$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b107bb4b-1562-43f5-84bf-bf849758b455.roa File: b107bb4b-1562-43f5-84bf-bf849758b455.roa (raw, json) Hash identifier: bg0zOtdYdnBqzPj2k19CgzDu6IuWa9NTn2uBBzTUD5s= Subject key identifier: 89:11:8D:97:3C:94:DC:E9:E8:2C:70:A7:20:5E:54:55:1E:A8:C9:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1596B770481A018646577DC41A111D6D1380F9CD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b107bb4b-1562-43f5-84bf-bf849758b455.roa Signing time: Fri 21 Mar 2025 00:11:45 +0000 ROA not before: Fri 21 Mar 2025 00:11:45 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f60:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:96:b7:70:48:1a:01:86:46:57:7d:c4:1a:11:1d:6d:13:80:f9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 21 00:11:45 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:9f:aa:36:b9:98:01:bc:ed:27:a4:65:cf: fd:29:3a:19:51:a0:e5:d7:70:f0:d2:d4:49:c4:fd: b6:d1:42:14:23:75:bd:87:6b:1c:1f:bf:6f:83:33: 8f:03:5e:15:f0:dd:48:63:79:2d:b5:ba:9a:3c:31: 4f:4e:ad:96:a6:b5:2d:55:35:be:12:59:b4:cb:58: 10:ef:41:42:dd:17:ee:e8:70:2f:f0:41:91:13:11: 3c:68:5c:60:58:38:6a:d8:bb:1e:05:e7:f2:c3:dd: 5e:6c:07:a7:74:f3:4c:94:6f:1f:75:cb:bc:f7:b0: f9:12:83:08:30:49:16:cb:55:3b:41:68:0f:42:27: e2:23:ea:dc:1f:1c:48:61:67:80:c9:2e:c3:3c:0a: 1a:ee:7a:33:36:67:c3:aa:af:38:3a:28:1f:0a:c4: 46:15:d1:f4:1f:de:d2:ae:57:4e:fb:6e:65:40:e2: 2a:7d:4b:8d:fa:1c:c2:7d:08:e5:f3:da:da:83:a4: 99:53:07:7e:ea:e9:94:19:ff:5c:53:65:99:02:13: a3:b5:e4:88:7f:4f:aa:ee:6b:aa:65:58:50:a1:a6: 77:4f:d8:c0:9a:7f:06:30:53:27:d8:10:57:8e:88: b1:33:fb:8f:3e:47:bf:9d:7c:91:08:b8:f4:64:49: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:11:8D:97:3C:94:DC:E9:E8:2C:70:A7:20:5E:54:55:1E:A8:C9:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b107bb4b-1562-43f5-84bf-bf849758b455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f60:a400::/40 Signature Algorithm: sha256WithRSAEncryption 9e:3e:58:6f:9e:a8:5a:47:aa:07:f3:5e:47:cb:0b:d4:c7:f8: e1:94:74:fd:e3:07:0e:59:9b:32:b4:2d:6f:e3:fa:7b:c1:3f: b4:df:c4:88:02:e3:f7:ca:c7:4f:4f:ac:95:2a:ff:77:8d:d2: 3b:53:9f:bb:fc:eb:6a:8c:7e:3f:4a:6b:13:70:d7:56:90:ad: bd:1f:eb:27:82:31:b7:db:27:05:ee:a6:ca:bb:e1:4c:13:38: 9e:6d:37:88:e8:f1:ef:bf:09:4b:bf:22:9e:de:90:d1:b7:33: 3c:bb:9f:f9:80:82:36:4b:8b:8f:42:4e:b5:a2:bd:46:d3:4b: 2d:14:82:81:1a:7b:ff:fa:f8:61:85:e0:ca:b6:a5:7d:e2:17: 2d:83:7c:78:52:0f:c6:c6:bd:64:99:d0:e3:d1:10:14:66:0c: 0f:26:04:02:a1:38:c3:68:2e:eb:c4:68:6a:e8:c8:a3:d8:07: e7:7c:14:dd:72:58:59:d6:c1:91:ac:23:db:eb:ba:95:d4:31: d4:b5:65:7e:84:31:4b:48:05:a3:aa:ad:ec:b2:87:21:9d:ee: 28:cd:b4:8e:06:15:b7:7f:b1:a1:40:9c:4f:87:e3:28:4b:ec: 3e:ce:71:07:ec:b4:3c:79:67:45:f2:64:a6:e2:c9:3c:06:61: d1:d9:2d:25 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFZa3cEgaAYZGV33EGhEdbROA+c0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzIxMDAxMTQ1WhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMGNlOTA5NGM2Y2Y2ZDNhNmFmNTMwMjk1NWYyZjM2YWIz NzZjNjg3NmJhN2JhOTE0NmRjYjY2OTY4ZWNjNTMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGLp+qNrmYAbztJ6Rlz/0pOhlRoOXXcPDS1EnE/bbRQhQj db2Haxwfv2+DM48DXhXw3UhjeS21upo8MU9OrZamtS1VNb4SWbTLWBDvQULdF+7o cC/wQZETETxoXGBYOGrYux4F5/LD3V5sB6d080yUbx91y7z3sPkSgwgwSRbLVTtB aA9CJ+Ij6twfHEhhZ4DJLsM8ChruejM2Z8Oqrzg6KB8KxEYV0fQf3tKuV077bmVA 4ip9S436HMJ9COXz2tqDpJlTB37q6ZQZ/1xTZZkCE6O15Ih/T6rua6plWFChpndP 2MCafwYwUyfYEFeOiLEz+48+R7+dfJEIuPRkSXTfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUiRGNlzyU3OnoLHCnIF5UVR6oyeowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxMDdiYjRiLTE1NjItNDNmNS04NGJmLWJmODQ5NzU4YjQ1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9gpDANBgkqhkiG9w0BAQsFAAOCAQEAnj5Yb56oWkeqB/NeR8sL1Mf4 4ZR0/eMHDlmbMrQtb+P6e8E/tN/EiALj98rHT0+slSr/d43SO1Ofu/zraox+P0pr E3DXVpCtvR/rJ4Ixt9snBe6myrvhTBM4nm03iOjx778JS78int6Q0bczPLuf+YCC NkuLj0JOtaK9RtNLLRSCgRp7//r4YYXgyralfeIXLYN8eFIPxsa9ZJnQ49EQFGYM DyYEAqE4w2gu68RoaujIo9gH53wU3XJYWdbBkawj2+u6ldQx1LVlfoQxS0gFo6qt 7LKHIZ3uKM20jgYVt3+xoUCcT4fjKEvsPs5xB+y0PHlnRfJkpuLJPAZh0dktJQ== -----END CERTIFICATE-----Generated at Sat Apr 5 22:03:57 2025 by rpki-client