$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68741dfa-970e-40b1-b982-550542df93e6.roa File: 68741dfa-970e-40b1-b982-550542df93e6.roa (raw, json) Hash identifier: qU+SmsLV1v5lDqqEAy/V3t/JTWCK5F1Zh3hvveaBVh8= Subject key identifier: 20:53:FB:11:B9:A9:1A:C7:A8:09:D5:9D:E7:17:6F:57:A9:2A:3F:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D6E5CAC29BAA3FF4661AA66A06D2DA204DC3FB3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68741dfa-970e-40b1-b982-550542df93e6.roa Signing time: Wed 26 Mar 2025 00:20:59 +0000 ROA not before: Wed 26 Mar 2025 00:20:59 +0000 ROA not after: Wed 30 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:3480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6e:5c:ac:29:ba:a3:ff:46:61:aa:66:a0:6d:2d:a2:04:dc:3f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 26 00:20:59 2025 GMT Not After : Apr 30 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:f8:b4:0e:7f:15:c4:8d:b3:d6:9b:79:2e: 0d:82:a2:c5:28:33:e5:74:73:30:d6:53:c4:86:4b: 98:73:33:52:62:53:37:85:5b:60:ff:65:60:ad:55: 57:8c:73:a7:68:cc:5d:00:cf:84:a4:c5:16:ea:a2: 35:5a:39:1f:9b:b9:29:be:93:eb:b3:ef:de:12:66: 52:9b:2d:83:2b:b2:89:66:fc:c1:27:33:f7:ce:b7: 7a:9f:19:0e:06:06:ca:5a:7b:a6:ab:df:33:1a:43: aa:c9:9c:30:9c:38:42:b9:3c:f0:24:1b:e3:47:33: 85:84:9d:59:17:ec:eb:e6:2b:03:56:c0:47:da:3b: 41:d9:55:e8:92:42:6d:23:d4:4a:e9:3a:ce:7c:4c: a5:6a:a4:2b:c0:af:2d:42:7e:d1:4f:75:46:81:ae: af:40:27:67:c5:e0:c6:c9:15:d6:a3:04:22:74:fd: b6:9c:46:56:19:ff:71:46:c3:e6:e1:54:9b:2f:35: cd:c1:82:95:99:2f:52:49:85:89:4e:33:76:0c:83: 48:24:98:1e:2d:95:a2:8c:41:0a:ec:b0:4e:4b:42: 66:56:7e:d4:28:37:a5:ea:4e:32:6a:4d:bf:78:22: 1f:2f:1f:39:fc:ea:12:54:62:e3:3a:d1:4a:65:0e: dc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:53:FB:11:B9:A9:1A:C7:A8:09:D5:9D:E7:17:6F:57:A9:2A:3F:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68741dfa-970e-40b1-b982-550542df93e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:3480::/48 Signature Algorithm: sha256WithRSAEncryption ad:aa:7e:9d:26:08:e2:62:6b:1f:dc:c9:5f:55:c2:87:2b:0e: 33:d2:91:cd:98:9b:4f:f6:ef:db:82:06:f6:71:8f:55:23:3f: 8f:a9:09:1a:9d:1b:67:4d:3b:c3:1d:cd:e0:f0:ba:97:0d:2b: 11:19:9c:9d:7c:9e:3f:7b:8c:8c:5e:15:69:8f:58:55:23:86: e7:bd:28:c0:5c:33:42:11:e7:cf:3b:b1:c7:1a:cd:1a:0b:15: 25:eb:93:8c:b0:92:4b:92:fd:77:b2:5b:d9:75:a3:49:b3:6d: 31:42:27:cd:27:84:21:77:c9:72:9a:b4:4c:ec:82:3c:d6:dd: 31:ee:95:ec:61:b2:e1:3a:95:58:0c:4b:13:40:1e:00:55:60: 9e:a4:e0:1a:e0:61:73:7a:8b:23:b5:a3:ca:77:45:db:26:d6: 57:9b:14:87:e9:26:87:18:8d:16:e2:f6:5d:b8:bc:21:26:98: 8b:58:da:6b:d6:11:a7:16:5b:3d:34:e5:e4:53:f4:b2:e2:4f: 0c:31:17:3a:c7:0b:79:8a:81:76:e0:c2:bd:47:b2:36:f2:d1: 18:27:b7:85:fd:6b:f9:29:8a:56:06:a8:79:39:24:3d:8c:af: 04:a2:89:93:9e:c4:88:7f:32:9a:b9:ac:92:04:36:36:cc:51: 96:d8:cd:60 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPW5crCm6o/9GYapmoG0togTcP7MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI2MDAyMDU5WhcNMjUwNDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTAwYzk5MjQ0OGQ5NDRjMTJhODMxODlmMDdmNzMwNDhi MzllYmMyOTE5MGI5ZDAzYjRjODdhMTE1NDdmMDgyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNoPi0Dn8VxI2z1pt5Lg2CosUoM+V0czDWU8SGS5hzM1Ji UzeFW2D/ZWCtVVeMc6dozF0Az4SkxRbqojVaOR+buSm+k+uz794SZlKbLYMrsolm /MEnM/fOt3qfGQ4GBspae6ar3zMaQ6rJnDCcOEK5PPAkG+NHM4WEnVkX7OvmKwNW wEfaO0HZVeiSQm0j1ErpOs58TKVqpCvAry1CftFPdUaBrq9AJ2fF4MbJFdajBCJ0 /bacRlYZ/3FGw+bhVJsvNc3BgpWZL1JJhYlOM3YMg0gkmB4tlaKMQQrssE5LQmZW ftQoN6XqTjJqTb94Ih8vHzn86hJUYuM60UplDtw7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIFP7EbmpGseoCdWd5xdvV6kqP2QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY4NzQxZGZhLTk3MGUtNDBiMS1iOTgyLTU1MDU0MmRmOTNlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//NIAwDQYJKoZIhvcNAQELBQADggEBAK2qfp0mCOJiax/cyV9Vwocr DjPSkc2Ym0/279uCBvZxj1UjP4+pCRqdG2dNO8MdzeDwupcNKxEZnJ18nj97jIxe FWmPWFUjhue9KMBcM0IR5887sccazRoLFSXrk4ywkkuS/XeyW9l1o0mzbTFCJ80n hCF3yXKatEzsgjzW3THulexhsuE6lVgMSxNAHgBVYJ6k4BrgYXN6iyO1o8p3Rdsm 1lebFIfpJocYjRbi9l24vCEmmItY2mvWEacWWz005eRT9LLiTwwxFzrHC3mKgXbg wr1Hsjby0Rgnt4X9a/kpilYGqHk5JD2MrwSiiZOexIh/Mpq5rJIENjbMUZbYzWA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:22:06 2025 by rpki-client