$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45ccdda1-0482-4f8a-8380-44528df11647.roa File: 45ccdda1-0482-4f8a-8380-44528df11647.roa (raw, json) Hash identifier: u4VTTE1nLX49E3jJGLC9/uPOHtKvXlbCieFjKKTvdGc= Subject key identifier: A6:D8:FA:3F:78:0B:A2:B4:99:E2:4E:DC:E1:C1:57:E4:07:73:56:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2443FCE291EFECD47AC9C4B019F41CF06FFBE0AA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45ccdda1-0482-4f8a-8380-44528df11647.roa Signing time: Tue 22 Apr 2025 15:20:24 +0000 ROA not before: Tue 22 Apr 2025 15:20:24 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:8080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:43:fc:e2:91:ef:ec:d4:7a:c9:c4:b0:19:f4:1c:f0:6f:fb:e0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:20:24 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=d30c292297aff71d3904b27cfe38060e1161c8e4d9dec42e5e2d610d9e5e4a47, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:3b:60:18:36:5a:d7:8c:ef:8c:99:76:98: 08:a3:e0:65:e4:b5:f2:7a:50:ce:70:bc:84:07:1d: fa:36:52:89:23:bf:53:f2:73:ce:0e:25:01:0a:68: f3:b6:18:c4:0f:1c:81:a8:c3:84:d8:61:2c:d4:5b: a3:d4:ff:bc:c3:72:72:1f:9d:d4:f9:37:c2:6f:07: f5:1c:cb:83:de:6c:4c:13:51:15:96:98:29:98:08: 23:b3:5d:93:8a:a6:f6:f3:95:87:19:5c:62:59:29: 07:e5:a9:06:81:98:df:29:fa:a8:7c:ee:22:fd:88: 0c:cb:1f:d5:c4:df:be:7c:76:a0:3a:06:64:dd:84: 32:c9:ee:10:00:b1:33:39:f1:9e:b4:35:e8:ea:83: a0:d6:28:7c:6f:75:61:5e:6a:be:23:63:c7:49:97: 69:ac:bb:ed:96:cc:3b:e9:79:2b:03:81:13:52:ce: 55:a4:65:8d:3d:e6:96:4d:17:de:8c:0d:fa:71:c8: a8:68:5d:85:c2:2f:d0:db:1e:0c:2e:b0:45:2b:5d: 99:ff:11:97:49:c5:ee:cc:59:e8:ab:51:c0:6d:4c: 8e:00:86:6f:03:21:01:46:00:f5:54:54:b4:3d:84: 2a:b7:b6:ba:6f:c0:01:f1:62:af:d4:79:28:a8:04: e8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D8:FA:3F:78:0B:A2:B4:99:E2:4E:DC:E1:C1:57:E4:07:73:56:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45ccdda1-0482-4f8a-8380-44528df11647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:8080::/46 Signature Algorithm: sha256WithRSAEncryption 57:74:46:11:16:44:86:bd:5d:1c:43:af:fa:89:8f:30:6d:9e: c2:05:67:a1:b7:31:88:d9:db:68:6c:a1:ff:1f:a0:54:58:96: ad:5f:d5:cd:7f:f9:45:0e:8b:e8:7f:49:21:5a:23:f7:62:0e: f2:2f:66:73:c9:68:0b:40:33:46:1d:7e:85:e8:fa:55:79:09: 70:4a:24:10:96:52:d6:78:51:ca:2d:af:c3:d9:7a:6a:1e:63: 5f:b3:8c:d9:35:a9:22:90:0b:b3:82:73:35:41:90:1f:13:a2: fb:75:61:90:00:2b:48:8b:9c:9e:54:60:c8:3a:6c:9c:cc:7c: 45:23:41:c0:35:4a:7e:e5:57:d9:7e:35:d6:b5:d6:c9:bb:fe: 3d:82:1d:b9:b0:e5:a7:1c:93:e3:1e:d2:c5:07:48:63:a9:62: 3a:da:bd:c3:0c:69:5c:95:32:21:60:91:e3:44:d9:8c:9d:80: 37:23:10:74:af:c7:de:81:82:fb:b5:e9:29:06:9e:05:06:0b: da:8e:82:44:37:c5:38:27:74:c3:22:fe:db:58:32:37:dc:1a: a3:79:d8:c0:0d:39:11:61:44:a0:9e:46:54:7d:64:f5:c9:65: 47:2e:55:c0:09:7b:ff:1a:dc:7a:8e:6a:26:b0:3e:ee:1e:a5: ad:51:56:73 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJEP84pHv7NR6ycSwGfQc8G/74KowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUyMDI0WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzBjMjkyMjk3YWZmNzFkMzkwNGIyN2NmZTM4MDYwZTEx NjFjOGU0ZDlkZWM0MmU1ZTJkNjEwZDllNWU0YTQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZiTtgGDZa14zvjJl2mAij4GXktfJ6UM5wvIQHHfo2Uokj v1Pyc84OJQEKaPO2GMQPHIGow4TYYSzUW6PU/7zDcnIfndT5N8JvB/Ucy4PebEwT URWWmCmYCCOzXZOKpvbzlYcZXGJZKQflqQaBmN8p+qh87iL9iAzLH9XE3758dqA6 BmTdhDLJ7hAAsTM58Z60Nejqg6DWKHxvdWFear4jY8dJl2msu+2WzDvpeSsDgRNS zlWkZY095pZNF96MDfpxyKhoXYXCL9DbHgwusEUrXZn/EZdJxe7MWeirUcBtTI4A hm8DIQFGAPVUVLQ9hCq3trpvwAHxYq/UeSioBOgfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUptj6P3gLorSZ4k7c4cFX5AdzVpUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1Y2NkZGExLTA0ODItNGY4YS04MzgwLTQ0NTI4ZGYxMTY0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3gIAwDQYJKoZIhvcNAQELBQADggEBAFd0RhEWRIa9XRxDr/qJjzBt nsIFZ6G3MYjZ22hsof8foFRYlq1f1c1/+UUOi+h/SSFaI/diDvIvZnPJaAtAM0Yd foXo+lV5CXBKJBCWUtZ4Ucotr8PZemoeY1+zjNk1qSKQC7OCczVBkB8Tovt1YZAA K0iLnJ5UYMg6bJzMfEUjQcA1Sn7lV9l+Nda11sm7/j2CHbmw5acck+Me0sUHSGOp YjravcMMaVyVMiFgkeNE2YydgDcjEHSvx96Bgvu16SkGngUGC9qOgkQ3xTgndMMi /ttYMjfcGqN52MANORFhRKCeRlR9ZPXJZUcuVcAJe/8a3HqOaiawPu4epa1RVnM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:18 2025 by rpki-client