$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf7bdcfb-5572-4db8-8322-54e065b0e02a.roa File: bf7bdcfb-5572-4db8-8322-54e065b0e02a.roa (raw, json) Hash identifier: yUro+2o5agqlle310kXtGWjPkfnJFfZPGrUZlKyC/Og= Subject key identifier: D4:52:89:0E:72:10:69:54:45:8B:E7:A2:BA:87:B3:0A:1B:7B:B1:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 04CC44CDFF6191561A4C9BCCF8EABE0862060023 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf7bdcfb-5572-4db8-8322-54e065b0e02a.roa Signing time: Fri 28 Mar 2025 16:11:01 +0000 ROA not before: Fri 28 Mar 2025 16:11:01 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fee:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:cc:44:cd:ff:61:91:56:1a:4c:9b:cc:f8:ea:be:08:62:06:00:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 16:11:01 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:b7:a5:b6:5a:35:0a:94:5c:42:3d:91:b4: 02:e6:ac:1a:fb:2d:e1:c2:0c:3a:9c:6d:fc:71:ae: ba:dd:f0:b9:48:cd:6e:7b:9f:87:8f:97:29:80:c7: dd:00:d2:ee:a9:6a:1b:09:e8:95:94:32:e7:8f:99: 70:b6:f9:87:04:fe:f5:a1:39:22:d2:26:25:9e:ff: 1b:e0:c1:da:c7:03:d9:1f:e7:5b:ae:90:25:fb:3b: 9a:70:16:9f:67:7e:9e:2f:7b:e8:12:91:e9:ac:21: e2:5b:68:8b:01:4e:e3:59:76:7e:ef:a8:f6:5c:46: f4:c2:7b:bf:71:68:46:6c:cc:c5:10:74:5b:0d:ae: 2b:09:dc:7c:14:b2:57:98:f6:36:57:1f:d3:59:51: 53:bb:11:33:6b:60:82:ee:92:e8:5f:2b:02:f4:40: e5:73:01:37:78:2e:ff:9a:a6:6a:83:a5:0b:ca:b0: e6:1b:a6:f1:13:34:4c:8c:dc:3a:13:df:b8:06:c7: 29:6d:62:4b:0f:34:1a:65:0e:46:d4:65:70:15:95: 5c:7c:37:70:c1:23:a8:1b:e6:37:56:d9:af:d0:6d: f3:01:11:f6:95:13:fb:4e:45:90:77:cf:91:77:1e: 50:c8:1f:c5:9b:d7:43:a4:83:ac:e5:a0:37:22:d8: df:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:52:89:0E:72:10:69:54:45:8B:E7:A2:BA:87:B3:0A:1B:7B:B1:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf7bdcfb-5572-4db8-8322-54e065b0e02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fee:1000::/40 Signature Algorithm: sha256WithRSAEncryption 79:89:46:5e:71:d6:50:76:e5:7b:ea:0a:33:15:3d:72:d5:19: 8d:13:58:36:d3:4b:fc:d1:e8:67:95:de:7a:db:ac:47:84:a7: ef:25:b1:cf:49:23:3f:71:3e:61:10:7d:eb:27:9b:3b:e9:a8: 3a:0e:7b:d6:7f:78:f7:10:bf:ee:01:d8:68:ee:6b:ab:c9:c6: 59:98:13:55:9d:b0:8b:f3:c0:58:5e:a9:9f:d7:18:f6:c0:ca: 85:7a:3c:40:0f:04:6a:56:63:81:47:0a:a4:1b:ee:7b:66:14: 50:7c:de:72:66:79:c7:5c:b7:6e:ed:17:0b:f2:57:d6:7e:a1: 01:d1:7e:c3:9a:2a:78:76:4b:32:29:6d:67:79:c9:98:64:22: e9:25:60:00:df:72:6c:63:54:f4:dc:24:73:ac:95:dd:73:3e: 9d:96:28:9d:be:a4:0f:1a:bb:8b:3d:0e:b8:fb:2b:f1:c1:3c: 35:fb:0d:ad:39:0a:ff:92:17:a5:36:fd:3c:77:ab:95:77:39: 6f:3a:d5:85:34:3e:8f:60:06:d0:b5:5d:26:0c:a4:89:d4:6a: c8:d8:32:bb:37:fa:a6:6f:f9:53:93:d5:1c:2c:d4:43:9f:5e: dc:80:ab:d7:ef:b3:c3:05:4a:fd:07:95:32:e7:b6:3c:fb:24: 5c:c8:d9:b9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBMxEzf9hkVYaTJvM+Oq+CGIGACMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTYxMTAxWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMGJjMDI2ZTAyNjQ0NTA3YmE0MzU3YjE4N2JmZTcwY2Ix MTg2YzRkMWJiODliNmIzMTZhMDE2MTg4YmY2NWRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvTreltlo1CpRcQj2RtALmrBr7LeHCDDqcbfxxrrrd8LlI zW57n4ePlymAx90A0u6pahsJ6JWUMuePmXC2+YcE/vWhOSLSJiWe/xvgwdrHA9kf 51uukCX7O5pwFp9nfp4ve+gSkemsIeJbaIsBTuNZdn7vqPZcRvTCe79xaEZszMUQ dFsNrisJ3HwUsleY9jZXH9NZUVO7ETNrYILukuhfKwL0QOVzATd4Lv+apmqDpQvK sOYbpvETNEyM3DoT37gGxyltYksPNBplDkbUZXAVlVx8N3DBI6gb5jdW2a/QbfMB EfaVE/tORZB3z5F3HlDIH8Wb10Okg6zloDci2N+9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU1FKJDnIQaVRFi+eiuoezCht7sdwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JmN2JkY2ZiLTU1NzItNGRiOC04MzIyLTU0ZTA2NWIwZTAyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/uEDANBgkqhkiG9w0BAQsFAAOCAQEAeYlGXnHWUHble+oKMxU9ctUZ jRNYNtNL/NHoZ5XeetusR4Sn7yWxz0kjP3E+YRB96yebO+moOg571n949xC/7gHY aO5rq8nGWZgTVZ2wi/PAWF6pn9cY9sDKhXo8QA8EalZjgUcKpBvue2YUUHzecmZ5 x1y3bu0XC/JX1n6hAdF+w5oqeHZLMiltZ3nJmGQi6SVgAN9ybGNU9Nwkc6yV3XM+ nZYonb6kDxq7iz0OuPsr8cE8NfsNrTkK/5IXpTb9PHerlXc5bzrVhTQ+j2AG0LVd JgykidRqyNgyuzf6pm/5U5PVHCzUQ59e3ICr1++zwwVK/QeVMue2PPskXMjZuQ== -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:24 2025 by rpki-client