$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/359348ca-d04d-4511-9112-83b6b3e9e5fe.roa File: 359348ca-d04d-4511-9112-83b6b3e9e5fe.roa (raw, json) Hash identifier: obla8b1L7+ppufAsPpwp3Ge/NrivugGy0/Col5Pj6tY= Subject key identifier: D0:E7:E8:B9:82:F1:25:83:22:96:75:73:36:78:C3:9D:94:21:EF:54 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6205167F27FE58288EE9CA3AB5CB945BAD262C65 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/359348ca-d04d-4511-9112-83b6b3e9e5fe.roa Signing time: Tue 22 Apr 2025 15:31:50 +0000 ROA not before: Tue 22 Apr 2025 15:31:50 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:5040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:05:16:7f:27:fe:58:28:8e:e9:ca:3a:b5:cb:94:5b:ad:26:2c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:31:50 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=35a91973bef23c0b12b661a1084108e9e5b4849ccf7ec26e048819fc29e0fd81, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:2a:96:ec:2b:d0:10:7a:19:5b:fa:c4:8f: 2f:ad:90:c4:a6:69:56:d3:54:0c:fd:68:24:e8:b2: cf:a9:9b:73:3a:75:e0:bd:55:0f:35:5a:f9:d8:1b: c9:36:1d:07:d1:a1:d3:a1:6f:30:31:72:ff:bb:32: c7:74:53:b5:27:23:53:3c:53:77:35:aa:ce:60:e8: 76:08:b0:26:54:40:cc:15:b4:29:a2:9c:c0:69:f8: 35:90:39:a2:87:ec:36:62:43:f1:f5:98:c6:44:42: 24:f1:f0:67:a6:ae:c6:d4:ac:a2:47:ac:db:1a:4d: a6:da:f9:ab:1f:86:8b:31:93:ed:70:c0:04:f5:a2: 79:ea:88:1e:3a:74:eb:06:13:63:d4:1d:7c:05:30: e0:a9:4f:fd:94:3e:1f:2e:43:71:8b:04:fb:9c:32: 7c:59:ed:f7:96:da:f6:e3:32:43:01:42:54:1e:7b: 73:e8:e2:0c:27:7c:01:11:01:20:cd:ea:9f:a5:76: c5:b0:71:46:8b:24:ed:7c:8f:35:b4:eb:11:99:fa: c6:88:80:32:3e:11:dc:b3:9e:fe:ff:f5:d8:81:42: c8:e1:6e:26:da:25:fd:29:7d:5a:cb:6e:72:65:ce: c3:77:de:27:18:31:e2:7b:f7:ec:84:4b:cb:1d:10: 6f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E7:E8:B9:82:F1:25:83:22:96:75:73:36:78:C3:9D:94:21:EF:54 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/359348ca-d04d-4511-9112-83b6b3e9e5fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:5040::/46 Signature Algorithm: sha256WithRSAEncryption 99:34:fc:2e:94:08:82:f6:09:6e:d1:76:f3:8b:9b:9b:f8:8b: b5:18:43:e1:9b:30:c6:8d:f9:71:97:20:ad:3b:61:de:20:13: 97:44:d6:01:90:98:41:7f:83:6d:12:e5:e1:ff:f2:5f:97:3e: d1:4c:a7:77:f3:23:3d:43:aa:5e:1f:4d:71:8f:5b:00:61:a1: a8:13:69:e4:97:74:5a:8e:af:0b:4a:f8:1d:6e:fa:b3:6a:39: 05:68:bf:5b:2a:a6:29:b1:fd:b9:4a:4d:dd:95:49:20:52:f7: d0:ff:e9:e0:21:b3:1d:c9:b4:bb:a7:2d:a4:ea:f4:11:2f:23: f5:dc:e9:95:bc:b6:b6:82:2b:dd:75:28:c6:e0:e9:88:ba:b3: 1f:7e:16:05:90:40:55:fe:70:61:18:7e:d5:f1:f5:0d:f1:89: ed:95:26:2d:17:ef:b5:62:21:e5:02:bc:ed:d3:6c:01:86:a5: fb:98:f6:5b:e7:2e:4c:5e:bf:c9:0a:a5:63:05:42:59:ae:02: a9:9d:34:64:fc:84:df:26:0a:cd:d7:d3:c9:67:ae:7c:5e:f1: bb:95:6b:26:08:54:3c:2f:f4:1c:e1:1c:61:77:67:cf:8c:98: 8c:2d:6a:2b:91:cd:a3:18:ea:c9:9d:64:ca:d5:95:dc:12:ee: dd:c6:c1:5a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYgUWfyf+WCiO6co6tcuUW60mLGUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUzMTUwWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNWE5MTk3M2JlZjIzYzBiMTJiNjYxYTEwODQxMDhlOWU1 YjQ4NDljY2Y3ZWMyNmUwNDg4MTlmYzI5ZTBmZDgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBhyqW7CvQEHoZW/rEjy+tkMSmaVbTVAz9aCToss+pm3M6 deC9VQ81WvnYG8k2HQfRodOhbzAxcv+7Msd0U7UnI1M8U3c1qs5g6HYIsCZUQMwV tCminMBp+DWQOaKH7DZiQ/H1mMZEQiTx8GemrsbUrKJHrNsaTaba+asfhosxk+1w wAT1onnqiB46dOsGE2PUHXwFMOCpT/2UPh8uQ3GLBPucMnxZ7feW2vbjMkMBQlQe e3Po4gwnfAERASDN6p+ldsWwcUaLJO18jzW06xGZ+saIgDI+Edyznv7/9diBQsjh bibaJf0pfVrLbnJlzsN33icYMeJ79+yES8sdEG8tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0OfouYLxJYMilnVzNnjDnZQh71QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1OTM0OGNhLWQwNGQtNDUxMS05MTEyLTgzYjZiM2U5ZTVmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pUEAwDQYJKoZIhvcNAQELBQADggEBAJk0/C6UCIL2CW7RdvOLm5v4 i7UYQ+GbMMaN+XGXIK07Yd4gE5dE1gGQmEF/g20S5eH/8l+XPtFMp3fzIz1Dql4f TXGPWwBhoagTaeSXdFqOrwtK+B1u+rNqOQVov1sqpimx/blKTd2VSSBS99D/6eAh sx3JtLunLaTq9BEvI/Xc6ZW8traCK911KMbg6Yi6sx9+FgWQQFX+cGEYftXx9Q3x ie2VJi0X77ViIeUCvO3TbAGGpfuY9lvnLkxev8kKpWMFQlmuAqmdNGT8hN8mCs3X 08lnrnxe8buVayYIVDwv9BzhHGF3Z8+MmIwtaiuRzaMY6smdZMrVldwS7t3GwVo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:36 2025 by rpki-client