$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56e8ce17-d6d3-4ecb-a214-1840df465826.roa File: 56e8ce17-d6d3-4ecb-a214-1840df465826.roa (raw, json) Hash identifier: +IESn0a2X6JrbllDy2U7b7iyaUUGnHxiIAORcjJcMbk= Subject key identifier: BB:50:AA:77:47:85:9E:4B:2C:9F:53:FD:BF:94:1E:DF:98:68:3D:E7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F961AEE6D5102FEF745B3B22729ECE89FC689F2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56e8ce17-d6d3-4ecb-a214-1840df465826.roa Signing time: Mon 21 Apr 2025 18:02:03 +0000 ROA not before: Mon 21 Apr 2025 18:02:03 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8030::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:96:1a:ee:6d:51:02:fe:f7:45:b3:b2:27:29:ec:e8:9f:c6:89:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 18:02:03 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=7c2ca4f0b6b16c5e125ddf2d3baa97e021dd8df4d32bdcc92a4e5e90c3c2a3af, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:7b:5f:71:44:59:6f:0b:5e:9f:6b:67:22: 00:11:16:40:88:3a:82:db:ba:5a:05:5e:84:cc:9c: d7:a3:45:0f:17:47:10:97:33:5e:58:6f:4d:da:9c: b0:62:a4:72:fb:ae:c4:8d:7e:30:cf:4b:95:a0:10: f4:33:a0:f5:c4:c0:c9:10:28:d3:2d:4e:b4:e0:bf: 1c:90:cf:a2:0b:22:d0:b1:2e:e7:a4:03:bb:07:a2: ec:a9:53:d6:22:b4:66:37:14:6f:c2:ad:37:68:c1: 32:7b:74:07:4e:72:8b:72:3f:cb:47:41:f1:55:61: 8d:19:6a:ec:76:0b:5c:ec:27:44:6b:3f:b8:57:26: c4:aa:f2:f9:ba:08:57:0e:29:5d:65:5f:c8:94:1a: 18:06:d1:91:2a:dc:00:aa:7a:4d:c7:f7:8d:08:bc: 18:c6:17:13:54:3d:6b:8a:a8:b4:d1:6f:4d:d0:12: 6b:46:0c:6b:c9:12:91:46:61:8b:95:19:e6:34:03: fe:56:e9:19:5c:4b:94:5e:aa:9c:8b:4c:3c:e9:99: 87:4a:ea:cd:92:39:ba:36:fa:cf:e5:4f:2b:e6:56: 4c:a8:0c:6b:a7:87:f8:b0:4a:21:83:ad:3a:c7:2a: 22:1d:34:b2:6e:15:85:b4:d1:f1:ec:db:2b:50:84: 94:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:50:AA:77:47:85:9E:4B:2C:9F:53:FD:BF:94:1E:DF:98:68:3D:E7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56e8ce17-d6d3-4ecb-a214-1840df465826.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8030::/48 Signature Algorithm: sha256WithRSAEncryption 3f:92:b7:c3:e1:b5:7f:89:ab:95:18:68:16:ea:95:68:9e:0e: b3:cd:32:11:2a:56:b0:4f:19:48:c2:2e:68:35:23:83:1a:73: 4e:6b:39:6d:cd:66:14:1f:4a:a7:37:fd:0a:04:c4:fa:af:b6: f2:ae:76:61:53:98:48:c2:0a:b3:4f:6d:6a:54:4b:b3:5f:0c: 0c:f5:41:21:05:bd:5a:a0:f5:aa:a6:04:1e:f3:9f:25:53:50: 15:80:54:c8:3b:0c:61:8a:0f:7d:d4:7c:ed:38:3a:9f:4e:95: 71:04:91:ff:62:ed:00:18:54:73:47:d1:48:ec:82:38:8e:dd: 6c:ee:d5:04:39:ed:a8:75:52:32:6b:e5:ce:74:35:16:4e:e2: be:d3:f3:fb:4d:d4:55:ef:b2:1a:8a:8c:af:c8:3f:f3:95:f6: 69:25:c1:03:a2:f2:60:4b:7a:b9:bd:90:e8:9f:60:97:55:f7: 78:42:3c:31:ff:87:9e:68:f4:eb:88:75:95:3a:32:ed:09:93: f9:01:39:cf:3a:f7:a5:dd:64:01:18:fb:44:35:a9:be:8e:e1: c6:e3:4e:02:09:1b:95:c8:87:7d:24:55:dc:aa:bd:55:ed:aa: 0a:27:2b:a4:0b:fc:62:79:0d:15:c5:49:25:2d:cf:7f:33:c7: 25:91:da:56 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUH5Ya7m1RAv73RbOyJyns6J/GifIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTgwMjAzWhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzJjYTRmMGI2YjE2YzVlMTI1ZGRmMmQzYmFhOTdlMDIx ZGQ4ZGY0ZDMyYmRjYzkyYTRlNWU5MGMzYzJhM2FmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUYXtfcURZbwten2tnIgARFkCIOoLbuloFXoTMnNejRQ8X RxCXM15Yb03anLBipHL7rsSNfjDPS5WgEPQzoPXEwMkQKNMtTrTgvxyQz6ILItCx LuekA7sHouypU9YitGY3FG/CrTdowTJ7dAdOcotyP8tHQfFVYY0Zaux2C1zsJ0Rr P7hXJsSq8vm6CFcOKV1lX8iUGhgG0ZEq3ACqek3H940IvBjGFxNUPWuKqLTRb03Q EmtGDGvJEpFGYYuVGeY0A/5W6RlcS5ReqpyLTDzpmYdK6s2SObo2+s/lTyvmVkyo DGunh/iwSiGDrTrHKiIdNLJuFYW00fHs2ytQhJT3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUu1Cqd0eFnkssn1P9v5Qe35hoPecwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2ZThjZTE3LWQ2ZDMtNGVjYi1hMjE0LTE4NDBkZjQ2NTgyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gDAwDQYJKoZIhvcNAQELBQADggEBAD+St8PhtX+Jq5UYaBbqlWie DrPNMhEqVrBPGUjCLmg1I4Mac05rOW3NZhQfSqc3/QoExPqvtvKudmFTmEjCCrNP bWpUS7NfDAz1QSEFvVqg9aqmBB7znyVTUBWAVMg7DGGKD33UfO04Op9OlXEEkf9i 7QAYVHNH0UjsgjiO3Wzu1QQ57ah1UjJr5c50NRZO4r7T8/tN1FXvshqKjK/IP/OV 9mklwQOi8mBLerm9kOifYJdV93hCPDH/h55o9OuIdZU6Mu0Jk/kBOc8696XdZAEY +0Q1qb6O4cbjTgIJG5XIh30kVdyqvVXtqgonK6QL/GJ5DRXFSSUtz38zxyWR2lY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:15 2025 by rpki-client