$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0dc793d-9eee-4685-9f69-65a430499e3a.roa File: a0dc793d-9eee-4685-9f69-65a430499e3a.roa (raw, json) Hash identifier: Fhp0noBejKXwrigh1/QRTlN+GHjQj9KVnhCiAzT1nYE= Subject key identifier: 69:07:82:2F:6B:CB:D5:44:0E:E3:30:02:7F:8D:4D:7E:83:E2:D7:E5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3800E30E2589409665BF93CAA98F033144427DA4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0dc793d-9eee-4685-9f69-65a430499e3a.roa Signing time: Fri 14 Mar 2025 00:21:33 +0000 ROA not before: Fri 14 Mar 2025 00:21:33 +0000 ROA not after: Fri 18 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f22::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:00:e3:0e:25:89:40:96:65:bf:93:ca:a9:8f:03:31:44:42:7d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 14 00:21:33 2025 GMT Not After : Apr 18 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:83:06:0f:dd:fa:05:f2:75:3f:6a:ac:eb: 5b:ec:ac:46:93:c5:6f:b2:59:b9:49:a2:7a:13:45: 06:cf:ce:7a:b7:bd:18:60:ff:62:23:23:2c:a0:54: ea:49:d0:54:27:af:35:23:3e:1e:7a:70:d4:b3:73: 6d:e6:7f:e8:88:5f:7a:fe:72:67:57:a1:99:07:12: 81:3b:f6:fe:19:50:21:5d:50:e8:bb:e1:71:b9:1e: a8:ac:46:46:13:88:ad:20:d1:04:78:71:b5:be:99: a5:7c:d2:a3:a1:00:a4:0b:19:e9:11:38:f7:47:8e: 0b:7e:e2:cb:05:6a:13:d8:32:fd:d2:3a:a2:70:8b: ae:9f:7b:13:36:89:ff:ab:1d:c9:80:c0:95:79:af: 2c:29:d4:ca:51:51:2c:d5:f0:d2:98:7c:91:dd:d6: 23:88:1f:4d:ea:f5:c6:82:72:65:a3:34:eb:f4:21: d6:7e:26:f9:a9:b1:d6:97:b5:e3:d9:46:7b:8a:86: c7:d2:c5:c3:1d:71:bf:31:df:57:e6:23:43:cb:ff: 57:cd:b1:71:48:04:51:3c:7c:8c:4a:36:a1:1b:f1: e5:7d:0d:0c:a5:68:1b:36:7e:ae:a9:c9:0f:11:f7: 0a:f6:cf:9c:52:69:ff:0b:16:03:28:55:9d:6c:d6: e7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:07:82:2F:6B:CB:D5:44:0E:E3:30:02:7F:8D:4D:7E:83:E2:D7:E5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0dc793d-9eee-4685-9f69-65a430499e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f22::/36 Signature Algorithm: sha256WithRSAEncryption 35:03:e1:5e:1f:82:ba:7f:ac:68:f9:f4:27:9e:54:3d:7a:7a: 7d:9c:60:97:90:07:e3:31:20:b4:2b:a7:62:03:44:b3:50:50: 2c:24:8c:1b:cf:e9:45:bb:09:b4:6a:17:99:fb:d6:54:26:db: d5:c9:75:15:a2:c0:d6:15:3c:8c:d1:dd:47:74:1d:a2:e5:ba: f1:57:5a:9c:7b:91:6c:31:f9:5e:0c:0c:58:72:f0:c5:0a:5b: 25:7a:f1:58:00:04:64:e6:21:e3:9d:7e:c9:17:71:99:65:35: 45:bf:a8:b2:e8:ce:37:89:2b:cf:92:29:7d:bb:71:7b:4d:26: 44:e7:32:68:b0:eb:4d:d2:b1:af:7e:90:c2:e6:42:a3:df:af: 76:51:42:60:de:04:5b:b4:ce:01:72:90:87:92:7a:7c:14:fe: 03:f8:f7:ec:fe:06:d6:78:f2:17:a4:39:9e:d5:88:86:95:57: 68:1f:54:e9:0e:dd:d9:ce:35:e2:fd:ad:4b:b3:ec:ea:88:4e: 7f:07:c4:c1:57:3e:64:e1:07:4d:f9:54:32:a1:1e:43:81:38: 9b:39:39:3e:f5:1f:5e:fb:6a:6b:23:6e:5e:19:cf:c2:8e:47: 30:83:25:13:0a:3e:1a:21:23:bc:b2:1f:96:1f:97:b2:73:0f: 38:20:82:2a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOADjDiWJQJZlv5PKqY8DMURCfaQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE0MDAyMTMzWhcNMjUwNDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDI1MDVjMzE4OGE1MmUyYzRjOGE0YjAyYjk1M2ViOTky MDQ2M2I1YmFhZTZmZDVkYzc3OTBlODcwZWUzY2YyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPNYMGD936BfJ1P2qs61vsrEaTxW+yWblJonoTRQbPznq3 vRhg/2IjIyygVOpJ0FQnrzUjPh56cNSzc23mf+iIX3r+cmdXoZkHEoE79v4ZUCFd UOi74XG5HqisRkYTiK0g0QR4cbW+maV80qOhAKQLGekROPdHjgt+4ssFahPYMv3S OqJwi66fexM2if+rHcmAwJV5rywp1MpRUSzV8NKYfJHd1iOIH03q9caCcmWjNOv0 IdZ+JvmpsdaXtePZRnuKhsfSxcMdcb8x31fmI0PL/1fNsXFIBFE8fIxKNqEb8eV9 DQylaBs2fq6pyQ8R9wr2z5xSaf8LFgMoVZ1s1ufjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUaQeCL2vL1UQO4zACf41NfoPi1+UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EwZGM3OTNkLTllZWUtNDY4NS05ZjY5LTY1YTQzMDQ5OWUzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8iADANBgkqhkiG9w0BAQsFAAOCAQEANQPhXh+Cun+saPn0J55UPXp6 fZxgl5AH4zEgtCunYgNEs1BQLCSMG8/pRbsJtGoXmfvWVCbb1cl1FaLA1hU8jNHd R3QdouW68VdanHuRbDH5XgwMWHLwxQpbJXrxWAAEZOYh451+yRdxmWU1Rb+osujO N4krz5Ipfbtxe00mROcyaLDrTdKxr36QwuZCo9+vdlFCYN4EW7TOAXKQh5J6fBT+ A/j37P4G1njyF6Q5ntWIhpVXaB9U6Q7d2c414v2tS7Ps6ohOfwfEwVc+ZOEHTflU MqEeQ4E4mzk5PvUfXvtqayNuXhnPwo5HMIMlEwo+GiEjvLIflh+XsnMPOCCCKg== -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:41 2025 by rpki-client