$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d7033d-2443-415e-b118-06f9d052957f.roa File: c4d7033d-2443-415e-b118-06f9d052957f.roa (raw, json) Hash identifier: sY2/rtaetqlgFezW108qmIxchk+qZaR+06BeUL0TfDw= Subject key identifier: 03:D6:12:C2:71:46:95:0D:7B:06:01:6B:6D:BF:14:2B:10:17:25:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 662E75AA52850553E28A45A4ACACF5D3FBD1EE90 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d7033d-2443-415e-b118-06f9d052957f.roa Signing time: Sat 15 Mar 2025 00:11:51 +0000 ROA not before: Sat 15 Mar 2025 00:11:51 +0000 ROA not after: Sat 19 Apr 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff8:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2e:75:aa:52:85:05:53:e2:8a:45:a4:ac:ac:f5:d3:fb:d1:ee:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 15 00:11:51 2025 GMT Not After : Apr 19 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:d9:2a:43:52:9a:c9:5d:93:5f:57:d4:fe: 7f:21:9f:a3:17:88:01:5b:06:15:a3:7b:67:e1:7c: 60:a4:3a:18:08:12:22:72:a3:a0:15:e3:0c:0f:5a: 16:81:21:12:95:6c:58:ff:b8:b9:1a:58:c3:ee:8b: 1e:5f:56:4c:09:70:01:40:77:b5:c9:63:e4:7b:70: d5:9c:41:d2:fd:a5:c3:79:5e:5e:ec:58:be:72:19: d1:2b:e3:7f:95:f6:53:26:bf:08:3a:3e:5d:ef:e5: 2c:5b:75:d2:7b:e5:4b:df:02:71:32:6e:39:bd:8b: 10:40:8d:47:92:08:0b:2a:6c:6e:cf:61:bb:88:55: b8:90:e8:00:31:4c:b8:3c:69:1e:36:17:8b:c6:d7: bf:cc:44:89:02:78:08:e0:83:68:25:5b:2a:fb:73: 44:ed:73:dd:7e:3a:77:f1:bf:70:fd:a6:58:9c:a9: 3c:aa:12:e1:77:20:3e:50:10:13:08:22:2e:c7:f1: 38:92:5a:f6:cb:ba:34:34:16:8b:ef:43:48:8c:41: 47:c4:8e:7e:54:3a:75:ed:ba:92:b0:7b:04:ab:88: 46:89:1d:3d:91:49:64:c8:fb:8d:e8:fd:12:8c:7c: ae:21:35:d2:11:b0:0c:52:42:76:96:65:c7:7c:17: 4e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D6:12:C2:71:46:95:0D:7B:06:01:6B:6D:BF:14:2B:10:17:25:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d7033d-2443-415e-b118-06f9d052957f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff8:2000::/40 Signature Algorithm: sha256WithRSAEncryption d8:a4:a9:06:6d:d2:d1:fc:30:09:cd:96:2a:f4:76:fb:7b:53: 40:13:ac:a5:71:fb:a5:05:9a:3f:2d:cd:4e:32:4d:7f:b9:63: d6:67:53:3e:96:37:61:9e:06:ff:be:bb:60:4d:a7:53:bb:28: 25:1c:e8:44:18:e3:a1:01:ea:66:92:b9:4e:ab:95:10:35:4e: 6c:47:8d:a5:01:70:fc:78:a0:ca:88:0a:12:00:9b:7b:9d:02: b4:7d:e0:50:4b:e3:1d:ee:6f:6f:7d:87:55:3e:f6:ed:44:59: 4d:02:bf:64:62:59:e9:03:93:80:c0:dd:e9:b6:b7:f8:9d:5a: 88:6f:d0:b4:05:9b:16:f3:f4:43:95:57:64:38:cd:9a:5c:cd: 10:66:22:80:cc:af:28:11:4f:34:e7:4a:13:b4:c1:22:69:1c: 3c:9b:a4:f7:06:fe:a8:d4:08:22:67:16:d8:d3:e0:1e:11:46: 2f:dc:c1:b2:e0:a5:cc:77:48:76:8c:11:73:7b:90:8a:07:69: 78:35:59:04:f6:7d:17:47:5b:a1:d2:cf:52:0b:7c:2b:42:50: d8:14:2d:d4:6a:31:11:38:95:d8:96:25:bb:e5:39:87:7d:05: 97:9c:02:e2:fb:b1:e4:53:14:cc:96:fd:34:47:cc:bd:9b:37: 59:6b:6b:26 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZi51qlKFBVPiikWkrKz10/vR7pAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE1MDAxMTUxWhcNMjUwNDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWM4ZThhZTRhZGFmZGY2MjNhNTcyMTU5YmFkMmQ5N2I3 MDU3Njk1ZDViOGM5NmI2Nzg0YTU3NjRiMDliMzIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiLtkqQ1KayV2TX1fU/n8hn6MXiAFbBhWje2fhfGCkOhgI EiJyo6AV4wwPWhaBIRKVbFj/uLkaWMPuix5fVkwJcAFAd7XJY+R7cNWcQdL9pcN5 Xl7sWL5yGdEr43+V9lMmvwg6Pl3v5SxbddJ75UvfAnEybjm9ixBAjUeSCAsqbG7P YbuIVbiQ6AAxTLg8aR42F4vG17/MRIkCeAjgg2glWyr7c0Ttc91+Onfxv3D9plic qTyqEuF3ID5QEBMIIi7H8TiSWvbLujQ0FovvQ0iMQUfEjn5UOnXtupKwewSriEaJ HT2RSWTI+43o/RKMfK4hNdIRsAxSQnaWZcd8F077AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUA9YSwnFGlQ17BgFrbb8UKxAXJfAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M0ZDcwMzNkLTI0NDMtNDE1ZS1iMTE4LTA2ZjlkMDUyOTU3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/4IDANBgkqhkiG9w0BAQsFAAOCAQEA2KSpBm3S0fwwCc2WKvR2+3tT QBOspXH7pQWaPy3NTjJNf7lj1mdTPpY3YZ4G/767YE2nU7soJRzoRBjjoQHqZpK5 TquVEDVObEeNpQFw/HigyogKEgCbe50CtH3gUEvjHe5vb32HVT727URZTQK/ZGJZ 6QOTgMDd6ba3+J1aiG/QtAWbFvP0Q5VXZDjNmlzNEGYigMyvKBFPNOdKE7TBImkc PJuk9wb+qNQIImcW2NPgHhFGL9zBsuClzHdIdowRc3uQigdpeDVZBPZ9F0dbodLP Ugt8K0JQ2BQt1GoxETiV2JYlu+U5h30Fl5wC4vux5FMUzJb9NEfMvZs3WWtrJg== -----END CERTIFICATE-----Generated at Sat Apr 5 08:06:42 2025 by rpki-client