$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada9656c-30f4-4e44-894d-f0d706b08daa.roa File: ada9656c-30f4-4e44-894d-f0d706b08daa.roa (raw, json) Hash identifier: qHapzKu+8tDrFkWpTAA9GMNOO1zaiq/kKkDvTnqMUJ4= Subject key identifier: 53:98:37:69:1A:A7:AD:01:10:5E:81:9E:49:35:1B:56:D0:35:AA:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 59B19CC547BB1D8FD2A0A94246AFC47DDC146739 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada9656c-30f4-4e44-894d-f0d706b08daa.roa Signing time: Tue 25 Mar 2025 17:42:16 +0000 ROA not before: Tue 25 Mar 2025 17:42:16 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:34c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b1:9c:c5:47:bb:1d:8f:d2:a0:a9:42:46:af:c4:7d:dc:14:67:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 17:42:16 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:85:1b:70:b3:88:d3:2e:ee:be:0d:4b:86: a0:cc:2e:66:03:fe:2b:6c:02:d1:c4:10:5a:37:78: 6c:48:bb:ac:14:d2:37:05:aa:f0:f9:97:08:88:1c: d1:92:ed:8d:ef:63:49:53:43:2f:83:11:ce:c6:ae: 49:24:20:26:d2:c8:fc:a6:cf:20:b2:88:e1:10:c4: b8:3f:b5:65:3f:fc:05:54:73:64:90:4a:79:04:2c: d5:01:bc:db:34:1c:8b:fc:3c:05:69:ec:0d:79:62: 96:00:aa:34:8a:af:0c:f4:98:92:fd:46:34:f4:c2: 59:1b:9d:a8:06:28:76:6f:cf:51:5d:dc:ad:20:7c: 81:d3:81:cf:b4:58:58:55:2f:79:7b:50:f5:44:9b: 74:44:4b:40:92:75:06:01:a4:63:d2:b5:10:9c:c8: 62:8c:1f:7b:88:a9:a4:86:f0:9f:5e:51:8d:4e:4a: 13:da:e5:64:56:a4:77:0d:99:f4:20:2c:be:06:4d: ce:ab:21:46:84:bb:36:49:22:da:e5:84:ea:ae:16: 7d:4b:36:17:80:a7:0a:f5:b8:9c:db:b1:66:bb:c1: 34:0b:fa:d5:bc:70:d4:f1:f5:13:f7:09:9c:38:eb: 9b:6b:06:b8:f6:a1:4e:d4:91:a7:02:db:8e:cf:fb: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:98:37:69:1A:A7:AD:01:10:5E:81:9E:49:35:1B:56:D0:35:AA:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada9656c-30f4-4e44-894d-f0d706b08daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:34c0::/48 Signature Algorithm: sha256WithRSAEncryption 0a:dc:50:03:ee:7a:7f:20:bf:96:bc:96:3c:5e:b4:73:f6:66: b3:63:24:04:ca:5b:0a:17:6e:ba:fb:80:5f:0d:18:6c:ef:18: b5:3b:b5:40:a6:6e:d3:64:6e:a4:dd:d0:c3:38:30:01:81:00: 87:78:85:68:d7:2f:32:a8:7d:20:55:40:3e:83:99:be:44:a0: e9:58:9e:7b:52:17:3b:b7:e5:57:c9:19:c9:e9:b1:e5:29:b4: c2:90:bf:d8:d9:c2:52:75:6c:d0:63:5a:c0:e7:09:cb:8a:d2: d3:16:bb:19:66:c8:bb:10:4f:9d:a7:58:44:7d:76:f9:ed:81: ab:74:19:ef:ad:2e:53:9f:e6:33:48:52:aa:15:16:58:ad:fc: 7d:a2:ce:dc:68:7d:e8:9c:7f:09:79:61:e3:45:42:1e:a5:e3: c7:87:90:e6:78:7f:9b:65:21:f0:73:e6:3f:21:5c:7a:5f:1a: a4:e2:c1:62:e5:4e:ed:29:a1:bd:6f:ab:1f:ee:3d:d9:45:79: 20:e5:6d:a1:29:62:4a:8f:5b:33:16:7b:01:21:a7:36:7c:06: a9:2d:80:38:b4:f0:04:93:eb:17:f2:8a:2c:86:b4:af:21:f1: 8c:58:d5:31:ba:22:b9:32:f1:09:b4:a2:fa:d7:48:3b:fd:d3: 6e:cb:9f:ba -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWbGcxUe7HY/SoKlCRq/EfdwUZzkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTc0MjE2WhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YWVjM2JlZDNiZTc1NDNjMWE5ZjMxYzNmYmI4ZTlkMzMw ZjIxZGY3M2FkYjJlN2FmNGNmOGMxZGRlMWEwNTRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeCoUbcLOI0y7uvg1LhqDMLmYD/itsAtHEEFo3eGxIu6wU 0jcFqvD5lwiIHNGS7Y3vY0lTQy+DEc7GrkkkICbSyPymzyCyiOEQxLg/tWU//AVU c2SQSnkELNUBvNs0HIv8PAVp7A15YpYAqjSKrwz0mJL9RjT0wlkbnagGKHZvz1Fd 3K0gfIHTgc+0WFhVL3l7UPVEm3RES0CSdQYBpGPStRCcyGKMH3uIqaSG8J9eUY1O ShPa5WRWpHcNmfQgLL4GTc6rIUaEuzZJItrlhOquFn1LNheApwr1uJzbsWa7wTQL +tW8cNTx9RP3CZw465trBrj2oU7UkacC247P+6L7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUU5g3aRqnrQEQXoGeSTUbVtA1qkIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FkYTk2NTZjLTMwZjQtNGU0NC04OTRkLWYwZDcwNmIwOGRhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yNMAwDQYJKoZIhvcNAQELBQADggEBAArcUAPuen8gv5a8ljxetHP2 ZrNjJATKWwoXbrr7gF8NGGzvGLU7tUCmbtNkbqTd0MM4MAGBAId4hWjXLzKofSBV QD6Dmb5EoOlYnntSFzu35VfJGcnpseUptMKQv9jZwlJ1bNBjWsDnCcuK0tMWuxlm yLsQT52nWER9dvntgat0Ge+tLlOf5jNIUqoVFlit/H2iztxofeicfwl5YeNFQh6l 48eHkOZ4f5tlIfBz5j8hXHpfGqTiwWLlTu0pob1vqx/uPdlFeSDlbaEpYkqPWzMW ewEhpzZ8BqktgDi08AST6xfyiiyGtK8h8YxY1TG6Irky8Qm0ovrXSDv9027Ln7o= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:36 2025 by rpki-client