$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b0e10c2-b7e4-4715-83f7-a13456221bb2.roa File: 2b0e10c2-b7e4-4715-83f7-a13456221bb2.roa (raw, json) Hash identifier: 4YGAbtzpSeonGI/jew1aXlP6TVyyr2s2LMnF+Pr1x2s= Subject key identifier: 53:BF:94:8F:27:23:31:A5:DD:75:1A:9B:74:D3:44:10:E2:87:E5:1F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D8831707697D963E931DC83A6C78614429CA7B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b0e10c2-b7e4-4715-83f7-a13456221bb2.roa Signing time: Tue 22 Apr 2025 15:20:20 +0000 ROA not before: Tue 22 Apr 2025 15:20:20 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:3480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:88:31:70:76:97:d9:63:e9:31:dc:83:a6:c7:86:14:42:9c:a7:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:20:20 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=3074f6bea475e94767241dce0931cd052ff032982abb79bb67befb1c8b3635a4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:06:6f:94:dd:ae:9b:c6:81:47:83:6f:b2: a9:81:de:81:31:cf:f8:7e:9a:73:43:f4:e2:92:7f: 5e:64:2b:e6:5b:ca:50:e4:02:7a:d7:41:29:06:07: 72:cf:ba:e7:b6:b9:cb:a6:0f:53:d2:5d:81:d6:ac: 1b:03:ef:e5:e9:85:c1:60:59:7a:cb:22:ba:b1:9c: 67:17:b7:b2:3b:b9:ee:ab:51:da:94:17:27:82:6c: c8:b8:71:89:d9:2b:de:93:45:54:7c:e1:8d:1d:d4: 58:38:e4:9d:51:5b:0e:30:56:1c:07:1c:c2:e9:4c: 18:b1:93:d7:e3:ec:68:da:fc:00:ee:af:b7:a4:a5: fc:34:61:c0:0e:dc:07:d7:9c:1b:d3:40:0b:48:77: 97:1e:ff:98:c9:10:98:c6:d9:ad:22:a1:1c:c0:6b: d1:49:5f:38:84:13:f4:31:6a:9a:a4:da:b8:4e:e5: 14:08:3b:ab:3f:79:28:46:b7:7c:4a:4e:35:ee:9a: 8b:7a:6d:bb:56:7b:52:c8:57:8d:b8:90:db:d2:51: c3:ab:4d:be:fb:d0:6e:62:af:ba:b7:03:9d:fa:13: 4b:cc:57:9f:4c:30:ef:00:2a:c6:81:02:28:6c:f1: 69:d6:73:91:c7:f5:60:73:36:ea:3e:1f:a4:09:1c: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BF:94:8F:27:23:31:A5:DD:75:1A:9B:74:D3:44:10:E2:87:E5:1F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b0e10c2-b7e4-4715-83f7-a13456221bb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:3480::/48 Signature Algorithm: sha256WithRSAEncryption b9:0a:d8:86:be:a8:e8:c8:04:96:2e:75:4d:fe:0f:5e:4f:41: 3d:5d:5d:78:bc:e0:e5:e1:0d:09:fb:98:f8:f5:03:31:14:72: e0:74:88:d8:c1:b2:f8:72:99:29:d4:02:b2:5e:28:f7:fb:1e: 4f:c4:7a:1e:47:1a:3a:fa:0d:d8:c5:bc:83:f2:07:c5:e0:38: 7e:05:44:94:3d:b4:51:c3:66:7e:a1:90:29:d8:bc:60:44:3c: cc:db:79:be:f4:94:23:bf:a1:23:e8:85:fb:38:5a:38:ae:00: b9:60:51:cd:01:4c:a9:ae:67:03:e5:bb:fe:e9:55:3b:fe:77: 15:60:68:ed:1c:31:42:0e:da:55:da:55:6e:77:6b:75:6c:49: 84:a3:6d:4f:c4:3b:db:01:54:ed:4d:ec:ab:5c:17:c7:a1:39: 48:3f:fb:c9:47:08:aa:02:32:6e:ce:71:cb:7a:c8:f6:05:65: e3:3e:b8:b0:15:e7:db:e6:15:de:30:a6:b5:27:67:82:55:f6: 3e:a9:87:3b:34:81:ae:b0:90:00:1e:aa:18:57:b4:2e:85:f4: 41:0c:1e:3f:5f:f9:19:08:bb:71:ba:5d:55:7e:19:d5:e4:31: ec:f9:8c:27:4c:3a:bf:a7:54:f6:c0:99:1e:7a:bd:1e:f1:ae: bd:c7:d8:53 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXYgxcHaX2WPpMdyDpseGFEKcp7IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUyMDIwWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDc0ZjZiZWE0NzVlOTQ3NjcyNDFkY2UwOTMxY2QwNTJm ZjAzMjk4MmFiYjc5YmI2N2JlZmIxYzhiMzYzNWE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCizAZvlN2um8aBR4NvsqmB3oExz/h+mnND9OKSf15kK+Zb ylDkAnrXQSkGB3LPuue2ucumD1PSXYHWrBsD7+XphcFgWXrLIrqxnGcXt7I7ue6r UdqUFyeCbMi4cYnZK96TRVR84Y0d1Fg45J1RWw4wVhwHHMLpTBixk9fj7Gja/ADu r7ekpfw0YcAO3AfXnBvTQAtId5ce/5jJEJjG2a0ioRzAa9FJXziEE/Qxapqk2rhO 5RQIO6s/eShGt3xKTjXumot6bbtWe1LIV424kNvSUcOrTb770G5ir7q3A536E0vM V59MMO8AKsaBAihs8WnWc5HH9WBzNuo+H6QJHHztAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUU7+UjycjMaXddRqbdNNEEOKH5R8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiMGUxMGMyLWI3ZTQtNDcxNS04M2Y3LWExMzQ1NjIyMWJiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yNIAwDQYJKoZIhvcNAQELBQADggEBALkK2Ia+qOjIBJYudU3+D15P QT1dXXi84OXhDQn7mPj1AzEUcuB0iNjBsvhymSnUArJeKPf7Hk/Eeh5HGjr6DdjF vIPyB8XgOH4FRJQ9tFHDZn6hkCnYvGBEPMzbeb70lCO/oSPohfs4WjiuALlgUc0B TKmuZwPlu/7pVTv+dxVgaO0cMUIO2lXaVW53a3VsSYSjbU/EO9sBVO1N7KtcF8eh OUg/+8lHCKoCMm7Occt6yPYFZeM+uLAV59vmFd4wprUnZ4JV9j6phzs0ga6wkAAe qhhXtC6F9EEMHj9f+RkIu3G6XVV+GdXkMez5jCdMOr+nVPbAmR56vR7xrr3H2FM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:54 2025 by rpki-client