$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa File: 4c24d76f-a988-4548-a654-37a30aa8d32c.roa (raw, json) Hash identifier: kLFHW3iW0v8y+FoFthWNYapx6+PM9SK5ZZOzym11B3Q= Subject key identifier: FA:07:8E:37:5E:54:09:5E:E6:C5:26:A8:BC:E8:C2:45:DB:CA:D6:1A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 26FD6A206B4FC0B4524288C0471879D684DD83A2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa Signing time: Tue 22 Apr 2025 17:21:56 +0000 ROA not before: Tue 22 Apr 2025 17:21:56 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1c:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:fd:6a:20:6b:4f:c0:b4:52:42:88:c0:47:18:79:d6:84:dd:83:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:21:56 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=c1e49daa9ff1da9ef63142d3d1cfac5e69534fbbb1bc3dc4382354c8d0506a99, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e2:1c:be:75:56:72:8b:c3:35:d7:44:ec:07: c7:c7:ad:e5:2d:e4:76:31:9d:2f:d1:81:f1:1e:20: ef:6b:db:41:30:ff:40:04:02:56:fb:65:c7:a4:cc: f9:fd:d9:f6:84:c4:fc:52:5d:86:54:bf:99:e0:2d: 67:b0:34:d2:04:46:2a:37:71:ff:5d:f5:42:2c:63: e6:fa:23:37:c8:38:8f:13:8d:e5:e9:d5:29:88:b7: 2b:9f:b9:3e:2e:83:22:b3:31:39:c7:bc:29:34:cd: 07:5f:de:66:66:9b:16:72:ec:f1:e4:ec:7b:8a:4f: 33:68:48:a3:58:cc:e5:fe:68:07:fc:71:b8:d9:9d: c0:7b:54:9c:a9:b8:32:78:01:d4:bd:f7:c3:ef:c8: d1:19:b9:46:86:7e:77:b1:6d:fa:02:53:6e:34:fb: bd:62:2b:06:b6:af:29:75:57:69:79:de:db:63:28: 47:30:49:51:c9:52:cd:24:bf:10:33:52:23:73:0b: f5:9d:9e:15:e6:c3:f4:41:fc:b0:c2:43:76:bf:bd: 6f:11:de:2c:6a:f9:6b:24:03:a5:e2:c4:b3:f2:6d: 42:55:32:8b:d2:38:db:d0:28:2d:64:33:62:c9:12: 5a:f3:45:b7:59:50:b2:4b:a1:6b:08:c9:09:c8:1a: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:07:8E:37:5E:54:09:5E:E6:C5:26:A8:BC:E8:C2:45:DB:CA:D6:1A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c24d76f-a988-4548-a654-37a30aa8d32c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1c:4000::/36 Signature Algorithm: sha256WithRSAEncryption a9:56:99:82:76:e9:0e:1e:5f:d5:74:7e:e8:99:54:14:ab:9d: c5:3c:92:06:b7:a3:2e:6a:24:ea:0e:05:1d:15:ba:40:d6:3f: c5:c2:21:3c:9d:ad:ab:89:fd:b1:99:7d:8b:9d:b1:ab:a9:6b: f2:37:11:73:c0:80:a3:dc:ff:06:58:1a:2e:39:d2:c0:fd:ca: d8:18:dc:5b:60:cc:28:7a:84:ed:0e:af:c7:29:5d:a1:3d:fe: 09:d8:8b:7d:3d:8a:06:5a:85:e7:fc:79:f2:81:14:2f:3c:66: 7d:f1:8e:96:e9:ac:3e:1f:d7:0e:33:c2:e3:73:c5:7f:2f:fb: c3:7b:7e:21:bf:22:21:50:98:97:97:86:d6:ea:81:6e:95:dc: a3:6d:5b:bb:bc:ba:a2:e3:f0:1f:a1:75:8a:85:97:41:f8:97: 4e:69:9a:41:35:99:48:90:e7:03:ed:1a:eb:5a:68:03:54:8b: d6:d7:9a:b6:78:11:d1:8b:5f:4f:26:98:ce:e9:72:3f:2f:ad: e9:ee:92:93:07:b9:ee:c3:3c:7b:df:39:1e:b1:ba:66:fa:bf: 34:72:59:c9:39:cd:d2:44:42:f7:63:a8:9f:9a:7a:97:54:c1: 29:b6:0e:6d:e5:c0:bf:18:ef:81:32:58:57:d3:41:46:65:66: 8a:55:ca:0d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJv1qIGtPwLRSQojARxh51oTdg6IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcyMTU2WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWU0OWRhYTlmZjFkYTllZjYzMTQyZDNkMWNmYWM1ZTY5 NTM0ZmJiYjFiYzNkYzQzODIzNTRjOGQwNTA2YTk5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCX4hy+dVZyi8M110TsB8fHreUt5HYxnS/RgfEeIO9r20Ew /0AEAlb7ZcekzPn92faExPxSXYZUv5ngLWewNNIERio3cf9d9UIsY+b6IzfIOI8T jeXp1SmItyufuT4ugyKzMTnHvCk0zQdf3mZmmxZy7PHk7HuKTzNoSKNYzOX+aAf8 cbjZncB7VJypuDJ4AdS998PvyNEZuUaGfnexbfoCU240+71iKwa2ryl1V2l53ttj KEcwSVHJUs0kvxAzUiNzC/WdnhXmw/RB/LDCQ3a/vW8R3ixq+WskA6XixLPybUJV MovSONvQKC1kM2LJElrzRbdZULJLoWsIyQnIGnTjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+geON15UCV7mxSaovOjCRdvK1howHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRjMjRkNzZmLWE5ODgtNDU0OC1hNjU0LTM3YTMwYWE4ZDMyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8cQDANBgkqhkiG9w0BAQsFAAOCAQEAqVaZgnbpDh5f1XR+6JlUFKud xTySBrejLmok6g4FHRW6QNY/xcIhPJ2tq4n9sZl9i52xq6lr8jcRc8CAo9z/Blga LjnSwP3K2BjcW2DMKHqE7Q6vxyldoT3+CdiLfT2KBlqF5/x58oEULzxmffGOlums Ph/XDjPC43PFfy/7w3t+Ib8iIVCYl5eG1uqBbpXco21bu7y6ouPwH6F1ioWXQfiX TmmaQTWZSJDnA+0a61poA1SL1teatngR0YtfTyaYzulyPy+t6e6Skwe57sM8e985 HrG6Zvq/NHJZyTnN0kRC92Oon5p6l1TBKbYObeXAvxjvgTJYV9NBRmVmilXKDQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:27 2025 by rpki-client