$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1babd71-0375-46e5-9fa3-1e46d231571f.roa File: c1babd71-0375-46e5-9fa3-1e46d231571f.roa (raw, json) Hash identifier: DM80+KvPk0NHHJr9h4Nz4VWf4hVHH1zSB2y+9qTjYgM= Subject key identifier: 22:22:28:85:AC:1B:1B:1F:04:C1:E8:84:0D:46:E8:7B:10:34:A0:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2AC56AE8F0B8D566DF875CDDC7A20DF0A900D2BE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1babd71-0375-46e5-9fa3-1e46d231571f.roa Signing time: Tue 25 Mar 2025 17:10:15 +0000 ROA not before: Tue 25 Mar 2025 17:10:15 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c5:6a:e8:f0:b8:d5:66:df:87:5c:dd:c7:a2:0d:f0:a9:00:d2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 17:10:15 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3a:94:1f:e3:9a:4d:88:2e:2f:20:9c:98:36: 83:e3:78:57:63:93:d0:80:5c:d5:b9:d8:b0:a7:78: fe:a9:67:d3:39:07:5f:52:ae:e2:8d:ca:f0:64:c6: 08:02:ab:9c:86:5d:0d:7b:f4:5c:fc:88:4d:09:e6: 4a:76:c9:12:a4:20:2a:68:96:c5:11:3a:67:b7:ed: 33:37:9b:89:a6:83:7b:da:70:ab:93:90:26:67:d3: 0f:cd:8c:25:0a:6b:53:3e:38:4d:38:8b:57:68:a8: c1:26:27:75:e7:0b:c6:59:94:fb:d1:4f:ec:13:2c: 87:c0:31:9e:e6:9d:c9:c2:06:99:55:d6:57:6f:84: 95:c3:52:6a:24:d9:8f:86:a3:ee:10:3e:7b:4d:07: 3b:3d:fa:97:ad:67:42:5b:96:d4:a2:db:52:81:08: 04:fe:8b:91:e6:5c:7f:ea:38:a7:41:f4:a6:5f:c9: 8c:5e:96:8f:3f:0c:be:44:89:d7:06:7e:40:61:97: 7e:fa:df:04:69:31:0b:fd:48:b8:00:7a:7f:d6:14: 71:18:7b:4f:fc:66:d8:2e:96:10:d5:90:a1:90:bf: 91:22:50:39:55:3f:cd:f7:ea:a1:c2:61:ea:55:8d: a3:2d:cb:77:2e:66:7c:4a:78:28:32:d7:2c:c2:28: 10:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:22:28:85:AC:1B:1B:1F:04:C1:E8:84:0D:46:E8:7B:10:34:A0:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c1babd71-0375-46e5-9fa3-1e46d231571f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:2080::/48 Signature Algorithm: sha256WithRSAEncryption 26:02:65:92:73:d3:32:85:24:0f:56:73:56:5c:3a:37:65:ed: ff:63:9c:c3:bf:eb:aa:7f:43:a3:42:74:9a:a2:ba:50:5f:42: ec:87:b7:f6:40:77:1e:75:1d:22:05:bd:d0:0d:a9:42:a8:00: 8a:e4:fc:fe:98:6f:c5:0b:04:e9:f1:94:28:9f:cb:fb:fa:93: e9:d0:2f:1f:76:49:b2:f3:3b:bb:95:53:89:29:3a:02:6e:50: f0:be:77:b1:2d:52:84:10:c9:4b:87:75:8a:1d:76:3f:37:9a: b3:08:53:b9:0c:8b:78:26:60:f7:f6:9d:1b:f6:0e:54:80:95: df:07:e8:7b:82:2c:7b:e3:3b:1c:25:04:1c:c3:8e:da:cc:ba: f3:52:c4:ea:c2:ff:bd:08:46:07:ae:de:5e:0b:e0:de:ab:09: 1f:f8:1a:c0:19:1d:ce:2b:70:aa:d6:55:36:cd:6e:8c:3c:15: e6:41:61:ed:d2:34:5f:c2:25:70:9e:06:fe:fd:3b:f3:94:a1: f7:7b:3c:88:5d:f1:18:63:b5:f3:f5:9a:db:70:75:48:70:ab: ad:45:db:3b:e8:1d:a6:80:ea:e0:ac:ad:23:0e:a6:23:5a:49: 57:f5:bd:87:c7:e9:63:e2:3f:1c:01:6c:f1:e1:3d:b9:b1:c1: 36:90:e9:4e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKsVq6PC41Wbfh1zdx6IN8KkA0r4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTcxMDE1WhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTc2ZWNlNDFkZGI3Yjk3YTRjZGE4NDAzZGJhNDZlZmZj NWQ4YjhmMzdhN2ViNDQ1NGE0MmQ5ZDRiYTZkODZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1OpQf45pNiC4vIJyYNoPjeFdjk9CAXNW52LCneP6pZ9M5 B19SruKNyvBkxggCq5yGXQ179Fz8iE0J5kp2yRKkICpolsUROme37TM3m4mmg3va cKuTkCZn0w/NjCUKa1M+OE04i1doqMEmJ3XnC8ZZlPvRT+wTLIfAMZ7mncnCBplV 1ldvhJXDUmok2Y+Go+4QPntNBzs9+petZ0JbltSi21KBCAT+i5HmXH/qOKdB9KZf yYxelo8/DL5EidcGfkBhl3763wRpMQv9SLgAen/WFHEYe0/8ZtgulhDVkKGQv5Ei UDlVP8336qHCYepVjaMty3cuZnxKeCgy1yzCKBBDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIiIohawbGx8EweiEDUboexA0oDowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxYmFiZDcxLTAzNzUtNDZlNS05ZmEzLTFlNDZkMjMxNTcxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AIIAwDQYJKoZIhvcNAQELBQADggEBACYCZZJz0zKFJA9Wc1ZcOjdl 7f9jnMO/66p/Q6NCdJqiulBfQuyHt/ZAdx51HSIFvdANqUKoAIrk/P6Yb8ULBOnx lCify/v6k+nQLx92SbLzO7uVU4kpOgJuUPC+d7EtUoQQyUuHdYoddj83mrMIU7kM i3gmYPf2nRv2DlSAld8H6HuCLHvjOxwlBBzDjtrMuvNSxOrC/70IRgeu3l4L4N6r CR/4GsAZHc4rcKrWVTbNbow8FeZBYe3SNF/CJXCeBv79O/OUofd7PIhd8RhjtfP1 mttwdUhwq61F2zvoHaaA6uCsrSMOpiNaSVf1vYfH6WPiPxwBbPHhPbmxwTaQ6U4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:30 2025 by rpki-client