$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5987d35-d2d1-4186-a515-eaf058a8679e.roa File: d5987d35-d2d1-4186-a515-eaf058a8679e.roa (raw, json) Hash identifier: HAr6DxOphUIPN2lENYnoncJM0pBMxPug0T0EklLr7Cs= Subject key identifier: 73:DC:A8:6F:C5:41:E3:C6:A5:B6:9E:A2:E6:FB:69:48:CE:14:35:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 64482B5903B34648185B9703EBACE17C80B96F51 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5987d35-d2d1-4186-a515-eaf058a8679e.roa Signing time: Tue 25 Mar 2025 17:41:25 +0000 ROA not before: Tue 25 Mar 2025 17:41:25 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:48:2b:59:03:b3:46:48:18:5b:97:03:eb:ac:e1:7c:80:b9:6f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 17:41:25 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:d0:e6:4f:58:46:26:41:82:f6:fb:1d:0c: 5d:b4:09:f5:dc:e5:0a:b7:70:50:ed:33:b8:39:5b: 34:17:f2:18:1b:07:f3:bb:a9:77:ba:3b:65:18:bc: 22:c7:f8:cd:ca:83:ff:15:a8:ac:7f:31:36:50:dc: cd:37:61:0c:17:e3:95:53:2a:f6:be:02:23:0c:1e: 90:36:98:d7:42:b7:8d:85:86:9b:21:4f:4c:6d:ae: a4:26:57:68:63:c8:d8:df:01:a4:1f:dc:4d:4b:78: ef:2a:b9:d0:b4:77:04:3d:c9:f6:87:c0:aa:ea:b4: 8b:a8:08:72:d4:11:72:e1:fa:d2:c1:b1:2d:ab:b7: 0a:84:fd:43:9a:be:1f:89:80:a0:41:5d:98:5d:7b: 12:73:bc:03:6d:a1:48:f9:d7:92:a8:ca:e8:91:aa: 1e:39:aa:ca:38:46:c9:92:18:06:ff:d9:62:d8:4e: 94:50:d9:7f:03:0e:43:2f:45:bd:5a:21:d2:27:f2: b6:29:70:14:20:e8:6e:b6:01:17:5b:f4:bb:2e:73: d0:3b:61:c4:00:5e:fd:84:ce:19:2d:33:59:59:80: ca:9d:d4:2f:99:c3:f0:9d:2d:48:15:3e:da:2c:93: 09:49:f2:ba:67:42:da:61:0b:4c:e4:66:20:1c:79: 94:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DC:A8:6F:C5:41:E3:C6:A5:B6:9E:A2:E6:FB:69:48:CE:14:35:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5987d35-d2d1-4186-a515-eaf058a8679e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:e080::/48 Signature Algorithm: sha256WithRSAEncryption 78:de:6d:1b:ad:81:af:b4:92:b4:f0:12:d0:9e:a7:92:f6:aa: cb:be:49:82:35:08:96:0d:6a:16:8c:55:72:20:23:7e:74:ee: ee:3a:4d:d3:4c:63:f6:8c:88:1f:f2:9b:be:c5:7d:cf:85:cc: cd:7d:6b:8c:3b:77:24:61:5a:99:aa:d7:9f:37:fc:5f:78:cb: 0e:e1:4f:15:a8:e4:3c:c4:fa:67:54:af:06:82:7c:78:e4:4a: a5:88:0f:48:97:30:f8:d0:41:e9:b7:1d:df:9e:38:41:16:7e: 50:c0:2d:a4:d1:27:ae:7b:74:67:8b:69:8c:76:f9:53:4e:4f: 57:26:22:c3:98:21:5d:f2:7a:a4:33:8f:04:cb:e5:cd:59:65: e3:71:a0:a0:db:0c:44:52:e7:d6:00:b7:ea:5f:22:04:cf:e7: a0:4f:d6:01:25:69:66:11:6d:78:59:27:5b:63:01:72:16:86: b1:e7:03:59:e5:06:ef:c9:3e:40:8b:51:9f:ca:db:3a:32:dd: e7:9b:5a:d6:69:20:03:5f:ce:34:50:f1:f8:5c:8d:ec:e8:b1: d5:27:7a:85:22:31:88:94:41:cf:d6:98:22:f4:c4:c1:33:55: 37:4c:ef:9a:4a:a3:c1:0c:27:e1:63:3e:24:84:66:b8:10:e8: 31:ea:3d:fa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZEgrWQOzRkgYW5cD66zhfIC5b1EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTc0MTI1WhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NWZiYTRjYWM2YmNkZThhM2ZmMjcxZWIzNTQ4OWJmMGFl NDc4NTczMDAwZmFiOWFlMjZjOWMyYjNjYjEyY2Y3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC42NDmT1hGJkGC9vsdDF20CfXc5Qq3cFDtM7g5WzQX8hgb B/O7qXe6O2UYvCLH+M3Kg/8VqKx/MTZQ3M03YQwX45VTKva+AiMMHpA2mNdCt42F hpshT0xtrqQmV2hjyNjfAaQf3E1LeO8qudC0dwQ9yfaHwKrqtIuoCHLUEXLh+tLB sS2rtwqE/UOavh+JgKBBXZhdexJzvANtoUj515KoyuiRqh45qso4RsmSGAb/2WLY TpRQ2X8DDkMvRb1aIdIn8rYpcBQg6G62ARdb9Lsuc9A7YcQAXv2EzhktM1lZgMqd 1C+Zw/CdLUgVPtoskwlJ8rpnQtphC0zkZiAceZRpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUc9yob8VB48altp6i5vtpSM4UNc0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q1OTg3ZDM1LWQyZDEtNDE4Ni1hNTE1LWVhZjA1OGE4Njc5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/y4IAwDQYJKoZIhvcNAQELBQADggEBAHjebRutga+0krTwEtCep5L2 qsu+SYI1CJYNahaMVXIgI3507u46TdNMY/aMiB/ym77Ffc+FzM19a4w7dyRhWpmq 1583/F94yw7hTxWo5DzE+mdUrwaCfHjkSqWID0iXMPjQQem3Hd+eOEEWflDALaTR J657dGeLaYx2+VNOT1cmIsOYIV3yeqQzjwTL5c1ZZeNxoKDbDERS59YAt+pfIgTP 56BP1gElaWYRbXhZJ1tjAXIWhrHnA1nlBu/JPkCLUZ/K2zoy3eebWtZpIANfzjRQ 8fhcjezosdUneoUiMYiUQc/WmCL0xMEzVTdM75pKo8EMJ+FjPiSEZrgQ6DHqPfo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:19:47 2025 by rpki-client