$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af984960-fb9e-452a-9faf-e307203c1b94.roa File: af984960-fb9e-452a-9faf-e307203c1b94.roa (raw, json) Hash identifier: 2kjLDcd3+Px6IaGg8yYG7UWNbCT3ag2OEtla1K/S6cg= Subject key identifier: 7F:B3:85:30:D7:49:9F:5F:F5:9B:7F:54:FA:B9:2C:AD:58:C3:5E:EF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E12AF46FB81ED1BD32455001700863803305BE6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af984960-fb9e-452a-9faf-e307203c1b94.roa Signing time: Sat 10 May 2025 00:10:21 +0000 ROA not before: Sat 10 May 2025 00:10:21 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f32:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:12:af:46:fb:81:ed:1b:d3:24:55:00:17:00:86:38:03:30:5b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:10:21 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=ec826f28a5f68f1611b1276b8b3f4d38d9c3dcaa58caa826f02fe38884e631ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:32:d2:29:2d:78:66:c3:f7:a2:1c:1d:60: 20:b8:f5:29:cf:08:bb:ec:99:76:53:02:48:d2:d1: e2:93:df:61:eb:f9:97:6f:9f:0a:ed:73:ab:74:38: 1f:53:ed:ed:32:50:cb:34:09:de:6d:47:f0:65:6b: f9:ca:99:68:b8:da:68:5a:8d:87:e0:7e:4e:b7:66: c7:95:8b:f6:4c:65:08:26:25:5e:fe:c3:cc:de:98: ef:f4:fc:7f:26:8d:74:52:96:c0:19:88:e1:5e:36: 5d:b7:13:26:af:0a:67:11:48:8b:2c:b5:dc:79:16: 5d:52:08:ec:32:90:d4:4c:7a:d8:86:e4:e0:c7:e7: 84:e6:c7:1f:85:ec:39:f0:3e:e2:a0:74:1b:e4:0d: 2f:36:ee:9e:92:40:a5:99:d8:78:2e:48:e4:ef:df: 43:37:dd:2c:07:2b:32:b3:87:bb:1b:c3:48:4e:b2: d3:76:a1:d0:b6:cd:f8:e2:06:46:0c:40:20:10:c6: 68:3c:34:75:de:06:69:4a:83:ae:2a:2f:51:30:05: 9e:73:0c:3a:a3:bd:d8:20:8f:f0:56:ea:3a:69:ff: f0:7c:34:a7:7b:bc:7f:20:68:f7:83:29:03:14:22: 69:c8:de:34:3f:6e:6b:ca:ea:dc:6f:67:6a:4a:26: 78:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B3:85:30:D7:49:9F:5F:F5:9B:7F:54:FA:B9:2C:AD:58:C3:5E:EF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af984960-fb9e-452a-9faf-e307203c1b94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32:8000::/39 Signature Algorithm: sha256WithRSAEncryption ca:87:a2:d5:6d:1e:60:43:6a:9c:2e:81:81:a7:9c:11:54:2d: 7d:37:94:01:24:c7:61:6d:f1:de:86:9b:a7:41:d5:93:5d:36: 01:4b:4d:63:13:b4:78:af:60:0b:bc:26:10:0a:6b:e4:c3:30: 5f:7d:c6:04:7a:6b:a9:09:01:b0:45:c3:ff:54:b5:32:3a:5a: 13:34:aa:e3:1a:87:8e:4e:01:0b:d6:9a:9e:31:4f:a7:a2:7c: 29:82:d2:56:55:a8:5a:3a:be:a6:20:15:1c:73:dd:e1:1c:d5: b3:65:e6:fb:ca:6f:55:ba:b7:bf:af:19:46:48:8f:a3:f7:bc: b1:7d:6b:c1:4d:80:43:ef:06:c3:f9:96:b4:27:43:a5:ed:6f: 9b:f4:a2:45:14:b0:cc:0e:af:b0:07:5e:b9:d7:cf:8d:43:4c: c7:7a:cc:14:96:e6:a6:76:02:7b:1d:5a:6c:d7:bf:0c:29:d8: 66:59:1a:5b:b6:00:f2:c5:3b:40:1a:3d:1f:fb:73:8a:f5:ac: a5:10:68:e1:71:06:18:a5:ad:82:5c:64:bd:35:09:8d:b0:28: c1:55:3f:db:1b:2c:2a:e5:94:34:5d:67:e8:d0:ab:4c:5c:ff: 1b:47:be:3e:89:bd:72:e3:49:b0:2b:61:45:3c:26:f9:0b:03: 3f:08:84:c1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfhKvRvuB7RvTJFUAFwCGOAMwW+YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAxMDIxWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzgyNmYyOGE1ZjY4ZjE2MTFiMTI3NmI4YjNmNGQzOGQ5 YzNkY2FhNThjYWE4MjZmMDJmZTM4ODg0ZTYzMWVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFCTLSKS14ZsP3ohwdYCC49SnPCLvsmXZTAkjS0eKT32Hr +Zdvnwrtc6t0OB9T7e0yUMs0Cd5tR/Bla/nKmWi42mhajYfgfk63ZseVi/ZMZQgm JV7+w8zemO/0/H8mjXRSlsAZiOFeNl23EyavCmcRSIsstdx5Fl1SCOwykNRMetiG 5ODH54Tmxx+F7DnwPuKgdBvkDS827p6SQKWZ2HguSOTv30M33SwHKzKzh7sbw0hO stN2odC2zfjiBkYMQCAQxmg8NHXeBmlKg64qL1EwBZ5zDDqjvdggj/BW6jpp//B8 NKd7vH8gaPeDKQMUImnI3jQ/bmvK6txvZ2pKJnj9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUf7OFMNdJn1/1m39U+rksrVjDXu8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmOTg0OTYwLWZiOWUtNDUyYS05ZmFmLWUzMDcyMDNjMWI5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB8ygDANBgkqhkiG9w0BAQsFAAOCAQEAyoei1W0eYENqnC6BgaecEVQt fTeUASTHYW3x3oabp0HVk102AUtNYxO0eK9gC7wmEApr5MMwX33GBHprqQkBsEXD /1S1MjpaEzSq4xqHjk4BC9aanjFPp6J8KYLSVlWoWjq+piAVHHPd4RzVs2Xm+8pv Vbq3v68ZRkiPo/e8sX1rwU2AQ+8Gw/mWtCdDpe1vm/SiRRSwzA6vsAdeudfPjUNM x3rMFJbmpnYCex1abNe/DCnYZlkaW7YA8sU7QBo9H/tzivWspRBo4XEGGKWtglxk vTUJjbAowVU/2xssKuWUNF1n6NCrTFz/G0e+Pom9cuNJsCthRTwm+QsDPwiEwQ== -----END CERTIFICATE-----Generated at Tue May 13 19:05:40 2025 by rpki-client