$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43a6295c-c74f-4012-978c-c72b6927e757.roa File: 43a6295c-c74f-4012-978c-c72b6927e757.roa (raw, json) Hash identifier: 5IoWgXuwy1tlgzn/lexmyLiq+Wu6rXdgXnGwmAeDjCU= Subject key identifier: E4:82:FE:CE:29:53:08:34:ED:FD:34:8B:0C:B9:5A:DC:CB:59:8F:FC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 084F98819D2D329F90F2720EA16CB73B012886DF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43a6295c-c74f-4012-978c-c72b6927e757.roa Signing time: Mon 21 Apr 2025 17:41:31 +0000 ROA not before: Mon 21 Apr 2025 17:41:31 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4f:98:81:9d:2d:32:9f:90:f2:72:0e:a1:6c:b7:3b:01:28:86:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:41:31 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=1268244be238843a05106035bdfcd67d140b0ea1690b78ad7db53af247b71a4b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:3e:ea:3f:6a:7d:fd:ab:ad:b3:59:b3:85: d2:78:04:38:ad:37:9b:a5:60:aa:2f:17:0b:38:41: 89:4f:0b:14:c9:88:5b:74:20:f5:1d:32:d8:29:ca: 50:1e:d4:86:54:88:6a:2c:7b:e6:38:77:ef:97:7c: 30:67:ac:dd:ef:3a:1c:af:e6:50:df:71:7b:96:df: b2:b2:69:a7:c1:79:43:9d:a4:bc:43:d2:ef:18:44: 25:de:65:8f:09:32:16:4c:83:0e:41:50:07:15:a9: 47:c8:4e:3b:55:04:68:af:71:4d:f2:1e:85:fb:84: ec:de:16:d6:c6:ce:5d:32:69:2b:84:d8:e1:24:fd: 61:ff:d4:52:b5:d9:b6:da:52:9b:b2:31:16:ee:b4: b6:09:b0:98:70:55:0d:8e:a4:79:79:60:c7:ea:db: f6:5a:eb:b6:f6:33:08:8f:b9:31:1f:82:b9:39:db: c4:69:2c:36:53:1b:ea:04:f9:69:08:aa:62:c8:fe: 32:d0:67:53:77:b7:d9:19:d0:65:a9:27:f5:b3:da: d6:e9:b5:4e:a2:14:08:c1:df:d1:41:2a:64:86:9f: 0a:26:b5:1a:e6:3d:ee:c2:17:1a:35:25:9c:e7:36: c1:a0:cc:b1:ba:b7:89:7d:6a:63:0d:8a:5b:44:f3: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:82:FE:CE:29:53:08:34:ED:FD:34:8B:0C:B9:5A:DC:CB:59:8F:FC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43a6295c-c74f-4012-978c-c72b6927e757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:4020::/48 Signature Algorithm: sha256WithRSAEncryption 7b:ec:7c:12:9c:00:05:49:2c:e9:3b:41:a0:a9:67:f9:0e:be: f2:7b:b9:3d:bc:8b:d3:67:57:1a:23:d3:02:0b:a4:68:30:b9: 77:0b:84:fe:78:77:c8:ab:07:b4:09:c3:00:79:36:2d:14:cd: 9a:80:eb:4f:bf:21:29:3a:1c:78:70:e8:23:6a:b5:bc:0e:31: d9:ad:f7:83:4c:02:89:2d:49:06:bf:70:b3:f6:02:8c:ed:e3: 25:fb:82:0b:1b:54:05:e4:a1:6b:4e:e4:e7:17:0d:72:be:1e: ff:19:eb:56:6d:36:a4:e7:a9:1c:0a:31:cd:7c:4d:97:b3:eb: 60:0b:0b:d6:82:5d:c5:dd:0b:d4:a6:37:4a:7f:c9:07:2d:b8: be:44:77:60:34:85:b1:7f:93:b6:0b:0f:e2:5b:e5:73:db:4e: 1c:cd:01:83:54:49:95:92:35:10:fa:b7:54:a0:d3:a5:70:3c: ad:f6:1c:bf:6a:ec:9c:ed:81:db:2f:44:bf:54:0c:c3:29:ed: ee:c0:de:e9:e7:9d:d9:7d:8f:5c:91:d1:ea:9f:5a:a3:7b:1c: 59:20:b4:ef:fc:3d:3f:cb:be:0d:c9:8b:f4:13:aa:9f:81:f2: 75:8d:fc:bc:30:77:ed:b8:d0:96:c7:be:7b:73:c3:96:e1:13: f2:15:a4:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCE+YgZ0tMp+Q8nIOoWy3OwEoht8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTc0MTMxWhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjY4MjQ0YmUyMzg4NDNhMDUxMDYwMzViZGZjZDY3ZDE0 MGIwZWExNjkwYjc4YWQ3ZGI1M2FmMjQ3YjcxYTRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfIz7qP2p9/auts1mzhdJ4BDitN5ulYKovFws4QYlPCxTJ iFt0IPUdMtgpylAe1IZUiGose+Y4d++XfDBnrN3vOhyv5lDfcXuW37KyaafBeUOd pLxD0u8YRCXeZY8JMhZMgw5BUAcVqUfITjtVBGivcU3yHoX7hOzeFtbGzl0yaSuE 2OEk/WH/1FK12bbaUpuyMRbutLYJsJhwVQ2OpHl5YMfq2/Za67b2MwiPuTEfgrk5 28RpLDZTG+oE+WkIqmLI/jLQZ1N3t9kZ0GWpJ/Wz2tbptU6iFAjB39FBKmSGnwom tRrmPe7CFxo1JZznNsGgzLG6t4l9amMNiltE80JfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5IL+zilTCDTt/TSLDLla3MtZj/wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzYTYyOTVjLWM3NGYtNDAxMi05NzhjLWM3MmI2OTI3ZTc1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yQCAwDQYJKoZIhvcNAQELBQADggEBAHvsfBKcAAVJLOk7QaCpZ/kO vvJ7uT28i9NnVxoj0wILpGgwuXcLhP54d8irB7QJwwB5Ni0UzZqA60+/ISk6HHhw 6CNqtbwOMdmt94NMAoktSQa/cLP2Aozt4yX7ggsbVAXkoWtO5OcXDXK+Hv8Z61Zt NqTnqRwKMc18TZez62ALC9aCXcXdC9SmN0p/yQctuL5Ed2A0hbF/k7YLD+Jb5XPb ThzNAYNUSZWSNRD6t1Sg06VwPK32HL9q7JztgdsvRL9UDMMp7e7A3unnndl9j1yR 0eqfWqN7HFkgtO/8PT/Lvg3Ji/QTqp+B8nWN/Lwwd+240JbHvntzw5bhE/IVpNs= -----END CERTIFICATE-----Generated at Sat Apr 26 14:47:01 2025 by rpki-client