$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa File: 317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa (raw, json) Hash identifier: EcUp2lKhJ6VBvF5YFJqdQdhxOCVsAkQSmr/UIdCKV9Q= Subject key identifier: 4E:08:1B:7F:B2:32:31:67:5B:B4:9F:4B:67:D7:F4:15:2B:70:28:92 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 36D760F179695D78E437B10080FEE9A94D8688 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa Signing time: Tue 22 Apr 2025 17:31:27 +0000 ROA not before: Tue 22 Apr 2025 17:31:27 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f11:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d7:60:f1:79:69:5d:78:e4:37:b1:00:80:fe:e9:a9:4d:86:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:31:27 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=30195f8170e2201dff51bf5b3fe329ebbbb3a742bcbf06d70d6c2bc710709010, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4d:3e:62:ed:73:3e:b3:af:af:56:c2:6b:f6: e2:b7:70:ad:79:f7:83:c4:e5:65:16:0a:e7:27:87: bc:90:c3:2f:c3:cc:ed:37:f7:6d:5f:46:6d:1c:6e: 60:ba:6e:de:43:ed:55:10:8c:6d:75:02:67:f4:62: 49:e7:1e:4a:d1:c8:89:fb:0f:78:c1:f6:b3:89:54: f3:6d:9f:10:70:35:e3:be:15:0f:c0:56:64:86:c8: 7c:0d:80:93:b1:dc:63:10:e9:cd:b7:1a:73:26:bd: f0:d0:6f:78:47:73:bb:b3:fb:9a:e7:74:82:4c:c9: 34:fc:90:83:e8:5b:b0:cb:5e:05:1c:dd:ed:0b:c1: da:98:0b:cf:b2:62:45:45:27:9c:a9:14:0b:3c:b8: fa:14:07:ac:70:bb:1a:f8:12:66:a2:9b:da:13:5d: e6:7d:7b:4c:26:e3:19:58:69:38:23:8d:7d:5e:6a: ff:9d:d6:10:74:39:90:07:d8:ff:3c:d9:5a:5f:7c: d3:86:66:3d:d7:61:81:71:8e:bc:0d:ca:13:42:dc: 27:71:d7:05:8a:34:b6:37:35:10:80:fd:10:4e:0b: 98:9f:2e:3f:52:0e:7c:fd:69:74:c0:3a:5f:0b:08: 94:e1:6e:d4:a8:8e:4f:d7:c1:10:82:31:68:c6:42: 16:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:08:1B:7F:B2:32:31:67:5B:B4:9F:4B:67:D7:F4:15:2B:70:28:92 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/317aa5f2-e2fd-44a6-8ee1-f18aa61c0689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f11:8000::/36 Signature Algorithm: sha256WithRSAEncryption a2:f1:e7:ad:9d:6b:57:5c:67:f6:66:15:89:d8:bf:dd:44:8e: c0:7e:77:06:00:7f:cf:d0:e2:8b:f5:6c:8a:78:e8:5f:15:a7: 92:2b:50:d1:f3:ac:4e:fd:7e:b6:7f:41:36:e5:50:28:a1:a0: 0d:59:9a:d8:4a:dd:c0:f5:83:ec:7a:6a:14:39:fe:da:c5:19: d0:1c:25:c8:d4:41:65:ed:26:64:c2:87:5b:a4:03:76:10:07: e6:d0:1c:f7:73:23:5c:bf:34:2f:75:b8:60:bb:00:95:46:e8: c4:18:ee:23:a1:7a:2d:6f:3b:15:bf:47:c0:b5:89:d8:48:02: dd:f4:7f:59:ea:3d:8b:75:04:e7:bf:41:2d:f2:ad:e7:be:d7: f1:a3:8b:bd:e9:47:10:07:41:c4:cc:91:be:10:42:05:5c:9d: 8e:4f:74:f3:c3:d9:0d:05:3d:a8:e3:02:ec:a2:d4:26:b9:a9: d3:32:0f:24:07:97:c1:58:15:42:82:c3:39:36:3e:75:bb:3a: 91:21:29:d9:17:28:e6:dd:1a:b1:30:89:13:6f:79:48:a0:e2: 07:cb:98:48:a4:e9:03:92:7f:9e:f9:67:90:d0:0f:d9:f8:d2: 55:03:3f:2c:a6:b7:53:22:c9:05:c4:b8:57:df:a4:07:5c:cc: 59:b5:59:da -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITNtdg8XlpXXjkN7EAgP7pqU2GiDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA0MjIxNzMxMjdaFw0yNTA1MjcyMzU5NTla MHoxSTBHBgNVBAUTQDMwMTk1ZjgxNzBlMjIwMWRmZjUxYmY1YjNmZTMyOWViYmJi M2E3NDJiY2JmMDZkNzBkNmMyYmM3MTA3MDkwMTAxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALVNPmLtcz6zr69Wwmv24rdwrXn3g8TlZRYK5yeHvJDDL8PM 7Tf3bV9GbRxuYLpu3kPtVRCMbXUCZ/RiSeceStHIifsPeMH2s4lU822fEHA1474V D8BWZIbIfA2Ak7HcYxDpzbcacya98NBveEdzu7P7mud0gkzJNPyQg+hbsMteBRzd 7QvB2pgLz7JiRUUnnKkUCzy4+hQHrHC7GvgSZqKb2hNd5n17TCbjGVhpOCONfV5q /53WEHQ5kAfY/zzZWl9804ZmPddhgXGOvA3KE0LcJ3HXBYo0tjc1EID9EE4LmJ8u P1IOfP1pdMA6XwsIlOFu1KiOT9fBEIIxaMZCFoMCAwEAAaOCArMwggKvMB0GA1Ud DgQWBBROCBt/sjIxZ1u0n0tn1/QVK3AokjAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvMzE3YWE1ZjItZTJmZC00NGE2LThlZTEtZjE4YWE2MWMwNjg5LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGBCYAHxGAMA0GCSqGSIb3DQEBCwUAA4IBAQCi8eetnWtXXGf2ZhWJ2L/dRI7A fncGAH/P0OKL9WyKeOhfFaeSK1DR86xO/X62f0E25VAooaANWZrYSt3A9YPsemoU Of7axRnQHCXI1EFl7SZkwodbpAN2EAfm0Bz3cyNcvzQvdbhguwCVRujEGO4joXot bzsVv0fAtYnYSALd9H9Z6j2LdQTnv0Et8q3nvtfxo4u96UcQB0HEzJG+EEIFXJ2O T3Tzw9kNBT2o4wLsotQmuanTMg8kB5fBWBVCgsM5Nj51uzqRISnZFyjm3RqxMIkT b3lIoOIHy5hIpOkDkn+e+WeQ0A/Z+NJVAz8sprdTIskFxLhX36QHXMxZtVna -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:49 2025 by rpki-client