$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45ccdda1-0482-4f8a-8380-44528df11647.roa File: 45ccdda1-0482-4f8a-8380-44528df11647.roa (raw, json) Hash identifier: yJfg1XZhpH5PnYIdrDv29pFZ4wS5iwc6aLjNOmWy64A= Subject key identifier: 64:83:87:D5:08:6E:C8:59:B7:25:1C:E5:4F:8F:15:E5:88:23:5C:98 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 26475694A7AABF78FD82332911F77F30D991E79C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45ccdda1-0482-4f8a-8380-44528df11647.roa Signing time: Fri 28 Mar 2025 15:11:06 +0000 ROA not before: Fri 28 Mar 2025 15:11:06 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:8080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:47:56:94:a7:aa:bf:78:fd:82:33:29:11:f7:7f:30:d9:91:e7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 15:11:06 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:ad:c6:98:d4:e2:47:ac:16:f6:bb:78:12: 81:9b:db:e2:f2:17:68:f8:69:4c:4a:d2:70:a6:d7: 8d:7b:f9:bd:1a:ff:c0:3d:e8:d6:2d:c7:3b:48:37: 13:81:83:b2:25:56:de:4a:5f:0c:5f:21:2e:96:2b: 1c:dd:44:4a:0a:6f:fe:74:0f:e7:a5:c0:a5:fe:b4: 8e:f3:67:ee:2d:04:bb:c6:a0:22:bd:ae:09:73:b4: 81:69:f7:6a:54:43:44:9f:f2:0a:68:23:6d:eb:7a: 62:fb:22:a4:2c:9a:51:45:3c:4c:cb:27:a8:7c:af: 3a:9c:60:0e:41:7c:e8:32:27:5b:35:d3:fc:e8:6e: a5:e7:fa:54:a2:6f:3f:1d:20:41:3e:02:4d:27:62: 78:69:c1:c1:2c:95:c8:18:8f:5f:01:8c:2c:21:80: cc:1a:20:f6:04:8e:26:8f:90:91:25:0f:ed:00:aa: b6:c2:42:0a:eb:a4:b9:8b:b2:6d:5f:e7:40:61:45: 32:d5:27:a1:76:1b:ea:31:fe:11:fa:d6:15:8b:9b: 24:a2:eb:5d:47:32:12:cf:ea:e9:7b:8f:03:0d:07: ea:05:eb:2f:4d:32:0b:5e:2f:a0:67:ed:5e:9d:fa: ca:70:c4:20:fb:60:1d:72:19:a7:0d:f4:79:65:5f: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:83:87:D5:08:6E:C8:59:B7:25:1C:E5:4F:8F:15:E5:88:23:5C:98 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45ccdda1-0482-4f8a-8380-44528df11647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:8080::/46 Signature Algorithm: sha256WithRSAEncryption 33:96:c7:14:d5:56:8c:6c:20:23:cd:37:7a:95:b9:20:cc:65: cd:8b:a4:e9:1e:64:19:22:24:58:0f:72:4c:cb:4f:28:8f:a1: 4a:82:0c:f4:04:92:f7:37:e0:88:e5:92:79:a9:ca:cc:7b:bb: 4d:d8:90:ad:11:b9:29:ff:a7:f8:11:e8:58:d2:2b:da:81:05: e6:79:e8:1d:54:88:1d:26:9f:a0:82:1d:55:89:b2:6f:ba:e2: 16:d9:3e:c5:d0:15:0f:6f:fd:2e:2c:3e:d2:ac:c8:5c:b2:b7: 91:fc:f8:5c:03:9c:cb:2e:a7:ff:c1:ad:47:56:98:82:67:34: 0b:d0:af:e1:0d:f8:b0:f5:48:ed:f5:7c:bd:eb:94:c2:56:1c: 88:81:83:e4:f1:48:72:22:f9:a9:09:ee:9d:38:3b:26:e5:66: 59:96:a9:4a:b6:a6:e5:e8:36:fe:68:27:d4:01:5e:58:a1:ae: a4:09:50:2b:e8:6e:81:24:d9:58:a5:37:67:0d:e9:f1:10:4b: 0d:a9:66:14:1e:1b:ac:0c:c1:2c:40:db:9f:f5:c4:3c:81:cc: 01:41:28:1f:b6:3a:ce:79:a5:ff:7c:de:e7:ee:57:bf:e7:c0: 8d:53:f0:3a:19:e6:d6:1e:ea:df:53:a6:cd:96:39:b1:37:1d: 71:d2:be:cc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJkdWlKeqv3j9gjMpEfd/MNmR55wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTUxMTA2WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDVlYjk4NWVmZjY2NzZjMWEwNWI4ZmJhNTkxMmIzNDgx YWU0ZjIwODlhYjljMDY0NmFhM2NkMTEyYjM5NGFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgM63GmNTiR6wW9rt4EoGb2+LyF2j4aUxK0nCm1417+b0a /8A96NYtxztINxOBg7IlVt5KXwxfIS6WKxzdREoKb/50D+elwKX+tI7zZ+4tBLvG oCK9rglztIFp92pUQ0Sf8gpoI23remL7IqQsmlFFPEzLJ6h8rzqcYA5BfOgyJ1s1 0/zobqXn+lSibz8dIEE+Ak0nYnhpwcEslcgYj18BjCwhgMwaIPYEjiaPkJElD+0A qrbCQgrrpLmLsm1f50BhRTLVJ6F2G+ox/hH61hWLmySi611HMhLP6ul7jwMNB+oF 6y9NMgteL6Bn7V6d+spwxCD7YB1yGacN9HllX4STAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZIOH1QhuyFm3JRzlT48V5YgjXJgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1Y2NkZGExLTA0ODItNGY4YS04MzgwLTQ0NTI4ZGYxMTY0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3gIAwDQYJKoZIhvcNAQELBQADggEBADOWxxTVVoxsICPNN3qVuSDM Zc2LpOkeZBkiJFgPckzLTyiPoUqCDPQEkvc34Ijlknmpysx7u03YkK0RuSn/p/gR 6FjSK9qBBeZ56B1UiB0mn6CCHVWJsm+64hbZPsXQFQ9v/S4sPtKsyFyyt5H8+FwD nMsup//BrUdWmIJnNAvQr+EN+LD1SO31fL3rlMJWHIiBg+TxSHIi+akJ7p04Oybl ZlmWqUq2puXoNv5oJ9QBXlihrqQJUCvoboEk2VilN2cN6fEQSw2pZhQeG6wMwSxA 25/1xDyBzAFBKB+2Os55pf983ufuV7/nwI1T8DoZ5tYe6t9Tps2WObE3HXHSvsw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:46 2025 by rpki-client