$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627cfcbd-dea0-4a66-8797-dc40d8b87244.roa File: 627cfcbd-dea0-4a66-8797-dc40d8b87244.roa (raw, json) Hash identifier: ovFVsjKAtl9e2DWFP7kLEWr0dLH+96ODbEsRJxCtuxA= Subject key identifier: DA:23:C7:2A:15:BA:56:FC:EF:F7:48:89:75:42:9A:59:89:3D:A1:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 068B68C4EA92BCA343CCA24EBEAEDA1F2883C400 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627cfcbd-dea0-4a66-8797-dc40d8b87244.roa Signing time: Mon 21 Apr 2025 18:20:12 +0000 ROA not before: Mon 21 Apr 2025 18:20:12 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8b:68:c4:ea:92:bc:a3:43:cc:a2:4e:be:ae:da:1f:28:83:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 18:20:12 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=df67f7db9fafad4b1efed0abf85b4f39d9cb5b7b2386f00dcdd458a345762d7e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:32:7b:c7:7c:10:23:aa:16:0d:cd:2b:32:4a: 68:31:81:d9:f0:9b:11:ec:de:d2:88:20:1d:c4:8a: 4e:c1:da:f0:0b:23:68:1b:e6:42:70:4d:4c:f8:40: 48:d7:36:a2:13:36:07:c5:e6:99:fe:77:3b:9f:95: 90:e9:d9:81:fd:14:1b:9c:7e:ed:07:50:53:8c:4e: 9d:da:fd:7e:e9:b1:6b:60:a2:0a:6c:68:88:35:6e: 9a:39:f3:33:26:14:e9:58:05:d2:66:bd:d2:9f:e3: ce:47:27:da:8d:e5:75:91:dd:b3:31:8f:32:4a:d9: 19:7d:21:bd:f0:1a:7a:3b:08:be:f1:f0:00:a8:48: 86:28:af:c5:0b:33:a2:19:f9:71:2b:89:df:8e:3d: d3:21:42:11:4e:c4:e4:eb:75:47:e7:b1:dc:d2:10: 3f:12:2e:ad:ce:18:eb:11:4a:3c:b2:f1:d3:c0:d1: 19:43:17:25:43:21:c2:c7:3a:53:9f:1a:05:e1:1a: e0:eb:82:0c:1e:b7:33:13:eb:b9:e0:73:0c:9a:2f: f4:fb:07:39:91:84:02:2e:18:43:fe:f6:7a:f3:bf: 53:44:43:d0:5f:2f:e7:f6:35:fa:24:45:dd:88:2f: 6b:26:9f:7a:86:fb:7d:eb:a5:a5:a8:01:7b:0a:dd: ce:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:23:C7:2A:15:BA:56:FC:EF:F7:48:89:75:42:9A:59:89:3D:A1:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/627cfcbd-dea0-4a66-8797-dc40d8b87244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:8040::/48 Signature Algorithm: sha256WithRSAEncryption 1d:ba:89:bf:f0:18:c8:c1:f0:44:39:89:7a:49:f9:0d:f9:ff: 01:ef:12:d6:8c:2f:cd:03:c3:99:cc:9f:bc:79:60:cb:71:02: 1f:03:3f:cb:ee:57:a2:47:27:58:93:c5:db:ee:04:6a:17:da: c7:87:74:98:06:bd:bc:1d:6b:69:cd:d9:ed:07:76:38:19:b3: 4b:d8:53:e5:19:68:85:67:4b:55:d9:fd:71:86:dc:5e:ca:c8: 04:f6:b2:c3:27:ea:e5:d7:e3:c1:34:96:b1:9d:5a:b4:a8:f0: 89:99:46:8b:c0:05:f4:de:c6:f9:0b:d8:d1:b0:41:4f:a6:f4: b5:6f:1b:8c:cd:61:0e:8b:4e:56:1c:97:0e:8f:bf:b0:d9:41: f4:0a:56:82:d4:c5:c3:72:73:f8:00:d5:5e:e0:d4:cc:cc:2c: f7:5d:53:79:da:78:02:94:b7:8f:c3:80:22:f7:70:ac:d8:08: 61:c4:40:33:cd:42:7b:a8:cb:a8:93:4c:03:70:95:3d:6d:6c: 7d:28:30:d0:15:2d:ee:e2:f2:80:1b:cc:01:2f:3d:3c:44:9e: 8a:b4:5a:d7:88:03:95:e1:3c:06:45:15:1e:85:af:97:80:19: a9:96:e1:5e:1f:5a:04:c9:d2:31:18:2b:e1:69:4e:fd:cc:de: de:46:e6:fd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBotoxOqSvKNDzKJOvq7aHyiDxAAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTgyMDEyWhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjY3ZjdkYjlmYWZhZDRiMWVmZWQwYWJmODViNGYzOWQ5 Y2I1YjdiMjM4NmYwMGRjZGQ0NThhMzQ1NzYyZDdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUMnvHfBAjqhYNzSsySmgxgdnwmxHs3tKIIB3Eik7B2vAL I2gb5kJwTUz4QEjXNqITNgfF5pn+dzuflZDp2YH9FBucfu0HUFOMTp3a/X7psWtg ogpsaIg1bpo58zMmFOlYBdJmvdKf485HJ9qN5XWR3bMxjzJK2Rl9Ib3wGno7CL7x 8ACoSIYor8ULM6IZ+XErid+OPdMhQhFOxOTrdUfnsdzSED8SLq3OGOsRSjyy8dPA 0RlDFyVDIcLHOlOfGgXhGuDrggwetzMT67ngcwyaL/T7BzmRhAIuGEP+9nrzv1NE Q9BfL+f2NfokRd2IL2smn3qG+33rpaWoAXsK3c7fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2iPHKhW6Vvzv90iJdUKaWYk9oQEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYyN2NmY2JkLWRlYTAtNGE2Ni04Nzk3LWRjNDBkOGI4NzI0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84gEAwDQYJKoZIhvcNAQELBQADggEBAB26ib/wGMjB8EQ5iXpJ+Q35 /wHvEtaML80Dw5nMn7x5YMtxAh8DP8vuV6JHJ1iTxdvuBGoX2seHdJgGvbwda2nN 2e0HdjgZs0vYU+UZaIVnS1XZ/XGG3F7KyAT2ssMn6uXX48E0lrGdWrSo8ImZRovA BfTexvkL2NGwQU+m9LVvG4zNYQ6LTlYclw6Pv7DZQfQKVoLUxcNyc/gA1V7g1MzM LPddU3naeAKUt4/DgCL3cKzYCGHEQDPNQnuoy6iTTANwlT1tbH0oMNAVLe7i8oAb zAEvPTxEnoq0WteIA5XhPAZFFR6Fr5eAGamW4V4fWgTJ0jEYK+FpTv3M3t5G5v0= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:44 2025 by rpki-client