$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d971632-9588-49d0-aee2-aa252c86a028.roa File: 5d971632-9588-49d0-aee2-aa252c86a028.roa (raw, json) Hash identifier: ugqXGll41lzucfpT4KZyfPMTSybEjMdpfZ6SolO9mvc= Subject key identifier: 17:28:EA:E4:FE:B7:5C:5B:65:8D:B3:41:98:BE:E1:98:43:A0:91:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43D73A15B2BBD2288A23975FC8926F5AC81152B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d971632-9588-49d0-aee2-aa252c86a028.roa Signing time: Mon 21 Apr 2025 18:11:27 +0000 ROA not before: Mon 21 Apr 2025 18:11:27 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:8010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d7:3a:15:b2:bb:d2:28:8a:23:97:5f:c8:92:6f:5a:c8:11:52:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 18:11:27 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=09d518ab8ca4b1398f2f2951159082652668aea945da6e30d4e41c3509f74571, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:88:c6:1b:9d:83:18:7b:67:97:9e:5b:06:a1: 8d:04:c5:6d:9e:26:da:82:26:a5:68:2b:c4:be:41: cb:4b:ea:02:b5:8c:44:df:a2:3e:42:6b:7f:99:7a: 64:6d:c4:d3:f2:54:5e:12:23:bb:68:a5:77:ec:be: 94:53:d9:62:30:cb:33:40:26:86:80:fe:08:9c:c8: c9:04:d0:6e:2c:66:71:03:f5:6d:2e:cc:b5:bd:ff: 29:04:18:51:28:59:98:1a:23:c4:bc:e1:f3:48:3b: b8:8e:9c:82:18:3b:3c:d3:d4:03:37:e7:16:d5:30: 1e:54:04:e0:45:13:49:7e:ad:20:0b:31:59:03:1e: 70:ad:91:46:e0:38:9c:38:73:15:5f:ea:98:7e:fd: 45:87:2f:8b:4b:57:a0:a0:6e:30:63:67:43:b0:73: ee:5b:04:50:f1:e2:42:dc:d1:3f:2f:d0:73:7b:ed: 4a:ee:4f:09:f1:38:96:f6:92:d7:2b:09:f7:68:e8: 68:ff:73:1e:19:c8:41:52:a6:87:b3:38:d3:0c:00: 82:74:4c:20:59:02:3d:a7:70:85:a7:8f:15:6d:73: a3:07:e8:9f:c8:92:c1:63:65:0e:70:cc:a8:52:f1: 5d:0e:a4:fe:49:8b:41:46:49:0c:d6:63:b5:b3:45: cc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:28:EA:E4:FE:B7:5C:5B:65:8D:B3:41:98:BE:E1:98:43:A0:91:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d971632-9588-49d0-aee2-aa252c86a028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8010::/48 Signature Algorithm: sha256WithRSAEncryption 67:d4:8d:ed:c4:50:16:fc:85:de:a0:e3:95:32:73:15:e0:d7: 34:a4:52:b0:cb:b1:7e:70:a4:c5:dc:16:2e:c9:3a:76:cc:c5: d7:6a:d7:52:1e:bd:c2:61:26:91:e9:db:d0:ed:93:aa:76:0c: 7f:d8:f7:8c:49:08:20:17:87:fa:ce:c2:20:7b:21:d2:b4:10: 9f:b9:93:b6:a7:c8:4c:ce:e4:06:54:e6:9f:91:7c:7c:23:e7: 35:04:19:f5:ab:27:14:6b:55:a5:31:dc:66:c8:f0:9c:3b:b8: 3c:4d:d7:0b:89:9a:48:7c:67:50:19:36:42:19:a7:a4:2b:51: 1a:ae:1f:2f:d1:0c:12:f5:4d:83:28:f1:00:79:03:3c:e2:6a: 09:2e:b2:22:77:4f:ec:31:b3:3b:69:b6:03:cd:8b:f7:86:d4: 04:e1:7f:42:f5:cd:4a:1c:d6:3f:3f:f2:a5:0f:68:f1:2d:0e: a2:dc:8d:99:72:19:d4:a6:da:05:43:37:54:f9:0f:d0:fe:77: 57:18:7e:0d:e7:da:77:a6:53:22:3c:6d:03:8e:84:76:32:eb: 21:68:75:e4:af:0d:ce:39:fa:3c:2f:58:8f:cf:1b:94:d5:15: 30:76:4f:dd:5a:ed:ca:d5:87:e1:8b:a3:dc:02:cf:b0:6a:44: ec:80:f9:02 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ9c6FbK70iiKI5dfyJJvWsgRUrIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTgxMTI3WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOWQ1MThhYjhjYTRiMTM5OGYyZjI5NTExNTkwODI2NTI2 NjhhZWE5NDVkYTZlMzBkNGU0MWMzNTA5Zjc0NTcxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZiMYbnYMYe2eXnlsGoY0ExW2eJtqCJqVoK8S+QctL6gK1 jETfoj5Ca3+ZemRtxNPyVF4SI7topXfsvpRT2WIwyzNAJoaA/gicyMkE0G4sZnED 9W0uzLW9/ykEGFEoWZgaI8S84fNIO7iOnIIYOzzT1AM35xbVMB5UBOBFE0l+rSAL MVkDHnCtkUbgOJw4cxVf6ph+/UWHL4tLV6CgbjBjZ0Owc+5bBFDx4kLc0T8v0HN7 7UruTwnxOJb2ktcrCfdo6Gj/cx4ZyEFSpoezONMMAIJ0TCBZAj2ncIWnjxVtc6MH 6J/IksFjZQ5wzKhS8V0OpP5Ji0FGSQzWY7WzRcwjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFyjq5P63XFtljbNBmL7hmEOgkYUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkOTcxNjMyLTk1ODgtNDlkMC1hZWUyLWFhMjUyYzg2YTAyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgBAwDQYJKoZIhvcNAQELBQADggEBAGfUje3EUBb8hd6g45UycxXg 1zSkUrDLsX5wpMXcFi7JOnbMxddq11IevcJhJpHp29Dtk6p2DH/Y94xJCCAXh/rO wiB7IdK0EJ+5k7anyEzO5AZU5p+RfHwj5zUEGfWrJxRrVaUx3GbI8Jw7uDxN1wuJ mkh8Z1AZNkIZp6QrURquHy/RDBL1TYMo8QB5AzziagkusiJ3T+wxsztptgPNi/eG 1AThf0L1zUoc1j8/8qUPaPEtDqLcjZlyGdSm2gVDN1T5D9D+d1cYfg3n2nemUyI8 bQOOhHYy6yFodeSvDc45+jwvWI/PG5TVFTB2T91a7crVh+GLo9wCz7BqROyA+QI= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:41 2025 by rpki-client