$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6f99cd0-3022-4afa-a318-4a4fb2aa0c7e.roa File: c6f99cd0-3022-4afa-a318-4a4fb2aa0c7e.roa (raw, json) Hash identifier: 9a6iz2+A4Ufb4/hQCMO3L0PEjRqYx3oD6VNnNYx/xno= Subject key identifier: 47:CF:19:EE:99:41:77:A8:85:CD:26:0A:76:6E:8D:29:A6:9E:C5:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D8307FD4337186A4A15B749367911E96565C4D8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6f99cd0-3022-4afa-a318-4a4fb2aa0c7e.roa Signing time: Fri 28 Mar 2025 16:11:06 +0000 ROA not before: Fri 28 Mar 2025 16:11:06 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f36:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:83:07:fd:43:37:18:6a:4a:15:b7:49:36:79:11:e9:65:65:c4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 16:11:06 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ec:ad:ba:b6:9b:38:6a:af:54:07:ee:fd:23: e2:1a:de:1c:ff:3f:76:1c:36:91:52:83:78:a7:49: 37:d2:39:3b:77:99:bf:b1:20:d1:2b:fb:45:79:3d: c8:c7:c6:c8:97:7d:d0:99:93:c5:b8:c8:7c:3b:53: ce:df:f4:2d:cb:dd:30:75:dd:cb:70:40:fb:71:a3: 9a:fa:81:87:99:10:f4:e8:9b:c1:7a:42:f6:95:dd: 22:a7:27:25:2c:26:29:e7:00:79:dd:67:ff:2f:80: 8d:28:7d:69:c8:a3:39:69:7e:54:fd:af:c3:64:6b: ef:98:85:7a:c1:b0:6d:f4:25:80:70:91:92:89:f1: b5:0e:6d:91:bc:d1:df:cb:0f:ad:b4:1e:0b:a6:f0: 51:aa:01:80:15:b9:ef:a4:25:88:58:6d:7a:b2:8f: 2a:5d:c9:be:19:d2:41:57:27:87:4d:9d:34:2e:4e: 6b:b9:08:0d:d0:f7:03:58:cf:5e:f6:e7:df:1b:97: 3b:52:db:25:4d:ff:02:a2:cc:19:83:b4:ce:a3:a5: 2d:23:af:c4:77:b7:eb:af:77:77:05:fb:b2:6a:bd: c9:53:1b:17:9f:50:15:8a:03:fe:81:58:ba:e2:80: 1a:93:81:6b:59:50:48:32:a6:f5:73:ec:0f:42:65: 95:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CF:19:EE:99:41:77:A8:85:CD:26:0A:76:6E:8D:29:A6:9E:C5:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6f99cd0-3022-4afa-a318-4a4fb2aa0c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f36:e000::/40 Signature Algorithm: sha256WithRSAEncryption 32:e0:d4:dd:79:5d:3e:35:ca:ef:b5:df:87:f8:de:70:90:cb: c8:ed:29:dd:34:54:0b:45:ba:0d:b0:7b:53:0e:80:18:c2:85: fd:66:2c:1d:c1:c6:f6:11:79:a2:61:b2:bd:63:44:a4:c3:76: a3:57:5d:49:37:48:ff:b6:03:7e:44:2d:73:0e:bb:0e:a8:67: a1:af:87:8c:b0:37:f9:48:f1:c9:f4:59:c6:2a:f3:e1:13:7e: db:5e:f2:0b:f6:93:3e:5e:d2:a0:0c:dd:14:78:5a:17:5d:94: 71:e1:8d:a4:eb:75:29:15:72:2a:9a:3b:2e:b8:f0:5e:86:e2: 2f:98:a4:c5:50:d9:99:e4:a3:51:55:3a:fb:0b:2f:ba:66:14: 94:ad:00:33:91:9f:79:4e:19:39:ee:f7:bd:3b:3f:b0:40:44: df:32:b2:c2:62:a0:30:7f:1b:0c:86:07:0d:94:4d:5c:ca:84: 24:3b:2c:d3:74:02:aa:d7:71:da:4d:98:d2:17:04:2d:39:b7: 9f:51:89:74:f1:06:b1:29:85:e4:d9:15:1a:8a:7a:05:11:18: 72:59:06:ed:01:77:dd:44:28:68:29:d1:63:a7:d1:1b:c4:92: c4:db:1c:d3:19:f5:4b:06:ca:11:69:04:05:7a:e5:b5:53:1d: 9b:9d:02:50 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHYMH/UM3GGpKFbdJNnkR6WVlxNgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTYxMTA2WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYWEzNzEyYjNlY2YxMjdmOGY2MTk2NTNkYjkwMDBjZmEw ZWFmMDA1ODllY2VkNjY5MzhlMzY5ZDBhMGFiOWZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCT7K26tps4aq9UB+79I+Ia3hz/P3YcNpFSg3inSTfSOTt3 mb+xINEr+0V5PcjHxsiXfdCZk8W4yHw7U87f9C3L3TB13ctwQPtxo5r6gYeZEPTo m8F6QvaV3SKnJyUsJinnAHndZ/8vgI0ofWnIozlpflT9r8Nka++YhXrBsG30JYBw kZKJ8bUObZG80d/LD620Hgum8FGqAYAVue+kJYhYbXqyjypdyb4Z0kFXJ4dNnTQu Tmu5CA3Q9wNYz172598blztS2yVN/wKizBmDtM6jpS0jr8R3t+uvd3cF+7JqvclT GxefUBWKA/6BWLrigBqTgWtZUEgypvVz7A9CZZULAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUR88Z7plBd6iFzSYKdm6NKaaexcMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M2Zjk5Y2QwLTMwMjItNGFmYS1hMzE4LTRhNGZiMmFhMGM3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB824DANBgkqhkiG9w0BAQsFAAOCAQEAMuDU3XldPjXK77Xfh/jecJDL yO0p3TRUC0W6DbB7Uw6AGMKF/WYsHcHG9hF5omGyvWNEpMN2o1ddSTdI/7YDfkQt cw67Dqhnoa+HjLA3+UjxyfRZxirz4RN+217yC/aTPl7SoAzdFHhaF12UceGNpOt1 KRVyKpo7LrjwXobiL5ikxVDZmeSjUVU6+wsvumYUlK0AM5GfeU4ZOe73vTs/sEBE 3zKywmKgMH8bDIYHDZRNXMqEJDss03QCqtdx2k2Y0hcELTm3n1GJdPEGsSmF5NkV Gop6BREYclkG7QF33UQoaCnRY6fRG8SSxNsc0xn1SwbKEWkEBXrltVMdm50CUA== -----END CERTIFICATE-----Generated at Sat Apr 5 11:08:29 2025 by rpki-client