$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa File: 03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa (raw, json) Hash identifier: cxH3TFdwslBan6tdPstjDieNPseZt8Co7XnBsOgg43U= Subject key identifier: 85:19:27:A7:03:37:FE:80:8B:AC:0D:98:3D:FB:C1:DD:6E:9A:D9:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 55F797C97A6581EB45A0F5AC83584BEAFED4E266 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa Signing time: Mon 21 Apr 2025 17:10:22 +0000 ROA not before: Mon 21 Apr 2025 17:10:22 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:81a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f7:97:c9:7a:65:81:eb:45:a0:f5:ac:83:58:4b:ea:fe:d4:e2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:10:22 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=49807a388dc1f4d241b5243d9b8725e5aed3d39267c0f39c999774721b0e9738, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:24:ae:e4:c1:bf:6b:f9:23:11:c8:59:f1: 29:e4:36:c1:63:07:0a:7b:00:23:c7:24:90:20:0d: 18:3b:c1:24:88:87:63:fd:99:a0:06:0d:f7:d6:7d: 96:89:74:d3:96:01:e6:02:cc:78:9e:c8:11:ab:b2: bc:fe:f3:72:de:9f:57:d7:c3:5f:cb:99:ed:b5:92: 41:81:b8:59:c9:f0:81:07:41:8c:0d:27:30:81:76: 1e:c4:2a:fa:07:a7:8d:67:11:7d:37:34:77:cc:ce: 66:80:8c:de:c8:13:b1:b5:7d:6e:a7:d3:6d:c1:07: d5:e6:a3:0f:ba:82:6d:fa:a3:34:7b:4d:92:5b:56: bf:3a:7a:20:57:68:a9:2f:1d:3f:b8:97:ff:51:e0: b6:92:1a:0f:18:52:af:44:c4:19:0d:82:85:bc:81: 3e:ef:f5:49:83:f1:db:29:fa:66:02:15:fd:b8:19: 49:98:aa:16:23:15:ff:95:06:52:64:30:cc:46:e7: 6b:23:4f:e8:6e:1b:c0:a4:bd:52:e8:a1:5e:0b:c0: dd:bf:75:86:c9:1b:4f:b8:6d:07:b8:e0:f0:a3:58: 0a:e1:1f:a0:8d:a2:8c:6e:2f:6c:25:45:9b:9e:29: 41:0f:ba:57:71:78:11:cf:c0:63:e4:b1:e8:97:25: 1c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:19:27:A7:03:37:FE:80:8B:AC:0D:98:3D:FB:C1:DD:6E:9A:D9:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03f1ec6c-4fea-4ff6-bbae-ac1ab1c9e722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:81a0::/48 Signature Algorithm: sha256WithRSAEncryption 1c:07:e1:4b:64:16:77:75:73:a8:3c:c1:a9:48:22:1a:36:a9: 3e:a9:c7:3c:c1:5d:e0:fe:d2:16:8d:62:fe:57:96:be:e7:ce: b6:41:ac:bf:9c:34:6d:67:97:e9:5b:fd:90:16:af:af:29:ca: 4c:47:48:0b:7d:1e:54:b2:7d:c0:06:70:0e:a3:05:1e:a8:9c: a0:3c:6b:19:dd:b1:fd:86:a7:c2:8d:f5:2b:6d:56:96:da:08: ae:ce:c8:f9:fd:2b:89:57:96:3c:13:41:60:6d:4e:43:68:f8: 5c:80:68:24:25:19:a0:d6:23:3a:64:ac:f8:f7:93:74:7d:20: 18:db:37:d8:93:28:b5:45:41:4f:79:51:2e:7a:c1:76:79:cb: b2:a2:81:1e:58:19:3e:22:72:76:8d:b9:2e:13:17:48:0b:bc: 44:92:b6:f8:58:9f:88:27:28:76:94:f3:eb:5a:c5:85:d2:f2: 19:1f:1e:bf:00:c6:53:ad:75:6e:21:b0:ab:27:a2:0c:bf:80: 65:eb:c2:cb:50:a9:f8:e7:a6:28:b2:e7:5f:37:4c:99:85:ae: 36:14:4e:5d:55:1a:74:eb:e2:bf:76:56:a0:d9:b1:2b:9c:28: 35:44:24:0b:2e:e8:11:ff:4b:94:a9:44:5f:22:fb:6b:4f:ab: 33:47:50:ef -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVfeXyXplgetFoPWsg1hL6v7U4mYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTcxMDIyWhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTgwN2EzODhkYzFmNGQyNDFiNTI0M2Q5Yjg3MjVlNWFl ZDNkMzkyNjdjMGYzOWM5OTk3NzQ3MjFiMGU5NzM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3zSSu5MG/a/kjEchZ8SnkNsFjBwp7ACPHJJAgDRg7wSSI h2P9maAGDffWfZaJdNOWAeYCzHieyBGrsrz+83Len1fXw1/Lme21kkGBuFnJ8IEH QYwNJzCBdh7EKvoHp41nEX03NHfMzmaAjN7IE7G1fW6n023BB9Xmow+6gm36ozR7 TZJbVr86eiBXaKkvHT+4l/9R4LaSGg8YUq9ExBkNgoW8gT7v9UmD8dsp+mYCFf24 GUmYqhYjFf+VBlJkMMxG52sjT+huG8CkvVLooV4LwN2/dYbJG0+4bQe44PCjWArh H6CNooxuL2wlRZueKUEPuldxeBHPwGPkseiXJRx5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhRknpwM3/oCLrA2YPfvB3W6a2RkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAzZjFlYzZjLTRmZWEtNGZmNi1iYmFlLWFjMWFiMWM5ZTcyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgaAwDQYJKoZIhvcNAQELBQADggEBABwH4UtkFnd1c6g8walIIho2 qT6pxzzBXeD+0haNYv5Xlr7nzrZBrL+cNG1nl+lb/ZAWr68pykxHSAt9HlSyfcAG cA6jBR6onKA8axndsf2Gp8KN9SttVpbaCK7OyPn9K4lXljwTQWBtTkNo+FyAaCQl GaDWIzpkrPj3k3R9IBjbN9iTKLVFQU95US56wXZ5y7KigR5YGT4icnaNuS4TF0gL vESStvhYn4gnKHaU8+taxYXS8hkfHr8AxlOtdW4hsKsnogy/gGXrwstQqfjnpiiy 5183TJmFrjYUTl1VGnTr4r92VqDZsSucKDVEJAsu6BH/S5SpRF8i+2tPqzNHUO8= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:25 2025 by rpki-client