$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37f811a3-5fe1-4a77-bac9-ea5154506744.roa File: 37f811a3-5fe1-4a77-bac9-ea5154506744.roa (raw, json) Hash identifier: rUBS7xj2P9Co+XztzTMz6yUmINGr1wmatiBw0WXc+IM= Subject key identifier: DF:AE:D1:1D:D5:3E:ED:09:8D:A6:0E:29:F9:25:93:ED:60:18:16:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F161438C60C9E29914A590F3D21876E6FA2920A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37f811a3-5fe1-4a77-bac9-ea5154506744.roa Signing time: Tue 22 Apr 2025 15:32:46 +0000 ROA not before: Tue 22 Apr 2025 15:32:46 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:16:14:38:c6:0c:9e:29:91:4a:59:0f:3d:21:87:6e:6f:a2:92:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:32:46 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=7f4f8f930d9e58c3fe7e5c14c7ad4894a7341c384d56ec9389bd70434e64f857, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:a6:b9:d5:2e:93:5a:5f:41:77:a2:de:84: 67:fc:58:ba:61:84:12:c6:80:f2:69:25:b7:cf:f4: 0e:a5:ad:a8:45:f3:a9:e0:ff:72:1f:7d:2a:7b:15: ec:fc:36:a0:b5:3b:06:f7:fc:22:48:64:de:0c:c6: 18:c2:e4:56:e7:a0:4a:e1:15:89:08:18:9e:88:c9: a4:b6:3c:0e:94:21:0f:91:76:02:04:6d:49:41:8d: b0:0e:e4:2a:17:fb:04:59:98:85:09:27:45:fd:23: df:3a:4e:1c:5e:a6:ad:70:15:52:d8:6b:b0:34:18: e0:d7:05:d2:ab:6a:e8:e9:e3:9b:4f:dd:9a:eb:69: 9b:46:b1:89:91:c2:a2:88:d5:30:60:37:cd:42:73: 69:55:31:40:2c:3b:ac:e6:68:3e:23:07:4c:fb:53: 78:92:ca:28:46:8e:d2:0e:6f:56:78:87:42:a6:3b: ea:83:40:37:67:2e:c1:68:7a:a2:17:00:cb:2b:d5: 1d:97:fb:0f:5c:c4:29:53:3a:53:e1:34:b2:1f:e2: 63:54:c1:a3:b7:4f:01:8e:73:3f:e5:20:9b:39:df: 5a:e7:7b:95:a1:77:36:e9:2e:6a:8f:8e:be:c6:5a: 4c:70:3a:b6:d6:85:4e:6e:30:55:c6:28:ca:69:a4: fd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AE:D1:1D:D5:3E:ED:09:8D:A6:0E:29:F9:25:93:ED:60:18:16:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/37f811a3-5fe1-4a77-bac9-ea5154506744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:80a0::/48 Signature Algorithm: sha256WithRSAEncryption 93:a6:19:b2:32:44:59:05:95:84:d5:30:3f:ac:8d:8d:b3:83: fd:90:71:3f:c9:15:0b:22:f2:85:93:ad:cb:6c:b9:06:05:73: f5:3f:bc:01:45:f1:ab:61:cf:75:94:10:41:6b:c5:21:c3:34: f9:a3:94:d6:e1:85:60:8e:4a:df:6b:b2:94:c3:e3:68:97:71: 1e:d3:ee:d7:ee:ea:59:99:1e:0a:83:eb:d6:4d:03:9e:8e:f6: 5e:b7:81:3e:6c:14:c4:58:9d:9b:6d:72:01:8b:25:6e:19:1b: 13:4d:42:8b:31:43:d6:3c:de:26:4a:24:00:fe:fd:9e:da:b1: 11:59:c0:ae:60:b3:df:c6:31:c9:9d:65:0c:0d:e6:8f:fa:38: 7e:2e:f0:99:8b:23:f1:d7:13:4c:22:1f:ac:60:9a:3d:11:13: ac:2e:db:f2:a2:29:7b:97:05:4d:e9:c5:8d:29:a1:10:6e:af: ff:a9:31:f2:be:af:f2:69:6e:7c:44:f0:51:b4:0d:d2:ae:88: a0:f6:4a:e4:1f:0c:18:d0:a4:c9:57:52:67:78:bb:2a:59:dc: 63:62:8a:65:a4:45:30:0f:40:41:e6:f2:8f:ce:89:b9:13:95: c9:d9:f8:f4:a4:9f:e7:c9:a1:7e:f5:a8:00:d4:fd:db:dd:1e: 69:78:35:9c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTxYUOMYMnimRSlkPPSGHbm+ikgowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUzMjQ2WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjRmOGY5MzBkOWU1OGMzZmU3ZTVjMTRjN2FkNDg5NGE3 MzQxYzM4NGQ1NmVjOTM4OWJkNzA0MzRlNjRmODU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmvqa51S6TWl9Bd6LehGf8WLphhBLGgPJpJbfP9A6lrahF 86ng/3IffSp7Fez8NqC1Owb3/CJIZN4MxhjC5FbnoErhFYkIGJ6IyaS2PA6UIQ+R dgIEbUlBjbAO5CoX+wRZmIUJJ0X9I986Thxepq1wFVLYa7A0GODXBdKraujp45tP 3ZrraZtGsYmRwqKI1TBgN81Cc2lVMUAsO6zmaD4jB0z7U3iSyihGjtIOb1Z4h0Km O+qDQDdnLsFoeqIXAMsr1R2X+w9cxClTOlPhNLIf4mNUwaO3TwGOcz/lIJs531rn e5WhdzbpLmqPjr7GWkxwOrbWhU5uMFXGKMpppP2XAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU367RHdU+7QmNpg4p+SWT7WAYFmMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM3ZjgxMWEzLTVmZTEtNGE3Ny1iYWM5LWVhNTE1NDUwNjc0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/7gKAwDQYJKoZIhvcNAQELBQADggEBAJOmGbIyRFkFlYTVMD+sjY2z g/2QcT/JFQsi8oWTrctsuQYFc/U/vAFF8athz3WUEEFrxSHDNPmjlNbhhWCOSt9r spTD42iXcR7T7tfu6lmZHgqD69ZNA56O9l63gT5sFMRYnZttcgGLJW4ZGxNNQosx Q9Y83iZKJAD+/Z7asRFZwK5gs9/GMcmdZQwN5o/6OH4u8JmLI/HXE0wiH6xgmj0R E6wu2/KiKXuXBU3pxY0poRBur/+pMfK+r/JpbnxE8FG0DdKuiKD2SuQfDBjQpMlX Umd4uypZ3GNiimWkRTAPQEHm8o/OibkTlcnZ+PSkn+fJoX71qADU/dvdHml4NZw= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:04 2025 by rpki-client