$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa File: f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa (raw, json) Hash identifier: box2Y8QYTRvXHhdzhp+EBn0+GpEj9bn9+6Nk9q9cXPA= Subject key identifier: 64:28:E6:09:65:EB:E0:46:7E:00:B0:A2:98:A5:50:72:CF:BE:17:0C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6D1D594D76561388275341AE172AA7C9CC7AA4BB Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa Signing time: Mon 31 Mar 2025 18:30:08 +0000 ROA not before: Mon 31 Mar 2025 18:30:08 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 801 IP address blocks: 2631::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:1d:59:4d:76:56:13:88:27:53:41:ae:17:2a:a7:c9:cc:7a:a4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Mar 31 18:30:08 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5c:4b:07:4c:68:76:14:b5:0e:24:99:ea:a0: fa:40:2a:c6:d4:7d:32:8e:99:9a:ed:ce:77:17:49: 76:35:e9:41:44:26:d4:a4:25:7b:fc:71:55:e3:f6: b0:10:4e:91:11:20:94:d6:d5:41:bf:11:9f:65:1c: 83:9e:1b:88:d8:18:de:73:fe:ff:e7:3d:b5:3f:a5: 70:b8:42:49:64:67:52:6c:f7:64:a8:fb:c0:23:88: bb:bd:05:68:f3:a2:23:35:ae:30:9a:53:ca:eb:52: 03:ad:88:50:fe:72:bc:63:3e:ec:54:55:f6:08:84: 0d:46:34:16:fd:d6:42:97:1c:b6:0f:04:d1:17:d9: 49:20:54:c5:74:3d:45:06:5e:87:1d:5c:c9:16:d3: 57:73:84:9a:a7:c2:78:29:23:d9:61:d3:8b:2b:5f: 76:70:ac:4a:0a:8d:82:22:84:90:ce:cd:b4:9e:fb: 76:8b:c5:4c:20:38:67:4c:8b:fb:87:ee:7d:cb:9a: 28:a5:6b:9c:79:f9:a4:a7:20:31:02:73:f3:2d:8b: 87:fa:d6:80:51:c8:c5:62:c3:b9:01:a3:bd:74:2c: 9a:43:ca:ca:a6:8d:93:d4:86:48:93:bb:a6:6e:44: d2:f6:47:3d:44:83:54:45:52:c4:58:6a:19:83:8c: 8c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:28:E6:09:65:EB:E0:46:7E:00:B0:A2:98:A5:50:72:CF:BE:17:0C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631::/24 Signature Algorithm: sha256WithRSAEncryption 8f:cf:f3:75:ad:f7:9a:b5:e6:28:d9:f4:9d:af:05:d9:6e:59: 74:e8:5e:91:57:bd:ab:0a:fa:2d:74:13:07:60:af:ff:83:ff: 2f:a0:6d:51:5a:90:70:6c:85:b8:d2:e2:f5:f6:6c:c1:58:6c: 6f:12:91:8f:25:d1:c6:a5:40:40:b7:5d:f1:6b:35:9a:f2:27: 32:15:5c:c5:73:25:d9:cd:0e:76:83:be:40:43:6a:5c:bc:20: 68:65:71:fa:84:c9:0c:eb:8a:46:ba:0e:34:94:f9:e4:39:4c: 03:27:2a:f3:e2:56:6f:ab:34:8b:e9:be:8a:8e:21:7b:90:93: e7:de:43:77:df:6c:c6:6f:da:7a:2b:29:da:94:81:c3:70:b9: c6:95:d7:49:01:a0:8c:31:5e:a7:ca:57:2f:86:5e:bd:b3:fd: 5b:43:32:bf:58:bc:54:bd:7e:68:f9:07:82:36:27:ef:0b:6d: 2f:94:c4:83:93:5c:51:24:bd:e2:fb:b8:9a:82:e6:f7:9d:ed: 15:ab:1f:55:fb:f3:0e:37:d7:be:6c:4e:ec:5d:dd:50:b3:21: 23:c5:90:c7:f6:8d:38:e8:7b:2a:8c:35:d8:16:8a:bc:e9:26: f4:70:62:27:45:ff:af:ad:48:b1:bd:12:e5:ba:1d:f7:57:7a: b3:de:d2:a0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbR1ZTXZWE4gnU0GuFyqnycx6pLswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwMzMxMTgzMDA4WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTE0NWE1MzhhNTA5NTAxNWZkZTdiZGRiZDQ3ODNkZWQx NTlhYzMwNmI3ZmYyMDYzM2RlMjc2MjczMjIzMjg5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPXEsHTGh2FLUOJJnqoPpAKsbUfTKOmZrtzncXSXY16UFE JtSkJXv8cVXj9rAQTpERIJTW1UG/EZ9lHIOeG4jYGN5z/v/nPbU/pXC4QklkZ1Js 92So+8AjiLu9BWjzoiM1rjCaU8rrUgOtiFD+crxjPuxUVfYIhA1GNBb91kKXHLYP BNEX2UkgVMV0PUUGXocdXMkW01dzhJqnwngpI9lh04srX3ZwrEoKjYIihJDOzbSe +3aLxUwgOGdMi/uH7n3Lmiila5x5+aSnIDECc/Mti4f61oBRyMViw7kBo710LJpD ysqmjZPUhkiTu6ZuRNL2Rz1Eg1RFUsRYahmDjIybAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZCjmCWXr4EZ+ALCimKVQcs++FwwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Y5ZGJjYzZmLWJjZmEtNDY3Yy1hMjJiLTc2MmM2NjlkOTk0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC MAYDBAAmMQAwDQYJKoZIhvcNAQELBQADggEBAI/P83Wt95q15ijZ9J2vBdluWXTo XpFXvasK+i10Ewdgr/+D/y+gbVFakHBshbjS4vX2bMFYbG8SkY8l0calQEC3XfFr NZryJzIVXMVzJdnNDnaDvkBDaly8IGhlcfqEyQzrika6DjSU+eQ5TAMnKvPiVm+r NIvpvoqOIXuQk+feQ3ffbMZv2norKdqUgcNwucaV10kBoIwxXqfKVy+GXr2z/VtD Mr9YvFS9fmj5B4I2J+8LbS+UxIOTXFEkveL7uJqC5ved7RWrH1X78w43175sTuxd 3VCzISPFkMf2jTjoeyqMNdgWirzpJvRwYidF/6+tSLG9EuW6HfdXerPe0qA= -----END CERTIFICATE-----Generated at Sat Apr 5 19:13:06 2025 by rpki-client