$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ba2cbe3-bc8c-4566-9cf9-f5f9bfd51821.roa File: 0ba2cbe3-bc8c-4566-9cf9-f5f9bfd51821.roa (raw, json) Hash identifier: ynkvAqcN46QPKb99Zb8pG0ogmJMCbNR7wHYjus++7H4= Subject key identifier: C6:EB:2A:4F:47:3E:18:B5:F4:93:79:2F:7F:CE:01:AA:CF:D4:5B:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45536B6CF47A3145264AE7F44EEE86A07802FAC3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ba2cbe3-bc8c-4566-9cf9-f5f9bfd51821.roa Signing time: Mon 28 Apr 2025 15:22:03 +0000 ROA not before: Mon 28 Apr 2025 15:22:03 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fef:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:53:6b:6c:f4:7a:31:45:26:4a:e7:f4:4e:ee:86:a0:78:02:fa:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 15:22:03 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=4c80612f0cefb20be56f64a40a0ede861e1dacf98233ed483ceae85dbce8f7e9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f6:23:81:22:85:5c:05:a0:2f:65:12:a9:75: 91:e9:ac:85:a0:e8:c5:e8:47:82:de:70:87:87:81: 4d:2f:d1:57:2f:91:5e:b9:f7:20:3d:b8:4f:58:b3: 06:db:2a:66:ad:75:78:e9:76:ec:18:b9:83:6e:cd: 1e:08:41:12:ca:82:54:94:2b:31:8a:db:ca:38:20: a6:25:5a:77:82:92:d3:36:2d:6d:fa:ec:a1:07:94: 76:6f:18:da:a3:0e:67:e8:d2:4f:19:7e:32:36:04: 2d:07:12:ad:dc:b8:73:92:ff:2d:b4:95:4d:43:84: a3:26:2a:af:de:c1:b2:07:fc:a4:4f:f0:69:19:7a: a8:47:13:05:55:9a:b3:b8:e0:f3:3c:82:b0:cc:38: ed:18:6a:d3:fb:ed:ba:d9:7b:38:90:a0:d8:da:a2: fd:f2:1e:29:d4:42:38:87:19:b0:7f:0d:7f:bf:88: ed:1a:f6:89:76:cc:83:49:18:69:bb:a7:db:f0:cb: ef:c5:10:91:68:76:b7:60:2f:4e:f8:ba:18:42:c0: 31:b9:69:3b:86:f8:76:83:1e:f5:44:a6:80:0c:b9: 00:b1:f4:31:4c:4a:3a:ef:ec:39:58:55:68:7d:92: 65:cf:7b:79:7a:b3:bd:3a:8a:6a:64:3f:cd:5b:d1: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EB:2A:4F:47:3E:18:B5:F4:93:79:2F:7F:CE:01:AA:CF:D4:5B:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ba2cbe3-bc8c-4566-9cf9-f5f9bfd51821.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:1000::/40 Signature Algorithm: sha256WithRSAEncryption d3:dc:c8:6b:25:7c:21:31:3f:39:64:d7:fa:04:62:58:87:2d: 0c:f1:9c:3c:e5:81:7c:85:c7:37:0f:b7:17:04:24:7c:49:d1: fd:23:6c:7a:d3:a6:18:35:bb:95:bc:d5:1e:6e:90:71:92:ad: 59:57:80:e7:2f:fb:95:bb:78:d4:80:cf:6e:66:d1:6d:f1:a5: 2b:12:be:b9:32:5f:94:d0:29:db:0f:49:04:f4:34:a2:fe:55: 38:77:fc:2f:bf:8a:96:6a:a4:a6:60:c2:90:1d:f7:73:c5:e0: 66:bf:08:b1:78:52:7e:4b:ae:49:6c:83:ee:9e:35:71:aa:bb: 8d:ad:d2:f6:e1:2f:08:51:77:ae:2a:80:13:88:cc:79:42:45: 3d:45:fc:d8:1c:a1:4e:15:59:48:dd:44:32:71:03:9c:7d:bc: 26:23:28:a8:55:5f:c6:b2:b8:b8:78:1c:39:fe:47:2b:0e:39: a4:30:09:d4:5a:72:6c:7e:e0:2e:be:4d:9a:c4:f5:bf:a5:16: 55:40:63:ee:fe:9e:23:fc:d9:a0:e5:a2:6f:04:0d:85:37:43: 15:cb:c1:ef:a4:b2:63:f2:1e:68:97:43:7b:1d:26:ed:e5:34: a2:8a:2e:3f:3c:79:a1:2a:c5:f9:b1:7f:97:3d:bd:ea:b5:9c: 97:02:6c:f7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURVNrbPR6MUUmSuf0Tu6GoHgC+sMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI4MTUyMjAzWhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzgwNjEyZjBjZWZiMjBiZTU2ZjY0YTQwYTBlZGU4NjFl MWRhY2Y5ODIzM2VkNDgzY2VhZTg1ZGJjZThmN2U5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC39iOBIoVcBaAvZRKpdZHprIWg6MXoR4LecIeHgU0v0Vcv kV659yA9uE9YswbbKmatdXjpduwYuYNuzR4IQRLKglSUKzGK28o4IKYlWneCktM2 LW367KEHlHZvGNqjDmfo0k8ZfjI2BC0HEq3cuHOS/y20lU1DhKMmKq/ewbIH/KRP 8GkZeqhHEwVVmrO44PM8grDMOO0YatP77brZeziQoNjaov3yHinUQjiHGbB/DX+/ iO0a9ol2zINJGGm7p9vwy+/FEJFodrdgL074uhhCwDG5aTuG+HaDHvVEpoAMuQCx 9DFMSjrv7DlYVWh9kmXPe3l6s706impkP81b0avDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUxusqT0c+GLX0k3kvf84Bqs/UWw0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBiYTJjYmUzLWJjOGMtNDU2Ni05Y2Y5LWY1ZjliZmQ1MTgyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vEDANBgkqhkiG9w0BAQsFAAOCAQEA09zIayV8ITE/OWTX+gRiWIct DPGcPOWBfIXHNw+3FwQkfEnR/SNsetOmGDW7lbzVHm6QcZKtWVeA5y/7lbt41IDP bmbRbfGlKxK+uTJflNAp2w9JBPQ0ov5VOHf8L7+KlmqkpmDCkB33c8XgZr8IsXhS fkuuSWyD7p41caq7ja3S9uEvCFF3riqAE4jMeUJFPUX82ByhThVZSN1EMnEDnH28 JiMoqFVfxrK4uHgcOf5HKw45pDAJ1FpybH7gLr5NmsT1v6UWVUBj7v6eI/zZoOWi bwQNhTdDFcvB76SyY/IeaJdDex0m7eU0ooouPzx5oSrF+bF/lz296rWclwJs9w== -----END CERTIFICATE-----Generated at Mon May 5 10:17:01 2025 by rpki-client