$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbd9fd1b-4f1d-4515-81ab-0cf33f738f76.roa File: bbd9fd1b-4f1d-4515-81ab-0cf33f738f76.roa (raw, json) Hash identifier: Jf+B/No7rKueFn3qp8VdCruwYAfdUL2DyEghGI6NRFk= Subject key identifier: A3:CD:4B:32:D6:39:93:B9:17:44:13:F1:73:95:6D:D5:49:14:AA:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4919EFC8220713C00666A9E4F155D72F604FF9E7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbd9fd1b-4f1d-4515-81ab-0cf33f738f76.roa Signing time: Fri 28 Mar 2025 15:01:14 +0000 ROA not before: Fri 28 Mar 2025 15:01:14 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:8020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:19:ef:c8:22:07:13:c0:06:66:a9:e4:f1:55:d7:2f:60:4f:f9:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 15:01:14 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:27:c3:84:3a:32:cc:ae:2b:01:52:e4:9b: d9:da:38:11:fd:d3:f2:7e:1b:76:b2:4e:8f:57:01: 6c:a9:2c:f6:a2:06:bd:a9:3f:0f:61:0c:40:c7:18: e9:48:c7:a0:0c:f9:68:10:32:c7:2d:4d:e6:a2:23: b8:de:be:25:1b:68:ec:d3:2e:74:02:78:7f:92:1c: db:c6:42:1e:99:28:61:c1:52:69:31:07:74:25:f9: c1:02:df:05:4d:51:2e:5b:ae:39:4a:5c:18:2f:35: 44:91:9d:f9:ac:c8:bb:9b:c6:92:fa:43:84:e8:45: 88:fc:76:bd:46:17:c0:15:78:1a:b5:cb:ee:97:92: c5:d1:90:49:ea:c2:e8:73:d5:6c:2d:5e:12:ec:c6: a6:37:c5:f1:06:87:47:87:0a:d1:6d:5c:b3:a4:37: 18:c2:fd:79:a5:e7:65:3b:de:8c:f8:04:5d:92:95: ee:4c:b7:b0:1c:d3:60:98:67:df:98:37:de:dc:9c: 3d:6d:05:6b:c2:71:5e:4f:f7:05:33:0d:e2:5f:58: 1b:83:39:5d:65:47:cc:85:43:58:7b:8a:dc:e0:5a: 9b:24:d9:52:86:3f:a9:69:8c:6d:3f:28:51:da:e9: 79:11:1d:12:93:f9:99:5a:2f:88:71:1a:6e:4e:0b: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CD:4B:32:D6:39:93:B9:17:44:13:F1:73:95:6D:D5:49:14:AA:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbd9fd1b-4f1d-4515-81ab-0cf33f738f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:8020::/46 Signature Algorithm: sha256WithRSAEncryption 0e:ce:97:5e:24:8e:e4:1c:e1:c4:32:4a:ce:b8:46:77:bc:07: bb:41:c0:d9:52:ca:27:4a:f5:7d:02:8f:f9:7c:5d:96:42:ef: ee:53:f3:b4:1b:54:90:a5:c5:7c:f1:d2:7b:43:17:24:c6:a7: 05:1f:83:92:b4:71:55:d4:59:9b:68:3e:89:58:37:d3:a7:af: 4b:54:a2:dc:67:a5:c8:20:22:94:b3:02:8e:18:28:04:f8:e8: 88:08:41:0c:3d:c7:4c:81:47:0e:e3:68:67:8f:0f:40:63:5c: 6d:bd:ab:c9:c6:f5:87:2d:e8:87:da:23:63:88:d7:c0:2f:c7: c3:74:94:e5:2b:91:93:0d:3c:04:46:07:77:c6:69:58:88:6f: 4d:84:1f:9d:2d:f2:cc:3e:f0:0f:55:77:2c:05:4e:eb:58:52: 29:bd:6f:77:76:7b:05:aa:2e:b9:b4:98:65:de:08:4a:5f:a2: 9a:ec:4b:29:b2:40:f6:56:b3:81:68:ff:f2:d2:90:c4:3e:a9: 6a:ef:20:12:06:76:f8:46:1a:75:f8:67:84:5f:eb:56:dc:ff: 33:39:e4:d2:19:93:8a:39:ad:d4:45:13:1b:5e:26:dc:b7:05: 01:c3:1b:07:1e:54:f9:69:34:17:f5:d5:8d:a9:76:31:b4:f7: b7:2f:60:ba -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSRnvyCIHE8AGZqnk8VXXL2BP+ecwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTUwMTE0WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDZjZjFhMjk1YmY3MjcxMjkxY2JlNjYzNDk4NjhlOWY4 YWRjODRhNjJlNWY2MTI0NmM3ODNiNDZkOTJmMzNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQNSfDhDoyzK4rAVLkm9naOBH90/J+G3ayTo9XAWypLPai Br2pPw9hDEDHGOlIx6AM+WgQMsctTeaiI7jeviUbaOzTLnQCeH+SHNvGQh6ZKGHB UmkxB3Ql+cEC3wVNUS5brjlKXBgvNUSRnfmsyLubxpL6Q4ToRYj8dr1GF8AVeBq1 y+6XksXRkEnqwuhz1WwtXhLsxqY3xfEGh0eHCtFtXLOkNxjC/Xml52U73oz4BF2S le5Mt7Ac02CYZ9+YN97cnD1tBWvCcV5P9wUzDeJfWBuDOV1lR8yFQ1h7itzgWpsk 2VKGP6lpjG0/KFHa6XkRHRKT+ZlaL4hxGm5OC86TAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUo81LMtY5k7kXRBPxc5Vt1UkUqtYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiZDlmZDFiLTRmMWQtNDUxNS04MWFiLTBjZjMzZjczOGY3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/7gCAwDQYJKoZIhvcNAQELBQADggEBAA7Ol14kjuQc4cQySs64Rne8 B7tBwNlSyidK9X0Cj/l8XZZC7+5T87QbVJClxXzx0ntDFyTGpwUfg5K0cVXUWZto PolYN9Onr0tUotxnpcggIpSzAo4YKAT46IgIQQw9x0yBRw7jaGePD0BjXG29q8nG 9Yct6IfaI2OI18Avx8N0lOUrkZMNPARGB3fGaViIb02EH50t8sw+8A9VdywFTutY Uim9b3d2ewWqLrm0mGXeCEpfoprsSymyQPZWs4Fo//LSkMQ+qWrvIBIGdvhGGnX4 Z4Rf61bc/zM55NIZk4o5rdRFExteJty3BQHDGwceVPlpNBf11Y2pdjG097cvYLo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:01 2025 by rpki-client