$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1792b0fe-6ab1-4af8-85fb-db70dc085b32.roa File: 1792b0fe-6ab1-4af8-85fb-db70dc085b32.roa (raw, json) Hash identifier: Zk01I71nmCL3hrdyY4s1ZBFhZ4CwChMdJnTsKERT8DA= Subject key identifier: F6:17:4D:29:77:CB:45:CB:96:A6:1D:D7:59:0A:FE:0B:E4:8E:CA:31 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3CE2012472378436FF4F971031D4193C0E1989B6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1792b0fe-6ab1-4af8-85fb-db70dc085b32.roa Signing time: Sat 03 May 2025 00:20:27 +0000 ROA not before: Sat 03 May 2025 00:20:27 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffe:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e2:01:24:72:37:84:36:ff:4f:97:10:31:d4:19:3c:0e:19:89:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:20:27 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=67cbf77d4f0e46bbc873b29513f4ee28af812d815e0e6ee848a8e3541d1ca57b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:87:65:33:1a:8d:44:84:5a:d3:a8:cf:7f: 1c:fb:ea:e4:2a:3f:b6:8b:19:f9:26:cb:32:34:0d: 2d:a6:49:fa:3a:3b:fd:44:d2:22:67:82:46:aa:9f: 7f:c6:51:0c:dc:f8:f8:5e:60:4b:9d:46:f2:01:d0: ef:7d:0a:59:5f:e2:d4:08:3b:ff:b8:1d:b1:65:6a: 90:72:5a:71:e7:7d:e7:2e:c9:21:a3:56:ce:84:1c: 37:ea:74:e8:c0:1b:91:0e:66:6a:88:08:47:84:ea: 9d:89:24:73:b0:e9:a4:8b:02:f3:a4:1b:64:83:a5: a5:ab:61:ab:ab:be:19:26:70:cf:d0:d9:ff:ba:4c: 0f:b2:c9:83:08:cb:d1:a5:f5:02:d3:59:e9:19:bf: ef:2f:21:56:2e:d0:34:2a:4e:66:b8:23:35:65:f1: e7:12:97:dc:a2:3b:c2:02:f6:c3:0d:a7:ec:35:13: 18:23:a0:9c:d5:4a:a6:dc:2e:62:a7:b4:7a:48:ca: 28:4f:b4:85:f1:d4:b8:96:f7:c6:50:30:71:ca:95: 4c:8e:73:f8:5c:2c:4f:9e:5f:82:ec:ae:7d:de:22: 9e:e3:d4:38:7d:f8:49:1c:8e:a6:35:53:b3:fe:70: f0:3a:68:3d:5e:36:9b:8e:ba:25:e9:b5:35:b8:a0: 25:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:17:4D:29:77:CB:45:CB:96:A6:1D:D7:59:0A:FE:0B:E4:8E:CA:31 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1792b0fe-6ab1-4af8-85fb-db70dc085b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffe:8000::/39 Signature Algorithm: sha256WithRSAEncryption 57:73:87:4a:ef:dc:ad:dc:31:f8:df:f9:88:45:09:62:e4:d3: 99:67:9a:ed:5c:ea:ae:4d:30:78:bf:0d:ff:d2:94:d1:3f:01: ec:02:22:0e:1c:40:0e:69:cb:f2:c5:bb:4b:cb:57:1d:28:a9: 49:7d:18:05:33:85:76:f3:5b:d9:ae:21:30:9a:2a:f9:3f:7c: f2:1e:15:e4:a7:53:e8:ac:b4:c3:3b:52:c6:94:70:f7:b9:fd: cf:5b:67:b4:3b:32:a8:1d:9e:f6:10:1f:60:30:fb:05:ec:97: 0f:51:39:5e:f3:e7:2b:45:d2:98:17:ca:19:47:e9:c8:35:bd: a3:01:1e:ef:96:03:1e:58:28:11:c5:16:89:20:6b:a6:20:13: 26:8c:70:94:ce:ed:fd:68:b2:28:d1:d0:8f:f9:ea:47:d2:08: 68:22:04:0e:b6:d1:8c:b2:1f:fa:cf:f3:b6:fd:91:e8:47:00: e0:81:a1:fa:56:b5:e1:f9:01:d1:75:52:39:14:8d:c2:46:c8: 65:e9:1a:79:aa:b6:9b:f5:85:0f:eb:b6:5c:dd:81:f9:0e:e8: 95:b9:90:8a:5d:ad:cb:94:68:c4:c5:4f:eb:da:1b:2c:8f:2b: 9b:26:51:17:ae:3c:d5:5e:f2:ee:2f:bc:1f:3a:62:87:2b:a3: d0:b4:bd:12 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPOIBJHI3hDb/T5cQMdQZPA4ZibYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAyMDI3WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2N2NiZjc3ZDRmMGU0NmJiYzg3M2IyOTUxM2Y0ZWUyOGFm ODEyZDgxNWUwZTZlZTg0OGE4ZTM1NDFkMWNhNTdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDeodlMxqNRIRa06jPfxz76uQqP7aLGfkmyzI0DS2mSfo6 O/1E0iJngkaqn3/GUQzc+PheYEudRvIB0O99Cllf4tQIO/+4HbFlapByWnHnfecu ySGjVs6EHDfqdOjAG5EOZmqICEeE6p2JJHOw6aSLAvOkG2SDpaWrYaurvhkmcM/Q 2f+6TA+yyYMIy9Gl9QLTWekZv+8vIVYu0DQqTma4IzVl8ecSl9yiO8IC9sMNp+w1 ExgjoJzVSqbcLmKntHpIyihPtIXx1LiW98ZQMHHKlUyOc/hcLE+eX4Lsrn3eIp7j 1Dh9+EkcjqY1U7P+cPA6aD1eNpuOuiXptTW4oCXpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9hdNKXfLRcuWph3XWQr+C+SOyjEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3OTJiMGZlLTZhYjEtNGFmOC04NWZiLWRiNzBkYzA4NWIzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/+gDANBgkqhkiG9w0BAQsFAAOCAQEAV3OHSu/crdwx+N/5iEUJYuTT mWea7Vzqrk0weL8N/9KU0T8B7AIiDhxADmnL8sW7S8tXHSipSX0YBTOFdvNb2a4h MJoq+T988h4V5KdT6Ky0wztSxpRw97n9z1tntDsyqB2e9hAfYDD7BeyXD1E5XvPn K0XSmBfKGUfpyDW9owEe75YDHlgoEcUWiSBrpiATJoxwlM7t/WiyKNHQj/nqR9II aCIEDrbRjLIf+s/ztv2R6EcA4IGh+la14fkB0XVSORSNwkbIZekaeaq2m/WFD+u2 XN2B+Q7olbmQil2ty5RoxMVP69obLI8rmyZRF6481V7y7i+8Hzpihyuj0LS9Eg== -----END CERTIFICATE-----Generated at Mon May 5 23:52:37 2025 by rpki-client