$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5fd6209-a767-4678-b95f-63d8c4da33aa.roa File: f5fd6209-a767-4678-b95f-63d8c4da33aa.roa (raw, json) Hash identifier: OQucA8VT7aI/tTFvuvw60Grxo6lt50OHHLazgAL/FqY= Subject key identifier: 27:8D:F9:D9:47:27:C7:8B:A1:24:7C:EE:ED:4A:C0:62:A1:7A:58:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3DDD847415AF5E87191B67BC993EFF710D2025DC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5fd6209-a767-4678-b95f-63d8c4da33aa.roa Signing time: Tue 22 Apr 2025 15:41:19 +0000 ROA not before: Tue 22 Apr 2025 15:41:19 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ffb:2040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:dd:84:74:15:af:5e:87:19:1b:67:bc:99:3e:ff:71:0d:20:25:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:41:19 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=7beea37ba7dee68139644f9f8bdc57f5d5ef2c88d99a795a4e3f07c2ace3c6d3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:4b:cf:bf:50:0e:14:a3:10:74:33:66:d2: 6a:67:40:cf:48:38:1e:0d:62:6a:7e:24:57:34:00: 88:14:9d:22:a7:c6:23:cc:72:ea:0c:96:20:e2:9a: 2f:a4:7b:ae:28:e8:11:81:39:6d:2a:bc:39:89:30: 53:0f:a8:7c:fb:7c:d8:7c:85:ff:b8:30:7e:e8:b9: df:5b:cb:c0:6c:40:f6:98:1a:f5:6e:a6:18:54:b0: b9:1f:16:a3:e4:33:b4:ad:11:f6:a0:39:83:0b:8f: ae:65:60:b5:d1:34:f3:f9:4d:ca:48:6c:4c:65:e7: e6:ec:f6:b2:57:70:a9:6d:b4:fe:6f:d3:10:31:1b: 58:3a:80:0d:7e:e1:bb:ad:39:81:c2:c0:a1:eb:a7: 85:a6:7d:71:61:7f:e8:ff:09:c2:79:29:1a:5d:9c: 09:c2:51:27:28:bf:9d:e4:ff:c1:93:04:a3:50:e2: 3f:6d:aa:f8:e8:b8:20:18:df:e8:c4:b6:5f:05:f5: 15:cb:12:b4:f2:c2:b5:b4:b5:a4:c6:bc:a2:11:1e: 3b:57:d5:8b:e7:fa:af:5d:e7:0c:c8:f6:38:4b:00: 8d:19:37:74:84:70:07:4a:12:83:13:6d:af:c2:f3: 2f:94:e9:bb:44:ce:d8:ed:a5:c9:51:2c:05:8c:ad: 96:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8D:F9:D9:47:27:C7:8B:A1:24:7C:EE:ED:4A:C0:62:A1:7A:58:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5fd6209-a767-4678-b95f-63d8c4da33aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:2040::/46 Signature Algorithm: sha256WithRSAEncryption 6c:59:4c:06:65:bb:f4:c0:c6:6c:4b:e6:3c:cc:22:33:e9:e7: 9d:ea:c5:78:28:30:3f:10:e4:d8:c6:9b:2a:6d:66:b0:0f:93: f6:6a:4c:2c:13:b4:75:ab:d6:6e:c0:77:5c:f2:22:26:4e:90: 1d:8b:6a:d2:00:fd:3e:3f:91:73:c4:3d:1c:c7:d6:2e:fd:17: 8f:b3:23:c7:14:06:fb:ec:da:61:bf:b6:b7:ec:e4:c9:88:d1: 37:1c:80:0b:00:d9:44:31:cc:38:31:0f:6f:22:3c:57:7f:f1: 7e:a1:f8:3e:3a:01:d3:91:28:27:a5:2f:60:28:77:81:f9:90: 5d:f9:cf:45:d0:c1:2a:4a:11:fc:b5:e7:14:eb:95:49:5c:59: 49:ee:a2:a2:5a:d3:93:f6:1e:cb:46:53:84:38:ec:9c:e0:db: 69:cc:19:c1:73:63:45:b8:e0:d9:41:ec:eb:f1:da:d5:52:67: 24:72:33:98:fa:3a:4b:f1:15:4e:e9:72:cb:75:77:83:9f:9a: 5f:99:38:4d:79:35:b8:b9:97:e9:f8:53:4f:de:68:9f:2c:3f: 2b:98:27:14:95:be:4b:e1:0b:f9:fa:33:65:89:aa:43:dd:fe: 3f:2c:aa:28:f8:c2:90:fe:44:10:77:07:15:53:55:20:35:6a: c1:17:87:fa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPd2EdBWvXocZG2e8mT7/cQ0gJdwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTU0MTE5WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YmVlYTM3YmE3ZGVlNjgxMzk2NDRmOWY4YmRjNTdmNWQ1 ZWYyYzg4ZDk5YTc5NWE0ZTNmMDdjMmFjZTNjNmQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnN0vPv1AOFKMQdDNm0mpnQM9IOB4NYmp+JFc0AIgUnSKn xiPMcuoMliDimi+ke64o6BGBOW0qvDmJMFMPqHz7fNh8hf+4MH7oud9by8BsQPaY GvVuphhUsLkfFqPkM7StEfagOYMLj65lYLXRNPP5TcpIbExl5+bs9rJXcKlttP5v 0xAxG1g6gA1+4butOYHCwKHrp4WmfXFhf+j/CcJ5KRpdnAnCUScov53k/8GTBKNQ 4j9tqvjouCAY3+jEtl8F9RXLErTywrW0taTGvKIRHjtX1Yvn+q9d5wzI9jhLAI0Z N3SEcAdKEoMTba/C8y+U6btEztjtpclRLAWMrZbbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJ4352Ucnx4uhJHzu7UrAYqF6WCMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y1ZmQ2MjA5LWE3NjctNDY3OC1iOTVmLTYzZDhjNGRhMzNhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/7IEAwDQYJKoZIhvcNAQELBQADggEBAGxZTAZlu/TAxmxL5jzMIjPp 553qxXgoMD8Q5NjGmyptZrAPk/ZqTCwTtHWr1m7Ad1zyIiZOkB2LatIA/T4/kXPE PRzH1i79F4+zI8cUBvvs2mG/trfs5MmI0TccgAsA2UQxzDgxD28iPFd/8X6h+D46 AdORKCelL2Aod4H5kF35z0XQwSpKEfy15xTrlUlcWUnuoqJa05P2HstGU4Q47Jzg 22nMGcFzY0W44NlB7Ovx2tVSZyRyM5j6OkvxFU7pcst1d4Ofml+ZOE15Nbi5l+n4 U0/eaJ8sPyuYJxSVvkvhC/n6M2WJqkPd/j8sqij4wpD+RBB3BxVTVSA1asEXh/o= -----END CERTIFICATE-----Generated at Sat Apr 26 16:37:39 2025 by rpki-client