$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d15509-4877-4cec-b806-5464e3b5087b.roa File: 28d15509-4877-4cec-b806-5464e3b5087b.roa (raw, json) Hash identifier: LVgrTO9/1kTcktM+tlnLbMZFnV1CP+VXUwdU+Q0JmoM= Subject key identifier: 7C:9C:FC:FF:3A:5C:82:48:69:26:E0:6C:9F:B8:AF:AE:9A:BC:84:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FA2AE95CB10B604D0C54D55A08F9431A2A2DC5C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d15509-4877-4cec-b806-5464e3b5087b.roa Signing time: Wed 16 Apr 2025 00:01:22 +0000 ROA not before: Wed 16 Apr 2025 00:01:22 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff6:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a2:ae:95:cb:10:b6:04:d0:c5:4d:55:a0:8f:94:31:a2:a2:dc:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:01:22 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=d4fe5fa50dca35b4c1bfcd9215c8230a9befc3a5cc16868d604fdb8f74f9f813, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:a0:9c:4d:39:59:b7:cc:c9:6a:a1:fd:c5: cf:a7:04:00:00:15:eb:51:16:b6:ca:c5:d2:0d:f5: 8a:67:68:cc:97:9a:ff:00:91:b7:17:4b:bf:3a:fb: e9:0e:3c:d9:77:7b:2a:b7:80:eb:2d:4a:29:fd:66: d9:ab:fb:51:b5:69:72:62:f5:7f:8f:e6:ea:a3:ba: 72:84:5a:54:f9:49:99:ba:39:86:1d:91:50:34:4d: 51:76:50:9d:d5:46:dd:f4:14:3e:1d:29:24:d4:7e: 64:19:f2:04:e4:5a:9b:d5:5f:b6:2b:32:cc:49:ab: db:61:cc:0b:f7:ee:e4:17:a2:e3:23:c6:49:8d:8d: 30:a8:24:60:23:13:c2:41:a1:3e:25:8d:3f:95:64: a3:03:5e:dc:56:96:f4:5a:1c:af:89:b9:8f:ac:80: 54:92:26:1f:24:b6:93:47:f9:10:2e:82:70:b3:0a: 5c:86:d1:c7:47:e2:cd:e5:6c:67:68:16:a6:d6:1f: a2:bf:49:6b:f3:53:e1:89:fe:d3:c8:55:a6:16:ee: 75:1f:f3:73:32:27:76:1d:11:f1:24:7f:49:ed:45: cb:08:2a:0e:35:85:3b:8f:4d:65:f4:1f:70:e3:d8: de:b5:68:f6:df:b4:ed:6d:7c:3a:35:be:1d:0f:02: d1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9C:FC:FF:3A:5C:82:48:69:26:E0:6C:9F:B8:AF:AE:9A:BC:84:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d15509-4877-4cec-b806-5464e3b5087b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:4000::/48 Signature Algorithm: sha256WithRSAEncryption 28:9f:88:37:07:67:b2:0f:7b:2b:91:38:e0:52:ca:59:d5:67: 76:b1:ea:2a:9d:a6:19:d8:7a:bc:4a:d1:21:5d:9e:6b:9e:62: 42:5c:7a:cd:32:7e:bf:bb:fe:80:7a:ad:02:32:51:3f:4d:ca: 23:5b:b6:41:c2:a0:9d:e6:be:81:2e:5d:cb:e4:d5:2b:f6:1a: 8f:c2:3e:ae:91:06:9c:4e:5c:6e:cf:1c:be:f1:1c:bc:5d:6f: 26:70:a8:01:3a:71:e6:34:5f:d2:28:3e:e2:42:e5:2b:31:c4: c8:d0:0c:20:fb:35:0a:8f:37:55:0d:15:fd:6b:b3:a2:de:6d: 31:c9:78:be:12:ce:46:b8:30:67:c6:0f:c3:bf:62:c4:bb:39: 0d:6b:b3:d0:7e:1b:63:a9:d1:00:c4:99:b3:c6:65:35:b3:c9: 49:a4:e1:13:d2:41:80:2d:83:50:0f:fe:86:a3:8d:ea:b8:2e: 09:a7:53:d9:4f:41:ff:d0:7e:18:e5:43:78:c7:4d:75:50:d4: 50:f1:9b:80:1d:e5:6d:d8:e3:ae:06:10:5d:3b:01:57:cf:f4: 5d:3a:9b:4c:84:fd:db:b9:94:85:6b:6a:7a:55:bd:94:d9:d9: 29:e1:21:82:c7:ae:75:9e:9c:d9:ec:ad:99:35:0e:f7:96:61: ad:8b:ac:c9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUL6KulcsQtgTQxU1VoI+UMaKi3FwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE2MDAwMTIyWhcNMjUwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGZlNWZhNTBkY2EzNWI0YzFiZmNkOTIxNWM4MjMwYTli ZWZjM2E1Y2MxNjg2OGQ2MDRmZGI4Zjc0ZjlmODEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjLqCcTTlZt8zJaqH9xc+nBAAAFetRFrbKxdIN9YpnaMyX mv8AkbcXS786++kOPNl3eyq3gOstSin9Ztmr+1G1aXJi9X+P5uqjunKEWlT5SZm6 OYYdkVA0TVF2UJ3VRt30FD4dKSTUfmQZ8gTkWpvVX7YrMsxJq9thzAv37uQXouMj xkmNjTCoJGAjE8JBoT4ljT+VZKMDXtxWlvRaHK+JuY+sgFSSJh8ktpNH+RAugnCz ClyG0cdH4s3lbGdoFqbWH6K/SWvzU+GJ/tPIVaYW7nUf83MyJ3YdEfEkf0ntRcsI Kg41hTuPTWX0H3Dj2N61aPbftO1tfDo1vh0PAtGlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfJz8/zpcgkhpJuBsn7ivrpq8hJAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4ZDE1NTA5LTQ4NzctNGNlYy1iODA2LTU0NjRlM2I1MDg3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/2QAAwDQYJKoZIhvcNAQELBQADggEBACifiDcHZ7IPeyuROOBSylnV Z3ax6iqdphnYerxK0SFdnmueYkJces0yfr+7/oB6rQIyUT9NyiNbtkHCoJ3mvoEu Xcvk1Sv2Go/CPq6RBpxOXG7PHL7xHLxdbyZwqAE6ceY0X9IoPuJC5SsxxMjQDCD7 NQqPN1UNFf1rs6LebTHJeL4Szka4MGfGD8O/YsS7OQ1rs9B+G2Op0QDEmbPGZTWz yUmk4RPSQYAtg1AP/oajjeq4LgmnU9lPQf/QfhjlQ3jHTXVQ1FDxm4Ad5W3Y464G EF07AVfP9F06m0yE/du5lIVranpVvZTZ2SnhIYLHrnWenNnsrZk1DveWYa2LrMk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:09:45 2025 by rpki-client