$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49d51f2f-fbb8-465d-b074-3851b97a4b9e.roa File: 49d51f2f-fbb8-465d-b074-3851b97a4b9e.roa (raw, json) Hash identifier: 4PLuFSNvSMPvlQigYWPrGSpjisQkCV4GGMwNTU9zc9w= Subject key identifier: F7:1D:1E:DD:5F:50:63:8F:A5:70:1E:B7:0E:D6:04:F5:B3:75:0F:22 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 686793D8EFB0CF47F1747B29EC14E66B4C02F64F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49d51f2f-fbb8-465d-b074-3851b97a4b9e.roa Signing time: Tue 22 Apr 2025 00:40:24 +0000 ROA not before: Tue 22 Apr 2025 00:40:24 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:60a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:67:93:d8:ef:b0:cf:47:f1:74:7b:29:ec:14:e6:6b:4c:02:f6:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:40:24 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=545d8853e1dd3a188a96ca76e82799ca56d2f8ba2678b194c3dde012320a6b0c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:fa:78:34:5a:ac:8c:2c:72:0a:ed:94:2c: f5:17:51:59:39:f1:26:fc:1a:bd:08:79:d1:ee:8b: d3:52:0a:f6:cd:c5:d1:ef:b5:00:50:7d:62:b2:c2: 21:24:db:63:7b:d1:1c:ba:d1:d3:68:c3:11:47:2b: 86:7c:30:5a:51:2d:9f:27:58:36:35:20:1e:1b:91: ec:1a:dc:5f:5f:3a:64:b3:6c:1a:c1:ca:00:ff:d2: f2:8e:ef:86:4f:8a:8f:df:bb:8d:4a:5d:58:10:c9: 43:e2:cf:a0:60:60:e4:64:32:98:c4:23:5c:88:c1: 6b:68:9f:ba:c8:0b:f6:07:b3:c4:6f:b2:bc:28:1b: 70:5f:74:95:59:ec:9c:cf:d4:54:d8:64:72:27:1b: 26:a7:1d:05:c3:70:f1:96:d9:0b:23:2f:bb:a9:dc: 88:f1:80:01:5f:e9:2f:a1:88:b2:53:db:15:7b:6d: 36:87:a2:39:96:82:66:d0:0d:37:a6:64:99:47:8a: ba:b9:b9:6f:2d:0c:e7:b1:50:a7:b0:b8:04:85:88: f2:59:62:21:6a:d2:d9:76:8c:0e:d0:d6:4d:ed:2c: 14:e0:c1:18:56:7c:1b:31:52:b4:8d:a3:f4:3e:28: 7d:72:d0:ed:1c:3c:41:33:96:30:fd:68:ce:b8:de: dc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1D:1E:DD:5F:50:63:8F:A5:70:1E:B7:0E:D6:04:F5:B3:75:0F:22 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49d51f2f-fbb8-465d-b074-3851b97a4b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:60a0::/48 Signature Algorithm: sha256WithRSAEncryption 91:5b:12:c0:4b:65:a2:f0:4c:6b:7c:dd:52:1d:8c:64:02:4f: 9b:c8:31:09:9c:ac:72:5c:44:7b:7c:e3:d5:c1:a7:04:bc:5c: 21:e8:c3:d1:15:2f:13:d2:cd:f6:1d:78:2f:53:d9:70:29:8f: 5e:37:f2:8d:7b:42:57:1d:01:90:80:e6:6f:10:d3:eb:4b:39: 18:43:b9:99:6b:f4:9c:f1:3f:bc:84:e9:a3:82:9e:f4:f9:a8: 7b:af:5b:c8:fc:d7:c2:9a:1f:f3:11:1e:16:71:a4:22:b3:63: 8d:b2:34:75:3c:9c:77:24:04:4a:7b:6f:d1:44:ef:71:10:b3: bf:c8:a7:00:f5:e5:35:a7:bd:ee:22:ac:40:b3:95:89:0e:65: 9c:3a:d8:3f:4c:63:24:80:25:93:24:5b:89:f8:80:21:e3:14: 6d:db:a5:35:1b:c2:92:91:ca:d7:8c:76:8b:6d:59:1e:6a:92: 44:67:1e:0d:f9:f4:55:41:c4:5e:a9:a3:39:7c:30:ae:26:b1: e9:89:92:97:10:a6:bf:c9:5d:0f:18:5a:8a:10:d8:f9:ce:ac: 9b:6d:9b:7f:82:dd:bc:76:89:4c:2a:7f:39:3b:fe:c7:4f:0c: d6:d1:e3:c0:24:13:3c:92:64:ec:ef:5b:73:86:62:f7:9f:13: 08:0e:19:e9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaGeT2O+wz0fxdHsp7BTma0wC9k8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDA0MDI0WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDVkODg1M2UxZGQzYTE4OGE5NmNhNzZlODI3OTljYTU2 ZDJmOGJhMjY3OGIxOTRjM2RkZTAxMjMyMGE2YjBjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4F/p4NFqsjCxyCu2ULPUXUVk58Sb8Gr0IedHui9NSCvbN xdHvtQBQfWKywiEk22N70Ry60dNowxFHK4Z8MFpRLZ8nWDY1IB4bkewa3F9fOmSz bBrBygD/0vKO74ZPio/fu41KXVgQyUPiz6BgYORkMpjEI1yIwWton7rIC/YHs8Rv srwoG3BfdJVZ7JzP1FTYZHInGyanHQXDcPGW2QsjL7up3IjxgAFf6S+hiLJT2xV7 bTaHojmWgmbQDTemZJlHirq5uW8tDOexUKewuASFiPJZYiFq0tl2jA7Q1k3tLBTg wRhWfBsxUrSNo/Q+KH1y0O0cPEEzljD9aM643tx1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9x0e3V9QY4+lcB63DtYE9bN1DyIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ5ZDUxZjJmLWZiYjgtNDY1ZC1iMDc0LTM4NTFiOTdhNGI5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AYKAwDQYJKoZIhvcNAQELBQADggEBAJFbEsBLZaLwTGt83VIdjGQC T5vIMQmcrHJcRHt849XBpwS8XCHow9EVLxPSzfYdeC9T2XApj1438o17QlcdAZCA 5m8Q0+tLORhDuZlr9JzxP7yE6aOCnvT5qHuvW8j818KaH/MRHhZxpCKzY42yNHU8 nHckBEp7b9FE73EQs7/IpwD15TWnve4irECzlYkOZZw62D9MYySAJZMkW4n4gCHj FG3bpTUbwpKRyteMdottWR5qkkRnHg359FVBxF6pozl8MK4msemJkpcQpr/JXQ8Y WooQ2PnOrJttm3+C3bx2iUwqfzk7/sdPDNbR48AkEzySZOzvW3OGYvefEwgOGek= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:01 2025 by rpki-client