$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cf85e12-5577-4f6f-a5ee-1dd191504217.roa File: 2cf85e12-5577-4f6f-a5ee-1dd191504217.roa (raw, json) Hash identifier: zBjOM0JVXfhM/y0QyN51/GkUj6p7P0iaSDAglj62C5Y= Subject key identifier: EB:3B:68:F3:81:13:CF:5F:45:44:43:4D:03:A4:77:B5:37:BC:4E:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B94BE8B15C0762697CA82B2A666A6AA985E6273 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cf85e12-5577-4f6f-a5ee-1dd191504217.roa Signing time: Mon 21 Apr 2025 17:41:18 +0000 ROA not before: Mon 21 Apr 2025 17:41:18 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:94:be:8b:15:c0:76:26:97:ca:82:b2:a6:66:a6:aa:98:5e:62:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:41:18 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=c7b109b5a245808791e45e36c798bc1c3b17d4f0773f745ae27e6ce89d85e8bb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9e:6e:4e:90:3c:f1:76:c1:a6:98:18:0d:32: 62:37:d0:dc:f9:9c:d9:79:f4:40:54:a8:9c:9d:d2: 11:22:29:18:4d:0c:ef:50:34:41:d5:b9:eb:3c:9e: 96:a2:e8:9a:14:c2:5f:04:62:96:fe:f5:01:f9:2b: 0c:bb:5f:5f:1a:ff:9b:49:1f:61:25:b7:d4:50:55: b2:c5:96:47:b9:bd:24:d3:bd:27:13:74:a3:9f:60: fa:ef:8c:e4:36:c0:3e:91:e1:d4:7e:0c:c9:60:07: 4d:e2:96:9e:25:55:b6:1a:bc:3f:cc:f7:b1:3d:d8: 5d:82:b9:a6:de:ab:7a:a0:67:4f:3c:ba:39:99:a9: 52:b4:8e:0b:d5:fa:63:05:51:01:69:f3:58:dc:40: c0:06:b3:89:92:45:cd:74:6b:0c:e0:9d:c3:28:4c: dd:e4:c8:45:d9:fa:10:48:d0:5e:66:cf:8b:b0:b0: ae:13:05:77:3a:a7:ec:c0:15:88:36:42:f4:99:85: e2:11:74:57:d1:b1:79:de:53:19:ef:83:24:15:b5: 6b:b5:de:ed:35:8d:ce:c3:ea:c3:2a:38:42:d6:d6: 35:69:18:95:49:38:e8:2a:ce:18:30:34:32:6f:f2: bd:78:28:07:7a:1d:ba:6a:73:3a:03:ea:ae:57:f3: b1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3B:68:F3:81:13:CF:5F:45:44:43:4D:03:A4:77:B5:37:BC:4E:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cf85e12-5577-4f6f-a5ee-1dd191504217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8040::/48 Signature Algorithm: sha256WithRSAEncryption 0b:8d:23:a0:8a:9b:cd:99:10:4c:66:21:15:94:74:68:c4:9c: c2:de:2a:e3:56:15:6d:b1:52:e5:c8:07:6a:ec:db:1d:49:70: eb:4b:f1:e9:e4:f0:4e:ef:0e:c0:a5:53:2b:53:76:f8:09:ae: 82:eb:e6:22:e9:f1:01:b4:cd:ba:03:e3:14:04:4e:3c:9d:d0: 32:b8:af:b3:86:48:38:92:b5:1f:bb:6b:6b:52:48:10:f8:36: ed:14:43:a3:ed:15:38:3c:f4:0d:8c:25:bc:28:19:b8:21:f8: a1:49:f3:2f:b4:c6:ae:10:31:6f:ca:e8:6d:8d:6a:c0:37:bc: 1f:3a:4e:b5:22:03:da:7f:d9:47:ca:96:f2:03:df:58:7e:49: 7b:ac:d9:9a:7f:b3:80:34:4c:ed:08:e8:42:b5:a7:ec:86:fe: 40:94:f9:12:db:5c:4f:6b:0c:52:e8:48:b3:e1:cb:b7:50:cd: 39:0c:f1:37:8c:4d:15:30:9b:fd:c9:76:f6:bb:e1:6c:e2:ab: 2e:44:06:3d:de:88:a2:8b:08:8a:7e:8b:88:d0:6b:0a:cf:41: 17:76:46:c2:48:8e:7f:e8:24:87:62:ea:6d:4d:43:9d:fb:03: b5:cf:77:58:68:3e:21:71:0f:49:ce:11:30:08:02:f6:e1:96: 58:77:c1:6f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUG5S+ixXAdiaXyoKypmamqpheYnMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTc0MTE4WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2IxMDliNWEyNDU4MDg3OTFlNDVlMzZjNzk4YmMxYzNi MTdkNGYwNzczZjc0NWFlMjdlNmNlODlkODVlOGJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCknm5OkDzxdsGmmBgNMmI30Nz5nNl59EBUqJyd0hEiKRhN DO9QNEHVues8npai6JoUwl8EYpb+9QH5Kwy7X18a/5tJH2Elt9RQVbLFlke5vSTT vScTdKOfYPrvjOQ2wD6R4dR+DMlgB03ilp4lVbYavD/M97E92F2Cuabeq3qgZ088 ujmZqVK0jgvV+mMFUQFp81jcQMAGs4mSRc10awzgncMoTN3kyEXZ+hBI0F5mz4uw sK4TBXc6p+zAFYg2QvSZheIRdFfRsXneUxnvgyQVtWu13u01jc7D6sMqOELW1jVp GJVJOOgqzhgwNDJv8r14KAd6HbpqczoD6q5X87FFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6zto84ETz19FRENNA6R3tTe8ThkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjZjg1ZTEyLTU1NzctNGY2Zi1hNWVlLTFkZDE5MTUwNDIxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gEAwDQYJKoZIhvcNAQELBQADggEBAAuNI6CKm82ZEExmIRWUdGjE nMLeKuNWFW2xUuXIB2rs2x1JcOtL8enk8E7vDsClUytTdvgJroLr5iLp8QG0zboD 4xQETjyd0DK4r7OGSDiStR+7a2tSSBD4Nu0UQ6PtFTg89A2MJbwoGbgh+KFJ8y+0 xq4QMW/K6G2NasA3vB86TrUiA9p/2UfKlvID31h+SXus2Zp/s4A0TO0I6EK1p+yG /kCU+RLbXE9rDFLoSLPhy7dQzTkM8TeMTRUwm/3Jdva74Wziqy5EBj3eiKKLCIp+ i4jQawrPQRd2RsJIjn/oJIdi6m1NQ537A7XPd1hoPiFxD0nOETAIAvbhllh3wW8= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:07 2025 by rpki-client