$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bb24ed8-8eb1-40cc-b358-3930146ef88a.roa File: 7bb24ed8-8eb1-40cc-b358-3930146ef88a.roa (raw, json) Hash identifier: qze6+BWEUp/54IiScqxqFzDL/LsrqLSJdXyyjJK+0fI= Subject key identifier: 33:73:26:3A:DC:A6:5E:8D:00:37:60:7B:9E:97:C0:01:63:53:28:87 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6E95920D0627DF7175190A43888A430E63FD1040 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bb24ed8-8eb1-40cc-b358-3930146ef88a.roa Signing time: Fri 28 Mar 2025 16:00:21 +0000 ROA not before: Fri 28 Mar 2025 16:00:21 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:7480::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:95:92:0d:06:27:df:71:75:19:0a:43:88:8a:43:0e:63:fd:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 16:00:21 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:2d:76:c5:5a:b8:63:62:4c:8e:83:f8:20: 5d:af:78:20:1d:d0:50:07:32:d6:ee:68:f4:79:be: 62:e1:69:e4:a0:70:ed:4c:aa:01:0a:c0:60:d2:d9: bc:16:e1:55:c8:43:5a:b6:db:4d:b3:b0:48:2c:b5: a4:6b:82:a5:3c:5e:f7:99:33:64:42:44:40:98:8d: 31:66:4c:a8:ce:15:17:1f:17:ca:09:f2:e3:bc:ca: 58:22:04:f1:92:0e:c6:49:dc:e2:bb:7d:39:08:60: 77:15:33:77:78:48:4a:a1:d3:38:c3:d0:19:6d:e1: 53:07:84:83:da:6b:5d:de:98:cb:0f:ea:63:14:c9: 6b:10:48:a7:30:cf:b9:83:91:a1:52:e2:e2:2d:3a: 17:6e:a4:81:cc:d2:b3:f5:44:b1:ae:c8:e3:5d:df: 47:05:3d:ee:ec:37:38:07:2f:5a:cf:3a:8c:69:58: 43:14:04:f8:3e:a0:9e:58:5c:38:87:6e:7b:d2:04: cb:74:be:b1:30:db:5b:95:cb:0f:c4:38:b7:0d:06: b9:c5:0b:c0:2f:97:eb:04:36:df:ad:5a:87:c4:3f: 46:cd:77:b1:1e:e8:e4:58:2f:da:58:8e:3b:6b:3b: 47:b6:d2:62:df:cc:57:13:4e:bd:be:50:7f:6f:4b: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:73:26:3A:DC:A6:5E:8D:00:37:60:7B:9E:97:C0:01:63:53:28:87 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bb24ed8-8eb1-40cc-b358-3930146ef88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:7480::/46 Signature Algorithm: sha256WithRSAEncryption 90:10:36:a7:38:e2:e4:e3:30:cf:3d:70:e4:f8:5a:19:92:04: 5f:fb:4c:c4:79:bd:61:40:0d:0d:34:83:89:4a:d8:b3:bc:74: e6:90:4a:23:55:11:90:32:1a:15:33:48:f7:f8:d1:04:60:d7: ab:f3:e7:fb:db:fc:dd:8d:55:b1:21:6e:66:4e:8f:73:9d:8b: 92:0a:ed:36:3a:f3:3a:b8:de:03:0b:bc:0a:5a:93:0d:57:8b: 1c:e8:6a:b1:61:17:2d:79:e5:3e:3d:87:2d:a7:96:63:95:8c: de:33:51:b5:55:d9:99:f7:83:d2:33:75:04:5a:c5:15:8b:91: 5b:9c:76:d0:89:40:84:47:48:51:f5:e8:fa:e2:7d:a4:6a:ec: d5:b7:21:8f:2d:ad:6f:25:86:f6:ca:6d:51:cb:ed:4c:74:59: 90:5e:4f:ba:6f:f3:90:7e:97:99:c9:b0:26:dd:ba:8b:22:d4: 73:da:23:0a:b2:d2:58:1b:91:20:60:88:02:b6:1d:07:7a:46: ed:7d:43:52:4e:ee:2b:62:37:45:1b:c4:85:01:37:01:80:87: d4:ac:c6:b5:0b:5a:88:d0:82:24:33:2d:a5:73:e1:4a:67:c2: 69:ed:ad:cf:20:2f:27:3d:9d:99:ae:30:f6:80:f1:0f:70:50: a7:2e:08:04 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbpWSDQYn33F1GQpDiIpDDmP9EEAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTYwMDIxWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjODM4ZmQ4YWVlMTEwYjk0ZTMwY2FkNGZlM2YzZTAyNDMw MzJiMjQ4NmQ0NzU4YTRlZjA0Mzc4MjMxMTcyZWFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3Ry12xVq4Y2JMjoP4IF2veCAd0FAHMtbuaPR5vmLhaeSg cO1MqgEKwGDS2bwW4VXIQ1q2202zsEgstaRrgqU8XveZM2RCRECYjTFmTKjOFRcf F8oJ8uO8ylgiBPGSDsZJ3OK7fTkIYHcVM3d4SEqh0zjD0Blt4VMHhIPaa13emMsP 6mMUyWsQSKcwz7mDkaFS4uItOhdupIHM0rP1RLGuyONd30cFPe7sNzgHL1rPOoxp WEMUBPg+oJ5YXDiHbnvSBMt0vrEw21uVyw/EOLcNBrnFC8Avl+sENt+tWofEP0bN d7Ee6ORYL9pYjjtrO0e20mLfzFcTTr2+UH9vSz7nAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUM3MmOtymXo0AN2B7npfAAWNTKIcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdiYjI0ZWQ4LThlYjEtNDBjYy1iMzU4LTM5MzAxNDZlZjg4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3dIAwDQYJKoZIhvcNAQELBQADggEBAJAQNqc44uTjMM89cOT4WhmS BF/7TMR5vWFADQ00g4lK2LO8dOaQSiNVEZAyGhUzSPf40QRg16vz5/vb/N2NVbEh bmZOj3Odi5IK7TY68zq43gMLvApakw1XixzoarFhFy155T49hy2nlmOVjN4zUbVV 2Zn3g9IzdQRaxRWLkVucdtCJQIRHSFH16PrifaRq7NW3IY8trW8lhvbKbVHL7Ux0 WZBeT7pv85B+l5nJsCbduosi1HPaIwqy0lgbkSBgiAK2HQd6Ru19Q1JO7itiN0Ub xIUBNwGAh9SsxrULWojQgiQzLaVz4Upnwmntrc8gLyc9nZmuMPaA8Q9wUKcuCAQ= -----END CERTIFICATE-----Generated at Sun Apr 6 16:19:21 2025 by rpki-client