$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17753452-b86f-49ae-84c4-910b5df36b8c.roa File: 17753452-b86f-49ae-84c4-910b5df36b8c.roa (raw, json) Hash identifier: +1Cii4OB4gi0guxgj/aXWNIuJV101EFWkkV94XUvNYQ= Subject key identifier: EC:94:93:0A:56:31:8D:9E:0F:E0:9C:EF:CD:31:2F:2C:70:F3:3E:D7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6A8638B047694205DB7E40E818D63CF44F88F678 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17753452-b86f-49ae-84c4-910b5df36b8c.roa Signing time: Tue 22 Apr 2025 16:40:10 +0000 ROA not before: Tue 22 Apr 2025 16:40:10 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fb9:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:86:38:b0:47:69:42:05:db:7e:40:e8:18:d6:3c:f4:4f:88:f6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:40:10 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=a1567d1a5755c58ae21aa6c9815beee2d4a40217dc24c0adad50474011a10be4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:06:fa:53:c7:7a:4a:bd:81:a1:b8:7f:01:7c: 32:70:59:3e:9f:23:28:63:ab:c1:48:fa:83:72:9b: 50:c7:9d:43:94:44:94:f9:4e:5c:d5:13:78:e6:89: da:df:e7:7d:e2:34:77:d3:80:df:36:38:08:9b:58: d3:a7:e7:16:d5:ec:a6:99:6b:22:21:fa:72:4f:54: c6:93:02:b6:2a:9b:72:73:15:31:e0:e3:e0:cd:06: 16:9d:d0:ee:74:88:b8:85:a7:12:06:ed:b5:3b:23: ea:52:c4:10:f1:23:4f:8d:87:e3:7d:9e:7d:bb:ad: 54:41:15:84:3f:18:95:0b:1f:87:ca:9d:77:e2:2a: c4:f0:14:ac:64:d8:33:45:a7:a8:03:3f:10:87:69: f8:ba:30:c0:2f:92:71:2d:f0:fb:a8:15:39:ec:95: 42:f4:68:8f:67:c5:29:e3:b5:73:cd:14:45:6c:e3: e1:8d:d0:8d:06:8b:71:37:36:0a:57:45:21:2e:5b: f4:fe:4b:04:20:c7:73:63:a9:54:9d:99:44:20:2e: 7b:66:58:e0:e0:24:18:42:4b:81:55:f9:c2:31:8e: 53:5a:a3:2d:e8:2c:38:ea:84:d3:ca:13:ad:ca:ed: af:cf:5d:95:1c:c6:b9:58:b9:42:19:d2:09:03:77: ca:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:94:93:0A:56:31:8D:9E:0F:E0:9C:EF:CD:31:2F:2C:70:F3:3E:D7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17753452-b86f-49ae-84c4-910b5df36b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb9:6000::/40 Signature Algorithm: sha256WithRSAEncryption 75:4a:a4:5f:4c:e2:ba:48:0a:d5:55:c9:52:69:dc:fc:98:2c: 73:0f:f9:30:b6:bd:7e:8a:ae:f0:28:1a:9d:3f:2f:4f:79:07: aa:44:0b:9d:f2:e6:99:df:0a:7c:da:45:26:31:ee:c2:bb:f7: 45:e9:ca:81:a2:a7:cd:e0:19:2d:d5:70:52:f8:79:9b:07:cd: ee:f7:2d:d4:9b:db:1b:8f:b2:89:a6:e3:35:11:d3:36:10:62: b4:28:36:51:1f:ec:5e:bc:97:4d:86:d9:6b:e0:4f:f6:f2:d1: df:19:98:95:d7:81:0b:bd:5b:e6:0b:5a:ba:73:19:b6:1e:01: a7:08:89:12:21:cf:49:2b:85:75:dc:8b:bb:b9:41:35:d0:17: 8f:0e:f2:10:35:53:83:25:93:ba:8a:17:ab:7d:ad:14:74:18: 0f:8c:36:21:cc:95:3b:4b:75:40:3a:b3:88:6b:38:db:06:d3: d0:45:a6:ef:29:18:00:fe:5c:41:ee:5d:ba:47:29:a7:c6:6f: 5f:6a:31:ae:04:30:46:9d:c2:57:04:34:4b:19:d9:f4:a9:08: 9d:df:3b:88:e0:a7:75:43:bd:4e:24:4b:23:13:44:77:51:cc: 83:84:ea:e2:da:2e:b9:8e:ea:ca:78:cd:10:3f:86:47:b2:30: 15:3a:54:99 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaoY4sEdpQgXbfkDoGNY89E+I9ngwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTY0MDEwWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTU2N2QxYTU3NTVjNThhZTIxYWE2Yzk4MTViZWVlMmQ0 YTQwMjE3ZGMyNGMwYWRhZDUwNDc0MDExYTEwYmU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUBvpTx3pKvYGhuH8BfDJwWT6fIyhjq8FI+oNym1DHnUOU RJT5TlzVE3jmidrf533iNHfTgN82OAibWNOn5xbV7KaZayIh+nJPVMaTArYqm3Jz FTHg4+DNBhad0O50iLiFpxIG7bU7I+pSxBDxI0+Nh+N9nn27rVRBFYQ/GJULH4fK nXfiKsTwFKxk2DNFp6gDPxCHafi6MMAvknEt8PuoFTnslUL0aI9nxSnjtXPNFEVs 4+GN0I0Gi3E3NgpXRSEuW/T+SwQgx3NjqVSdmUQgLntmWODgJBhCS4FV+cIxjlNa oy3oLDjqhNPKE63K7a/PXZUcxrlYuUIZ0gkDd8rpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU7JSTClYxjZ4P4JzvzTEvLHDzPtcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3NzUzNDUyLWI4NmYtNDlhZS04NGM0LTkxMGI1ZGYzNmI4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+5YDANBgkqhkiG9w0BAQsFAAOCAQEAdUqkX0ziukgK1VXJUmnc/Jgs cw/5MLa9foqu8CganT8vT3kHqkQLnfLmmd8KfNpFJjHuwrv3RenKgaKnzeAZLdVw Uvh5mwfN7vct1JvbG4+yiabjNRHTNhBitCg2UR/sXryXTYbZa+BP9vLR3xmYldeB C71b5gtaunMZth4BpwiJEiHPSSuFddyLu7lBNdAXjw7yEDVTgyWTuooXq32tFHQY D4w2IcyVO0t1QDqziGs42wbT0EWm7ykYAP5cQe5dukcpp8ZvX2oxrgQwRp3CVwQ0 SxnZ9KkInd87iOCndUO9TiRLIxNEd1HMg4Tq4touuY7qynjNED+GR7IwFTpUmQ== -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:18 2025 by rpki-client