$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29920184-aec3-4a16-ab95-1de3bb8a0901.roa File: 29920184-aec3-4a16-ab95-1de3bb8a0901.roa (raw, json) Hash identifier: v3bZUcOTqdlbor3ZY9oPmsydWt3Bj0SYxZwy6zFfbCA= Subject key identifier: EB:19:7F:55:7A:1C:6B:36:30:0F:8D:65:3B:9A:7B:9A:89:AA:97:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F500F0865A8B42591AF078F8044EA8C3ED684D2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29920184-aec3-4a16-ab95-1de3bb8a0901.roa Signing time: Tue 22 Apr 2025 16:21:16 +0000 ROA not before: Tue 22 Apr 2025 16:21:16 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:50:0f:08:65:a8:b4:25:91:af:07:8f:80:44:ea:8c:3e:d6:84:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:21:16 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=eb19e84dc134038cbe291c3e9d1e3b183aadb3de11dd6552c2e1ddad5aec7e73, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:0e:84:d3:80:ba:3d:85:11:31:25:31:0f: c8:63:6c:64:e6:01:6c:24:81:9b:bc:56:a4:a4:4c: cc:a8:4e:d9:f3:c9:9d:e6:c4:e6:14:a5:4c:86:89: f0:be:17:f6:af:5f:2c:f1:c6:eb:0f:a7:5b:e4:c1: 3b:8f:a5:86:0c:2d:77:47:e0:52:c2:29:b5:e9:6f: 97:cf:f4:4d:0e:55:a4:b0:7b:ee:a1:47:78:24:f6: 81:c4:92:fa:84:3d:d3:ac:8e:53:f4:bf:62:45:b6: 81:b7:b0:90:73:3d:af:b5:c1:0b:03:15:d6:b0:a0: 91:2e:52:1d:98:6a:f7:70:09:fd:ee:b8:31:b3:a9: 8c:46:55:9c:e4:c9:4c:14:8e:20:8d:8a:bc:99:61: a0:16:25:1c:88:74:9c:9f:40:f3:82:3f:95:d5:78: e7:c5:17:fd:6a:35:f9:47:e5:72:70:27:67:6d:26: 19:dd:c4:35:e3:36:44:a9:b4:2c:f4:9b:27:91:53: d2:a5:06:0e:6a:7c:a2:fb:96:7c:66:84:40:c5:6a: be:ac:77:cd:db:0d:a2:84:79:c4:98:4f:68:29:0b: a6:c1:7c:d7:9c:93:90:87:29:e1:5b:fb:a7:68:36: 91:18:5d:71:81:32:97:fb:34:23:be:48:7e:d2:35: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:19:7F:55:7A:1C:6B:36:30:0F:8D:65:3B:9A:7B:9A:89:AA:97:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29920184-aec3-4a16-ab95-1de3bb8a0901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:8000::/39 Signature Algorithm: sha256WithRSAEncryption 16:2c:c3:36:25:bc:3c:4b:0b:a3:f9:75:ba:73:8a:2c:ff:34: 53:9f:43:e0:d2:5e:d1:fa:4d:29:ea:ad:e4:23:48:9d:5a:5b: 15:85:5d:f3:3d:6e:71:12:11:85:77:f5:e4:c0:4b:bd:46:5c: a9:8b:31:36:77:a6:9d:bc:e1:2c:da:46:e5:a3:3b:9a:05:97: 56:a6:a6:15:f4:b7:8b:2d:32:e1:ba:fd:13:ae:ac:1a:62:e8: 9a:d4:b1:a9:a8:5e:f2:39:04:1d:5b:51:7f:f1:70:f2:1f:86: ee:17:f0:8c:18:b6:9e:54:b6:af:6d:0a:d4:2c:d0:6e:01:83: 28:c2:22:12:f7:5d:cf:8d:ed:65:95:8a:c8:38:19:6f:17:6f: d3:7b:aa:4f:8e:36:4f:3a:5c:bb:af:b3:a0:18:76:99:05:aa: 71:2d:d5:3e:2e:51:b5:5a:61:38:ad:71:84:d1:22:8e:1d:a9: 11:b0:5a:c8:eb:d8:43:64:14:3d:cf:fb:e6:3e:eb:b5:0f:10: 5b:dd:0e:d3:e8:29:61:fd:b8:3c:54:b1:71:16:84:97:03:4c: 82:cf:e4:d2:b6:ae:ce:fe:d0:3d:50:df:86:fb:4e:99:66:be: 29:2b:6d:65:3d:83:31:b3:ab:84:26:48:63:7e:ca:29:71:11: 2d:24:ef:18 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUX1APCGWotCWRrwePgETqjD7WhNIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYyMTE2WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjE5ZTg0ZGMxMzQwMzhjYmUyOTFjM2U5ZDFlM2IxODNh YWRiM2RlMTFkZDY1NTJjMmUxZGRhZDVhZWM3ZTczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZjg6E04C6PYURMSUxD8hjbGTmAWwkgZu8VqSkTMyoTtnz yZ3mxOYUpUyGifC+F/avXyzxxusPp1vkwTuPpYYMLXdH4FLCKbXpb5fP9E0OVaSw e+6hR3gk9oHEkvqEPdOsjlP0v2JFtoG3sJBzPa+1wQsDFdawoJEuUh2YavdwCf3u uDGzqYxGVZzkyUwUjiCNiryZYaAWJRyIdJyfQPOCP5XVeOfFF/1qNflH5XJwJ2dt JhndxDXjNkSptCz0myeRU9KlBg5qfKL7lnxmhEDFar6sd83bDaKEecSYT2gpC6bB fNeck5CHKeFb+6doNpEYXXGBMpf7NCO+SH7SNVX7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU6xl/VXocazYwD41lO5p7momqly8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI5OTIwMTg0LWFlYzMtNGExNi1hYjk1LTFkZTNiYjhhMDkwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/xgDANBgkqhkiG9w0BAQsFAAOCAQEAFizDNiW8PEsLo/l1unOKLP80 U59D4NJe0fpNKeqt5CNInVpbFYVd8z1ucRIRhXf15MBLvUZcqYsxNnemnbzhLNpG 5aM7mgWXVqamFfS3iy0y4br9E66sGmLomtSxqahe8jkEHVtRf/Fw8h+G7hfwjBi2 nlS2r20K1CzQbgGDKMIiEvddz43tZZWKyDgZbxdv03uqT442Tzpcu6+zoBh2mQWq cS3VPi5RtVphOK1xhNEijh2pEbBayOvYQ2QUPc/75j7rtQ8QW90O0+gpYf24PFSx cRaElwNMgs/k0rauzv7QPVDfhvtOmWa+KSttZT2DMbOrhCZIY37KKXERLSTvGA== -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:12 2025 by rpki-client