$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/416846e6-3c07-446e-bece-897ca344b028.roa File: 416846e6-3c07-446e-bece-897ca344b028.roa (raw, json) Hash identifier: QRzG5q5xjw4lZG8oG/2tft+3xSesvxqgITmQ8DxdbEA= Subject key identifier: F4:76:BB:2C:0B:57:3B:FD:2F:B2:D0:16:79:9D:73:A8:F6:B4:F4:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5BADC1F4E91C8A0950B2B9E81D9D53C78E0CE671 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/416846e6-3c07-446e-bece-897ca344b028.roa Signing time: Wed 02 Apr 2025 00:20:33 +0000 ROA not before: Wed 02 Apr 2025 00:20:33 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fbb:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ad:c1:f4:e9:1c:8a:09:50:b2:b9:e8:1d:9d:53:c7:8e:0c:e6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 2 00:20:33 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:30:2c:8a:1e:b2:4e:15:8f:43:4d:e2:39:3b: 3d:38:2a:e5:e4:44:75:5c:7f:e7:0f:10:16:52:e5: 96:f3:6f:cd:5d:24:c1:fb:e1:b9:50:22:94:b3:47: 2d:6a:3f:79:9a:a5:a5:6c:27:4e:75:37:37:17:57: 2b:6a:a7:b2:54:fb:84:4c:6b:8c:56:46:75:0e:43: 49:96:44:f6:ce:79:76:a6:54:43:38:5e:42:35:41: bf:11:a9:ac:94:b7:a6:25:ff:c1:86:02:0d:25:71: 5c:f7:dc:da:70:f4:d5:8f:94:dc:e7:65:74:03:7a: 41:bd:42:2f:4f:34:63:c1:47:1c:6f:12:ef:ff:f8: c9:77:6b:cc:20:5e:f6:cf:0b:3a:a5:78:66:45:50: 4a:a8:fd:56:45:0e:22:83:bd:60:0f:ce:db:3c:67: 64:83:e8:9c:40:bd:57:d2:09:2d:64:eb:b0:04:57: ad:76:0d:ca:12:7e:b3:2d:e6:b6:93:b0:ff:36:8b: c4:f3:d6:06:0c:97:cc:f9:0e:a5:19:20:87:fb:a5: ad:9e:14:1b:d6:1f:f3:24:49:da:32:dd:f3:90:1a: 47:f9:21:22:61:da:62:39:4e:39:aa:af:e5:8c:8c: 03:37:29:87:d8:9e:8e:d2:d1:db:c6:31:65:c6:0f: 4e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:76:BB:2C:0B:57:3B:FD:2F:B2:D0:16:79:9D:73:A8:F6:B4:F4:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/416846e6-3c07-446e-bece-897ca344b028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fbb:8000::/39 Signature Algorithm: sha256WithRSAEncryption 22:d5:23:00:3d:31:60:0d:02:50:9d:28:c0:88:a5:b7:aa:19: 09:06:72:a7:d4:7a:ed:0c:61:aa:29:82:cb:7b:0a:05:f5:88: 61:9c:95:a0:45:56:bb:4e:f7:20:3b:e2:32:1e:11:8c:ab:61: 97:9b:f5:35:86:67:a0:7a:0b:42:52:68:ae:15:0a:61:4c:58: 4a:72:6c:44:8b:ab:f1:bc:e1:3e:5a:cf:72:01:22:c1:18:67: 3e:57:d5:85:93:ea:81:26:90:87:8f:62:87:76:12:46:a4:de: de:de:be:0e:6f:01:a7:30:2e:70:8a:44:2f:c8:f9:03:36:6e: a6:54:f7:13:6e:a5:b3:4f:72:d0:b1:9a:85:7c:c4:9e:aa:93: 2b:68:25:c0:4c:72:95:e9:17:0e:64:74:17:2a:41:e9:e6:28: 6d:0d:21:d2:75:89:64:7d:4a:a2:33:11:e8:ef:e3:ff:9d:58: f3:c0:b3:4d:df:1b:ea:83:7d:99:f5:b5:c9:04:84:d7:f4:fe: 7c:19:7c:ef:7e:d4:3b:a0:51:25:96:68:01:da:60:7a:21:6a: 45:f8:65:08:ed:df:b4:52:cd:64:5f:06:18:20:a9:b5:6b:cd: 2a:72:52:f6:bc:3a:4c:87:bc:99:e8:d8:8d:b1:bc:67:7b:53: 9e:70:93:ba -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUW63B9OkciglQsrnoHZ1Tx44M5nEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDAyMDAyMDMzWhcNMjUwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTk1ZDFhODRhNDAxOTNlNmJiMDE2N2E2NzgzOGRmM2Iy ODc4MjhlM2JmMjkxN2Q5YWNmMGZiMzM1NzNhZTcxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUMCyKHrJOFY9DTeI5Oz04KuXkRHVcf+cPEBZS5Zbzb81d JMH74blQIpSzRy1qP3mapaVsJ051NzcXVytqp7JU+4RMa4xWRnUOQ0mWRPbOeXam VEM4XkI1Qb8RqayUt6Yl/8GGAg0lcVz33Npw9NWPlNznZXQDekG9Qi9PNGPBRxxv Eu//+Ml3a8wgXvbPCzqleGZFUEqo/VZFDiKDvWAPzts8Z2SD6JxAvVfSCS1k67AE V612DcoSfrMt5raTsP82i8Tz1gYMl8z5DqUZIIf7pa2eFBvWH/MkSdoy3fOQGkf5 ISJh2mI5Tjmqr+WMjAM3KYfYno7S0dvGMWXGD045AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9Ha7LAtXO/0vstAWeZ1zqPa09IIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQxNjg0NmU2LTNjMDctNDQ2ZS1iZWNlLTg5N2NhMzQ0YjAyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB+7gDANBgkqhkiG9w0BAQsFAAOCAQEAItUjAD0xYA0CUJ0owIilt6oZ CQZyp9R67QxhqimCy3sKBfWIYZyVoEVWu073IDviMh4RjKthl5v1NYZnoHoLQlJo rhUKYUxYSnJsRIur8bzhPlrPcgEiwRhnPlfVhZPqgSaQh49ih3YSRqTe3t6+Dm8B pzAucIpEL8j5AzZuplT3E26ls09y0LGahXzEnqqTK2glwExylekXDmR0FypB6eYo bQ0h0nWJZH1KojMR6O/j/51Y88CzTd8b6oN9mfW1yQSE1/T+fBl8737UO6BRJZZo AdpgeiFqRfhlCO3ftFLNZF8GGCCptWvNKnJS9rw6TIe8mejYjbG8Z3tTnnCTug== -----END CERTIFICATE-----Generated at Sat Apr 5 11:22:00 2025 by rpki-client