$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90f2e0fa-942a-4974-8bc7-c6bdfcdcaa41.roa File: 90f2e0fa-942a-4974-8bc7-c6bdfcdcaa41.roa (raw, json) Hash identifier: PezXywPQgyjB7RGPFuuPRdc32aI8uPRpIhCUluVxnQ4= Subject key identifier: 5D:CB:7C:BE:36:07:99:6E:F1:4E:B1:94:D4:CF:9D:15:64:A5:C6:78 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 041DC65C0C1D80E490B5C8D159518E2A56D4BAD9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90f2e0fa-942a-4974-8bc7-c6bdfcdcaa41.roa Signing time: Tue 22 Apr 2025 15:30:42 +0000 ROA not before: Tue 22 Apr 2025 15:30:42 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:a440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1d:c6:5c:0c:1d:80:e4:90:b5:c8:d1:59:51:8e:2a:56:d4:ba:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:30:42 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=396beb38fa4fa48d3ffe011c7934ce0205722ac3ca883e34bbfa86cf11e821c9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:30:48:bd:82:02:e4:6f:96:ba:87:71:2a: ed:7d:91:fb:8c:9d:ed:a6:ec:bb:31:07:b1:50:55: 57:8d:1e:07:02:77:ae:23:fe:e1:4e:f6:5b:48:ff: 11:93:17:0a:e2:a3:ae:b7:58:b0:9e:1f:e3:46:15: 18:f6:1d:ee:0e:0e:34:95:04:04:04:3c:6c:09:d5: 72:71:0f:4e:d7:09:9e:ba:b1:95:2e:80:23:84:9f: 49:0e:b8:5f:21:31:e5:e8:4a:63:4f:78:8f:4f:6c: c2:d5:54:68:98:26:a5:89:d8:c2:ac:26:c9:75:2b: 0a:74:7f:c1:8a:3a:f6:78:9f:a0:d8:5a:64:1d:02: 27:dc:ca:1a:45:33:f5:25:cb:5a:1d:bb:ed:2e:4f: f6:30:11:12:af:67:52:cc:0c:de:3b:7f:c1:1e:1c: 27:52:b4:79:60:1c:44:a8:80:17:dc:73:cc:75:96: 9b:90:ad:97:7d:4d:a1:f8:55:ce:a0:c5:e1:f0:c2: 01:86:79:2f:3a:93:68:43:ae:e9:e7:d0:55:df:a0: c3:84:52:b2:b5:b1:4a:6d:a8:b5:b8:98:cb:31:5d: ad:1f:82:b3:22:6a:db:42:fd:d2:d5:b3:d0:27:d6: 49:e3:57:b1:b0:38:90:0d:c5:27:34:60:a2:99:5d: 5f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CB:7C:BE:36:07:99:6E:F1:4E:B1:94:D4:CF:9D:15:64:A5:C6:78 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90f2e0fa-942a-4974-8bc7-c6bdfcdcaa41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:a440::/48 Signature Algorithm: sha256WithRSAEncryption 0d:48:19:0d:a2:76:e6:ba:fe:3a:71:9c:d1:31:b2:f7:3f:88: 33:c1:ff:36:1e:42:c4:0a:2b:f9:3b:e3:25:6f:17:4c:8b:9d: ce:95:2d:48:a8:23:29:86:57:80:b1:39:92:9b:e1:32:03:73: ea:3e:a5:c7:14:97:31:1c:24:00:ae:bf:d5:77:de:9a:73:4f: 74:c7:f5:35:13:03:77:70:09:41:8f:03:c3:e3:1c:be:7c:40: c8:23:a4:a1:10:97:02:8b:a1:cd:b4:a5:bb:a8:14:9e:b4:b3: ab:35:a6:cd:82:cd:79:b1:1d:b0:05:ec:db:85:1c:f4:5b:23: c9:c1:3c:df:3b:39:d7:3f:91:6f:3d:ba:4d:c7:64:52:4f:6d: f1:c0:e8:f1:87:d1:f7:4a:4f:95:f3:6e:f7:d4:ce:19:6c:d1: e6:7e:50:e3:cc:27:68:55:b5:98:24:ea:0e:b3:31:c5:62:ba: ed:fe:a3:d8:4f:cc:3f:4d:47:81:04:6e:d9:14:74:ef:27:f3: 50:c9:86:ec:4c:13:fe:c4:df:e8:65:43:fa:1b:3e:00:5b:28: 5c:74:b1:b3:44:7b:81:93:2a:4c:b3:18:da:98:18:83:10:f4: e4:48:2b:72:9e:79:52:4f:34:81:6f:e8:3a:31:b3:00:67:b6: 62:b4:7c:0d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBB3GXAwdgOSQtcjRWVGOKlbUutkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUzMDQyWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTZiZWIzOGZhNGZhNDhkM2ZmZTAxMWM3OTM0Y2UwMjA1 NzIyYWMzY2E4ODNlMzRiYmZhODZjZjExZTgyMWM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC41zBIvYIC5G+WuodxKu19kfuMne2m7LsxB7FQVVeNHgcC d64j/uFO9ltI/xGTFwrio663WLCeH+NGFRj2He4ODjSVBAQEPGwJ1XJxD07XCZ66 sZUugCOEn0kOuF8hMeXoSmNPeI9PbMLVVGiYJqWJ2MKsJsl1Kwp0f8GKOvZ4n6DY WmQdAifcyhpFM/Uly1odu+0uT/YwERKvZ1LMDN47f8EeHCdStHlgHESogBfcc8x1 lpuQrZd9TaH4Vc6gxeHwwgGGeS86k2hDrunn0FXfoMOEUrK1sUptqLW4mMsxXa0f grMiattC/dLVs9An1knjV7GwOJANxSc0YKKZXV/dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXct8vjYHmW7xTrGU1M+dFWSlxngwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwZjJlMGZhLTk0MmEtNDk3NC04YmM3LWM2YmRmY2RjYWE0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8ApEAwDQYJKoZIhvcNAQELBQADggEBAA1IGQ2idua6/jpxnNExsvc/ iDPB/zYeQsQKK/k74yVvF0yLnc6VLUioIymGV4CxOZKb4TIDc+o+pccUlzEcJACu v9V33ppzT3TH9TUTA3dwCUGPA8PjHL58QMgjpKEQlwKLoc20pbuoFJ60s6s1ps2C zXmxHbAF7NuFHPRbI8nBPN87Odc/kW89uk3HZFJPbfHA6PGH0fdKT5XzbvfUzhls 0eZ+UOPMJ2hVtZgk6g6zMcViuu3+o9hPzD9NR4EEbtkUdO8n81DJhuxME/7E3+hl Q/obPgBbKFx0sbNEe4GTKkyzGNqYGIMQ9ORIK3KeeVJPNIFv6DoxswBntmK0fA0= -----END CERTIFICATE-----Generated at Sat May 10 10:35:09 2025 by rpki-client