$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa File: 09200eb5-786c-452c-91b5-6e7b43daf2f1.roa (raw, json) Hash identifier: ggWq9SSmawfVrURbzG4nCvduw6OYYbFH3q0FT7UCCOo= Subject key identifier: 69:B3:EF:D6:02:78:F6:AE:27:8B:B3:F5:8B:1D:CE:6F:0E:21:40:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07DFDFC298B870DE4EDFF60E80F62047A5AEBD1E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa Signing time: Sat 03 May 2025 00:21:15 +0000 ROA not before: Sat 03 May 2025 00:21:15 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:df:df:c2:98:b8:70:de:4e:df:f6:0e:80:f6:20:47:a5:ae:bd:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:21:15 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=83647e95f1b0d848c98ca6ea0b81648916749ed34811dec22fd837d97d1e1e21, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:2d:ce:82:a6:8d:e9:86:d9:03:ad:ad:f2: d0:4a:82:69:78:2d:96:a6:4c:e5:51:67:7e:e5:9e: 0e:39:e7:33:11:f7:6b:bf:3c:9e:d5:fc:da:8b:68: 51:0d:19:ad:45:43:cd:7b:00:65:fd:94:51:40:6b: 90:17:3e:3e:37:1f:84:66:ec:16:67:1e:35:f2:6b: bc:af:d0:c4:b6:bb:b1:c9:b4:ec:67:62:27:51:f0: 2b:04:ab:d5:8f:0b:07:83:50:20:19:b0:de:e7:3a: 65:23:b7:d6:32:54:24:98:c6:19:fa:cf:e1:0d:24: 95:24:fb:f0:04:c5:96:d2:6b:66:d4:af:6b:b4:57: f8:86:fd:98:bd:e1:86:b8:e0:f4:03:d1:ba:01:b6: 46:8d:2a:d5:73:26:39:8c:21:ea:52:32:03:b5:a9: 88:95:8b:cb:23:15:88:d8:fd:23:20:11:11:10:d4: 0a:59:c1:0f:14:15:4d:42:5e:20:2f:a2:73:a4:91: c9:8c:2a:ab:ce:75:e8:ff:5e:29:b3:14:59:0a:91: 3c:f5:d3:7c:b6:64:2c:a5:61:05:49:aa:d5:3a:37: 51:73:d1:a6:a1:00:b3:5f:18:1e:77:ba:f0:cb:f7: c4:68:5e:0d:fc:c0:f8:dc:71:8d:13:0d:5b:93:7e: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B3:EF:D6:02:78:F6:AE:27:8B:B3:F5:8B:1D:CE:6F:0E:21:40:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2e::/36 Signature Algorithm: sha256WithRSAEncryption 4a:22:d9:5a:61:63:e7:1b:27:fa:4b:20:6e:68:d5:12:48:95: 9e:a7:cf:66:13:48:53:c9:fe:c1:bd:56:0e:54:d9:ce:ad:3c: 26:cb:f8:50:ee:a4:b6:1d:f8:ba:00:2a:3d:df:54:6f:ef:78: ea:ae:b7:dc:91:f1:c9:4c:b5:21:33:d8:b0:2b:25:75:dd:c2: ef:f9:e2:78:97:26:a9:b7:f9:e8:0f:60:81:88:6d:dc:3b:d4: f5:59:3f:c7:b0:25:af:1a:2a:38:6f:2e:cc:8f:34:1d:ce:5f: 9e:5e:fd:ef:40:f0:fc:e2:e5:e8:87:9a:a6:75:0e:9f:b2:04: e5:db:63:4c:2e:56:0d:29:0d:0d:a3:79:6e:e7:3a:e2:db:49: e7:ee:fc:5f:35:6e:a1:19:34:15:f4:63:ae:99:0a:45:2c:ee: 9d:34:1d:bb:c0:83:63:6c:95:ab:2c:53:39:50:b5:09:29:7a: 28:ca:ea:5d:bf:6c:02:75:69:48:ac:19:d2:f4:07:9e:26:67: 89:8e:88:ef:b7:9c:ea:cd:9c:91:2f:b4:6e:d0:60:a0:8c:51: c3:01:d0:7c:b3:b7:51:8d:06:41:de:54:b8:ca:75:0b:bb:9f: a0:05:bc:ed:75:a0:be:89:31:ec:40:59:60:50:22:ef:59:52: 6f:2b:bc:bd -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUB9/fwpi4cN5O3/YOgPYgR6WuvR4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAyMTE1WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzY0N2U5NWYxYjBkODQ4Yzk4Y2E2ZWEwYjgxNjQ4OTE2 NzQ5ZWQzNDgxMWRlYzIyZmQ4MzdkOTdkMWUxZTIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm4y3OgqaN6YbZA62t8tBKgml4LZamTOVRZ37lng455zMR 92u/PJ7V/NqLaFENGa1FQ817AGX9lFFAa5AXPj43H4Rm7BZnHjXya7yv0MS2u7HJ tOxnYidR8CsEq9WPCweDUCAZsN7nOmUjt9YyVCSYxhn6z+ENJJUk+/AExZbSa2bU r2u0V/iG/Zi94Ya44PQD0boBtkaNKtVzJjmMIepSMgO1qYiVi8sjFYjY/SMgEREQ 1ApZwQ8UFU1CXiAvonOkkcmMKqvOdej/XimzFFkKkTz103y2ZCylYQVJqtU6N1Fz 0aahALNfGB53uvDL98RoXg38wPjccY0TDVuTfmJVAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUabPv1gJ49q4ni7P1ix3Obw4hQGMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA5MjAwZWI1LTc4NmMtNDUyYy05MWI1LTZlN2I0M2RhZjJmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8uADANBgkqhkiG9w0BAQsFAAOCAQEASiLZWmFj5xsn+ksgbmjVEkiV nqfPZhNIU8n+wb1WDlTZzq08Jsv4UO6kth34ugAqPd9Ub+946q633JHxyUy1ITPY sCsldd3C7/nieJcmqbf56A9ggYht3DvU9Vk/x7AlrxoqOG8uzI80Hc5fnl7970Dw /OLl6IeapnUOn7IE5dtjTC5WDSkNDaN5buc64ttJ5+78XzVuoRk0FfRjrpkKRSzu nTQdu8CDY2yVqyxTOVC1CSl6KMrqXb9sAnVpSKwZ0vQHniZniY6I77ec6s2ckS+0 btBgoIxRwwHQfLO3UY0GQd5UuMp1C7ufoAW87XWgvokx7EBZYFAi71lSbyu8vQ== -----END CERTIFICATE-----Generated at Mon May 5 04:01:28 2025 by rpki-client