$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b82094ce-0b12-48a0-b623-334c153ef9e2.roa File: b82094ce-0b12-48a0-b623-334c153ef9e2.roa (raw, json) Hash identifier: 4EoJpMtMpCkalh2vdz2QK/1guCvW1KGCLJqf+5H+6Fk= Subject key identifier: FF:02:84:28:18:3A:E7:42:CA:11:03:3A:EE:77:BD:46:3E:7C:FF:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7C57E29D60A2D21CC4B5BFC7685241893B7D009D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b82094ce-0b12-48a0-b623-334c153ef9e2.roa Signing time: Fri 28 Mar 2025 00:11:13 +0000 ROA not before: Fri 28 Mar 2025 00:11:13 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8070::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:57:e2:9d:60:a2:d2:1c:c4:b5:bf:c7:68:52:41:89:3b:7d:00:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 00:11:13 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:fc:29:48:89:eb:92:0e:4e:28:aa:93:6a: 90:97:a5:e8:89:64:29:75:1f:88:4d:cb:ee:88:1c: c4:2c:3b:cd:e8:e4:e4:ec:55:c7:6e:37:85:fe:50: 16:4a:1e:16:2b:ef:30:af:fd:af:27:fe:90:5c:0a: 6d:28:77:89:98:3e:49:2b:24:3e:68:a0:5b:71:27: 93:29:ca:26:13:e7:c9:6c:7f:fb:d4:0a:aa:7b:98: 5c:01:ce:b5:f7:fc:7c:0d:ed:47:7b:68:23:7a:80: c3:77:ca:b4:fd:94:0a:c9:09:bc:80:df:03:fe:c0: 37:90:88:c6:1c:ad:17:ae:aa:f7:de:28:75:e2:91: f2:03:3f:fa:e7:10:8b:b5:62:d4:c7:d1:30:1d:da: c9:a8:38:84:62:f2:3f:bf:5e:91:3a:5a:97:61:32: 55:3c:b9:a8:6d:a4:dd:0d:1d:9e:4b:19:22:ba:d4: 0a:81:22:a3:ce:09:ad:1a:a1:c0:8a:a3:6f:16:6a: 56:41:fd:1a:d4:1d:c6:7f:7b:6f:41:0a:71:f7:6e: bc:d1:ca:8f:18:85:d1:88:76:2c:37:e5:3f:59:c0: 6d:f4:2c:22:f5:af:78:44:a3:cc:ce:8e:1b:05:bb: 70:e7:af:1b:c3:a0:6c:8d:a7:a5:a8:4c:fe:3b:d0: 52:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:02:84:28:18:3A:E7:42:CA:11:03:3A:EE:77:BD:46:3E:7C:FF:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b82094ce-0b12-48a0-b623-334c153ef9e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8070::/48 Signature Algorithm: sha256WithRSAEncryption 20:f7:95:82:56:f8:0f:ac:ac:85:37:e3:e9:d3:47:40:58:25: e4:08:02:a0:6d:21:d8:07:8c:b0:b6:32:e1:e5:2b:58:28:f6: 99:d3:16:6c:3f:31:50:1c:77:c8:f9:da:31:c3:f6:97:cc:8e: 39:fe:55:b5:f8:43:8a:cd:d5:f7:69:e0:cd:36:23:68:34:ed: c9:36:28:e0:0f:a1:fb:7f:26:30:d9:5c:5f:6b:06:c9:9f:9e: 42:c4:07:de:63:9e:34:bf:1f:60:68:fb:52:e1:71:96:34:37: a9:84:1d:dc:1a:e4:a6:3b:37:60:15:22:c2:e8:cd:00:2f:87: c0:78:b1:02:b2:2a:fa:8f:23:35:f6:92:f1:93:fb:54:8b:16: 9b:6e:de:7d:25:65:34:ab:55:64:c3:f6:65:fe:52:b9:a8:73: 5d:00:07:a4:5e:f4:03:e7:2a:01:35:44:e5:50:dc:c9:91:a8: 6b:44:4b:f8:4d:af:99:a6:ca:ac:56:3f:0f:c0:67:47:eb:ae: 53:05:a4:3f:fd:df:a9:5a:5c:9f:f6:b8:76:49:8f:1f:11:60: 69:ff:5d:20:f3:65:e5:b8:76:36:ff:f4:9e:2a:8f:d1:ec:41: 8d:d2:2d:4c:cc:70:68:52:f2:16:4d:09:30:d0:ca:80:c9:ce: 7b:7b:79:ba -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfFfinWCi0hzEtb/HaFJBiTt9AJ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDAxMTEzWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTI3Yzg5MDE2MTA5MDU0ZmUwNjUwNjgzYzUwZDUzMzM3 YjUyMmM1MjEzZjVlOGM1NGUxN2U2ZGE5N2ViMmQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBefwpSInrkg5OKKqTapCXpeiJZCl1H4hNy+6IHMQsO83o 5OTsVcduN4X+UBZKHhYr7zCv/a8n/pBcCm0od4mYPkkrJD5ooFtxJ5MpyiYT58ls f/vUCqp7mFwBzrX3/HwN7Ud7aCN6gMN3yrT9lArJCbyA3wP+wDeQiMYcrReuqvfe KHXikfIDP/rnEIu1YtTH0TAd2smoOIRi8j+/XpE6WpdhMlU8uahtpN0NHZ5LGSK6 1AqBIqPOCa0aocCKo28WalZB/RrUHcZ/e29BCnH3brzRyo8YhdGIdiw35T9ZwG30 LCL1r3hEo8zOjhsFu3DnrxvDoGyNp6WoTP470FLjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/wKEKBg650LKEQM67ne9Rj58/1gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4MjA5NGNlLTBiMTItNDhhMC1iNjIzLTMzNGMxNTNlZjllMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gHAwDQYJKoZIhvcNAQELBQADggEBACD3lYJW+A+srIU34+nTR0BY JeQIAqBtIdgHjLC2MuHlK1go9pnTFmw/MVAcd8j52jHD9pfMjjn+VbX4Q4rN1fdp 4M02I2g07ck2KOAPoft/JjDZXF9rBsmfnkLEB95jnjS/H2Bo+1LhcZY0N6mEHdwa 5KY7N2AVIsLozQAvh8B4sQKyKvqPIzX2kvGT+1SLFptu3n0lZTSrVWTD9mX+Urmo c10AB6Re9APnKgE1ROVQ3MmRqGtES/hNr5mmyqxWPw/AZ0frrlMFpD/936laXJ/2 uHZJjx8RYGn/XSDzZeW4djb/9J4qj9HsQY3SLUzMcGhS8hZNCTDQyoDJznt7ebo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:43 2025 by rpki-client