$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28bd6f98-f067-4fb1-ad83-83c73490e09e.roa File: 28bd6f98-f067-4fb1-ad83-83c73490e09e.roa (raw, json) Hash identifier: 29I/yxUsToo1jZDiLt508qRmDS+zAlqR/6qTO0eQ4Zo= Subject key identifier: 43:51:DF:A7:AF:8F:1E:47:6F:A7:82:96:0A:C2:0E:B2:62:CC:48:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65CD829D20CE496D77FF81EC0002F4E81E55AFE8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28bd6f98-f067-4fb1-ad83-83c73490e09e.roa Signing time: Sat 15 Mar 2025 00:11:04 +0000 ROA not before: Sat 15 Mar 2025 00:11:04 +0000 ROA not after: Sat 19 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffe:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:cd:82:9d:20:ce:49:6d:77:ff:81:ec:00:02:f4:e8:1e:55:af:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 15 00:11:04 2025 GMT Not After : Apr 19 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:26:9e:02:80:7b:11:68:77:45:e6:8c:21: ba:b2:7a:80:56:3e:1d:41:0a:c0:51:7d:c6:ab:62: cf:dc:62:82:82:af:63:b5:30:96:0f:89:a8:48:1d: 84:62:e6:16:e2:d2:b1:97:f6:3c:c2:6c:60:86:c4: 35:90:0a:8c:ed:9d:12:4a:42:cb:5e:11:fc:e5:c7: e3:ba:4b:73:ae:0f:58:66:fb:8b:15:55:d1:b5:1a: 1a:17:d0:2c:62:b0:ff:ab:45:24:37:db:3c:b3:9b: 09:07:3f:07:e5:e9:4b:fa:e6:b8:82:ca:55:a3:bb: 17:68:cb:68:ff:4a:ba:a9:33:24:32:75:a6:2e:ee: 2c:69:89:d7:ac:4f:ee:58:24:5b:0d:47:a6:64:19: 8d:b3:8d:d1:de:f0:04:3a:f4:fd:ed:27:39:15:d9: 64:82:64:03:f5:7e:73:87:4d:3f:9f:fb:02:97:1d: 93:77:5b:d2:16:56:6f:b9:3c:d7:45:d7:d5:d9:01: 11:e4:44:51:b8:c6:7b:80:74:51:af:aa:70:37:28: 44:da:96:33:48:43:c5:f2:c8:7f:c3:3b:7a:6f:11: 7a:0e:40:5c:70:54:c5:98:87:af:f9:29:95:54:9e: 7a:9b:40:14:3b:b3:79:0f:e9:a5:b5:ae:20:d4:ae: f5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:51:DF:A7:AF:8F:1E:47:6F:A7:82:96:0A:C2:0E:B2:62:CC:48:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28bd6f98-f067-4fb1-ad83-83c73490e09e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffe:1000::/40 Signature Algorithm: sha256WithRSAEncryption ae:4a:03:de:be:7c:2f:f0:13:e3:53:f1:39:81:45:73:b3:8d: f9:49:31:72:90:cb:6f:71:6c:6f:24:4f:3c:1e:e2:8c:16:83: df:9e:b3:05:aa:2d:e3:d7:35:ce:95:4c:7b:58:a6:33:32:69: ea:16:2b:f0:35:f0:c9:cf:8c:c7:ca:47:23:ed:c2:7c:78:8f: be:2b:7d:02:a2:34:66:18:68:ce:5a:1c:48:fe:58:1b:28:54: 20:76:70:e1:83:43:f9:24:dc:7b:bb:7a:7f:67:00:9b:fc:c5: 41:80:a1:a9:de:d0:3d:92:7d:42:ea:2d:85:54:5d:22:27:19: 20:d2:2d:86:fe:c6:65:12:ab:e4:09:4e:b9:55:94:fa:4b:07: 42:79:8c:75:eb:ec:be:13:ec:35:12:ba:5c:3e:95:7a:c4:de: 15:53:31:0e:ad:a6:f3:1a:25:af:20:99:25:42:3f:f4:c1:34: e7:81:d2:a4:9f:d8:c3:2f:ad:31:ff:d3:d8:c3:89:72:66:3f: 59:4e:30:17:7b:af:81:50:ea:e9:8b:63:55:eb:65:c0:c5:06: 81:1a:35:fc:9e:d8:a1:3c:40:31:ff:0e:da:96:58:a3:2f:b6: bb:f9:a9:de:d8:cc:d3:5d:79:cb:41:28:08:7b:ad:cc:ab:43: 70:16:64:38 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZc2CnSDOSW13/4HsAAL06B5Vr+gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE1MDAxMTA0WhcNMjUwNDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTNiZWNiMDAyZmYwMGJmN2IzZDBhMDcxMWM3MTdjMDFj Mzg0YTRkYzU2ZGFiZDcxNWMyYjZiYWMwNjQ2YWFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIlyaeAoB7EWh3ReaMIbqyeoBWPh1BCsBRfcarYs/cYoKC r2O1MJYPiahIHYRi5hbi0rGX9jzCbGCGxDWQCoztnRJKQsteEfzlx+O6S3OuD1hm +4sVVdG1GhoX0CxisP+rRSQ32zyzmwkHPwfl6Uv65riCylWjuxdoy2j/SrqpMyQy daYu7ixpidesT+5YJFsNR6ZkGY2zjdHe8AQ69P3tJzkV2WSCZAP1fnOHTT+f+wKX HZN3W9IWVm+5PNdF19XZARHkRFG4xnuAdFGvqnA3KETaljNIQ8XyyH/DO3pvEXoO QFxwVMWYh6/5KZVUnnqbQBQ7s3kP6aW1riDUrvV/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQ1Hfp6+PHkdvp4KWCsIOsmLMSKMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4YmQ2Zjk4LWYwNjctNGZiMS1hZDgzLTgzYzczNDkwZTA5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/+EDANBgkqhkiG9w0BAQsFAAOCAQEArkoD3r58L/AT41PxOYFFc7ON +UkxcpDLb3FsbyRPPB7ijBaD356zBaot49c1zpVMe1imMzJp6hYr8DXwyc+Mx8pH I+3CfHiPvit9AqI0ZhhozlocSP5YGyhUIHZw4YND+STce7t6f2cAm/zFQYChqd7Q PZJ9QuothVRdIicZINIthv7GZRKr5AlOuVWU+ksHQnmMdevsvhPsNRK6XD6VesTe FVMxDq2m8xolryCZJUI/9ME054HSpJ/Ywy+tMf/T2MOJcmY/WU4wF3uvgVDq6Ytj VetlwMUGgRo1/J7YoTxAMf8O2pZYoy+2u/mp3tjM0115y0EoCHutzKtDcBZkOA== -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:01 2025 by rpki-client