$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16c9067b-6854-4c04-a03a-53bf3df702a4.roa File: 16c9067b-6854-4c04-a03a-53bf3df702a4.roa (raw, json) Hash identifier: I2QiscOg1dFD/5z1OnjFDeuoC0Do6pbBJ8JsCExZM0k= Subject key identifier: E1:68:B8:34:68:95:9F:B5:ED:57:3F:2D:67:28:EF:36:F7:64:71:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54EBB5006C5CFDA7EB79C2AC63B5D75DFCE74871 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16c9067b-6854-4c04-a03a-53bf3df702a4.roa Signing time: Tue 22 Apr 2025 15:20:23 +0000 ROA not before: Tue 22 Apr 2025 15:20:23 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff7:8080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:eb:b5:00:6c:5c:fd:a7:eb:79:c2:ac:63:b5:d7:5d:fc:e7:48:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:20:23 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=814471ca2e8dfec91d76a57368fe4a4f8ad88ee45ebedd537f1578318923655d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:c8:e8:ec:e3:3f:16:33:ef:b0:a1:5c:c9: d8:fd:59:27:38:af:2c:ca:e9:68:00:c0:45:1d:14: cc:6b:5e:7b:72:8d:3b:31:84:9e:67:b8:df:72:b3: d8:7c:8c:94:08:b6:c0:15:98:eb:ef:86:80:ee:0a: f7:d2:4b:68:41:42:fc:c6:e0:24:ac:2a:97:05:3a: c4:54:30:6c:30:40:fd:06:52:75:8c:08:e2:f2:8b: 26:ce:d1:3b:13:08:62:af:3b:a9:33:92:9a:c7:ce: 77:f8:39:23:57:46:7d:51:cb:61:73:ff:e4:13:20: d8:34:66:95:e1:a9:db:ad:d3:ff:a3:06:07:94:a2: dc:24:b4:3b:fa:69:b7:9f:17:b0:78:53:9a:7e:59: ff:31:24:45:4c:8e:ba:b7:2a:c2:59:2f:d5:00:ae: 7e:1f:42:3e:f8:a6:57:57:c0:f4:86:be:3b:5f:24: 46:51:a9:48:bf:b5:a1:df:19:8b:2e:3b:8e:53:08: b0:28:45:27:ab:41:b6:11:55:73:1e:62:a9:cd:57: 01:84:4f:06:85:69:26:0c:28:5f:84:8c:77:2b:40: 19:30:48:a3:e0:da:06:97:a5:4b:4a:20:32:8e:65: 11:53:d2:48:00:13:52:55:a1:7f:96:0f:d5:2e:39: c2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:68:B8:34:68:95:9F:B5:ED:57:3F:2D:67:28:EF:36:F7:64:71:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16c9067b-6854-4c04-a03a-53bf3df702a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:8080::/46 Signature Algorithm: sha256WithRSAEncryption 6c:a3:01:f8:f2:94:9e:14:62:64:2d:aa:e9:43:20:e1:4f:2e: 21:62:aa:23:29:d0:5b:ba:13:8b:e3:e1:94:40:86:db:02:5e: d2:4a:c0:5e:e0:5e:14:e3:04:5a:00:23:67:15:03:30:09:26: c4:17:43:c9:af:45:79:0e:eb:d2:8c:97:ef:26:a8:4c:06:62: d9:1c:46:e7:b8:a4:27:05:fc:88:d0:ae:d9:28:d5:4a:d1:42: 9f:a7:ab:50:ec:39:36:7d:65:65:3c:02:b6:1f:c8:5d:d8:ca: c7:df:f2:90:ca:98:95:e8:00:e2:40:58:aa:aa:7a:74:d8:1e: ad:16:3a:29:5f:76:2c:8d:45:70:4a:ef:3d:a0:2d:b3:e9:b8: 99:1b:17:4a:b3:09:db:c8:ce:59:dc:6d:b5:38:2a:f1:4a:02: 99:77:1d:56:a1:a7:a9:86:ba:a6:6e:1a:f8:7f:9e:c2:df:a9: e3:30:12:7d:79:09:8f:35:c0:74:a0:ec:08:ac:15:91:94:55: 0b:d6:d2:e1:ce:4e:a2:5a:0b:fa:d5:ab:ec:e9:64:3a:82:7a: 51:96:43:de:eb:06:ce:dc:ab:32:62:33:f1:af:70:83:72:c8: 68:40:e5:7b:e9:b6:d5:9f:fb:ad:10:a4:04:1b:8e:02:0a:79: 6e:ce:8c:9c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVOu1AGxc/afrecKsY7XXXfznSHEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUyMDIzWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTQ0NzFjYTJlOGRmZWM5MWQ3NmE1NzM2OGZlNGE0Zjhh ZDg4ZWU0NWViZWRkNTM3ZjE1NzgzMTg5MjM2NTVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9BMjo7OM/FjPvsKFcydj9WSc4ryzK6WgAwEUdFMxrXnty jTsxhJ5nuN9ys9h8jJQItsAVmOvvhoDuCvfSS2hBQvzG4CSsKpcFOsRUMGwwQP0G UnWMCOLyiybO0TsTCGKvO6kzkprHznf4OSNXRn1Ry2Fz/+QTINg0ZpXhqdut0/+j BgeUotwktDv6abefF7B4U5p+Wf8xJEVMjrq3KsJZL9UArn4fQj74pldXwPSGvjtf JEZRqUi/taHfGYsuO45TCLAoRSerQbYRVXMeYqnNVwGETwaFaSYMKF+EjHcrQBkw SKPg2gaXpUtKIDKOZRFT0kgAE1JVoX+WD9UuOcLLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4Wi4NGiVn7XtVz8tZyjvNvdkcQ0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE2YzkwNjdiLTY4NTQtNGMwNC1hMDNhLTUzYmYzZGY3MDJhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3gIAwDQYJKoZIhvcNAQELBQADggEBAGyjAfjylJ4UYmQtqulDIOFP LiFiqiMp0Fu6E4vj4ZRAhtsCXtJKwF7gXhTjBFoAI2cVAzAJJsQXQ8mvRXkO69KM l+8mqEwGYtkcRue4pCcF/IjQrtko1UrRQp+nq1DsOTZ9ZWU8ArYfyF3Yysff8pDK mJXoAOJAWKqqenTYHq0WOilfdiyNRXBK7z2gLbPpuJkbF0qzCdvIzlncbbU4KvFK Apl3HVahp6mGuqZuGvh/nsLfqeMwEn15CY81wHSg7AisFZGUVQvW0uHOTqJaC/rV q+zpZDqCelGWQ97rBs7cqzJiM/GvcINyyGhA5XvpttWf+60QpAQbjgIKeW7OjJw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:06 2025 by rpki-client