$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20bc2686-ecbe-4028-a625-050eb5987b44.roa File: 20bc2686-ecbe-4028-a625-050eb5987b44.roa (raw, json) Hash identifier: OjBcnIWog265q0uCkc1UGqTWzaTs8hlxSCmG90ExDOw= Subject key identifier: 50:85:26:BA:35:61:3E:B7:A2:E6:F9:BC:77:A1:41:F1:E7:88:B7:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 20211B0F23C9FF011EB993332B0FFA2665406F2E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20bc2686-ecbe-4028-a625-050eb5987b44.roa Signing time: Fri 28 Mar 2025 00:31:35 +0000 ROA not before: Fri 28 Mar 2025 00:31:35 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:21:1b:0f:23:c9:ff:01:1e:b9:93:33:2b:0f:fa:26:65:40:6f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 00:31:35 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a3:96:df:52:bc:4a:b0:cc:e0:df:73:7c:4e: 18:23:9f:f3:f8:a2:a9:27:32:96:f0:22:9e:65:50: 37:87:d7:23:ec:1a:94:16:7d:31:bb:a4:e8:85:d0: 42:4d:de:ac:31:98:df:5a:02:9f:3f:75:03:cf:e3: 65:af:ab:5d:b8:5e:53:8d:3b:c0:db:d0:4b:aa:21: ed:4c:af:75:83:6e:b7:01:ac:19:4c:25:93:66:3a: 81:f6:8a:aa:9f:fe:3a:3d:c0:2e:14:0f:49:80:4b: 0b:65:2b:9e:24:d4:8a:e9:36:6e:b2:81:81:c7:74: 2a:38:e1:15:35:82:42:9c:a5:5d:51:f7:d5:9f:8a: 89:6f:21:70:d8:3d:e0:4d:c4:a6:6a:12:ae:b5:a6: 99:6b:5a:12:b4:5e:4f:b7:37:eb:76:b5:28:52:a4: f8:be:9c:7c:a6:df:b6:dc:86:09:f3:96:7f:36:14: 31:0d:12:54:4f:67:a6:d9:08:96:f1:cc:e1:fa:56: a6:68:df:d4:4e:48:18:c1:b6:9c:95:d3:b1:57:92: d9:07:a1:77:cb:89:36:13:d2:c7:cf:4f:72:31:b4: f5:57:bb:7a:2b:75:94:75:22:83:79:b8:a9:1f:ce: 32:53:ac:93:ba:e5:a7:c7:f0:67:22:bc:35:b7:68: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:85:26:BA:35:61:3E:B7:A2:E6:F9:BC:77:A1:41:F1:E7:88:B7:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20bc2686-ecbe-4028-a625-050eb5987b44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:6040::/48 Signature Algorithm: sha256WithRSAEncryption 9c:f3:6c:1c:ac:8d:29:60:5e:7b:7c:de:fb:0d:a8:a8:73:14: 50:4e:a5:dc:45:1d:b9:c9:bc:2c:e6:83:d8:7d:89:ec:68:d1: 8f:47:4c:94:49:1f:10:11:ca:71:b1:8e:23:33:d2:87:bb:91: f0:d3:79:b5:96:0e:20:c1:a8:ad:b2:ee:95:7d:2e:e4:6c:e7: be:20:6c:6c:e4:b8:4a:00:c2:f7:25:ee:e2:da:2d:d9:e5:7e: 54:fe:4d:20:73:d4:eb:ed:ad:d1:28:cf:84:30:bd:21:87:38: 07:e5:9f:69:27:69:01:ab:99:a1:bc:42:49:c9:42:4a:09:ab: 2b:69:e9:65:4f:dc:d5:50:9b:9e:6d:65:6e:79:bc:75:88:27: be:7c:80:49:6d:49:7a:12:f6:c9:81:44:ea:9a:a0:c7:73:2a: 9d:70:21:5c:30:4f:87:82:71:25:ff:c5:3f:9b:26:1a:0a:4e: cc:25:6d:1d:95:c9:9f:dc:c7:d8:b7:c4:9c:f2:fa:a2:04:6c: 3e:4f:87:d9:fa:d4:e1:fc:51:f3:f1:72:ca:07:4b:0e:c8:2f: 96:de:f5:40:ab:8c:d9:fd:6d:ec:3f:3b:63:7c:29:ef:53:23: a1:4e:f5:51:f9:bf:c0:4f:8e:11:9d:99:d9:36:7b:d6:b3:6c: 0e:b3:08:ae -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUICEbDyPJ/wEeuZMzKw/6JmVAby4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDAzMTM1WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjc4MTI2NmYwOGU4MjY4OGE4YmE5ZDkyOTU1NmU5MzVl Y2Q1YmI0YjI0YzZlODdhOTM0YTYxMjMyNzEwMjQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMo5bfUrxKsMzg33N8Thgjn/P4oqknMpbwIp5lUDeH1yPs GpQWfTG7pOiF0EJN3qwxmN9aAp8/dQPP42Wvq124XlONO8Db0EuqIe1Mr3WDbrcB rBlMJZNmOoH2iqqf/jo9wC4UD0mASwtlK54k1IrpNm6ygYHHdCo44RU1gkKcpV1R 99WfiolvIXDYPeBNxKZqEq61pplrWhK0Xk+3N+t2tShSpPi+nHym37bchgnzln82 FDENElRPZ6bZCJbxzOH6VqZo39ROSBjBtpyV07FXktkHoXfLiTYT0sfPT3IxtPVX u3ordZR1IoN5uKkfzjJTrJO65afH8GcivDW3aBlvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUIUmujVhPrei5vm8d6FB8eeIt/UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIwYmMyNjg2LWVjYmUtNDAyOC1hNjI1LTA1MGViNTk4N2I0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//YEAwDQYJKoZIhvcNAQELBQADggEBAJzzbBysjSlgXnt83vsNqKhz FFBOpdxFHbnJvCzmg9h9iexo0Y9HTJRJHxARynGxjiMz0oe7kfDTebWWDiDBqK2y 7pV9LuRs574gbGzkuEoAwvcl7uLaLdnlflT+TSBz1OvtrdEoz4QwvSGHOAfln2kn aQGrmaG8QknJQkoJqytp6WVP3NVQm55tZW55vHWIJ758gEltSXoS9smBROqaoMdz Kp1wIVwwT4eCcSX/xT+bJhoKTswlbR2VyZ/cx9i3xJzy+qIEbD5Ph9n61OH8UfPx csoHSw7IL5be9UCrjNn9bew/O2N8Ke9TI6FO9VH5v8BPjhGdmdk2e9azbA6zCK4= -----END CERTIFICATE-----Generated at Sat Apr 5 19:28:58 2025 by rpki-client