apr 2025 17:31:31 +0000 ROA not before: Tue 22 Apr 2025 17:31:31 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f18:4000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1a:5b:8a:0b:13:b7:e4:69:21:8d:af:3b:52:53:ae:e5:d2:5b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:31:31 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=66a7eeabdbd8ddad9161e5dd1b7e89b967a21ac549088e20bfe2e691ecbfe183, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:28:0a:ba:3a:6b:9f:21:07:a5:0d:8c:d8:53: 0b:35:4f:c6:23:3c:1f:93:c6:c3:c0:b4:2e:29:26: 49:9f:a8:9b:ef:3c:e2:03:02:01:c9:8b:b6:94:b9: c0:ec:65:7e:a4:48:44:56:04:fa:12:bf:04:a2:62: 1c:95:46:b4:56:93:bc:db:e4:9d:2b:cd:15:57:44: 9d:f5:a5:72:1b:be:d3:29:78:3e:78:61:c2:87:5f: b7:72:1a:42:22:4f:30:58:4f:c4:10:af:48:3e:b1: 03:bd:d1:34:35:ff:c1:2a:fb:8a:ca:13:1e:ad:28: 8e:21:5a:e1:3b:45:4c:6b:24:ac:38:3f:11:e0:ff: b1:7b:3f:1c:36:be:c0:af:aa:a5:d9:04:66:23:5a: 4c:1d:9d:0a:29:89:b8:a7:2a:c3:c9:c4:e9:46:08: 10:d2:7b:58:8f:8e:2c:7c:97:73:13:6e:77:13:99: 80:88:1d:d1:97:12:b7:1e:4c:bb:90:1f:7f:f5:16: 55:31:20:f9:d1:40:89:4b:f8:e3:0a:a0:be:25:48: 9d:83:30:79:e5:33:83:d4:28:81:ed:85:37:66:0c: 51:af:e9:00:8b:7c:71:2f:9b:2f:d3:dd:a0:21:53: 80:16:52:ad:ea:b9:cc:23:b8:f1:6e:11:88:1c:2c: 32:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:46:37:4D:0E:35:AA:70:67:1F:89:59:0C:95:F0:DD:97:B2:CB:09 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea9c6a85-f01c-4fe9-a868-b17c9f055ae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f18:4000::/35 Signature Algorithm: sha256WithRSAEncryption 2e:13:a5:a6:28:61:26:c1:cf:55:2e:c0:38:0d:ab:2a:02:fd: 26:34:f5:7b:f2:2d:e6:f6:2e:47:b9:cb:0f:40:55:d6:0d:1e: af:72:fe:54:69:49:48:34:c9:3d:9a:25:38:85:f8:d2:46:a4: 76:44:2a:53:16:e7:d4:55:e5:98:89:4b:91:c8:b2:fd:47:96: bb:4c:02:d1:a4:ca:c8:bb:99:91:b1:13:ec:ef:f6:90:6c:c1: b7:5e:11:da:0c:09:90:5c:bd:49:d6:2b:8a:05:e9:56:04:20: 85:6a:72:bd:a3:66:5a:22:96:59:19:a7:af:3a:cf:5b:fe:44: cd:2f:c2:97:5c:6e:f5:fb:b6:44:13:5c:31:a1:b5:3f:d0:b0: 3f:af:42:ba:df:08:0b:a7:73:34:75:1b:7b:07:d9:ac:9e:26: 5d:fd:db:34:4f:04:bd:b0:c9:c5:40:19:a4:cb:e6:8a:87:55: 23:2e:5a:ab:9b:ae:eb:fa:cd:40:4a:59:37:f9:88:91:7e:2a: 5d:1b:40:d1:e9:a4:1e:98:3b:9b:74:b9:62:36:58:00:e4:a4: ca:54:bd:82:29:94:27:c3:cf:22:20:43:cf:da:a1:f2:40:7e: 70:37:e2:9b:8c:be:bb:3f:01:22:95:3e:ac:14:5f:8f:e4:5a: b1:18:2b:da -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULhpbigsTt+RpIY2vO1JTruXSWxAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTczMTMxWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmE3ZWVhYmRiZDhkZGFkOTE2MWU1ZGQxYjdlODliOTY3 YTIxYWM1NDkwODhlMjBiZmUyZTY5MWVjYmZlMTgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXKAq6OmufIQelDYzYUws1T8YjPB+TxsPAtC4pJkmfqJvv POIDAgHJi7aUucDsZX6kSERWBPoSvwSiYhyVRrRWk7zb5J0rzRVXRJ31pXIbvtMp eD54YcKHX7dyGkIiTzBYT8QQr0g+sQO90TQ1/8Eq+4rKEx6tKI4hWuE7RUxrJKw4 PxHg/7F7Pxw2vsCvqqXZBGYjWkwdnQopibinKsPJxOlGCBDSe1iPjix8l3MTbncT mYCIHdGXErceTLuQH3/1FlUxIPnRQIlL+OMKoL4lSJ2DMHnlM4PUKIHthTdmDFGv 6QCLfHEvmy/T3aAhU4AWUq3qucwjuPFuEYgcLDJ/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU30Y3TQ41qnBnH4lZDJXw3ZeyywkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VhOWM2YTg1LWYwMWMtNGZlOS1hODY4LWIxN2M5ZjA1NWFlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgUmAB8YQDANBgkqhkiG9w0BAQsFAAOCAQEALhOlpihhJsHPVS7AOA2rKgL9 JjT1e/It5vYuR7nLD0BV1g0er3L+VGlJSDTJPZolOIX40kakdkQqUxbn1FXlmIlL kciy/UeWu0wC0aTKyLuZkbET7O/2kGzBt14R2gwJkFy9SdYrigXpVgQghWpyvaNm WiKWWRmnrzrPW/5EzS/Cl1xu9fu2RBNcMaG1P9CwP69Cut8IC6dzNHUbewfZrJ4m Xf3bNE8EvbDJxUAZpMvmiodVIy5aq5uu6/rNQEpZN/mIkX4qXRtA0emkHpg7m3S5 YjZYAOSkylS9gimUJ8PPIiBDz9qh8kB+cDfim4y+uz8BIpU+rBRfj+RasRgr2g== -----END CERTIFICATE-----Generated at Sat Apr 26 17:42:08 2025 by rpki-client