$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627cfcbd-dea0-4a66-8797-dc40d8b87244.roa File: 627cfcbd-dea0-4a66-8797-dc40d8b87244.roa (raw, json) Hash identifier: af4C/+hJvR/ygpRme54U0eK8n/ya/d4Y6IkbI/u9juA= Subject key identifier: 7D:66:C2:46:0C:FB:FE:24:29:F0:B5:67:BB:69:5B:5F:12:97:EA:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58190DBCBC8FDDF690A0F537FED12EB8F455E995 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627cfcbd-dea0-4a66-8797-dc40d8b87244.roa Signing time: Wed 26 Mar 2025 00:10:25 +0000 ROA not before: Wed 26 Mar 2025 00:10:25 +0000 ROA not after: Wed 30 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:19:0d:bc:bc:8f:dd:f6:90:a0:f5:37:fe:d1:2e:b8:f4:55:e9:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 26 00:10:25 2025 GMT Not After : Apr 30 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:d9:3e:61:97:b7:c6:11:19:55:be:31:31: a5:e4:07:55:5c:db:70:03:dd:77:0c:63:74:e8:d8: cf:7a:2c:5d:cd:09:dc:5f:7d:a8:9c:99:57:5b:c0: 7e:bf:6c:d1:2e:25:35:f5:4e:18:9d:2d:5b:4a:74: 47:35:6d:e8:2f:d1:d0:8b:ad:43:41:2e:b1:ad:50: 03:75:91:56:e9:58:c1:7e:45:33:48:1a:ef:02:b7: de:99:1d:1a:22:ff:ec:77:ab:6f:79:5d:8b:43:81: d8:85:20:98:05:0b:cc:d0:fa:7f:ab:be:4d:e5:83: 94:46:32:bb:51:4a:48:b5:30:e5:36:46:61:b2:58: 37:39:7d:6d:60:81:a4:9b:af:cc:37:8b:01:70:30: 1f:9f:a7:ae:d6:44:4d:f5:86:57:f8:e9:53:d3:61: a6:0a:78:34:59:d7:75:90:60:13:ac:76:e0:06:22: 97:ef:ef:ff:12:e2:1f:95:36:b7:f6:74:c5:0f:d1: ae:59:b3:11:27:ee:29:7a:d8:5b:90:88:ec:4c:18: c3:e9:71:a8:2b:82:b1:b1:b4:cc:5e:4c:75:c1:1e: 41:ce:b1:74:49:94:b5:77:de:87:e8:fa:4d:95:ed: 22:e9:a3:22:88:87:9f:ff:51:be:09:7d:ea:4e:7d: 6a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:66:C2:46:0C:FB:FE:24:29:F0:B5:67:BB:69:5B:5F:12:97:EA:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627cfcbd-dea0-4a66-8797-dc40d8b87244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:8040::/48 Signature Algorithm: sha256WithRSAEncryption cb:d5:12:1a:c8:ed:4b:37:e8:59:a7:a8:63:ed:95:b8:af:49: 7e:82:55:9c:0f:60:2f:dc:d2:74:30:83:15:ae:d4:8c:15:37: 48:37:81:23:f1:ff:b4:ad:53:67:91:53:d7:39:2f:bb:f6:43: 08:4d:dd:76:14:c8:12:e8:d9:33:9e:0f:0c:03:8c:16:c2:41: 2d:b3:9e:01:71:9f:be:99:69:f1:e6:f9:5e:1d:38:a6:79:1e: 5a:72:3a:5c:ad:88:e6:2c:75:4a:c2:16:b8:ad:51:60:fa:29: e2:79:65:00:01:12:25:ff:a8:e7:a6:56:0d:df:ac:78:bc:c5: 2c:86:e7:61:59:3c:b2:a6:4a:85:f4:1c:e0:39:0c:f0:be:a2: e3:7a:ed:50:66:e7:53:17:90:5f:bf:97:b7:04:56:57:68:14: ee:26:11:b9:29:4e:4b:fc:85:3d:70:fe:93:48:55:5b:52:13: e0:68:d9:9f:fb:7d:8f:f6:e6:c8:5f:bc:e1:1e:7a:19:b9:e6: 57:37:f1:ce:56:b3:34:61:47:0a:86:f0:cb:0e:53:3a:c1:80: df:3d:78:12:20:89:fa:cc:5c:52:02:4a:e2:7b:3a:c8:f7:a3: 93:4c:d7:f0:f7:f5:4d:5f:5c:be:3d:2d:c0:ff:29:a5:aa:30: 57:15:6a:ce -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWBkNvLyP3faQoPU3/tEuuPRV6ZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI2MDAxMDI1WhcNMjUwNDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyODQ2MTY4NTMyYmEzYjdlOWMwZTIyODM5ZDA2NjQzMDNk YWIwNWU4Y2Q3MjY0M2JiZjdjNWJmNjRjZGI5NWVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+zdk+YZe3xhEZVb4xMaXkB1Vc23AD3XcMY3To2M96LF3N CdxffaicmVdbwH6/bNEuJTX1ThidLVtKdEc1begv0dCLrUNBLrGtUAN1kVbpWMF+ RTNIGu8Ct96ZHRoi/+x3q295XYtDgdiFIJgFC8zQ+n+rvk3lg5RGMrtRSki1MOU2 RmGyWDc5fW1ggaSbr8w3iwFwMB+fp67WRE31hlf46VPTYaYKeDRZ13WQYBOsduAG Ipfv7/8S4h+VNrf2dMUP0a5ZsxEn7il62FuQiOxMGMPpcagrgrGxtMxeTHXBHkHO sXRJlLV33ofo+k2V7SLpoyKIh5//Ub4JfepOfWp3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfWbCRgz7/iQp8LVnu2lbXxKX6lowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYyN2NmY2JkLWRlYTAtNGE2Ni04Nzk3LWRjNDBkOGI4NzI0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84gEAwDQYJKoZIhvcNAQELBQADggEBAMvVEhrI7Us36FmnqGPtlbiv SX6CVZwPYC/c0nQwgxWu1IwVN0g3gSPx/7StU2eRU9c5L7v2QwhN3XYUyBLo2TOe DwwDjBbCQS2zngFxn76ZafHm+V4dOKZ5HlpyOlytiOYsdUrCFritUWD6KeJ5ZQAB EiX/qOemVg3frHi8xSyG52FZPLKmSoX0HOA5DPC+ouN67VBm51MXkF+/l7cEVldo FO4mEbkpTkv8hT1w/pNIVVtSE+Bo2Z/7fY/25shfvOEeehm55lc38c5WszRhRwqG 8MsOUzrBgN89eBIgifrMXFICSuJ7Osj3o5NM1/D39U1fXL49LcD/KaWqMFcVas4= -----END CERTIFICATE-----Generated at Sat Apr 5 16:50:49 2025 by rpki-client