$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4967c52f-4fce-4524-95f6-4f8414082188.roa File: 4967c52f-4fce-4524-95f6-4f8414082188.roa (raw, json) Hash identifier: k5hhWlT78Im5+Lb05Jqm6oH064d0woOJclOGHoy9JbM= Subject key identifier: 39:33:9E:F1:7B:A5:FC:20:B4:B2:B9:BC:10:F9:41:50:B3:77:59:BF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6DAEEE769EF0BF96DD50F0ABD8B9692F17087963 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4967c52f-4fce-4524-95f6-4f8414082188.roa Signing time: Tue 25 Mar 2025 17:12:01 +0000 ROA not before: Tue 25 Mar 2025 17:12:01 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ae:ee:76:9e:f0:bf:96:dd:50:f0:ab:d8:b9:69:2f:17:08:79:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 17:12:01 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:6c:31:f5:72:b3:f4:36:0f:36:97:c4:16: eb:94:0b:9e:49:0d:b6:2d:80:c1:1a:00:6f:ee:b8: 08:58:ac:d2:4f:f4:b3:72:d3:b7:2e:c0:b1:f8:90: 15:9b:79:2f:08:44:5d:39:0c:39:1b:3f:f1:89:dc: 13:ef:cc:ee:4a:b9:5e:47:7b:df:65:65:5a:23:7d: 9d:ab:38:87:04:58:e5:2a:26:46:33:ca:db:fa:c8: 73:02:9b:3a:03:c5:96:76:f0:e8:bf:3f:6f:e3:00: 3e:49:47:e3:05:c3:e8:00:58:d7:ea:37:fa:d4:e8: c5:45:ff:d6:c5:9f:b3:5a:9c:af:c0:25:f5:97:86: 33:e0:f9:60:a0:9f:ab:e0:af:92:54:ee:fa:6f:33: 69:6f:54:90:4e:ca:6f:df:9a:aa:fe:38:5e:7f:34: 03:6c:a1:68:94:18:8b:2e:ee:7a:b4:02:f5:e5:9e: dc:46:d2:f4:13:53:58:f0:dc:de:0d:ad:4d:78:b4: 60:34:31:a1:d1:1c:d1:f1:48:d3:ad:16:52:6a:f8: f2:32:df:14:35:63:fe:c7:1a:68:b7:43:ca:59:7a: 17:f3:06:44:a0:a0:12:97:18:8e:a7:3a:bc:bd:ce: 92:c1:15:c0:c6:86:7c:d8:4e:06:99:2c:b4:4d:9b: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:33:9E:F1:7B:A5:FC:20:B4:B2:B9:BC:10:F9:41:50:B3:77:59:BF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4967c52f-4fce-4524-95f6-4f8414082188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4040::/48 Signature Algorithm: sha256WithRSAEncryption 72:f0:ac:4f:82:02:c3:9f:01:69:55:3a:62:90:38:5b:e6:6b: be:ee:ea:0e:8c:f6:cd:0e:4d:a5:fd:29:1f:b5:d4:7d:5d:4d: 3b:5b:da:b9:03:1d:19:69:89:c0:6c:08:cc:9f:7c:83:90:a9: d5:d9:82:39:c1:c2:91:a9:62:f5:fd:b0:ab:da:df:66:e3:b7: 5f:fd:ac:13:b4:21:37:c2:2d:90:31:3c:c6:c2:67:de:5d:95: b3:a4:3e:4f:17:47:c8:06:c9:a5:7f:21:c8:b4:9f:db:92:0a: 10:ef:72:5c:e4:20:22:07:66:f1:bf:e5:24:3a:b3:00:77:1b: b7:c1:7b:64:6a:76:c7:21:14:38:12:7f:ce:a1:42:f9:bd:86: 28:ad:e0:7b:1a:4f:93:9f:88:17:52:c9:18:62:fc:76:15:ba: 16:a5:3a:9a:15:cd:e1:06:d4:9c:92:5e:2b:fd:5e:33:3b:49: c2:c9:e7:47:0b:cc:24:36:45:d8:c0:2a:b8:1a:26:12:19:8e: 8c:9d:cf:10:1e:5c:ad:0b:bd:f2:0c:27:55:69:59:ea:ea:d2: bc:b9:2a:a5:51:56:72:35:17:16:6d:92:54:25:ba:d3:47:e7: 65:e6:18:b2:d3:74:b3:13:53:48:96:a5:6d:ca:e0:aa:06:07: 8c:bf:b3:f8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUba7udp7wv5bdUPCr2LlpLxcIeWMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTcxMjAxWhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjI4YmQ0ODhiNGIzZmNiZTU5YmE2OWRmNTY4M2M2ZWI1 OWJlNjA1ZGJmZTkzMTBmODIyNzg0MWUzMWE4NzZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+uGwx9XKz9DYPNpfEFuuUC55JDbYtgMEaAG/uuAhYrNJP 9LNy07cuwLH4kBWbeS8IRF05DDkbP/GJ3BPvzO5KuV5He99lZVojfZ2rOIcEWOUq JkYzytv6yHMCmzoDxZZ28Oi/P2/jAD5JR+MFw+gAWNfqN/rU6MVF/9bFn7NanK/A JfWXhjPg+WCgn6vgr5JU7vpvM2lvVJBOym/fmqr+OF5/NANsoWiUGIsu7nq0AvXl ntxG0vQTU1jw3N4NrU14tGA0MaHRHNHxSNOtFlJq+PIy3xQ1Y/7HGmi3Q8pZehfz BkSgoBKXGI6nOry9zpLBFcDGhnzYTgaZLLRNm7IRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOTOe8Xul/CC0srm8EPlBULN3Wb8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5NjdjNTJmLTRmY2UtNDUyNC05NWY2LTRmODQxNDA4MjE4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QEAwDQYJKoZIhvcNAQELBQADggEBAHLwrE+CAsOfAWlVOmKQOFvm a77u6g6M9s0OTaX9KR+11H1dTTtb2rkDHRlpicBsCMyffIOQqdXZgjnBwpGpYvX9 sKva32bjt1/9rBO0ITfCLZAxPMbCZ95dlbOkPk8XR8gGyaV/Ici0n9uSChDvclzk ICIHZvG/5SQ6swB3G7fBe2RqdschFDgSf86hQvm9hiit4HsaT5OfiBdSyRhi/HYV uhalOpoVzeEG1JySXiv9XjM7ScLJ50cLzCQ2RdjAKrgaJhIZjoydzxAeXK0LvfIM J1VpWerq0ry5KqVRVnI1FxZtklQlutNH52XmGLLTdLMTU0iWpW3K4KoGB4y/s/g= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:42 2025 by rpki-client