$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4c6cd78-6139-435b-a258-a601228d052a.roa File: b4c6cd78-6139-435b-a258-a601228d052a.roa (raw, json) Hash identifier: UbJnMYfWv57UbiDeTUdwAvvd4p7pZAeHyc2o6TYY9vU= Subject key identifier: A4:86:B5:44:DE:DA:07:45:16:20:B5:AD:90:70:94:8D:4B:76:E1:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 266A88948F460D8641E13BCD84A00B3D63E078CE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4c6cd78-6139-435b-a258-a601228d052a.roa Signing time: Fri 28 Mar 2025 16:21:09 +0000 ROA not before: Fri 28 Mar 2025 16:21:09 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f36:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6a:88:94:8f:46:0d:86:41:e1:3b:cd:84:a0:0b:3d:63:e0:78:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 16:21:09 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:90:4d:7c:f7:91:0b:08:62:85:4f:81:49: f5:cf:e2:ec:d5:f7:34:a5:37:d4:ad:b0:53:a1:7b: 15:82:a3:e6:3a:66:fc:94:e5:99:19:59:83:70:9e: a9:d7:99:12:89:64:fc:6b:15:cd:01:10:3b:94:5e: f4:91:0c:42:71:43:ea:17:81:34:1a:64:53:ea:ae: 3e:5b:bd:39:60:a0:5f:72:61:17:b5:9f:4e:38:45: ad:d0:26:02:e4:7a:6c:bf:31:32:3e:0c:ae:17:34: 34:ff:a3:2c:6d:9a:de:60:74:f4:29:68:71:dd:bd: 9b:a3:aa:ec:c5:2d:a1:72:e1:36:52:17:a0:36:e9: 2d:a1:fc:2d:15:62:3b:f4:07:50:8c:13:ec:e3:ac: d1:06:99:25:58:df:85:2f:3f:77:80:b7:51:36:b7: d2:c2:e1:2e:95:f1:35:ed:2b:d4:02:e1:70:ad:30: 2a:ae:f5:13:58:fc:22:14:cb:ae:b1:44:a2:00:8d: f5:6f:b5:e8:e1:07:2c:f1:fb:75:38:47:a7:07:9a: af:6c:cb:d7:fb:95:55:dd:6d:7e:bc:41:e3:35:ea: ed:2a:49:c9:82:c8:14:70:c2:c9:36:71:4c:ae:ed: b0:a1:32:24:c9:78:b1:be:ac:60:d7:9e:8d:71:8c: ac:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:86:B5:44:DE:DA:07:45:16:20:B5:AD:90:70:94:8D:4B:76:E1:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4c6cd78-6139-435b-a258-a601228d052a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f36:6000::/40 Signature Algorithm: sha256WithRSAEncryption a7:ad:05:b2:b4:8f:84:a0:62:1f:89:04:0a:64:da:12:13:76: 36:ae:cb:e1:e4:b3:2c:86:3b:5a:b7:2b:49:60:58:12:38:1f: 8b:28:91:b4:a2:99:9f:52:50:76:28:65:f1:b8:59:15:45:27: 79:cd:1e:a2:ad:2a:d9:e7:4c:51:b8:04:7d:f0:f8:fc:62:0c: 70:45:7c:6d:ea:d0:cd:a3:f8:42:3f:c4:bb:3d:bc:6f:c9:f2: 5a:1e:92:92:99:5d:62:18:d1:fe:9f:ec:92:da:85:9b:a6:44: 31:6c:9d:48:ce:7a:e0:e6:a6:5f:f2:b2:24:9e:40:4d:ce:f1: 0a:95:82:81:02:b5:94:88:4e:8c:dc:5f:39:ed:b7:a4:64:73: a0:05:89:55:b3:3d:e4:e3:5f:3a:b0:58:95:76:95:2a:cf:f8: 7a:7a:f3:86:98:29:00:28:21:33:cf:01:ff:d2:94:dd:c4:9c: 8b:83:43:99:51:8b:80:5e:aa:68:cc:36:c7:99:1c:1d:ec:7a: 79:91:ac:8d:7b:35:92:54:da:b2:34:05:58:ea:85:4d:01:c6: 41:bb:bf:88:46:75:61:cc:68:6f:2c:67:c3:71:ab:80:62:f0: 07:48:56:81:e3:af:3e:4b:a8:77:ac:56:2b:1b:40:29:5e:e9: ce:5b:1e:2d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJmqIlI9GDYZB4TvNhKALPWPgeM4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTYyMTA5WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNmYxZGE1YmY5OWY3OWRmZWQ4ZjdjNjZmODFmYjJlYTA2 NDM3ZmZiYzQ1ODNkMmQ4ZjkwZTI1Nzk0ZTcyNjg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC82pBNfPeRCwhihU+BSfXP4uzV9zSlN9StsFOhexWCo+Y6 ZvyU5ZkZWYNwnqnXmRKJZPxrFc0BEDuUXvSRDEJxQ+oXgTQaZFPqrj5bvTlgoF9y YRe1n044Ra3QJgLkemy/MTI+DK4XNDT/oyxtmt5gdPQpaHHdvZujquzFLaFy4TZS F6A26S2h/C0VYjv0B1CME+zjrNEGmSVY34UvP3eAt1E2t9LC4S6V8TXtK9QC4XCt MCqu9RNY/CIUy66xRKIAjfVvtejhByzx+3U4R6cHmq9sy9f7lVXdbX68QeM16u0q ScmCyBRwwsk2cUyu7bChMiTJeLG+rGDXno1xjKxpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUpIa1RN7aB0UWILWtkHCUjUt24Z4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0YzZjZDc4LTYxMzktNDM1Yi1hMjU4LWE2MDEyMjhkMDUyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB82YDANBgkqhkiG9w0BAQsFAAOCAQEAp60FsrSPhKBiH4kECmTaEhN2 Nq7L4eSzLIY7WrcrSWBYEjgfiyiRtKKZn1JQdihl8bhZFUUnec0eoq0q2edMUbgE ffD4/GIMcEV8berQzaP4Qj/Euz28b8nyWh6SkpldYhjR/p/sktqFm6ZEMWydSM56 4OamX/KyJJ5ATc7xCpWCgQK1lIhOjNxfOe23pGRzoAWJVbM95ONfOrBYlXaVKs/4 enrzhpgpACghM88B/9KU3cSci4NDmVGLgF6qaMw2x5kcHex6eZGsjXs1klTasjQF WOqFTQHGQbu/iEZ1Ycxobyxnw3GrgGLwB0hWgeOvPkuod6xWKxtAKV7pzlseLQ== -----END CERTIFICATE-----Generated at Sat Apr 5 13:22:38 2025 by rpki-client