$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b7fc972-33eb-415b-8005-dedabe050b7e.roa File: 4b7fc972-33eb-415b-8005-dedabe050b7e.roa (raw, json) Hash identifier: aOLkFGACajmHSjhsmJjTvNGxDoXF5/5XHN8E3lGadXc= Subject key identifier: 73:1B:EE:3A:64:6C:D9:5E:04:E7:3D:BB:52:45:99:17:95:DD:68:2D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D3797ADCF05D674D88E485294343AEB9AC874BF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b7fc972-33eb-415b-8005-dedabe050b7e.roa Signing time: Tue 22 Apr 2025 00:40:20 +0000 ROA not before: Tue 22 Apr 2025 00:40:20 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:8090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:37:97:ad:cf:05:d6:74:d8:8e:48:52:94:34:3a:eb:9a:c8:74:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:40:20 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=6770728083cc2523c202f54797ece3119466d27d30be0d701631829b9c27e7e0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:a5:6e:61:e0:a3:6b:10:58:52:58:7b:41: fe:72:43:51:26:fc:7f:52:5d:a0:01:87:69:63:d2: 60:3b:c4:3b:c5:c1:46:fb:ba:92:3a:6e:a2:8b:c4: 4a:78:f3:e5:8d:59:6e:dd:f7:c0:38:03:f4:47:e2: 35:d2:f3:27:2e:86:21:16:2f:e4:74:2d:e2:d5:81: 86:bc:a5:a1:6e:f5:18:b2:9f:fa:43:cd:2e:e0:0f: b3:f5:a7:31:a9:6f:68:04:e1:0c:26:00:ab:2e:8c: e1:3e:89:fe:fc:ed:fe:b7:58:d3:d7:77:35:77:db: 60:7c:13:9c:97:42:5a:7b:ac:71:d6:d4:b7:86:b4: fb:08:93:08:b0:50:cb:89:b3:00:45:d5:d1:92:3a: 8d:73:63:a0:54:09:00:78:d4:ac:df:94:34:32:b0: 4e:ba:74:0c:ed:d5:88:30:04:0e:cf:c9:0d:c2:f8: c3:0a:d8:f5:08:57:d8:81:1e:ce:ef:72:f9:21:5b: 37:f3:17:fc:84:5d:20:67:9a:ad:81:a6:a2:80:4c: 3a:8c:f4:2f:d0:b7:ab:b2:ae:f0:44:d9:c2:94:f6: 00:a8:55:70:e3:a2:aa:66:2e:b9:fa:4c:a5:a7:8f: 0a:b5:af:13:0c:97:77:cc:85:7a:41:14:44:e6:19: 75:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1B:EE:3A:64:6C:D9:5E:04:E7:3D:BB:52:45:99:17:95:DD:68:2D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b7fc972-33eb-415b-8005-dedabe050b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8090::/48 Signature Algorithm: sha256WithRSAEncryption 43:24:32:eb:f6:1c:36:fa:05:16:cb:46:5f:35:72:f4:3f:c7: 42:12:f6:af:12:e9:6b:0c:9a:af:28:0e:55:87:5b:12:14:d5: e6:b1:e7:15:27:cb:2d:82:da:d8:e8:fb:d4:c9:8a:a5:47:fb: 25:88:2b:cf:63:cb:66:7a:cd:f1:b5:7c:1e:b3:43:ab:bd:2a: fb:83:da:b6:7a:dc:76:f3:13:80:8f:8f:8e:d0:1c:af:79:a2: ae:c0:e6:18:6a:d8:37:83:56:d9:4d:4f:02:80:e6:5f:ca:18: cb:cd:b2:af:b4:1d:3e:4c:16:5b:43:ae:0e:07:9e:0d:8b:d7: 3d:a4:d8:ae:07:4e:6d:e1:32:60:9b:58:79:da:be:53:f7:49: 02:d6:f7:d2:94:15:ab:b4:b2:28:84:2a:06:2e:d6:10:d2:74: ea:c8:71:85:cb:c3:b7:b4:8b:4b:71:80:25:ba:29:27:39:8c: bb:25:de:8d:0b:67:80:ac:81:f7:3c:ce:24:47:9b:15:08:b8: 57:4a:65:9f:f6:13:57:89:04:25:ee:32:44:57:21:e6:c8:be: 59:49:67:95:d5:d0:51:33:66:bc:92:54:e1:50:87:95:21:20: f8:a3:4d:ee:7a:d3:f7:5c:60:ba:9e:9f:55:8c:b2:9d:28:8c: d1:74:e4:04 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXTeXrc8F1nTYjkhSlDQ665rIdL8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDA0MDIwWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzcwNzI4MDgzY2MyNTIzYzIwMmY1NDc5N2VjZTMxMTk0 NjZkMjdkMzBiZTBkNzAxNjMxODI5YjljMjdlN2UwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBXqVuYeCjaxBYUlh7Qf5yQ1Em/H9SXaABh2lj0mA7xDvF wUb7upI6bqKLxEp48+WNWW7d98A4A/RH4jXS8ycuhiEWL+R0LeLVgYa8paFu9Riy n/pDzS7gD7P1pzGpb2gE4QwmAKsujOE+if787f63WNPXdzV322B8E5yXQlp7rHHW 1LeGtPsIkwiwUMuJswBF1dGSOo1zY6BUCQB41KzflDQysE66dAzt1YgwBA7PyQ3C +MMK2PUIV9iBHs7vcvkhWzfzF/yEXSBnmq2BpqKATDqM9C/Qt6uyrvBE2cKU9gCo VXDjoqpmLrn6TKWnjwq1rxMMl3fMhXpBFETmGXU3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcxvuOmRs2V4E5z27UkWZF5XdaC0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRiN2ZjOTcyLTMzZWItNDE1Yi04MDA1LWRlZGFiZTA1MGI3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgJAwDQYJKoZIhvcNAQELBQADggEBAEMkMuv2HDb6BRbLRl81cvQ/ x0IS9q8S6WsMmq8oDlWHWxIU1eax5xUnyy2C2tjo+9TJiqVH+yWIK89jy2Z6zfG1 fB6zQ6u9KvuD2rZ63HbzE4CPj47QHK95oq7A5hhq2DeDVtlNTwKA5l/KGMvNsq+0 HT5MFltDrg4Hng2L1z2k2K4HTm3hMmCbWHnavlP3SQLW99KUFau0siiEKgYu1hDS dOrIcYXLw7e0i0txgCW6KSc5jLsl3o0LZ4Csgfc8ziRHmxUIuFdKZZ/2E1eJBCXu MkRXIebIvllJZ5XV0FEzZrySVOFQh5UhIPijTe560/dcYLqen1WMsp0ojNF05AQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:42:05 2025 by rpki-client