$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12ca119f-0b23-4ab3-beb8-09a790867548.roa File: 12ca119f-0b23-4ab3-beb8-09a790867548.roa (raw, json) Hash identifier: j96yzCKO8ZhmsbtBePgRE3ACEdTMQd2OHGd5kqPPiPk= Subject key identifier: CB:69:F7:65:7C:54:78:5C:E8:93:5F:FA:85:45:7A:54:57:6A:F0:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5C10B7A1B425F29E6D99FC1A042ACB3BF58ECBC0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12ca119f-0b23-4ab3-beb8-09a790867548.roa Signing time: Tue 22 Apr 2025 00:11:40 +0000 ROA not before: Tue 22 Apr 2025 00:11:40 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff2:5080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:10:b7:a1:b4:25:f2:9e:6d:99:fc:1a:04:2a:cb:3b:f5:8e:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:11:40 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=81809ad6c694a2520389030c1d5d594b3864afd0a2fa66f84444df506a9ad0ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8b:72:b5:b3:f0:69:82:5a:93:74:b1:2e:70: 8f:2f:90:a2:e3:a0:a1:52:51:32:42:73:fc:89:c2: 4c:02:1a:03:54:61:7a:61:ce:4a:cc:24:36:ac:b8: 24:42:83:bf:90:69:69:df:c1:0b:88:10:68:14:87: 00:10:73:4d:1f:56:44:1e:ee:83:7f:0f:57:49:c5: ac:6f:28:b9:38:34:8e:03:5b:a3:1b:21:87:72:be: 0e:bb:26:01:76:ed:90:73:06:24:48:74:79:ab:b3: a7:ea:fe:92:83:5c:83:ab:2f:21:66:8c:e8:92:4e: e5:2c:fc:65:a6:0b:49:63:5b:0b:5b:95:d6:cc:15: 6c:0d:ec:5d:bc:70:cb:04:76:8c:1e:83:6f:71:70: e1:77:8b:e5:cd:64:8b:60:e7:d9:8a:38:85:70:51: 02:78:46:d7:10:6a:59:5d:5a:0f:c1:91:92:ac:c0: d8:3b:2a:69:e7:2e:3c:a9:51:a2:4a:e4:4c:e7:d3: db:f9:a7:46:ae:1f:e8:5f:ad:3f:31:ff:38:df:c0: e6:f4:70:93:e3:c9:ee:63:c8:da:65:f2:1c:6d:bc: cc:8c:29:cd:ea:18:26:1c:4c:63:c4:78:a2:29:03: 41:10:3d:ad:a2:6b:c1:58:65:b4:6e:69:b7:3d:d7: 2e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:69:F7:65:7C:54:78:5C:E8:93:5F:FA:85:45:7A:54:57:6A:F0:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12ca119f-0b23-4ab3-beb8-09a790867548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:5080::/48 Signature Algorithm: sha256WithRSAEncryption 99:b1:24:60:69:e5:c8:ee:39:c4:ca:c5:a9:44:b5:e2:9b:80: 6a:f8:b5:bf:9c:f4:f0:44:c3:f0:ff:0c:9a:3d:0c:53:75:e0: a3:3a:cc:5d:49:5c:72:9c:13:45:a1:ef:42:e5:f1:5c:c4:e7: 30:40:13:25:ce:e4:f8:e4:5c:9e:85:74:e6:1e:e8:ea:f5:26: 4b:dd:27:4e:0c:f8:f7:c8:42:5d:b6:7b:a4:22:39:df:aa:18: a1:d2:2a:0b:52:ad:90:71:bc:66:64:99:a5:59:9f:27:43:a7: 19:42:7d:d0:65:da:ff:43:07:8c:f4:1d:3d:d5:9c:49:1f:b7: 7b:a1:e7:ef:00:ef:83:fe:ee:ac:f1:78:bc:ba:2d:0e:68:4e: 0a:10:ac:74:f6:45:60:77:95:2f:04:6f:ce:2c:12:22:e1:b2: 3a:ec:29:22:27:14:0f:fd:9f:f7:03:67:a8:58:31:6b:58:74: e1:87:a9:a5:6e:29:4c:fa:4c:4e:3a:8e:14:b8:54:08:eb:33: fd:1d:6a:cf:0d:f1:0e:d9:c7:d8:54:71:01:73:f8:da:3b:79: 9f:9e:f3:05:31:5f:8c:bc:38:0d:04:6b:aa:a3:52:2f:c8:65: 43:dc:ef:3f:ad:dd:09:bd:0c:9c:27:e4:03:30:2b:23:c6:f7: a2:57:81:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXBC3obQl8p5tmfwaBCrLO/WOy8AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAxMTQwWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTgwOWFkNmM2OTRhMjUyMDM4OTAzMGMxZDVkNTk0YjM4 NjRhZmQwYTJmYTY2Zjg0NDQ0ZGY1MDZhOWFkMGVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKi3K1s/BpglqTdLEucI8vkKLjoKFSUTJCc/yJwkwCGgNU YXphzkrMJDasuCRCg7+QaWnfwQuIEGgUhwAQc00fVkQe7oN/D1dJxaxvKLk4NI4D W6MbIYdyvg67JgF27ZBzBiRIdHmrs6fq/pKDXIOrLyFmjOiSTuUs/GWmC0ljWwtb ldbMFWwN7F28cMsEdoweg29xcOF3i+XNZItg59mKOIVwUQJ4RtcQalldWg/BkZKs wNg7KmnnLjypUaJK5Ezn09v5p0auH+hfrT8x/zjfwOb0cJPjye5jyNpl8hxtvMyM Kc3qGCYcTGPEeKIpA0EQPa2ia8FYZbRuabc91y6tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUy2n3ZXxUeFzok1/6hUV6VFdq8OwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEyY2ExMTlmLTBiMjMtNGFiMy1iZWI4LTA5YTc5MDg2NzU0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yUIAwDQYJKoZIhvcNAQELBQADggEBAJmxJGBp5cjuOcTKxalEteKb gGr4tb+c9PBEw/D/DJo9DFN14KM6zF1JXHKcE0Wh70Ll8VzE5zBAEyXO5PjkXJ6F dOYe6Or1JkvdJ04M+PfIQl22e6QiOd+qGKHSKgtSrZBxvGZkmaVZnydDpxlCfdBl 2v9DB4z0HT3VnEkft3uh5+8A74P+7qzxeLy6LQ5oTgoQrHT2RWB3lS8Eb84sEiLh sjrsKSInFA/9n/cDZ6hYMWtYdOGHqaVuKUz6TE46jhS4VAjrM/0das8N8Q7Zx9hU cQFz+No7eZ+e8wUxX4y8OA0Ea6qjUi/IZUPc7z+t3Qm9DJwn5AMwKyPG96JXgfQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:31 2025 by rpki-client