$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984313af-1a59-4f57-8dec-958207f6c75c.roa File: 984313af-1a59-4f57-8dec-958207f6c75c.roa (raw, json) Hash identifier: DVCB84Hwbi9DJtV05eiBXhCjtoaKgepykcZncgj0EYg= Subject key identifier: FD:6F:D9:00:0F:53:22:FF:64:19:DA:7C:9E:40:12:78:60:8C:D4:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2BC2217AAF3BD46E02D50A27D222596F3CF854D0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984313af-1a59-4f57-8dec-958207f6c75c.roa Signing time: Fri 28 Mar 2025 00:20:14 +0000 ROA not before: Fri 28 Mar 2025 00:20:14 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c2:21:7a:af:3b:d4:6e:02:d5:0a:27:d2:22:59:6f:3c:f8:54:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 00:20:14 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:ac:1a:30:b2:fa:81:34:26:ef:79:81:35: f2:2e:38:d6:be:38:fc:bc:4c:75:24:08:0b:90:b2: 16:5e:f3:64:d4:94:d2:65:60:34:13:66:0e:f1:b0: fa:56:84:f8:56:60:be:64:b0:26:e2:35:7a:2e:37: 53:d9:c2:4e:2d:35:c5:0f:4b:b1:53:ba:c2:b3:f4: a7:7e:f9:38:4a:52:cf:3f:75:dc:07:5e:aa:1d:53: 4d:f7:94:7f:d7:a3:6a:2f:5b:c5:11:e7:0e:46:41: d8:28:59:fc:02:da:85:4c:69:48:48:03:8c:2d:90: 78:ff:ef:69:8d:c9:b5:60:db:b1:40:f2:de:4b:f8: 4e:7f:da:2c:00:5c:7c:93:ac:88:f5:8f:54:3c:d6: f8:c7:91:60:5d:92:22:7f:9f:56:ba:e1:6a:cd:ea: 23:50:6c:41:33:18:16:49:8b:15:67:8f:33:b8:bb: da:de:42:d5:a8:3d:e2:7e:4c:f2:06:d1:41:11:b3: 50:32:97:72:6f:4c:cd:a0:db:89:c3:e1:82:58:49: a3:81:c4:87:f2:e0:b3:46:d5:74:01:7b:b4:9d:ae: 67:01:cb:23:2f:24:db:68:fc:31:60:93:d5:84:51: 29:99:82:fa:e2:59:c6:82:1c:3a:f8:2c:af:13:e9: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6F:D9:00:0F:53:22:FF:64:19:DA:7C:9E:40:12:78:60:8C:D4:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984313af-1a59-4f57-8dec-958207f6c75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:6000::/40 Signature Algorithm: sha256WithRSAEncryption 3e:cf:dd:a9:a6:16:d4:4e:fd:df:7d:1c:d8:c2:f9:52:d2:de: c7:15:f0:6c:1e:d8:0e:3f:0b:35:f0:76:83:fe:f9:8b:52:d7: bf:0d:d2:62:0f:93:cd:47:4d:93:24:1f:6d:5b:33:a0:26:aa: 12:4f:ca:c9:4b:a9:35:9a:da:57:20:65:bc:9c:ed:ca:bb:c4: 91:41:73:67:be:41:b3:06:7f:bc:28:18:16:9a:c2:03:67:ca: 1d:ec:d8:bf:15:f8:cb:ba:c3:05:0f:6d:10:a9:fb:01:c3:36: 7f:b7:15:5b:53:12:8b:8b:66:49:f6:00:bd:33:d8:cc:e5:db: 00:ac:17:6f:36:97:72:ac:e3:43:94:8f:5b:78:b9:84:08:0c: e9:9b:cd:0b:ed:bb:ef:4b:93:b5:3f:0f:2e:db:6a:7d:c0:0a: 36:2a:63:d6:8b:00:a1:54:97:51:2a:ce:d6:7c:cd:e3:7d:80: ba:9b:84:14:93:00:15:98:1c:cc:9a:d6:d8:92:2f:72:fa:a5: 6c:ba:3e:f1:04:6b:97:0d:19:29:0a:45:c8:94:90:35:23:01: 6f:b7:7b:db:8f:cc:e5:f1:13:5f:54:97:3d:7b:8d:03:50:75: cf:cc:aa:3f:b9:64:61:c5:ca:09:d5:22:57:92:88:fe:4f:22: 84:c9:6e:a1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUK8Iheq871G4C1Qon0iJZbzz4VNAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDAyMDE0WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzVkYTA0NjQzNzZjZWE4NzBhODNlNzQwNWM2MDI1NTY2 Njg0NTk2ZTU4Nzk0NmQ5ODFhOThiMTU2MjVhZjZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCr8awaMLL6gTQm73mBNfIuONa+OPy8THUkCAuQshZe82TU lNJlYDQTZg7xsPpWhPhWYL5ksCbiNXouN1PZwk4tNcUPS7FTusKz9Kd++ThKUs8/ ddwHXqodU033lH/Xo2ovW8UR5w5GQdgoWfwC2oVMaUhIA4wtkHj/72mNybVg27FA 8t5L+E5/2iwAXHyTrIj1j1Q81vjHkWBdkiJ/n1a64WrN6iNQbEEzGBZJixVnjzO4 u9reQtWoPeJ+TPIG0UERs1Ayl3JvTM2g24nD4YJYSaOBxIfy4LNG1XQBe7SdrmcB yyMvJNto/DFgk9WEUSmZgvriWcaCHDr4LK8T6QrfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU/W/ZAA9TIv9kGdp8nkASeGCM1DowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4NDMxM2FmLTFhNTktNGY1Ny04ZGVjLTk1ODIwN2Y2Yzc1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB84YDANBgkqhkiG9w0BAQsFAAOCAQEAPs/dqaYW1E79330c2ML5UtLe xxXwbB7YDj8LNfB2g/75i1LXvw3SYg+TzUdNkyQfbVszoCaqEk/KyUupNZraVyBl vJztyrvEkUFzZ75BswZ/vCgYFprCA2fKHezYvxX4y7rDBQ9tEKn7AcM2f7cVW1MS i4tmSfYAvTPYzOXbAKwXbzaXcqzjQ5SPW3i5hAgM6ZvNC+2770uTtT8PLttqfcAK Nipj1osAoVSXUSrO1nzN432AupuEFJMAFZgczJrW2JIvcvqlbLo+8QRrlw0ZKQpF yJSQNSMBb7d724/M5fETX1SXPXuNA1B1z8yqP7lkYcXKCdUiV5KI/k8ihMluoQ== -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:36 2025 by rpki-client