$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d2ebcd-72cf-4cc4-9d4f-c70b70da6d70.roa File: f0d2ebcd-72cf-4cc4-9d4f-c70b70da6d70.roa (raw, json) Hash identifier: DNzSJqZE56DP+rL5O56XQnO60NZ4NE7AP9d+YKpHGkQ= Subject key identifier: 66:A7:D6:36:B7:CA:48:6D:B0:E4:CE:77:30:33:43:EA:4D:D9:EC:6B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 491A6A0C35E7C4F84CA83AFF9AF9DBDF4B76FDB1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d2ebcd-72cf-4cc4-9d4f-c70b70da6d70.roa Signing time: Tue 22 Apr 2025 16:21:37 +0000 ROA not before: Tue 22 Apr 2025 16:21:37 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:7400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1a:6a:0c:35:e7:c4:f8:4c:a8:3a:ff:9a:f9:db:df:4b:76:fd:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:21:37 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=50f251920c323320e1f368eda54994e6db29ab9db81dd3bbc4b3128a431db007, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4e:30:d7:9b:1e:37:4d:9b:3c:3e:dc:6c:d0: b2:bd:15:19:42:cd:07:90:96:71:d4:47:9c:7b:5f: b8:61:a3:42:4c:d6:9d:d9:b2:04:d2:24:31:39:e0: e0:28:c1:20:43:41:1f:58:1e:5f:41:2f:09:6b:dc: 9b:8a:ca:1f:6d:22:35:76:e7:9f:89:e0:c1:1e:75: 2f:59:70:8e:05:f7:d3:75:aa:83:ea:58:25:25:bf: 73:b2:ed:6a:13:71:1b:24:ac:97:87:a6:bf:8b:a1: 96:cb:c6:8b:b1:11:3f:0d:c5:75:a8:91:27:bc:39: d7:69:c5:50:ff:fc:b4:6a:ef:fa:91:03:fb:6a:23: 55:6e:17:e3:4f:56:49:b1:f7:1e:f5:61:30:3f:9e: b4:b1:6b:65:7a:d2:6b:1a:eb:ae:3a:5a:54:7b:03: a1:66:cd:60:64:56:2d:e5:74:e1:a9:83:03:da:2d: 19:9c:71:2c:b6:45:ac:7b:8f:ab:97:dc:01:71:47: ba:da:84:6e:75:da:93:82:22:55:63:83:9c:be:b6: 7a:f3:e7:48:35:2b:87:ed:aa:19:bb:00:b6:83:34: ee:36:03:0e:29:aa:3d:b5:f9:2b:58:db:7a:ba:0e: 39:39:95:f6:af:e5:fd:1b:c2:b9:21:9c:73:12:50: 0d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A7:D6:36:B7:CA:48:6D:B0:E4:CE:77:30:33:43:EA:4D:D9:EC:6B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d2ebcd-72cf-4cc4-9d4f-c70b70da6d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:7400::/40 Signature Algorithm: sha256WithRSAEncryption 71:18:19:be:54:d5:ce:ba:da:75:29:81:08:6d:ae:1d:e7:23: 77:9b:25:76:da:2d:db:86:15:5d:64:14:a9:bd:cc:6e:e6:7a: c1:61:50:90:bd:01:ee:8d:5a:20:2e:45:29:b4:92:3a:67:92: 52:eb:fa:db:a4:4a:0b:60:b9:c4:6f:95:bd:76:25:a6:da:5e: dd:18:13:a8:55:50:92:bc:fa:bd:93:65:98:1d:72:4f:20:89: 8d:26:53:79:e7:ed:43:aa:8d:2b:92:c7:c7:f5:9d:eb:21:2f: fc:fd:ce:e6:da:74:55:34:d0:00:59:a7:a8:4b:70:de:ca:d0: 73:14:9f:e1:9d:18:a7:cf:65:b9:18:b7:a9:ee:9f:87:57:a5: bc:f6:44:27:98:d6:58:7c:db:51:e9:1f:79:7f:f5:dc:55:37: 01:87:07:1d:32:c7:13:ac:1e:dc:e9:63:68:be:04:5c:c5:0b: 6b:01:11:49:bc:79:95:12:ab:ee:53:ae:19:e0:1d:0e:79:87: 04:cd:f3:1a:08:a4:8e:13:63:a0:7a:59:49:1f:e4:db:a7:70: 8e:0a:11:d5:de:49:6f:94:8a:ef:92:92:4c:82:d5:52:55:49: 5f:36:45:20:97:6d:de:fa:69:bf:bd:64:4e:20:c2:d7:34:d7: 47:b1:c6:75 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSRpqDDXnxPhMqDr/mvnb30t2/bEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYyMTM3WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGYyNTE5MjBjMzIzMzIwZTFmMzY4ZWRhNTQ5OTRlNmRi MjlhYjlkYjgxZGQzYmJjNGIzMTI4YTQzMWRiMDA3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlTjDXmx43TZs8Ptxs0LK9FRlCzQeQlnHUR5x7X7hho0JM 1p3ZsgTSJDE54OAowSBDQR9YHl9BLwlr3JuKyh9tIjV255+J4MEedS9ZcI4F99N1 qoPqWCUlv3Oy7WoTcRskrJeHpr+LoZbLxouxET8NxXWokSe8OddpxVD//LRq7/qR A/tqI1VuF+NPVkmx9x71YTA/nrSxa2V60msa6646WlR7A6FmzWBkVi3ldOGpgwPa LRmccSy2Rax7j6uX3AFxR7rahG512pOCIlVjg5y+tnrz50g1K4ftqhm7ALaDNO42 Aw4pqj21+StY23q6Djk5lfav5f0bwrkhnHMSUA2bAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUZqfWNrfKSG2w5M53MDND6k3Z7GswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwZDJlYmNkLTcyY2YtNGNjNC05ZDRmLWM3MGI3MGRhNmQ3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4dDANBgkqhkiG9w0BAQsFAAOCAQEAcRgZvlTVzrradSmBCG2uHecj d5sldtot24YVXWQUqb3MbuZ6wWFQkL0B7o1aIC5FKbSSOmeSUuv626RKC2C5xG+V vXYlptpe3RgTqFVQkrz6vZNlmB1yTyCJjSZTeeftQ6qNK5LHx/Wd6yEv/P3O5tp0 VTTQAFmnqEtw3srQcxSf4Z0Yp89luRi3qe6fh1elvPZEJ5jWWHzbUekfeX/13FU3 AYcHHTLHE6we3OljaL4EXMULawERSbx5lRKr7lOuGeAdDnmHBM3zGgikjhNjoHpZ SR/k26dwjgoR1d5Jb5SK75KSTILVUlVJXzZFIJdt3vppv71kTiDC1zTXR7HGdQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:07:09 2025 by rpki-client