$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab98bfdb-9af4-412f-87c6-d3448c52456d.roa File: ab98bfdb-9af4-412f-87c6-d3448c52456d.roa (raw, json) Hash identifier: 09EUKuybfbTO4aZ6gTdFntyCH64thxw93Ymjb/gp9BA= Subject key identifier: 52:42:E4:D5:43:53:9A:60:5D:94:D5:17:0C:72:F6:2B:C4:18:9A:4E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11C2D3CDBD9B048836F651A4C8C859F255AD4D11 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab98bfdb-9af4-412f-87c6-d3448c52456d.roa Signing time: Fri 14 Mar 2025 00:11:05 +0000 ROA not before: Fri 14 Mar 2025 00:11:05 +0000 ROA not after: Fri 18 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:8143::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c2:d3:cd:bd:9b:04:88:36:f6:51:a4:c8:c8:59:f2:55:ad:4d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 14 00:11:05 2025 GMT Not After : Apr 18 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:83:88:8b:03:04:d8:e4:fa:04:68:83:c1:2c: 47:29:e4:4c:fc:36:6c:92:13:59:8b:ba:9d:e6:11: 84:09:c9:68:b9:d2:16:93:01:0c:46:ad:e5:0a:b9: 86:a5:66:56:a5:3d:70:e0:81:8d:b0:9a:ee:c8:10: 60:a6:8d:a6:a8:10:b1:2a:d7:c5:bc:bd:e4:b3:b7: 08:ed:e6:4e:f8:0c:77:ae:02:92:7d:34:36:f5:e4: 36:28:37:42:03:a0:8a:98:9f:03:8e:7c:19:1e:89: 69:83:cc:17:1f:e6:b7:3e:b5:28:08:3f:20:4d:a0: d4:02:9d:ea:00:0f:3d:78:6c:a8:f1:9b:d5:82:1e: 6b:1e:94:c0:d6:fb:16:01:f3:3d:9a:66:31:b7:cd: ed:3b:8a:23:e1:dc:ba:0a:6d:60:1a:02:00:b5:81: 20:0d:26:1f:97:78:4b:b2:d6:00:d9:68:14:52:de: 93:84:70:99:75:c3:46:5f:04:63:67:9e:79:5b:f5: 1f:89:05:c7:46:74:e7:1b:3e:99:2a:8a:76:30:ad: 20:8a:8c:60:2a:8c:85:51:88:38:7f:2e:65:b2:f1: f3:92:cc:39:ee:c3:c4:f7:45:bf:68:93:a0:3e:43: 13:83:0a:43:fe:4b:8a:2c:55:f6:b2:00:eb:93:62: 41:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:42:E4:D5:43:53:9A:60:5D:94:D5:17:0C:72:F6:2B:C4:18:9A:4E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab98bfdb-9af4-412f-87c6-d3448c52456d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:8143::/48 Signature Algorithm: sha256WithRSAEncryption 6c:d3:d9:04:54:c5:64:6b:1e:7f:10:ba:7b:57:5a:18:c6:be: 51:3c:66:2a:d6:c2:71:80:3c:65:dc:35:91:a7:9d:b4:f3:2f: 48:5c:47:31:cf:94:08:32:8d:f3:36:f7:2d:db:9c:35:4a:d0: bc:7e:4a:bd:4c:30:45:5b:47:a7:99:e4:e3:0c:65:3a:0c:32: 4d:c7:98:ce:27:72:ed:ee:09:90:de:7a:1d:be:37:5a:31:00: 12:ac:5f:8b:67:a6:6a:0f:7e:0f:6d:a4:3e:71:83:6c:aa:e7: e0:d6:0b:cd:fb:a2:84:b2:e9:6a:57:d5:6e:18:76:7b:bd:81: 3f:be:19:76:80:0f:2f:e4:32:4b:53:09:ee:29:e8:ae:9b:be: 0e:4c:97:df:47:f3:b7:73:3c:5d:af:c3:8a:1f:13:b9:08:cc: 14:50:b3:fe:52:f4:fb:1b:c7:56:6d:41:79:6b:c1:89:35:c1: 5a:cf:23:97:13:4c:b0:a0:d8:86:ea:29:94:b7:f5:1c:44:19: 62:af:c8:ce:1e:01:d9:d7:a0:2b:68:36:a6:1d:a8:14:09:70: 1e:99:35:53:a2:05:23:60:40:96:63:88:29:f5:63:31:e1:ee: fd:60:80:99:de:1b:9d:25:7a:3f:a4:ce:e9:f6:23:b7:54:85: 83:42:e9:c9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEcLTzb2bBIg29lGkyMhZ8lWtTREwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE0MDAxMTA1WhcNMjUwNDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTI4NjNlNDVmZjdiYWM1M2ZhODQwYTk1YTRhMjE4OTQ0 MjRjNjNjOWQwYzI2OGJiYmU3ZjFkNWM5MjA0ZWM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXg4iLAwTY5PoEaIPBLEcp5Ez8NmySE1mLup3mEYQJyWi5 0haTAQxGreUKuYalZlalPXDggY2wmu7IEGCmjaaoELEq18W8veSztwjt5k74DHeu ApJ9NDb15DYoN0IDoIqYnwOOfBkeiWmDzBcf5rc+tSgIPyBNoNQCneoADz14bKjx m9WCHmselMDW+xYB8z2aZjG3ze07iiPh3LoKbWAaAgC1gSANJh+XeEuy1gDZaBRS 3pOEcJl1w0ZfBGNnnnlb9R+JBcdGdOcbPpkqinYwrSCKjGAqjIVRiDh/LmWy8fOS zDnuw8T3Rb9ok6A+QxODCkP+S4osVfayAOuTYkG7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUkLk1UNTmmBdlNUXDHL2K8QYmk4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FiOThiZmRiLTlhZjQtNDEyZi04N2M2LWQzNDQ4YzUyNDU2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gUMwDQYJKoZIhvcNAQELBQADggEBAGzT2QRUxWRrHn8QuntXWhjG vlE8ZirWwnGAPGXcNZGnnbTzL0hcRzHPlAgyjfM29y3bnDVK0Lx+Sr1MMEVbR6eZ 5OMMZToMMk3HmM4ncu3uCZDeeh2+N1oxABKsX4tnpmoPfg9tpD5xg2yq5+DWC837 ooSy6WpX1W4Ydnu9gT++GXaADy/kMktTCe4p6K6bvg5Ml99H87dzPF2vw4ofE7kI zBRQs/5S9Psbx1ZtQXlrwYk1wVrPI5cTTLCg2IbqKZS39RxEGWKvyM4eAdnXoCto NqYdqBQJcB6ZNVOiBSNgQJZjiCn1YzHh7v1ggJneG50lej+kzun2I7dUhYNC6ck= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:10 2025 by rpki-client