$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa File: 0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa (raw, json) Hash identifier: 5NTbY1/Sj+pu6a3Vp28fk5wY4H/EPJm2dRrsI0OsfHo= Subject key identifier: BE:02:34:E5:7C:59:7F:C6:CE:BA:F7:AA:1E:14:78:38:C6:F1:80:65 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0590FABA80157B9FA8E155BE5F538B7DA7146DF4 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa Signing time: Tue 01 Apr 2025 15:00:12 +0000 ROA not before: Tue 01 Apr 2025 15:00:12 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 801 IP address blocks: 2606:8140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:90:fa:ba:80:15:7b:9f:a8:e1:55:be:5f:53:8b:7d:a7:14:6d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 1 15:00:12 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:00:bb:30:2b:32:92:6d:0f:85:72:81:c3:52: 79:23:32:2c:f2:3e:a2:05:6d:c6:a8:4c:68:3e:59: 0e:37:47:3a:8f:99:d4:87:98:38:8d:35:aa:4c:79: d0:d2:84:75:2d:a9:a9:e9:b1:fe:48:79:d9:00:07: 6e:24:31:b5:6b:8e:61:e1:76:39:f1:f7:95:a2:f8: 8d:d2:aa:82:70:2b:a3:78:a7:c0:46:aa:09:ad:e7: 5f:ac:db:6d:a6:17:e7:b0:b7:ad:05:9b:7f:15:42: f5:2d:0f:10:be:71:6a:63:98:8d:63:d7:d5:5f:a4: 58:04:90:a7:10:33:43:18:2b:8a:5b:db:d5:0d:7c: 64:62:14:7a:b5:f2:5e:e2:f6:ed:0e:42:be:aa:a7: 10:d4:96:82:95:1b:bf:4e:dd:03:2f:88:ca:74:9f: 28:82:af:f4:93:67:90:5a:48:ae:0e:43:42:44:20: dd:27:48:fa:98:a3:60:9e:6d:de:92:f2:bf:0c:8c: 02:ea:09:d0:be:c7:6f:18:e4:6e:a5:08:9f:7f:a6: dd:76:fe:4d:6a:fc:ab:59:8a:cd:23:56:2b:95:e4: 3b:76:b9:98:cd:6d:78:02:88:b1:79:9a:89:25:00: bc:e6:dc:f5:c2:17:cc:34:a2:b2:75:3a:99:b1:60: f5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:02:34:E5:7C:59:7F:C6:CE:BA:F7:AA:1E:14:78:38:C6:F1:80:65 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0ce94079-a7b8-4893-a92a-bb1fda5ea54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140::/32 Signature Algorithm: sha256WithRSAEncryption 99:c5:26:b9:d9:64:51:ed:42:73:da:e0:35:27:93:94:dc:13: d2:b1:3f:03:79:b3:c0:d3:29:21:97:3a:40:86:59:65:c1:16: 80:0b:bd:29:90:b4:89:fe:96:86:07:5e:75:4a:cf:d4:b2:eb: d7:de:5a:92:ec:f8:26:14:31:c4:14:68:ed:78:73:be:9b:f0: 74:b5:1c:1d:63:61:d6:42:3c:0d:42:af:60:9e:d0:1b:1d:55: 9d:4c:ba:4e:9d:68:b5:24:32:d4:b9:5f:25:57:e9:ed:3c:e8: 13:bf:ab:91:d1:b9:7e:9b:db:78:97:2d:89:f2:22:be:2f:a1: 5b:69:2e:36:98:c9:f0:2f:03:bd:e9:9a:29:e1:6b:7c:1e:fe: 0b:0e:63:4c:b6:1f:0d:ae:4a:05:75:15:9f:80:05:ec:18:28: 79:07:6d:dc:a3:75:a8:00:b1:87:1c:af:ed:ad:ef:9d:89:b8: 04:b1:a7:b2:67:da:70:09:a1:be:be:95:ca:db:4a:89:1b:ae: cc:23:92:ae:05:14:ac:90:ef:0f:32:08:60:ec:1c:d5:f6:53: d1:2d:66:b4:cc:46:46:cc:59:04:05:58:ad:02:69:29:b2:b9: 3b:05:44:6a:74:59:59:70:80:dc:dd:ca:00:35:16:29:bf:74: 6f:30:82:58 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUBZD6uoAVe5+o4VW+X1OLfacUbfQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDAxMTUwMDEyWhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmMyNzYxOWI1MzY3MTZmN2E2NTgzMWM4MWZiYjcwM2Iz NTUyZTE1MjhjMjQwNDM2ZmQ0NDJjODAyZTAzNjVlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeALswKzKSbQ+FcoHDUnkjMizyPqIFbcaoTGg+WQ43RzqP mdSHmDiNNapMedDShHUtqanpsf5IedkAB24kMbVrjmHhdjnx95Wi+I3SqoJwK6N4 p8BGqgmt51+s222mF+ewt60Fm38VQvUtDxC+cWpjmI1j19VfpFgEkKcQM0MYK4pb 29UNfGRiFHq18l7i9u0OQr6qpxDUloKVG79O3QMviMp0nyiCr/STZ5BaSK4OQ0JE IN0nSPqYo2Cebd6S8r8MjALqCdC+x28Y5G6lCJ9/pt12/k1q/KtZis0jViuV5Dt2 uZjNbXgCiLF5moklALzm3PXCF8w0orJ1OpmxYPW/AgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUvgI05XxZf8bOuveqHhR4OMbxgGUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBjZTk0MDc5LWE3YjgtNDg5My1hOTJhLWJiMWZkYTVlYTU0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBoFAMA0GCSqGSIb3DQEBCwUAA4IBAQCZxSa52WRR7UJz2uA1J5OU3BPS sT8DebPA0ykhlzpAhlllwRaAC70pkLSJ/paGB151Ss/UsuvX3lqS7PgmFDHEFGjt eHO+m/B0tRwdY2HWQjwNQq9gntAbHVWdTLpOnWi1JDLUuV8lV+ntPOgTv6uR0bl+ m9t4ly2J8iK+L6FbaS42mMnwLwO96Zop4Wt8Hv4LDmNMth8NrkoFdRWfgAXsGCh5 B23co3WoALGHHK/tre+dibgEsaeyZ9pwCaG+vpXK20qJG67MI5KuBRSskO8PMghg 7BzV9lPRLWa0zEZGzFkEBVitAmkpsrk7BURqdFlZcIDc3coANRYpv3RvMIJY -----END CERTIFICATE-----Generated at Sat Apr 5 19:13:05 2025 by rpki-client