$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/533245e3-99ba-45a8-822d-cbb648441cb2.roa File: 533245e3-99ba-45a8-822d-cbb648441cb2.roa (raw, json) Hash identifier: PMyWOy3qohP0V5b586ZCUkPPeHPBI6a8k9Jpl+UH+VM= Subject key identifier: 0A:F5:90:1F:78:C3:2C:42:AB:BE:FC:29:9D:59:8A:45:B0:56:F1:81 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 07E93EAEB032622CEF82E7FEA7BEA0E110D729D7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/533245e3-99ba-45a8-822d-cbb648441cb2.roa Signing time: Tue 22 Apr 2025 15:51:20 +0000 ROA not before: Tue 22 Apr 2025 15:51:20 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:4030::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e9:3e:ae:b0:32:62:2c:ef:82:e7:fe:a7:be:a0:e1:10:d7:29:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:51:20 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=a08e8ea6537a147b56e9adf811f13432b95aa00c313abc34afb9de7a2a2e6867, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:b9:b4:62:07:af:13:37:60:40:08:7e:5f: ab:26:0a:de:67:a4:6d:c7:ef:2b:8f:e2:2c:cd:cd: 21:06:d0:88:78:a4:4b:98:1b:71:6b:1f:f4:95:2b: ea:a3:03:fb:c5:62:73:11:7d:bc:00:75:45:08:7a: 31:d2:af:b9:06:6f:cb:13:7d:57:de:54:77:45:fe: 58:3f:47:0f:cc:ba:ae:ba:e2:2d:8e:51:e3:8a:fe: 3a:61:13:b9:29:1c:30:4d:bc:b7:d1:94:d5:d2:e9: d0:7a:54:2e:d1:d4:70:6e:39:c3:e8:e3:d1:33:f2: 34:19:9c:c6:7c:79:95:88:19:f1:8d:69:67:f5:74: c2:5e:87:4f:e0:4e:1c:3f:56:b5:83:bb:e2:94:f0: 08:f8:88:7c:cf:cc:1c:18:9d:a8:f4:f9:0b:cb:80: 69:26:af:94:13:13:40:e6:de:61:f9:a3:5f:04:13: 1b:2b:e8:c0:eb:d0:7c:51:04:a4:e6:2b:f6:d9:12: 4d:53:5d:3f:f5:c3:1a:5d:20:8a:54:cc:07:e1:30: 50:4e:b8:a9:0a:4f:d4:ea:8c:c2:4c:8c:12:03:e4: 11:0a:e4:6e:a0:41:b2:9e:44:94:70:62:a2:a2:84: ef:18:9c:f1:2e:db:96:b9:9d:90:2f:fb:be:6e:52: 9d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F5:90:1F:78:C3:2C:42:AB:BE:FC:29:9D:59:8A:45:B0:56:F1:81 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/533245e3-99ba-45a8-822d-cbb648441cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:4030::/48 Signature Algorithm: sha256WithRSAEncryption 6b:e5:64:74:d5:4f:62:1d:c0:dd:c6:ca:8b:56:39:c2:48:8e: a6:b9:26:18:6e:65:0a:5b:6b:93:e5:18:49:82:e5:91:b9:5f: 7b:19:a2:5e:c1:73:b2:e8:ac:e2:c8:da:a6:a7:d1:f3:61:f1: eb:0a:03:53:08:17:80:b6:e5:57:3d:b8:d2:52:2b:4c:54:87: 2a:7b:07:fd:db:df:f8:cc:64:41:3d:bb:22:41:b8:15:a5:bc: 69:37:55:c7:11:c5:cd:e3:8e:b4:04:66:a2:ef:0c:c9:5a:aa: 69:96:9e:a6:b3:8c:81:bd:a0:ae:44:42:3a:46:a3:38:53:f0: 87:71:13:06:eb:a5:5e:14:e5:b9:75:8b:15:43:c8:3c:f5:ab: 03:2a:e1:75:48:f5:d5:09:80:c1:87:d8:94:b9:c7:09:b5:e9: fd:b1:dc:31:8c:e6:84:2d:b1:49:82:6a:88:54:f9:6d:6b:dd: 31:74:ba:c1:c1:cc:a9:e3:9c:a7:22:39:f8:22:de:d7:11:89: c7:90:dd:83:65:8a:24:6d:0a:a6:26:b1:61:ae:49:b7:91:db: 50:ba:f7:83:1c:8a:03:af:e4:6c:a7:e0:84:24:86:3f:e8:74: ea:41:0b:7e:0c:02:db:bb:23:2c:86:03:89:7f:1f:17:09:9e: 82:1c:8b:45 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB+k+rrAyYizvguf+p76g4RDXKdcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTU1MTIwWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDhlOGVhNjUzN2ExNDdiNTZlOWFkZjgxMWYxMzQzMmI5 NWFhMDBjMzEzYWJjMzRhZmI5ZGU3YTJhMmU2ODY3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1urm0YgevEzdgQAh+X6smCt5npG3H7yuP4izNzSEG0Ih4 pEuYG3FrH/SVK+qjA/vFYnMRfbwAdUUIejHSr7kGb8sTfVfeVHdF/lg/Rw/Muq66 4i2OUeOK/jphE7kpHDBNvLfRlNXS6dB6VC7R1HBuOcPo49Ez8jQZnMZ8eZWIGfGN aWf1dMJeh0/gThw/VrWDu+KU8Aj4iHzPzBwYnaj0+QvLgGkmr5QTE0Dm3mH5o18E Exsr6MDr0HxRBKTmK/bZEk1TXT/1wxpdIIpUzAfhMFBOuKkKT9TqjMJMjBID5BEK 5G6gQbKeRJRwYqKihO8YnPEu25a5nZAv+75uUp3vAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCvWQH3jDLEKrvvwpnVmKRbBW8YEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzMzI0NWUzLTk5YmEtNDVhOC04MjJkLWNiYjY0ODQ0MWNiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AQDAwDQYJKoZIhvcNAQELBQADggEBAGvlZHTVT2IdwN3GyotWOcJI jqa5JhhuZQpba5PlGEmC5ZG5X3sZol7Bc7LorOLI2qan0fNh8esKA1MIF4C25Vc9 uNJSK0xUhyp7B/3b3/jMZEE9uyJBuBWlvGk3VccRxc3jjrQEZqLvDMlaqmmWnqaz jIG9oK5EQjpGozhT8IdxEwbrpV4U5bl1ixVDyDz1qwMq4XVI9dUJgMGH2JS5xwm1 6f2x3DGM5oQtsUmCaohU+W1r3TF0usHBzKnjnKciOfgi3tcRiceQ3YNliiRtCqYm sWGuSbeR21C694McigOv5Gyn4IQkhj/odOpBC34MAtu7IyyGA4l/HxcJnoIci0U= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:21 2025 by rpki-client