$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06fb2cb4-0a76-4093-8fd7-b0c7f0db48a5.roa File: 06fb2cb4-0a76-4093-8fd7-b0c7f0db48a5.roa (raw, json) Hash identifier: TwWAah1QdtB0HW1xU+sMzwcvOgy002p/MLbvE3zcwE8= Subject key identifier: A9:3D:42:AE:8D:B3:43:53:91:85:9C:AF:6B:AF:BF:BE:90:51:DB:73 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78D08BD5891B7E02B8C64744BC235A711747A40B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06fb2cb4-0a76-4093-8fd7-b0c7f0db48a5.roa Signing time: Tue 22 Apr 2025 15:41:55 +0000 ROA not before: Tue 22 Apr 2025 15:41:55 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:50c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d0:8b:d5:89:1b:7e:02:b8:c6:47:44:bc:23:5a:71:17:47:a4:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:41:55 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=3b7b7a13665458d138f61f8513ac1ddb12d076eb928149a302017b8d15f82989, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:8e:c5:60:6d:e8:3d:52:65:9c:bc:94:a2: bd:73:cc:32:8c:b4:8b:43:fb:cf:af:f1:bb:65:4a: f7:2d:09:7b:0e:fa:d9:0c:a7:46:00:76:cd:8d:e5: 12:3e:c4:ed:0b:53:9a:e1:c7:ed:13:86:67:3c:54: 19:01:91:32:c6:a4:22:45:40:19:23:f1:78:41:43: 64:79:ea:c7:6a:24:fd:c2:b8:5b:73:2d:60:a3:14: 89:39:1a:25:03:6a:33:d7:e3:05:0c:a8:34:65:d4: bc:e2:47:e7:6a:9b:f4:ff:f6:62:07:09:42:21:30: 78:85:0d:4c:1e:30:05:a9:4a:b8:26:8e:6d:cf:bc: 8b:67:02:df:74:8f:fc:d9:b9:e5:75:2e:fe:aa:fb: 89:21:5a:32:3b:f1:6f:f6:ae:6f:a6:fd:b1:cf:f5: 12:45:31:13:30:c9:46:df:c4:a7:e9:c9:5b:b9:a7: 8c:3e:7b:54:de:c4:f3:3f:98:44:5b:12:73:a8:f6: fa:c5:e5:d5:d9:16:7d:9c:c2:61:da:92:fb:12:93: 2d:d2:39:48:1b:40:97:e4:b2:e3:fb:ad:3f:60:8e: 71:c6:ad:45:35:cc:90:c2:d0:da:bf:28:db:02:db: 15:bb:34:10:40:bc:8d:d0:27:b7:e9:cd:21:22:6c: fe:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3D:42:AE:8D:B3:43:53:91:85:9C:AF:6B:AF:BF:BE:90:51:DB:73 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06fb2cb4-0a76-4093-8fd7-b0c7f0db48a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:50c0::/46 Signature Algorithm: sha256WithRSAEncryption 0c:45:6d:f2:44:8f:ea:47:ae:7f:2e:86:3d:9c:7d:80:59:b1: 4f:77:68:25:b9:33:6d:dd:38:7f:2a:f5:dd:6a:3b:ad:fa:5f: 2d:23:db:da:55:cb:0d:f0:20:62:ff:f3:56:c6:70:12:c8:fd: 95:e9:eb:a7:d9:06:45:90:eb:3e:c9:e4:13:64:4f:81:79:a2: fd:83:06:d5:db:8e:6a:58:9f:62:c1:7f:a8:e2:c1:62:2e:34: c4:be:b6:7c:43:6d:1c:06:64:df:cc:cb:0e:a4:3f:2c:77:ef: b7:fd:b9:13:a9:1a:8e:32:c4:56:c6:b6:e9:be:19:b0:29:d6: 9d:08:49:e5:91:83:a6:f9:23:6a:d2:88:3e:d7:fc:8a:1d:a8: eb:95:64:7d:f6:1b:81:71:29:70:55:f7:85:16:ea:39:cf:74: 1b:70:b9:ca:ff:af:c7:17:7d:9e:b6:4d:39:cc:7a:97:21:54: 04:54:cd:ab:3f:bb:eb:1e:8a:bb:4d:8a:57:b1:d2:ae:a3:58: 1b:c1:07:8b:e7:0a:bf:15:8e:13:dd:2b:0f:47:3f:18:6b:c0: 9a:58:18:20:66:cf:9a:15:b8:59:55:66:02:ba:66:f6:2b:a2: a4:3c:65:1e:7f:7e:97:0f:17:2f:ff:40:68:39:e5:a3:f3:92: a4:77:10:a8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeNCL1YkbfgK4xkdEvCNacRdHpAswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTU0MTU1WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjdiN2ExMzY2NTQ1OGQxMzhmNjFmODUxM2FjMWRkYjEy ZDA3NmViOTI4MTQ5YTMwMjAxN2I4ZDE1ZjgyOTg5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9QY7FYG3oPVJlnLyUor1zzDKMtItD+8+v8btlSvctCXsO +tkMp0YAds2N5RI+xO0LU5rhx+0Thmc8VBkBkTLGpCJFQBkj8XhBQ2R56sdqJP3C uFtzLWCjFIk5GiUDajPX4wUMqDRl1LziR+dqm/T/9mIHCUIhMHiFDUweMAWpSrgm jm3PvItnAt90j/zZueV1Lv6q+4khWjI78W/2rm+m/bHP9RJFMRMwyUbfxKfpyVu5 p4w+e1TexPM/mERbEnOo9vrF5dXZFn2cwmHakvsSky3SOUgbQJfksuP7rT9gjnHG rUU1zJDC0Nq/KNsC2xW7NBBAvI3QJ7fpzSEibP5rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqT1Cro2zQ1ORhZyva6+/vpBR23MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA2ZmIyY2I0LTBhNzYtNDA5My04ZmQ3LWIwYzdmMGRiNDhhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3UMAwDQYJKoZIhvcNAQELBQADggEBAAxFbfJEj+pHrn8uhj2cfYBZ sU93aCW5M23dOH8q9d1qO636Xy0j29pVyw3wIGL/81bGcBLI/ZXp66fZBkWQ6z7J 5BNkT4F5ov2DBtXbjmpYn2LBf6jiwWIuNMS+tnxDbRwGZN/Myw6kPyx377f9uROp Go4yxFbGtum+GbAp1p0ISeWRg6b5I2rSiD7X/IodqOuVZH32G4FxKXBV94UW6jnP dBtwucr/r8cXfZ62TTnMepchVARUzas/u+seirtNilex0q6jWBvBB4vnCr8VjhPd Kw9HPxhrwJpYGCBmz5oVuFlVZgK6ZvYroqQ8ZR5/fpcPFy//QGg55aPzkqR3EKg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:12:52 2025 by rpki-client