$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4492468d-ade8-4955-9c65-98cc7b723380.roa File: 4492468d-ade8-4955-9c65-98cc7b723380.roa (raw, json) Hash identifier: LKiZ85SMMAS7kmUg+4eAEARNWDCrXi3YtPY6fl5UIsw= Subject key identifier: 32:38:FC:BA:B7:3B:E0:96:A5:BA:44:48:98:32:99:35:36:14:73:47 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 413597A343C93344DF6873D9840208383B34EB39 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4492468d-ade8-4955-9c65-98cc7b723380.roa Signing time: Fri 28 Mar 2025 15:32:10 +0000 ROA not before: Fri 28 Mar 2025 15:32:10 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:35:97:a3:43:c9:33:44:df:68:73:d9:84:02:08:38:3b:34:eb:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 15:32:10 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:f9:43:77:5e:e4:cf:87:d4:3e:94:80:e1: 19:c0:2d:b5:2f:55:66:74:70:fa:48:49:9f:4a:c2: 3e:48:9c:ae:21:ef:ef:28:32:6f:44:f8:15:09:57: e7:d9:fe:0d:39:c3:c4:3c:93:71:73:18:81:59:31: 2e:1c:83:fe:be:6b:04:fb:3c:cb:fc:38:c3:0e:07: fc:99:c0:14:a8:25:a5:12:2b:03:4d:ca:1f:32:b9: 0e:c6:b9:57:50:22:b4:47:04:89:c6:83:d1:0b:e4: 8b:00:1f:6d:25:d8:4c:91:3e:fe:92:51:9a:a6:2f: 95:75:fd:80:e3:36:fd:f2:de:bf:64:94:3e:10:33: 07:62:01:dc:e3:e2:88:cc:5a:0a:e7:4b:04:8f:3f: bb:d0:5e:da:9f:6e:0a:95:21:12:a1:45:2b:16:21: c4:91:05:3f:54:c3:95:68:a4:41:db:9a:ac:d2:ab: 34:7e:29:b8:d8:3c:08:c3:d1:ca:13:9e:57:20:01: 40:c7:bc:ef:c8:95:5d:46:2c:ee:be:3e:4d:9d:8b: 5a:6b:a0:fd:7e:a0:58:4c:83:83:2d:88:31:4d:46: 2d:bb:f3:b6:3b:e7:8f:be:b6:7f:64:e5:d8:cf:bf: 50:57:86:58:53:99:cf:de:a0:f2:52:d1:e7:3a:a0: b0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:38:FC:BA:B7:3B:E0:96:A5:BA:44:48:98:32:99:35:36:14:73:47 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4492468d-ade8-4955-9c65-98cc7b723380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8000::/40 Signature Algorithm: sha256WithRSAEncryption 68:e0:38:82:4e:fc:d6:92:39:ea:fa:78:9f:3c:f5:9f:33:74: ca:c2:83:29:64:6d:a7:29:f5:7d:98:e7:a4:be:33:3d:b7:ff: 2a:c7:23:a2:3d:f0:f6:44:9e:88:6f:9c:83:9a:77:47:2e:68: a5:2d:34:30:1c:f3:3d:7a:27:02:f4:31:40:37:53:1b:84:13: a5:dc:96:6e:cb:da:72:d7:29:ca:d6:9c:93:ae:d8:49:71:3d: ec:6c:6f:33:be:22:09:e2:b0:78:09:7a:ab:87:88:b9:8b:91: b0:89:d4:c4:4a:66:ad:7a:1b:92:2a:fb:5f:7f:f7:15:ec:a7: 16:59:37:ca:8e:b1:d9:2f:01:59:e5:98:76:98:fe:bc:e9:c1: 99:b7:8d:bc:59:62:3b:92:60:9a:ac:67:43:7c:41:a0:f3:30: 4b:81:b9:bb:d5:4e:fa:bf:bf:df:3c:7a:35:b7:bb:42:88:ab: 8b:4e:c0:ec:c6:43:ca:0d:56:46:d9:04:b5:30:79:26:64:e1: 0d:9e:45:92:7c:d7:74:6d:ed:2e:d3:79:a9:b1:6c:99:4c:44: ae:b7:9f:13:8a:9b:1e:a9:72:7e:17:8c:76:de:f7:5a:94:9d: ff:0f:73:5c:bc:d1:f9:61:3e:27:11:c2:c6:50:84:ce:d2:fe: ec:97:d7:7c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQTWXo0PJM0TfaHPZhAIIODs06zkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTUzMjEwWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDhiYTNjOWVkNjMwMGFiNTgzYWZlNzUxNmUwNzM5ZTQw ZGM4MzM2NjBmZjcxNjNmNTM3NWIzMjZkY2E0YWVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8ZPlDd17kz4fUPpSA4RnALbUvVWZ0cPpISZ9Kwj5InK4h 7+8oMm9E+BUJV+fZ/g05w8Q8k3FzGIFZMS4cg/6+awT7PMv8OMMOB/yZwBSoJaUS KwNNyh8yuQ7GuVdQIrRHBInGg9EL5IsAH20l2EyRPv6SUZqmL5V1/YDjNv3y3r9k lD4QMwdiAdzj4ojMWgrnSwSPP7vQXtqfbgqVIRKhRSsWIcSRBT9Uw5VopEHbmqzS qzR+KbjYPAjD0coTnlcgAUDHvO/IlV1GLO6+Pk2di1proP1+oFhMg4MtiDFNRi27 87Y754++tn9k5djPv1BXhlhTmc/eoPJS0ec6oLB7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMjj8urc74JalukRImDKZNTYUc0cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ0OTI0NjhkLWFkZTgtNDk1NS05YzY1LTk4Y2M3YjcyMzM4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//gDANBgkqhkiG9w0BAQsFAAOCAQEAaOA4gk781pI56vp4nzz1nzN0 ysKDKWRtpyn1fZjnpL4zPbf/Kscjoj3w9kSeiG+cg5p3Ry5opS00MBzzPXonAvQx QDdTG4QTpdyWbsvactcpytack67YSXE97GxvM74iCeKweAl6q4eIuYuRsInUxEpm rXobkir7X3/3FeynFlk3yo6x2S8BWeWYdpj+vOnBmbeNvFliO5JgmqxnQ3xBoPMw S4G5u9VO+r+/3zx6Nbe7Qoiri07A7MZDyg1WRtkEtTB5JmThDZ5FknzXdG3tLtN5 qbFsmUxErrefE4qbHqlyfheMdt73WpSd/w9zXLzR+WE+JxHCxlCEztL+7JfXfA== -----END CERTIFICATE-----Generated at Fri Apr 11 17:13:35 2025 by rpki-client