$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/586d6dac-fcf7-4c1d-9ea8-43c6a3e9de02.roa File: 586d6dac-fcf7-4c1d-9ea8-43c6a3e9de02.roa (raw, json) Hash identifier: w2gT7xJDQIfnevYsYLen2TizYX2D1y677pNpYzMnmAo= Subject key identifier: B2:8C:48:A5:B9:89:D4:B0:AB:67:4B:BC:2A:DB:FB:0B:3B:D8:4A:AE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 699C9534484C8A11A6A9BE03C0DD4957A974AE72 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/586d6dac-fcf7-4c1d-9ea8-43c6a3e9de02.roa Signing time: Tue 22 Apr 2025 00:32:21 +0000 ROA not before: Tue 22 Apr 2025 00:32:21 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9c:95:34:48:4c:8a:11:a6:a9:be:03:c0:dd:49:57:a9:74:ae:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:32:21 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=8cb15cc61725a7ffeb172dbe465b0aa728fdf5c078140639fd7b5e36d04f42d3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:d0:c9:b8:03:83:52:a4:63:ff:fa:9a:c9: a4:da:90:55:19:3d:99:6d:7a:1f:fb:83:f4:7b:14: 92:2e:99:05:82:af:9b:10:b6:d3:39:f1:eb:8b:3d: 6f:c5:f5:37:88:23:03:8c:ea:68:f9:93:fb:fe:5d: 8e:b1:cf:cf:6e:6f:67:b5:04:29:18:62:02:dd:45: 1b:46:31:0d:e3:c0:67:18:e3:18:43:d2:f2:09:7a: 5e:86:2a:ed:e1:76:fe:c2:4e:d4:06:44:c6:a6:b2: 47:10:2e:5a:4a:dd:4e:e6:5d:df:1c:ce:d5:f6:ae: d0:a9:8e:ed:d0:3c:87:a9:7a:04:ea:a1:2b:bd:ec: 84:60:75:37:ca:e9:ed:51:f9:0c:88:74:5b:c2:92: 48:51:49:2a:b4:e8:ab:3d:d7:4e:66:86:92:4e:15: c2:33:21:a7:9f:cb:6e:58:17:c1:4e:32:6e:9f:0b: ee:66:7d:e5:65:d7:e1:13:38:46:0c:0f:41:b7:2d: 0b:0c:67:18:35:cb:d0:54:76:4f:2e:2c:a3:0f:06: 92:25:08:19:52:2b:bc:75:bb:90:67:53:65:c9:64: 3b:88:84:33:0c:e2:4c:ed:91:a8:08:ed:ec:ea:4e: 6a:22:82:79:6e:78:9e:af:80:9a:f0:15:7b:5d:9c: 98:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8C:48:A5:B9:89:D4:B0:AB:67:4B:BC:2A:DB:FB:0B:3B:D8:4A:AE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/586d6dac-fcf7-4c1d-9ea8-43c6a3e9de02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:8000::/39 Signature Algorithm: sha256WithRSAEncryption 8d:59:1b:cd:ca:b8:a8:58:3c:dd:f4:58:02:ca:d0:8e:f0:48: 59:cf:4e:cc:1c:3c:c7:1c:64:16:3e:fe:0a:a1:1d:3e:7e:78: 49:fd:96:d1:78:f5:1d:78:0b:d7:79:f8:e9:e2:09:ea:37:29: d8:86:9f:6c:c6:a9:16:b1:fa:d9:67:c8:20:67:23:db:2f:bb: 49:a3:40:33:21:1e:a6:58:a5:a0:f2:4b:01:e5:31:fd:92:19: 22:6d:00:88:58:bb:b5:60:81:8a:b9:d4:d2:b8:3a:3a:09:70: 8a:ee:01:61:fe:48:77:c2:8e:7d:32:0d:41:10:eb:47:c0:08: 27:9e:44:bc:a7:d3:c5:3d:f7:73:2e:af:20:ea:df:e7:cb:fd: d8:65:41:ab:3b:fa:ae:c9:37:53:63:36:c1:ce:75:da:db:a2: 99:35:98:70:4e:27:9c:f5:1a:1e:73:4f:b4:d9:36:a1:d0:2e: d7:2e:a0:a1:28:f0:4e:d6:4c:51:b0:66:a4:26:86:8f:a7:cf: 7e:9e:d8:72:fc:dc:c4:f3:da:45:cf:b8:31:58:9d:bc:c8:2b: ad:d5:43:78:bf:ef:e4:f1:0e:da:c5:35:1e:4d:31:16:3f:51: 08:ed:8e:87:29:dd:1d:06:51:84:f0:db:30:7d:48:f1:77:1f: 9f:60:bf:3a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaZyVNEhMihGmqb4DwN1JV6l0rnIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAzMjIxWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2IxNWNjNjE3MjVhN2ZmZWIxNzJkYmU0NjViMGFhNzI4 ZmRmNWMwNzgxNDA2MzlmZDdiNWUzNmQwNGY0MmQzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqOtDJuAODUqRj//qayaTakFUZPZlteh/7g/R7FJIumQWC r5sQttM58euLPW/F9TeIIwOM6mj5k/v+XY6xz89ub2e1BCkYYgLdRRtGMQ3jwGcY 4xhD0vIJel6GKu3hdv7CTtQGRMamskcQLlpK3U7mXd8cztX2rtCpju3QPIepegTq oSu97IRgdTfK6e1R+QyIdFvCkkhRSSq06Ks9105mhpJOFcIzIaefy25YF8FOMm6f C+5mfeVl1+ETOEYMD0G3LQsMZxg1y9BUdk8uLKMPBpIlCBlSK7x1u5BnU2XJZDuI hDMM4kztkagI7ezqTmoignlueJ6vgJrwFXtdnJgjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUsoxIpbmJ1LCrZ0u8Ktv7CzvYSq4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU4NmQ2ZGFjLWZjZjctNGMxZC05ZWE4LTQzYzZhM2U5ZGUwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB9hgDANBgkqhkiG9w0BAQsFAAOCAQEAjVkbzcq4qFg83fRYAsrQjvBI Wc9OzBw8xxxkFj7+CqEdPn54Sf2W0Xj1HXgL13n46eIJ6jcp2IafbMapFrH62WfI IGcj2y+7SaNAMyEepliloPJLAeUx/ZIZIm0AiFi7tWCBirnU0rg6Oglwiu4BYf5I d8KOfTINQRDrR8AIJ55EvKfTxT33cy6vIOrf58v92GVBqzv6rsk3U2M2wc512tui mTWYcE4nnPUaHnNPtNk2odAu1y6goSjwTtZMUbBmpCaGj6fPfp7YcvzcxPPaRc+4 MVidvMgrrdVDeL/v5PEO2sU1Hk0xFj9RCO2OhyndHQZRhPDbMH1I8Xcfn2C/Og== -----END CERTIFICATE-----Generated at Sat Apr 26 16:11:40 2025 by rpki-client