$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c7de9c6-9c92-4a83-8172-265b9ae9a1e0.roa File: 2c7de9c6-9c92-4a83-8172-265b9ae9a1e0.roa (raw, json) Hash identifier: 5h2JPC/lby1aCGYxJsc2oHhcYfSrp/6n3mP3EBYM/5w= Subject key identifier: 6C:50:B0:04:56:14:9C:8F:80:FB:B5:2A:EC:59:47:AE:7E:FA:92:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 611FCA45623465346AA6EEADEC62857243032CDA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c7de9c6-9c92-4a83-8172-265b9ae9a1e0.roa Signing time: Mon 21 Apr 2025 17:10:22 +0000 ROA not before: Mon 21 Apr 2025 17:10:22 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:81a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1f:ca:45:62:34:65:34:6a:a6:ee:ad:ec:62:85:72:43:03:2c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:10:22 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=29acce25a8aaed88bd1316f0d73cbafe1b03ee524a636b17e1a9e3929add59e9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:92:0c:8c:c8:01:7e:10:08:b0:52:65:5e: 17:3e:89:5a:27:d7:3a:ea:c2:a8:43:6e:da:67:83: 82:29:da:c9:8e:39:a9:43:d4:76:5c:ef:fc:78:69: c6:87:4c:88:d5:71:cd:1d:c9:10:7c:a6:01:4e:73: df:96:32:06:a5:64:fe:5b:5b:89:8c:4e:be:08:4d: 7c:fd:99:00:b8:88:e5:23:0f:a9:92:bd:fe:53:c2: 44:15:3b:89:a5:fe:dd:53:d9:09:60:10:d2:a6:ad: 90:59:c0:22:29:a3:b8:de:a6:da:4a:54:54:f8:77: 39:ee:ac:e0:5b:00:04:08:49:27:89:59:e6:0c:97: 11:cf:16:4c:ef:c9:90:c3:82:3f:8f:09:32:0c:49: 16:6f:86:04:37:22:ab:49:9f:9f:cd:3d:ad:af:1d: 8c:c4:f0:05:a3:0f:56:ae:83:0f:3f:0f:78:ab:3f: c8:5a:82:7e:7e:50:df:49:a5:85:aa:e6:d7:2c:00: b7:75:77:82:3b:e4:3d:06:c1:ac:42:6c:a1:19:6b: 47:99:ee:23:ba:3d:a3:69:5c:e6:93:b3:8d:17:0b: c7:73:2d:06:ab:ab:05:c5:9d:f2:65:70:b8:1e:4c: 2d:85:4e:d1:3e:5a:41:05:32:9b:02:3b:4c:1e:fb: 68:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:50:B0:04:56:14:9C:8F:80:FB:B5:2A:EC:59:47:AE:7E:FA:92:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c7de9c6-9c92-4a83-8172-265b9ae9a1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:81a0::/48 Signature Algorithm: sha256WithRSAEncryption 3a:f9:81:8d:cc:42:d8:d4:6b:5f:fa:05:86:33:c5:2a:04:40: a5:b4:d1:9e:f2:2f:bc:95:1a:4c:60:f0:9a:8a:44:3e:49:b0: ff:22:ae:93:4b:02:23:c7:a3:77:58:ed:be:2f:43:73:5f:f6: 7b:ff:20:77:c2:dd:ae:f9:af:57:86:b9:a1:0e:e0:74:b3:5b: 7c:8b:de:ea:fd:c0:aa:48:cd:49:7c:30:4f:ec:19:65:f1:0c: 8e:b2:91:a2:b2:0d:86:56:d2:f1:a4:aa:4f:56:de:0c:05:54: 9f:7a:cc:cf:d0:0c:02:7b:7d:1b:15:2a:90:34:89:e4:18:31: da:ed:de:c6:15:0c:28:04:06:5d:fe:7f:c7:19:7d:7d:b7:d2: 01:a0:6f:46:0b:84:24:11:4d:16:97:60:a3:ce:c1:e7:54:d5: e3:b8:50:dd:75:7f:ff:01:2d:bc:7e:68:ea:4d:40:4c:80:d5: 01:da:04:e2:24:3f:59:d8:4c:81:bb:77:0e:cd:c5:c6:16:9a: 16:15:15:a1:36:a0:a0:13:e0:89:8b:a9:d4:df:33:d9:50:0b: 85:b0:91:67:5f:51:37:b8:08:7a:46:e1:cd:ee:24:62:b1:f3: 65:88:0a:23:d9:3a:77:57:bc:d9:7c:3f:ea:ad:e9:fd:45:a6: a6:e0:1a:b8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYR/KRWI0ZTRqpu6t7GKFckMDLNowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTcxMDIyWhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWFjY2UyNWE4YWFlZDg4YmQxMzE2ZjBkNzNjYmFmZTFi MDNlZTUyNGE2MzZiMTdlMWE5ZTM5MjlhZGQ1OWU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXJJIMjMgBfhAIsFJlXhc+iVon1zrqwqhDbtpng4Ip2smO OalD1HZc7/x4acaHTIjVcc0dyRB8pgFOc9+WMgalZP5bW4mMTr4ITXz9mQC4iOUj D6mSvf5TwkQVO4ml/t1T2QlgENKmrZBZwCIpo7jeptpKVFT4dznurOBbAAQISSeJ WeYMlxHPFkzvyZDDgj+PCTIMSRZvhgQ3IqtJn5/NPa2vHYzE8AWjD1augw8/D3ir P8hagn5+UN9JpYWq5tcsALd1d4I75D0GwaxCbKEZa0eZ7iO6PaNpXOaTs40XC8dz LQarqwXFnfJlcLgeTC2FTtE+WkEFMpsCO0we+2jpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUbFCwBFYUnI+A+7Uq7FlHrn76khkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjN2RlOWM2LTljOTItNGE4My04MTcyLTI2NWI5YWU5YTFlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgaAwDQYJKoZIhvcNAQELBQADggEBADr5gY3MQtjUa1/6BYYzxSoE QKW00Z7yL7yVGkxg8JqKRD5JsP8irpNLAiPHo3dY7b4vQ3Nf9nv/IHfC3a75r1eG uaEO4HSzW3yL3ur9wKpIzUl8ME/sGWXxDI6ykaKyDYZW0vGkqk9W3gwFVJ96zM/Q DAJ7fRsVKpA0ieQYMdrt3sYVDCgEBl3+f8cZfX230gGgb0YLhCQRTRaXYKPOwedU 1eO4UN11f/8BLbx+aOpNQEyA1QHaBOIkP1nYTIG7dw7NxcYWmhYVFaE2oKAT4ImL qdTfM9lQC4WwkWdfUTe4CHpG4c3uJGKx82WICiPZOndXvNl8P+qt6f1FpqbgGrg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:52:27 2025 by rpki-client