$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4538ad52-4310-4fd4-a85b-c27eb48f8d22.roa File: 4538ad52-4310-4fd4-a85b-c27eb48f8d22.roa (raw, json) Hash identifier: 73RzHkVrmXg5lGCVAppHwdO8fA4EGfE9YRHIi3aN84k= Subject key identifier: FA:B2:BE:4E:26:0A:FA:E4:E3:1F:B7:0F:7D:32:1C:65:8A:B4:4F:EF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 54FD98C70CE8EE1D4A07FC737C54FFBD778B5A87 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4538ad52-4310-4fd4-a85b-c27eb48f8d22.roa Signing time: Mon 21 Apr 2025 17:10:17 +0000 ROA not before: Mon 21 Apr 2025 17:10:17 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fd:98:c7:0c:e8:ee:1d:4a:07:fc:73:7c:54:ff:bd:77:8b:5a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:10:17 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=3c42b3ba785d7d08734fd08369340d230fdd47765573e16172db8739d7afabea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:91:3c:11:e0:66:81:6d:98:74:c7:4b:6a:01: 87:1d:47:71:e0:27:e9:88:0b:38:2c:b3:a9:b6:52: dd:ac:bd:a5:0a:df:9c:52:00:ac:a3:5e:82:b4:fa: a7:88:7e:dd:e3:a5:24:67:d5:83:d8:49:68:e7:46: 1f:6b:70:3c:6d:90:be:ee:35:0e:23:6b:7c:1a:35: a4:69:92:ec:44:0e:d0:e5:06:cd:c4:1d:32:f5:9f: ad:3b:b6:19:4f:5f:ac:9b:63:f0:b3:7b:e1:a8:15: 32:0f:19:05:85:69:63:cf:c5:e0:54:90:6d:b5:08: 21:74:d6:b7:40:ba:19:b1:d0:44:9c:0a:14:52:ef: 83:c9:db:46:48:50:89:fc:81:7a:82:eb:e9:ae:35: c5:c5:b2:89:31:c0:1e:a5:14:86:42:54:23:1f:3f: 60:49:9d:38:56:7e:4c:66:3c:bf:30:55:24:4c:d6: 45:eb:7b:dd:ae:df:90:4a:1a:e2:5b:e1:ef:05:2a: f2:75:dc:ef:18:fb:d8:fc:13:7f:73:03:33:8a:96: 0d:86:2e:f3:ec:3e:c2:0c:a3:44:82:d9:83:08:12: 5c:d6:ed:17:52:3d:b2:4d:be:69:86:85:fe:4c:a6: 12:88:fc:bf:f4:03:0f:7d:d9:73:0f:2f:6e:cc:7b: b8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B2:BE:4E:26:0A:FA:E4:E3:1F:B7:0F:7D:32:1C:65:8A:B4:4F:EF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4538ad52-4310-4fd4-a85b-c27eb48f8d22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption 20:4a:5b:5a:a0:10:fe:4a:7a:db:fa:19:ed:84:df:a7:85:95: 85:66:a4:ac:29:80:0f:1b:05:28:ca:67:7a:af:6c:d3:1e:9b: e0:04:c1:35:66:70:ad:63:6e:53:0b:b6:73:5e:a2:c7:ce:c6: f2:a4:3c:16:7b:9f:5b:86:0c:44:52:e5:64:fd:df:87:6b:4a: 16:14:5a:53:0f:5d:ff:49:20:c4:e1:de:85:50:63:cc:d4:c0: a1:a8:cb:c8:ce:b4:2b:47:d3:14:ce:aa:d0:78:b5:4f:4c:ad: ac:d4:a9:a7:ba:d3:31:63:58:4c:6b:9d:9c:b6:dc:12:99:3a: 1c:c4:ba:f6:e2:63:87:d7:9f:f6:5d:91:ee:65:75:a5:7f:b6: b1:ec:e4:f3:93:f5:c8:e5:eb:fc:44:ca:94:8d:4b:2a:b4:b9: 59:8e:45:82:b8:66:5c:c0:36:60:10:93:f1:57:60:6c:94:8b: a9:e7:76:b2:d9:38:d4:cf:6c:08:62:ff:7a:e2:a1:e3:4b:5b: 3e:5e:63:09:1f:07:0e:91:ad:bd:de:77:23:ad:24:41:62:98: 12:95:cb:d1:d4:29:f5:f4:4c:56:74:d9:90:89:fd:fd:9e:62: eb:4c:37:66:ef:e6:23:04:74:13:b0:59:d9:e3:75:89:df:26: 2b:70:05:b3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVP2Yxwzo7h1KB/xzfFT/vXeLWocwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTcxMDE3WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzQyYjNiYTc4NWQ3ZDA4NzM0ZmQwODM2OTM0MGQyMzBm ZGQ0Nzc2NTU3M2UxNjE3MmRiODczOWQ3YWZhYmVhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrkTwR4GaBbZh0x0tqAYcdR3HgJ+mICzgss6m2Ut2svaUK 35xSAKyjXoK0+qeIft3jpSRn1YPYSWjnRh9rcDxtkL7uNQ4ja3waNaRpkuxEDtDl Bs3EHTL1n607thlPX6ybY/Cze+GoFTIPGQWFaWPPxeBUkG21CCF01rdAuhmx0ESc ChRS74PJ20ZIUIn8gXqC6+muNcXFsokxwB6lFIZCVCMfP2BJnThWfkxmPL8wVSRM 1kXre92u35BKGuJb4e8FKvJ13O8Y+9j8E39zAzOKlg2GLvPsPsIMo0SC2YMIElzW 7RdSPbJNvmmGhf5MphKI/L/0Aw992XMPL27Me7jHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+rK+TiYK+uTjH7cPfTIcZYq0T+8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1MzhhZDUyLTQzMTAtNGZkNC1hODViLWMyN2ViNDhmOGQyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AwMAwDQYJKoZIhvcNAQELBQADggEBACBKW1qgEP5Ketv6Ge2E36eF lYVmpKwpgA8bBSjKZ3qvbNMem+AEwTVmcK1jblMLtnNeosfOxvKkPBZ7n1uGDERS 5WT934drShYUWlMPXf9JIMTh3oVQY8zUwKGoy8jOtCtH0xTOqtB4tU9MrazUqae6 0zFjWExrnZy23BKZOhzEuvbiY4fXn/Zdke5ldaV/trHs5POT9cjl6/xEypSNSyq0 uVmORYK4ZlzANmAQk/FXYGyUi6nndrLZONTPbAhi/3rioeNLWz5eYwkfBw6Rrb3e dyOtJEFimBKVy9HUKfX0TFZ02ZCJ/f2eYutMN2bv5iMEdBOwWdnjdYnfJitwBbM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:31 2025 by rpki-client