$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8b02dd0-9caf-49fb-9ae0-dbf4f4db3b37.roa File: f8b02dd0-9caf-49fb-9ae0-dbf4f4db3b37.roa (raw, json) Hash identifier: m8WLj7Jygo9PAnBXKm0CZizLMt2EGszaUGZyr94Js/M= Subject key identifier: 53:36:D1:20:11:00:10:1B:8C:49:BF:9C:EE:59:33:9D:27:27:46:82 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 29A3D7E832DFD28F7E70BC1F76A11FD640438666 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8b02dd0-9caf-49fb-9ae0-dbf4f4db3b37.roa Signing time: Fri 28 Mar 2025 15:21:05 +0000 ROA not before: Fri 28 Mar 2025 15:21:05 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a3:d7:e8:32:df:d2:8f:7e:70:bc:1f:76:a1:1f:d6:40:43:86:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 15:21:05 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:27:67:33:4e:7b:56:54:7e:9a:b3:8e:aa: 9e:7c:1b:aa:7c:46:7c:e9:6d:20:93:2d:57:1a:90: db:0a:7f:37:4e:04:9d:54:b8:f6:99:15:4d:8d:32: d0:51:74:83:c2:63:4b:5e:0f:eb:3d:21:fd:92:e2: 31:c0:36:65:21:26:48:37:8d:99:0d:17:76:6c:0d: 8f:05:f8:54:b7:f0:5e:de:23:7d:c8:d8:8c:bb:fc: 41:60:da:5c:a7:a9:1c:f8:f6:51:25:67:0d:7b:d3: 17:2b:69:ed:6f:75:77:25:24:61:c7:ea:5c:a4:36: 56:94:db:99:e8:49:f4:1d:c6:23:d0:3d:f9:8c:ea: e9:a1:a9:96:41:c4:6b:68:9c:92:5a:ad:a8:44:e4: a3:35:67:3c:3c:d9:38:32:1e:d9:08:d5:a4:2e:9c: 5d:8b:22:15:89:57:cc:6c:de:6c:cc:f0:4e:58:8c: 10:52:d2:d0:97:05:7d:82:1a:42:c6:ad:70:b7:f6: ff:0e:8b:dc:b4:a3:e3:c3:40:a4:f7:a1:a4:65:4c: ca:63:df:e1:f8:08:93:fc:9e:74:61:cf:5e:ce:83: 21:79:31:c1:2b:07:7d:2e:19:ce:c8:54:0c:9e:4a: bb:c2:d7:99:75:3b:7a:31:fd:52:b4:3a:55:61:23: 87:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:36:D1:20:11:00:10:1B:8C:49:BF:9C:EE:59:33:9D:27:27:46:82 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8b02dd0-9caf-49fb-9ae0-dbf4f4db3b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:10c0::/48 Signature Algorithm: sha256WithRSAEncryption d8:4a:dc:5b:36:ef:5b:27:61:84:13:1c:b1:bf:2a:04:57:9f: ac:84:80:ba:9d:3c:89:27:66:5a:7b:91:b7:01:f0:f5:0e:94: 04:e8:50:ae:f2:6d:eb:a8:81:5a:7c:5e:f9:3b:d5:cf:35:10: f7:e8:1b:6b:d3:a2:3d:ae:24:57:c6:58:15:98:84:83:eb:85: f0:d5:e0:3f:d7:aa:22:1d:a4:3a:0e:ff:5d:4e:e2:e9:a7:eb: 7f:b4:cc:ca:f8:b6:1e:d6:f9:95:a8:ec:8e:e3:1f:79:c5:92: 6f:7d:38:be:9c:0b:12:d5:b7:9e:bb:a7:66:d6:02:3a:1b:65: 59:87:f6:7f:1c:e4:a5:c1:e0:41:c1:d6:dc:39:17:70:c2:81: 78:74:79:0a:69:1c:c5:5b:65:d7:72:24:5c:d6:c7:aa:21:ae: 58:00:83:dc:1d:96:53:9e:e2:50:26:14:69:2d:38:b9:ee:01: 41:00:8a:64:2e:d0:3c:63:5b:54:09:15:17:90:f8:6f:d6:80: 84:09:4c:d3:8e:51:a2:d0:f7:dd:10:df:82:75:e8:91:b9:d2: 7c:1a:33:50:30:c7:94:e6:d1:30:cf:65:9c:c8:48:9e:bf:cc: c0:91:e5:aa:c1:82:39:e2:c0:b4:17:80:8b:9e:a6:37:c4:03: 83:c2:39:b8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKaPX6DLf0o9+cLwfdqEf1kBDhmYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTUyMTA1WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDcyNTUwZGU2OWExNGQ0ZDBkZjFiOTc1MWIzYWVlNGE0 YmJlODNhMWEzOTNhZGJlNjc5OGU3MTZlNjk1YTI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDWidnM057VlR+mrOOqp58G6p8RnzpbSCTLVcakNsKfzdO BJ1UuPaZFU2NMtBRdIPCY0teD+s9If2S4jHANmUhJkg3jZkNF3ZsDY8F+FS38F7e I33I2Iy7/EFg2lynqRz49lElZw170xcrae1vdXclJGHH6lykNlaU25noSfQdxiPQ PfmM6umhqZZBxGtonJJarahE5KM1Zzw82TgyHtkI1aQunF2LIhWJV8xs3mzM8E5Y jBBS0tCXBX2CGkLGrXC39v8Oi9y0o+PDQKT3oaRlTMpj3+H4CJP8nnRhz17OgyF5 McErB30uGc7IVAyeSrvC15l1O3ox/VK0OlVhI4ePAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUzbRIBEAEBuMSb+c7lkznScnRoIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y4YjAyZGQwLTljYWYtNDlmYi05YWUwLWRiZjRmNGRiM2IzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//EMAwDQYJKoZIhvcNAQELBQADggEBANhK3Fs271snYYQTHLG/KgRX n6yEgLqdPIknZlp7kbcB8PUOlAToUK7ybeuogVp8Xvk71c81EPfoG2vToj2uJFfG WBWYhIPrhfDV4D/XqiIdpDoO/11O4umn63+0zMr4th7W+ZWo7I7jH3nFkm99OL6c CxLVt567p2bWAjobZVmH9n8c5KXB4EHB1tw5F3DCgXh0eQppHMVbZddyJFzWx6oh rlgAg9wdllOe4lAmFGktOLnuAUEAimQu0DxjW1QJFReQ+G/WgIQJTNOOUaLQ990Q 34J16JG50nwaM1Awx5Tm0TDPZZzISJ6/zMCR5arBgjniwLQXgIuepjfEA4PCObg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:30 2025 by rpki-client