$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba06761-3f21-4949-897c-ce569d7f3027.roa File: 1ba06761-3f21-4949-897c-ce569d7f3027.roa (raw, json) Hash identifier: YLF50Fv72Um5/cvZSvJVUn+PWnfzUsb539Tfu3n5L6w= Subject key identifier: 5A:C6:B0:16:3D:E9:96:43:EB:86:1E:7C:7F:D6:72:A2:8A:14:FC:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D51B30AA24428F46A426FD1167C5910C36213A2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba06761-3f21-4949-897c-ce569d7f3027.roa Signing time: Tue 22 Apr 2025 15:51:56 +0000 ROA not before: Tue 22 Apr 2025 15:51:56 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:e080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:51:b3:0a:a2:44:28:f4:6a:42:6f:d1:16:7c:59:10:c3:62:13:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:51:56 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=a2b5997faea64950ba7d9fe25d1ccc1f186e8a35abb460287a8972051d0ffd2d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7f:5d:a4:14:fc:a2:84:d9:fe:12:94:6e:c0: 91:16:74:1b:6d:5e:29:2e:f8:f8:9d:7c:32:1b:91: ed:10:68:c7:96:96:d6:33:23:d1:ba:5a:52:f0:6f: ae:8d:4c:0e:27:b0:b7:a1:89:4a:27:0e:23:ed:aa: af:d0:be:61:ae:96:cb:87:61:2c:55:b0:71:dc:63: 59:41:ab:67:23:f2:90:dd:c0:6e:87:17:99:af:7d: 0b:69:8c:a2:e4:33:ae:8e:cf:ec:ee:d5:e6:5c:64: 15:93:ec:18:94:7a:e9:d1:ce:57:e0:31:50:b5:7b: 58:ee:90:b4:88:0d:34:04:74:67:0e:ee:e0:7b:87: d7:5a:ba:1b:5f:3d:f7:79:9a:21:ee:98:42:0b:14: dd:09:62:b7:a4:c9:d8:05:60:41:2e:8c:61:c5:a8: 85:e2:83:8a:a2:d2:e1:63:e0:27:0d:53:6c:ba:9c: 27:75:e2:85:3b:48:7f:c1:95:41:1f:c0:7c:f0:7e: ee:59:1a:52:9c:7d:a0:8a:e9:73:e5:32:6a:73:1c: 96:c1:59:d5:b3:27:2a:1b:80:a8:96:70:9a:c4:f9: a9:9b:8f:be:54:36:b2:6f:4d:f6:38:b7:43:f0:f0: 2d:6a:67:08:6c:3f:f3:c9:e5:d5:1c:42:82:90:f7: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C6:B0:16:3D:E9:96:43:EB:86:1E:7C:7F:D6:72:A2:8A:14:FC:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba06761-3f21-4949-897c-ce569d7f3027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:e080::/46 Signature Algorithm: sha256WithRSAEncryption 81:1d:1d:d7:9b:8e:57:7d:93:10:53:8f:4a:ad:27:4e:97:19: 79:7a:63:0a:9d:ed:54:36:6a:a1:30:77:f4:fd:c5:84:a6:c2: 5f:cc:bb:3f:dc:b6:84:e1:a9:da:d6:a0:e1:00:7f:a1:b0:a7: 67:e2:64:cc:a2:77:11:54:91:c4:b3:8a:e8:f6:76:f0:c0:04: 3a:c8:0b:ed:3a:5c:67:6a:e9:f4:20:4d:53:ff:ed:d8:37:e4: fb:63:8e:14:49:2d:3e:2c:10:1f:9e:8c:71:f7:67:bf:c2:de: 1f:8b:d1:32:99:40:dc:ef:b0:46:e9:b6:6e:6e:19:8e:96:9b: bc:01:fc:a7:96:8b:e9:46:e9:67:00:a5:ec:1b:94:c2:5c:7a: c8:52:02:1a:dc:01:41:b6:78:c5:05:6e:69:b3:ee:fc:06:07: c2:e0:55:80:73:45:fb:1a:7a:54:93:09:bc:76:c4:e6:a4:d3: 35:94:ac:ff:3f:7f:a0:3c:f9:23:c2:81:42:4a:fc:0a:e4:6a: ad:37:40:24:0e:de:f2:c7:c1:66:92:a8:cb:e7:d3:a4:a2:67: 61:23:62:0b:c3:c9:c1:54:c0:0c:4c:18:c2:4b:f1:15:40:16: 9f:38:3a:57:ce:b0:c4:95:79:76:20:65:96:58:90:c1:9d:86: 9c:6a:07:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPVGzCqJEKPRqQm/RFnxZEMNiE6IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTU1MTU2WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmI1OTk3ZmFlYTY0OTUwYmE3ZDlmZTI1ZDFjY2MxZjE4 NmU4YTM1YWJiNDYwMjg3YTg5NzIwNTFkMGZmZDJkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQf12kFPyihNn+EpRuwJEWdBttXiku+PidfDIbke0QaMeW ltYzI9G6WlLwb66NTA4nsLehiUonDiPtqq/QvmGulsuHYSxVsHHcY1lBq2cj8pDd wG6HF5mvfQtpjKLkM66Oz+zu1eZcZBWT7BiUeunRzlfgMVC1e1jukLSIDTQEdGcO 7uB7h9dauhtfPfd5miHumEILFN0JYrekydgFYEEujGHFqIXig4qi0uFj4CcNU2y6 nCd14oU7SH/BlUEfwHzwfu5ZGlKcfaCK6XPlMmpzHJbBWdWzJyobgKiWcJrE+amb j75UNrJvTfY4t0Pw8C1qZwhsP/PJ5dUcQoKQ96EXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWsawFj3plkPrhh58f9ZyoooU/KAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFiYTA2NzYxLTNmMjEtNDk0OS04OTdjLWNlNTY5ZDdmMzAyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/74IAwDQYJKoZIhvcNAQELBQADggEBAIEdHdebjld9kxBTj0qtJ06X GXl6Ywqd7VQ2aqEwd/T9xYSmwl/Muz/ctoThqdrWoOEAf6Gwp2fiZMyidxFUkcSz iuj2dvDABDrIC+06XGdq6fQgTVP/7dg35PtjjhRJLT4sEB+ejHH3Z7/C3h+L0TKZ QNzvsEbptm5uGY6Wm7wB/KeWi+lG6WcApewblMJceshSAhrcAUG2eMUFbmmz7vwG B8LgVYBzRfsaelSTCbx2xOak0zWUrP8/f6A8+SPCgUJK/Arkaq03QCQO3vLHwWaS qMvn06SiZ2EjYgvDycFUwAxMGMJL8RVAFp84OlfOsMSVeXYgZZZYkMGdhpxqBy4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:37:19 2025 by rpki-client