$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50c8b954-ffa6-4746-9859-9ac0de781ad5.roa File: 50c8b954-ffa6-4746-9859-9ac0de781ad5.roa (raw, json) Hash identifier: tzwPVyYAnY7OniS0fRdrKNS7zeEIhu+8XXEhNKI+e4Q= Subject key identifier: CF:A1:AC:91:8C:79:49:AD:FB:9E:41:9D:5F:6E:0E:CA:5F:1E:B1:EB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 604DA20034B6EF6D213E7A03E0720A577C267513 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50c8b954-ffa6-4746-9859-9ac0de781ad5.roa Signing time: Mon 03 Mar 2025 22:10:18 +0000 ROA not before: Mon 03 Mar 2025 22:10:18 +0000 ROA not after: Mon 07 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f25:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4d:a2:00:34:b6:ef:6d:21:3e:7a:03:e0:72:0a:57:7c:26:75:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 3 22:10:18 2025 GMT Not After : Apr 7 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:16:ab:1e:05:7c:41:33:06:3f:53:79:b9: 47:4c:ff:c1:06:88:10:13:96:6a:4b:c7:13:d7:56: 15:f1:83:a5:ce:dc:b6:2d:bd:eb:1a:be:cc:97:15: a0:1d:b6:24:96:4f:3e:89:c6:a8:8f:03:14:06:e1: ad:8c:3e:e4:b9:44:4d:35:8f:31:81:9c:91:cb:c1: b4:5a:4a:21:26:99:be:c5:8f:94:b4:cc:6a:b5:0e: c2:8f:ef:29:7d:e5:20:47:29:be:7c:0e:85:45:5f: 68:39:e2:27:67:b8:02:15:ba:27:ac:a4:12:a2:c5: 4a:91:42:69:ff:62:48:70:02:30:f1:27:4b:5e:6d: 8b:52:2e:a2:eb:36:a5:ba:bc:f8:0d:97:b1:c1:5f: 23:ef:31:84:92:2d:90:00:cb:f9:44:05:33:a6:95: 01:50:cb:23:13:07:2e:1a:ec:33:59:b7:78:62:43: c0:5f:35:33:0a:04:e1:cf:1f:4d:c9:9a:28:cb:ca: a9:2e:19:ac:b9:b9:1d:c3:f9:2b:5c:59:08:d9:0d: e0:c6:a7:72:3e:24:42:ee:ae:4b:ae:31:39:7a:33: 9e:48:eb:3a:6f:12:e9:d8:83:e7:03:b4:48:6b:92: 2c:b0:6f:c6:ac:66:4a:18:fb:ed:01:2f:29:99:c2: a3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A1:AC:91:8C:79:49:AD:FB:9E:41:9D:5F:6E:0E:CA:5F:1E:B1:EB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50c8b954-ffa6-4746-9859-9ac0de781ad5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f25:8000::/36 Signature Algorithm: sha256WithRSAEncryption 88:4f:65:51:02:a3:99:83:18:6e:01:9e:59:b8:71:7a:2a:57: c1:30:8e:8f:01:5a:c9:86:50:80:f0:93:75:03:92:72:3e:f6: 55:95:fa:e3:21:b1:ef:18:b7:3a:b1:ed:73:71:59:45:a2:56: c8:8b:b4:38:80:a3:86:27:67:cb:29:f3:fe:e7:58:d4:15:ab: 9b:7c:58:36:75:4a:e2:4b:55:b7:8d:ea:0a:eb:f7:e7:71:eb: bb:51:38:23:71:8e:40:36:60:05:a0:3e:91:ef:26:b2:7b:5c: fc:78:f3:3f:2b:94:43:f8:f4:de:2d:67:ee:50:2b:77:06:f8: b8:5f:34:96:a2:cb:39:b0:2b:8c:9a:10:14:04:bc:b8:96:4e: 72:58:d6:c1:8d:53:cf:53:ea:ac:e6:17:2e:ef:0b:59:7d:09: e2:62:b9:e5:06:cf:2e:a2:f8:7d:da:d8:2c:ae:af:44:da:85: 58:54:c8:8d:d1:f7:f4:c7:a2:48:36:38:af:bb:02:78:16:5f: 00:03:a4:4f:0a:3f:3a:9c:92:6c:b3:d8:d5:e8:0d:66:8b:13: b0:2a:23:81:64:ff:c1:67:4f:0b:7e:4f:6a:52:e3:f0:28:2a: 21:dd:61:04:75:dd:fd:71:08:a5:bd:fb:01:dc:81:07:68:fe: 10:ff:a7:4c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYE2iADS2720hPnoD4HIKV3wmdRMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzAzMjIxMDE4WhcNMjUwNDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjRhYzM4Y2NlMzU1YWIzNTJjMTlkOWYwODZkYWZkNDk3 YTU4OGM5YTQ3MmU3NGJmM2ZhMGRiZGMyYWM1NGFjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz0RarHgV8QTMGP1N5uUdM/8EGiBATlmpLxxPXVhXxg6XO 3LYtvesavsyXFaAdtiSWTz6JxqiPAxQG4a2MPuS5RE01jzGBnJHLwbRaSiEmmb7F j5S0zGq1DsKP7yl95SBHKb58DoVFX2g54idnuAIVuiespBKixUqRQmn/YkhwAjDx J0tebYtSLqLrNqW6vPgNl7HBXyPvMYSSLZAAy/lEBTOmlQFQyyMTBy4a7DNZt3hi Q8BfNTMKBOHPH03JmijLyqkuGay5uR3D+StcWQjZDeDGp3I+JELurkuuMTl6M55I 6zpvEunYg+cDtEhrkiywb8asZkoY++0BLymZwqOPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUz6GskYx5Sa37nkGdX24Oyl8eseswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUwYzhiOTU0LWZmYTYtNDc0Ni05ODU5LTlhYzBkZTc4MWFkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8lgDANBgkqhkiG9w0BAQsFAAOCAQEAiE9lUQKjmYMYbgGeWbhxeipX wTCOjwFayYZQgPCTdQOScj72VZX64yGx7xi3OrHtc3FZRaJWyIu0OICjhidnyynz /udY1BWrm3xYNnVK4ktVt43qCuv353Hru1E4I3GOQDZgBaA+ke8msntc/HjzPyuU Q/j03i1n7lArdwb4uF80lqLLObArjJoQFAS8uJZOcljWwY1Tz1PqrOYXLu8LWX0J 4mK55QbPLqL4fdrYLK6vRNqFWFTIjdH39MeiSDY4r7sCeBZfAAOkTwo/OpySbLPY 1egNZosTsCojgWT/wWdPC35PalLj8CgqId1hBHXd/XEIpb37AdyBB2j+EP+nTA== -----END CERTIFICATE-----Generated at Thu Mar 13 23:53:11 2025 by rpki-client