$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98dd07b0-57c5-4d57-a48c-9b2adecccaec.roa File: 98dd07b0-57c5-4d57-a48c-9b2adecccaec.roa (raw, json) Hash identifier: kE5ljyigFIrjE3nLxZ/H1ytbWBHK4x08GBZgS7LN38M= Subject key identifier: 72:05:24:9C:69:75:50:1F:45:7F:1A:86:59:1A:9D:D0:3F:0D:25:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C7F9DD77BEC261A4D519500ED8FA8F081AA55CA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98dd07b0-57c5-4d57-a48c-9b2adecccaec.roa Signing time: Fri 28 Mar 2025 00:32:22 +0000 ROA not before: Fri 28 Mar 2025 00:32:22 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:5080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7f:9d:d7:7b:ec:26:1a:4d:51:95:00:ed:8f:a8:f0:81:aa:55:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 00:32:22 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:10:e0:d6:19:63:ae:af:a4:e0:eb:33:b0: 9e:ee:8e:51:83:40:4d:f2:eb:fe:6a:5d:cf:8d:be: cc:d8:0e:51:13:51:a0:36:dc:f3:2f:8d:1b:84:55: af:50:8f:9c:1c:5b:93:e1:5b:b1:65:a3:8a:35:05: 4c:fe:d9:dd:bc:6f:41:3e:62:0e:0f:b4:a0:a2:21: ea:da:7f:2b:33:62:98:c9:10:69:9c:a7:2b:83:3b: 0c:33:9d:7a:04:69:1f:6a:c2:3a:88:50:d2:d1:16: 84:c8:35:5d:ce:49:36:f4:95:75:0a:30:05:ca:da: 90:36:94:09:ef:97:23:cd:dc:0c:5b:bf:85:e3:6b: e1:30:be:be:fd:96:e0:c2:a1:c6:e6:14:2a:f2:02: 20:f4:37:7c:d3:9e:8e:1e:6f:88:cd:86:f0:69:9e: 5f:f0:94:b2:df:57:f7:0f:00:0d:7f:e7:39:49:d0: 18:ab:4e:04:20:e7:b6:b7:5d:73:9c:40:42:2b:f6: ee:a3:56:ec:3f:55:c1:bc:6a:47:25:d3:8b:e1:ba: 9a:5c:d5:9b:55:6c:ed:aa:6f:95:57:ff:2e:ba:e0: c2:54:19:b0:28:76:9a:6c:c9:c6:95:c5:d2:24:21: 01:dc:c9:9a:f9:dd:c8:a4:b7:92:be:2a:a3:38:fc: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:05:24:9C:69:75:50:1F:45:7F:1A:86:59:1A:9D:D0:3F:0D:25:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98dd07b0-57c5-4d57-a48c-9b2adecccaec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:5080::/48 Signature Algorithm: sha256WithRSAEncryption c1:65:06:20:53:ff:8f:1c:29:f2:80:ce:71:70:b5:bf:b4:bf: 25:4d:d6:e5:1c:84:01:11:63:32:63:bb:2d:69:8a:bd:85:26: 94:7f:68:90:1e:4a:27:42:c0:dc:4c:16:ce:66:79:0a:1e:6d: 7d:eb:bb:ab:03:92:76:52:75:46:02:4d:81:a3:f8:34:0a:99: 00:7c:1e:ca:ef:15:22:22:b0:bc:fe:56:4c:05:b0:6e:71:a9: 9d:b8:31:f2:76:f8:f9:a8:20:92:dc:17:50:08:49:f8:5e:33: 3c:eb:38:a4:c5:80:d2:3a:44:2d:ec:d4:d7:c8:34:24:61:bf: f2:67:da:be:a7:4b:02:a2:38:e2:64:e1:df:c2:04:c9:58:94: 4b:f0:0c:93:e2:82:89:8b:0f:69:02:64:19:73:07:df:f0:13: 5f:0a:e3:b3:9f:45:3c:a5:f6:ca:38:f7:f1:03:07:30:15:a5: 79:cc:cd:b8:13:05:68:cc:9f:fd:d0:a4:93:5a:31:64:67:17: 75:43:d2:56:ff:68:cc:e5:32:b4:51:b2:4a:97:85:f9:b6:9b: cb:c2:c4:20:3d:8d:8a:96:f1:ee:7b:14:86:b6:70:00:28:99: 88:73:b9:96:a1:e8:8a:4b:f8:36:b9:74:5c:78:cd:96:a5:18: 0a:7c:1c:6d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPH+d13vsJhpNUZUA7Y+o8IGqVcowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDAzMjIyWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzg0NTUxNDNiMTVhZGMxYmM3ZjliNTI4NjcyZjY3YTEy ODRiYjYwNWI0YTM0MGVjZDNlYTU0N2RmOGJlNDc3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNPhDg1hljrq+k4OszsJ7ujlGDQE3y6/5qXc+NvszYDlET UaA23PMvjRuEVa9Qj5wcW5PhW7Flo4o1BUz+2d28b0E+Yg4PtKCiIerafyszYpjJ EGmcpyuDOwwznXoEaR9qwjqIUNLRFoTINV3OSTb0lXUKMAXK2pA2lAnvlyPN3Axb v4Xja+Ewvr79luDCocbmFCryAiD0N3zTno4eb4jNhvBpnl/wlLLfV/cPAA1/5zlJ 0BirTgQg57a3XXOcQEIr9u6jVuw/VcG8akcl04vhuppc1ZtVbO2qb5VX/y664MJU GbAodppsycaVxdIkIQHcyZr53cikt5K+KqM4/JtHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcgUknGl1UB9FfxqGWRqd0D8NJRowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4ZGQwN2IwLTU3YzUtNGQ1Ny1hNDhjLTliMmFkZWNjY2FlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AUIAwDQYJKoZIhvcNAQELBQADggEBAMFlBiBT/48cKfKAznFwtb+0 vyVN1uUchAERYzJjuy1pir2FJpR/aJAeSidCwNxMFs5meQoebX3ru6sDknZSdUYC TYGj+DQKmQB8HsrvFSIisLz+VkwFsG5xqZ24MfJ2+PmoIJLcF1AISfheMzzrOKTF gNI6RC3s1NfINCRhv/Jn2r6nSwKiOOJk4d/CBMlYlEvwDJPigomLD2kCZBlzB9/w E18K47OfRTyl9so49/EDBzAVpXnMzbgTBWjMn/3QpJNaMWRnF3VD0lb/aMzlMrRR skqXhfm2m8vCxCA9jYqW8e57FIa2cAAomYhzuZah6IpL+Da5dFx4zZalGAp8HG0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:30 2025 by rpki-client