$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/257556d8-09ef-4708-85a2-bcac61874f8e.roa File: 257556d8-09ef-4708-85a2-bcac61874f8e.roa (raw, json) Hash identifier: JWyagNsmWre6XLtGRLlGS457EysWYrfOC+TQioYHRk0= Subject key identifier: D0:11:60:8F:42:AF:F6:57:43:74:2B:05:E1:D7:34:D5:B4:B0:44:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D0C2C75FB4333B0B4888F80341C4E9BBC218DF5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/257556d8-09ef-4708-85a2-bcac61874f8e.roa Signing time: Fri 28 Mar 2025 15:40:17 +0000 ROA not before: Fri 28 Mar 2025 15:40:17 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0c:2c:75:fb:43:33:b0:b4:88:8f:80:34:1c:4e:9b:bc:21:8d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 15:40:17 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f7:ff:8e:37:48:31:7e:f3:80:10:bb:d7:da: 78:66:88:60:bf:9a:c0:90:f8:22:f3:38:21:42:8f: 44:5a:12:eb:0e:8b:b7:26:d1:67:bb:80:5d:28:92: 00:51:f4:8f:30:27:11:d2:e1:34:aa:d1:e3:ac:9e: 44:bc:32:c4:c0:d6:27:04:b3:78:18:2b:14:98:9d: 96:78:7c:66:65:02:8c:58:90:48:47:da:5d:04:6d: 46:7f:20:27:ba:17:e0:ef:15:e4:55:e1:08:b7:51: bb:6c:e4:52:f6:73:d7:c8:9a:3c:f6:15:f9:13:64: 75:0b:20:41:c1:10:ad:a1:f4:05:34:f3:14:8a:e7: 72:20:99:88:4b:05:44:a1:22:07:a8:08:bb:5a:a7: ea:6c:3e:59:c1:63:7b:ff:13:86:46:05:c3:b0:85: 98:08:34:61:4e:7c:9c:6a:d4:57:24:71:20:57:06: 93:91:87:88:3c:d1:f2:4c:3c:19:93:bd:80:6a:7d: e2:89:cb:d3:c2:af:c9:4b:7b:51:5d:48:0c:81:12: a6:dc:8b:08:55:db:b9:f1:73:75:b4:27:b8:15:65: 05:c3:b6:0b:10:ee:50:04:9a:2b:9f:e1:0b:a5:20: e9:a6:f2:ae:2e:a7:d5:60:14:80:ff:06:72:ba:02: f2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:11:60:8F:42:AF:F6:57:43:74:2B:05:E1:D7:34:D5:B4:B0:44:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/257556d8-09ef-4708-85a2-bcac61874f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:4040::/48 Signature Algorithm: sha256WithRSAEncryption 92:c1:43:c6:e3:1f:24:e1:0b:a3:0d:ec:b1:b7:f9:f5:4f:d2: d5:89:80:56:bd:0a:57:5b:03:83:e3:cd:a4:60:ea:fe:0a:d2: fa:f9:d7:05:d9:f8:56:10:43:03:f6:80:20:c1:d5:08:89:20: d4:92:ed:87:d4:5a:6e:54:44:15:08:fb:30:e2:1f:bb:03:69: 80:ed:28:c7:d1:eb:a0:09:fa:9e:f5:03:1a:dd:71:ec:24:d5: 0f:bd:ea:9a:69:9b:79:a2:ca:ce:cf:6c:5d:c6:a8:0b:bc:f3: 99:7c:b8:c4:b4:10:08:3d:e1:1a:b0:f0:60:d4:98:8a:f2:65: ba:6a:2f:b5:e9:72:13:4c:c9:57:62:06:ab:00:45:85:05:0b: f1:60:00:57:5b:a2:8a:ae:34:a4:ed:d1:b8:fe:f4:27:f9:38: 89:f0:9a:6c:ea:cb:78:0a:73:7e:ad:54:49:7a:69:a1:fa:7a: 83:32:62:f4:56:62:33:fd:e3:e4:71:a4:89:60:3c:e3:b5:f0: 5b:14:3b:0c:92:4f:79:62:a5:cc:2d:eb:a0:d8:50:b3:34:f5: 28:0b:7e:d7:cb:a5:04:be:42:39:81:a7:d0:16:4f:a8:03:b2: 36:9e:ea:c2:4c:8d:37:9d:2c:f2:fe:dc:12:a9:cb:22:db:a7: 39:3a:98:b3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfQwsdftDM7C0iI+ANBxOm7whjfUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTU0MDE3WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhODQ1MGZlNDEyYWRjNzQ4MTQ1YTU5M2VkYzE4OWQzN2E2 YzkzZjUwYzAzYjk0NGI4ZGEyNDQzZmNlNzE1Y2VlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDe9/+ON0gxfvOAELvX2nhmiGC/msCQ+CLzOCFCj0RaEusO i7cm0We7gF0okgBR9I8wJxHS4TSq0eOsnkS8MsTA1icEs3gYKxSYnZZ4fGZlAoxY kEhH2l0EbUZ/ICe6F+DvFeRV4Qi3Ubts5FL2c9fImjz2FfkTZHULIEHBEK2h9AU0 8xSK53IgmYhLBUShIgeoCLtap+psPlnBY3v/E4ZGBcOwhZgINGFOfJxq1FckcSBX BpORh4g80fJMPBmTvYBqfeKJy9PCr8lLe1FdSAyBEqbciwhV27nxc3W0J7gVZQXD tgsQ7lAEmiuf4QulIOmm8q4up9VgFID/BnK6AvJXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0BFgj0Kv9ldDdCsF4dc01bSwRCYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1NzU1NmQ4LTA5ZWYtNDcwOC04NWEyLWJjYWM2MTg3NGY4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/0QEAwDQYJKoZIhvcNAQELBQADggEBAJLBQ8bjHyThC6MN7LG3+fVP 0tWJgFa9CldbA4PjzaRg6v4K0vr51wXZ+FYQQwP2gCDB1QiJINSS7YfUWm5URBUI +zDiH7sDaYDtKMfR66AJ+p71Axrdcewk1Q+96pppm3miys7PbF3GqAu885l8uMS0 EAg94Rqw8GDUmIryZbpqL7XpchNMyVdiBqsARYUFC/FgAFdbooquNKTt0bj+9Cf5 OInwmmzqy3gKc36tVEl6aaH6eoMyYvRWYjP94+RxpIlgPOO18FsUOwyST3lipcwt 66DYULM09SgLftfLpQS+QjmBp9AWT6gDsjae6sJMjTedLPL+3BKpyyLbpzk6mLM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:43 2025 by rpki-client