$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/218a520a-eb5d-45cb-ac7b-133e83914c16.roa File: 218a520a-eb5d-45cb-ac7b-133e83914c16.roa (raw, json) Hash identifier: za6oQVjWs9lfiH3Y6H04c3w0OljQRwzUNIwM1FtZYcw= Subject key identifier: 98:29:23:C5:4B:80:53:97:01:70:3F:8D:FE:53:F2:31:FA:0C:AA:BF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7C8E04A71CD76AF3284E01C408286E9B435D011B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/218a520a-eb5d-45cb-ac7b-133e83914c16.roa Signing time: Tue 22 Apr 2025 16:10:29 +0000 ROA not before: Tue 22 Apr 2025 16:10:29 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:c080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8e:04:a7:1c:d7:6a:f3:28:4e:01:c4:08:28:6e:9b:43:5d:01:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:10:29 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=4e00a4a6f221b7264a0e3f769e2fa373bea4a177d1b313f81d2248fdc27368d0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:28:1d:27:a3:15:3a:a5:d2:3d:a0:46:56: fb:00:94:a1:85:b9:5e:75:cc:c7:18:37:4e:47:f6: b2:17:09:a6:d5:4b:82:75:4d:de:30:b7:37:4c:5a: 46:59:bf:17:18:3c:4b:c1:ef:7d:35:51:9c:d8:3e: 13:bf:6c:53:c3:a5:84:1e:03:cc:c0:58:45:b2:9d: b4:a6:fc:84:28:41:37:9b:ac:67:c0:d3:a0:0a:50: 39:dd:38:35:36:fe:ae:6b:ea:59:2d:ec:19:0c:91: 64:c7:5d:4d:77:ba:1f:ad:e6:5e:c2:97:fa:8c:8a: 25:5c:42:5d:a3:f6:42:82:94:a3:ad:9d:5b:cf:09: 21:31:dd:78:c2:b5:72:c5:8b:e6:ac:ac:c8:02:32: 36:59:2f:7c:fe:cc:b1:be:c0:cf:a8:16:21:4b:4e: a9:b3:98:9a:21:4e:ad:2f:63:7f:29:3d:89:2a:01: 7f:e2:84:c8:e1:0e:60:83:c7:9c:aa:eb:26:bf:76: 8c:91:97:47:d3:85:96:6f:e4:74:cc:bb:e5:06:ab: f8:16:46:e1:52:90:70:fd:12:d0:ac:e8:b9:50:cf: 6a:16:a5:2a:e0:1d:0b:55:89:50:11:19:fb:2b:3b: 10:b8:65:81:2b:44:47:a1:25:86:4c:93:fe:8e:74: c2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:29:23:C5:4B:80:53:97:01:70:3F:8D:FE:53:F2:31:FA:0C:AA:BF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/218a520a-eb5d-45cb-ac7b-133e83914c16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:c080::/46 Signature Algorithm: sha256WithRSAEncryption 2d:69:d6:7d:5d:ab:e5:66:50:26:3d:15:17:86:2b:c5:b8:c0: 60:c9:f1:9a:fe:4f:f7:55:fa:45:23:fc:71:52:1f:ae:0d:0f: d2:94:82:31:99:c1:6d:27:04:f8:42:5e:2f:17:20:41:b0:56: 49:4b:9b:aa:fe:1e:69:92:ee:21:52:e6:13:1d:46:3d:db:55: f6:60:a6:14:af:f6:3c:7e:8e:b7:fe:7c:98:69:4b:ba:a2:fa: 96:ae:dd:fd:b4:f9:b3:29:02:c6:c7:d8:7a:0b:7d:5b:97:b8: 49:52:9f:21:e7:20:13:e1:14:3a:ca:59:9a:bf:77:7a:1b:11: 5c:5a:3f:7f:65:2c:8b:51:5b:a6:a7:4a:47:ca:d4:bb:41:87: f8:25:7b:54:8c:f0:8f:11:75:bb:5f:d4:0e:ed:e8:f0:4d:0d: 2d:ed:84:95:69:90:b4:4e:33:dc:6e:71:a3:6f:9a:9e:12:1f: 94:79:d6:05:c7:bf:55:f9:f5:3b:a4:23:08:c1:50:a6:92:83: bc:91:79:69:75:b0:3f:21:f8:34:d6:9d:31:a7:73:b2:10:91: fc:6b:7d:60:a0:5e:9b:0a:d0:c1:3b:88:19:8b:d3:eb:00:39: ae:15:48:43:0b:7c:fb:3d:5c:07:5f:2c:67:0e:9f:f7:25:96: ea:15:9b:d8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfI4EpxzXavMoTgHECChum0NdARswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYxMDI5WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTAwYTRhNmYyMjFiNzI2NGEwZTNmNzY5ZTJmYTM3M2Jl YTRhMTc3ZDFiMzEzZjgxZDIyNDhmZGMyNzM2OGQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+8CgdJ6MVOqXSPaBGVvsAlKGFuV51zMcYN05H9rIXCabV S4J1Td4wtzdMWkZZvxcYPEvB7301UZzYPhO/bFPDpYQeA8zAWEWynbSm/IQoQTeb rGfA06AKUDndODU2/q5r6lkt7BkMkWTHXU13uh+t5l7Cl/qMiiVcQl2j9kKClKOt nVvPCSEx3XjCtXLFi+asrMgCMjZZL3z+zLG+wM+oFiFLTqmzmJohTq0vY38pPYkq AX/ihMjhDmCDx5yq6ya/doyRl0fThZZv5HTMu+UGq/gWRuFSkHD9EtCs6LlQz2oW pSrgHQtViVARGfsrOxC4ZYErREehJYZMk/6OdMIVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmCkjxUuAU5cBcD+N/lPyMfoMqr8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzIxOGE1MjBhLWViNWQtNDVjYi1hYzdiLTEzM2U4MzkxNGMxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pwIAwDQYJKoZIhvcNAQELBQADggEBAC1p1n1dq+VmUCY9FReGK8W4 wGDJ8Zr+T/dV+kUj/HFSH64ND9KUgjGZwW0nBPhCXi8XIEGwVklLm6r+HmmS7iFS 5hMdRj3bVfZgphSv9jx+jrf+fJhpS7qi+pau3f20+bMpAsbH2HoLfVuXuElSnyHn IBPhFDrKWZq/d3obEVxaP39lLItRW6anSkfK1LtBh/gle1SM8I8Rdbtf1A7t6PBN DS3thJVpkLROM9xucaNvmp4SH5R51gXHv1X59TukIwjBUKaSg7yReWl1sD8h+DTW nTGnc7IQkfxrfWCgXpsK0ME7iBmL0+sAOa4VSEMLfPs9XAdfLGcOn/clluoVm9g= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:47 2025 by rpki-client