$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31fce051-af9a-40f5-a57c-0d46cb922d6b.roa File: 31fce051-af9a-40f5-a57c-0d46cb922d6b.roa (raw, json) Hash identifier: ve3L9Ko/dnnEHm0vHbpPhOkcy0AshlUKhG5di40IwKA= Subject key identifier: 40:B6:D9:4D:82:5C:74:41:34:28:8B:16:B8:D6:C6:C0:38:46:61:75 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 124BA6258AE06C2804673365E392672F2ADD087B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31fce051-af9a-40f5-a57c-0d46cb922d6b.roa Signing time: Fri 28 Mar 2025 16:11:46 +0000 ROA not before: Fri 28 Mar 2025 16:11:46 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:a400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4b:a6:25:8a:e0:6c:28:04:67:33:65:e3:92:67:2f:2a:dd:08:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 16:11:46 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:96:d5:32:57:22:4b:ee:cd:27:7e:1f:a0:fd: 19:14:4c:f0:e9:ca:79:c1:06:00:13:11:06:17:1a: bc:a4:95:85:4d:67:de:86:ff:75:e4:f2:ff:d7:04: 4b:3f:46:32:92:d1:cc:ba:19:cf:85:d0:0e:64:19: 4b:fc:5f:a9:c7:0a:b7:d9:ef:f2:51:9d:50:0c:e6: c2:75:ff:ee:03:e0:00:74:3a:d0:5c:b5:13:b4:db: bc:fb:44:af:a2:d9:a3:ed:9a:b3:96:e9:14:f7:ba: 71:7b:e9:43:7e:9c:fc:9b:fe:75:68:54:a6:0e:5a: 19:5f:73:88:58:5b:9e:69:ef:1b:b8:a4:c2:39:91: ae:d5:14:52:11:36:15:08:c7:3a:b3:dc:bc:61:f4: b0:55:44:65:31:15:48:0e:14:20:8d:ad:bc:82:64: d6:63:3f:26:c7:18:62:81:2f:3a:db:cb:08:85:55: 79:fa:9f:ef:68:bb:ea:e4:71:93:2d:ab:d6:7f:13: 53:b7:e7:31:c1:c5:54:db:bb:12:d7:44:bd:d6:e6: 06:0c:be:c8:8d:ab:a2:23:a6:a3:c9:15:9e:0f:db: ff:82:e9:f6:6c:a3:e6:bf:95:27:e0:ed:76:a9:73: 5f:f0:90:b3:b4:ae:55:0b:5b:44:b5:52:c8:2d:78: e2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B6:D9:4D:82:5C:74:41:34:28:8B:16:B8:D6:C6:C0:38:46:61:75 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31fce051-af9a-40f5-a57c-0d46cb922d6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:a400::/40 Signature Algorithm: sha256WithRSAEncryption 95:21:79:30:b7:83:7d:40:51:4b:cf:f7:cf:38:df:be:22:a5: 58:37:fa:77:63:b7:4a:ce:ba:dd:8f:f4:5d:90:f5:74:98:6b: 0d:76:ef:87:6e:df:89:c2:b2:73:f5:56:ee:7c:09:f7:7f:a1: f2:c9:fc:dd:8c:64:18:ec:91:9c:2a:d3:7b:c1:d0:2b:3a:c3: 67:45:d3:3b:a8:b1:03:f0:a2:5e:56:a1:44:0d:eb:3d:5b:a3: 28:e3:32:ac:1b:fb:0c:84:cc:3e:ca:94:45:74:c6:2c:96:d3: 4f:51:17:36:a1:f5:64:89:ae:3b:97:82:55:8a:06:4f:0d:1b: ad:af:b7:15:af:c0:77:92:c9:72:d6:8b:25:40:fb:07:ce:e8: 73:8e:ab:a8:72:37:eb:e6:07:08:e1:ec:01:5b:7f:b3:4a:41: 41:d1:25:93:2d:87:6b:31:95:44:25:4c:c3:06:2e:1f:13:95: ec:cb:13:96:9a:d0:2d:70:27:7c:b5:e3:cc:d5:90:b2:b0:20: 1b:89:8c:be:fe:dc:18:09:aa:31:f0:c1:d9:04:14:17:c0:a9: 65:95:a1:50:72:d8:4b:53:c3:56:24:22:a8:cd:de:43:b4:5c: 30:cc:e1:3d:a2:cd:f5:46:d2:67:f6:9a:ef:82:51:c7:ae:4c: 6a:38:ee:87 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEkumJYrgbCgEZzNl45JnLyrdCHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTYxMTQ2WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NWVhYTA2ODA3OTljM2MxNWU2YjIwNGFiODAyM2JmNTFl Y2M0MThkZmQ2MDViMDNkMDdiNzA3ODMxNzYzZjI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHltUyVyJL7s0nfh+g/RkUTPDpynnBBgATEQYXGryklYVN Z96G/3Xk8v/XBEs/RjKS0cy6Gc+F0A5kGUv8X6nHCrfZ7/JRnVAM5sJ1/+4D4AB0 OtBctRO027z7RK+i2aPtmrOW6RT3unF76UN+nPyb/nVoVKYOWhlfc4hYW55p7xu4 pMI5ka7VFFIRNhUIxzqz3Lxh9LBVRGUxFUgOFCCNrbyCZNZjPybHGGKBLzrbywiF VXn6n+9ou+rkcZMtq9Z/E1O35zHBxVTbuxLXRL3W5gYMvsiNq6IjpqPJFZ4P2/+C 6fZso+a/lSfg7Xapc1/wkLO0rlULW0S1UsgteOKhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQLbZTYJcdEE0KIsWuNbGwDhGYXUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMxZmNlMDUxLWFmOWEtNDBmNS1hNTdjLTBkNDZjYjkyMmQ2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/7pDANBgkqhkiG9w0BAQsFAAOCAQEAlSF5MLeDfUBRS8/3zzjfviKl WDf6d2O3Ss663Y/0XZD1dJhrDXbvh27ficKyc/VW7nwJ93+h8sn83YxkGOyRnCrT e8HQKzrDZ0XTO6ixA/CiXlahRA3rPVujKOMyrBv7DITMPsqURXTGLJbTT1EXNqH1 ZImuO5eCVYoGTw0bra+3Fa/Ad5LJctaLJUD7B87oc46rqHI36+YHCOHsAVt/s0pB QdElky2HazGVRCVMwwYuHxOV7MsTlprQLXAnfLXjzNWQsrAgG4mMvv7cGAmqMfDB 2QQUF8CpZZWhUHLYS1PDViQiqM3eQ7RcMMzhPaLN9UbSZ/aa74JRx65Majjuhw== -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:03 2025 by rpki-client