$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3737c628-e3b0-419b-8657-cac0cb71b30e.roa File: 3737c628-e3b0-419b-8657-cac0cb71b30e.roa (raw, json) Hash identifier: JcoNL+ooSK5a5GNsKn+I5zZzzV+1FBz0Oj4xlTFuvr8= Subject key identifier: FB:C3:C0:4E:CB:56:77:01:8C:67:C2:A9:24:DD:5B:87:15:4F:FC:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7850547AB64E3CDBDF11ABAD72F2E0E44A59F521 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3737c628-e3b0-419b-8657-cac0cb71b30e.roa Signing time: Tue 22 Apr 2025 00:10:52 +0000 ROA not before: Tue 22 Apr 2025 00:10:52 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:807f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:50:54:7a:b6:4e:3c:db:df:11:ab:ad:72:f2:e0:e4:4a:59:f5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:10:52 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=7593568716e934259b7d2fbebc54247dc8eda66c999074cdf72cde2f783a0267, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ba:bc:5b:de:da:96:30:23:8e:a5:7c:3d:f2: aa:07:18:64:0d:75:09:68:90:1c:10:7c:43:34:53: 7d:89:de:c2:58:17:09:0c:cd:f6:65:af:6c:5c:c4: 2a:45:c3:18:46:58:08:73:8b:47:43:1e:b0:38:68: 62:36:dd:7a:47:ea:f0:24:2b:8b:65:7a:6e:96:d5: ae:4c:42:1c:cb:f3:b3:51:5c:77:2e:56:ad:37:4e: 7e:c2:30:1e:9d:13:4d:7b:ef:f7:ad:d4:5f:ef:78: 88:62:35:48:b9:02:29:c1:24:07:47:35:0a:3d:5a: 19:e2:77:98:20:d0:26:a9:e4:5b:11:0e:57:b7:27: 55:18:1d:a3:6f:4f:c8:7f:8e:24:47:04:4a:67:eb: 98:99:16:77:ba:00:82:d9:33:2c:d4:dc:01:fc:56: 58:0f:c8:a9:b5:7f:f3:a8:c3:da:45:e5:51:0a:73: 36:17:9c:40:1f:ae:7f:25:0a:c2:05:ec:43:c3:57: 45:d2:17:32:cb:d0:48:95:5f:f2:d8:8e:fc:8d:2d: b7:8c:3d:7e:aa:d4:35:e3:08:e9:7c:0b:73:96:e5: 21:49:35:94:38:9b:21:49:f6:d5:19:37:cc:5a:cb: 63:a1:cb:77:aa:6e:b8:07:b4:eb:a9:53:65:44:9e: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C3:C0:4E:CB:56:77:01:8C:67:C2:A9:24:DD:5B:87:15:4F:FC:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3737c628-e3b0-419b-8657-cac0cb71b30e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:807f::/48 Signature Algorithm: sha256WithRSAEncryption 06:60:d2:54:3e:5f:0f:c4:bd:3e:4d:32:fc:32:95:78:86:eb: c5:75:38:6a:8f:a6:6b:26:d1:d0:3d:0d:87:94:fa:ee:d4:92: fb:df:07:61:1a:c6:02:88:8e:ca:84:46:c9:a5:1b:83:a2:0f: 15:b5:c8:5f:2e:dd:ce:a2:5e:7d:2b:71:80:9a:67:f1:be:b8: 35:ee:9c:1f:07:d7:78:16:bc:c2:ed:db:ae:7a:1b:69:75:c4: 8c:7e:77:e7:51:0f:0e:90:26:0a:28:7e:9d:4f:93:3e:1e:ca: 2a:fa:6e:75:96:fc:87:7b:5d:2b:e7:10:6a:bb:9a:da:53:c6: ea:a1:83:2c:5d:1b:19:5b:8a:67:77:07:ca:70:7e:bb:c3:59: 7d:bf:b0:db:2b:2f:94:3d:16:ea:86:0a:62:18:36:86:41:c7: fd:98:26:35:45:0d:1c:be:dd:b9:99:a9:ca:3a:40:45:46:bd: f5:20:c7:cf:97:68:1c:8d:99:13:43:1a:ad:25:ef:d7:17:9a: 6e:74:29:71:ae:70:4b:bb:57:6b:24:72:c4:fb:36:89:16:63: 68:40:00:56:c3:93:df:3a:b4:f4:44:98:dd:2a:a5:1e:0b:eb: 1c:81:4a:14:45:27:1f:7d:81:09:4c:ce:8f:f7:f2:23:18:a3: 25:07:1e:ad -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeFBUerZOPNvfEautcvLg5EpZ9SEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAxMDUyWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTkzNTY4NzE2ZTkzNDI1OWI3ZDJmYmViYzU0MjQ3ZGM4 ZWRhNjZjOTk5MDc0Y2RmNzJjZGUyZjc4M2EwMjY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJurxb3tqWMCOOpXw98qoHGGQNdQlokBwQfEM0U32J3sJY FwkMzfZlr2xcxCpFwxhGWAhzi0dDHrA4aGI23XpH6vAkK4tlem6W1a5MQhzL87NR XHcuVq03Tn7CMB6dE0177/et1F/veIhiNUi5AinBJAdHNQo9Whnid5gg0Cap5FsR Dle3J1UYHaNvT8h/jiRHBEpn65iZFne6AILZMyzU3AH8VlgPyKm1f/Oow9pF5VEK czYXnEAfrn8lCsIF7EPDV0XSFzLL0EiVX/LYjvyNLbeMPX6q1DXjCOl8C3OW5SFJ NZQ4myFJ9tUZN8xay2Ohy3eqbrgHtOupU2VEns9pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+8PATstWdwGMZ8KpJN1bhxVP/HAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM3MzdjNjI4LWUzYjAtNDE5Yi04NjU3LWNhYzBjYjcxYjMwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gH8wDQYJKoZIhvcNAQELBQADggEBAAZg0lQ+Xw/EvT5NMvwylXiG 68V1OGqPpmsm0dA9DYeU+u7UkvvfB2EaxgKIjsqERsmlG4OiDxW1yF8u3c6iXn0r cYCaZ/G+uDXunB8H13gWvMLt2656G2l1xIx+d+dRDw6QJgoofp1Pkz4eyir6bnWW /Id7XSvnEGq7mtpTxuqhgyxdGxlbimd3B8pwfrvDWX2/sNsrL5Q9FuqGCmIYNoZB x/2YJjVFDRy+3bmZqco6QEVGvfUgx8+XaByNmRNDGq0l79cXmm50KXGucEu7V2sk csT7NokWY2hAAFbDk986tPREmN0qpR4L6xyBShRFJx99gQlMzo/38iMYoyUHHq0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:16 2025 by rpki-client