$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69f5fc0a-604d-4737-91d0-fb70b7f8d47f.roa File: 69f5fc0a-604d-4737-91d0-fb70b7f8d47f.roa (raw, json) Hash identifier: FBrxtUn5UuxBhyFPfJhDr/DHPM7Las3Eq30g90fchbE= Subject key identifier: A1:96:13:48:62:FD:60:0A:D5:72:08:03:54:0B:8D:03:97:94:A3:E1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3AA24D268798ED1CEFCDE0FC40B91E6A84EB0710 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69f5fc0a-604d-4737-91d0-fb70b7f8d47f.roa Signing time: Tue 22 Apr 2025 17:11:52 +0000 ROA not before: Tue 22 Apr 2025 17:11:52 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f21:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a2:4d:26:87:98:ed:1c:ef:cd:e0:fc:40:b9:1e:6a:84:eb:07:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:11:52 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=00c29e7deeea69930a38457d7570884a12e8b11474ed8eaa56cd464f497d9680, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:92:c2:9b:9b:20:17:e2:ba:0d:05:05:2e:ad: 67:de:3f:e7:db:ab:89:ae:8e:a6:19:00:78:e2:c9: 2f:b4:85:bd:f8:42:85:ac:80:e2:82:e9:b6:a7:b1: d5:75:0f:b8:c6:37:af:ee:6b:5d:57:46:39:ef:31: 9e:39:d9:0f:60:16:df:b6:72:78:ab:96:04:46:4e: 8c:b7:9d:fa:8c:01:dc:3f:e5:62:bb:3b:43:a1:f9: 7f:99:10:47:2f:7f:b4:03:5d:1a:bd:f5:80:16:3b: d8:56:fb:f1:a4:2f:f4:53:ea:18:d7:79:59:d6:a2: cc:a6:42:63:23:5a:fa:4e:da:f8:b0:66:16:fe:a9: e1:0b:a4:eb:55:77:27:f0:2f:44:53:39:5c:f0:a9: 88:a6:42:cb:a5:a6:33:82:e8:95:1d:de:b8:1a:71: fc:ce:7d:47:bb:49:f4:04:50:b3:21:69:a2:28:fa: 6d:e5:b1:63:fd:0b:f7:ed:d0:16:9a:28:e6:9e:f6: aa:02:f5:c1:20:98:f4:54:df:44:83:8b:08:4f:de: ed:86:e1:be:ee:ac:15:0e:1e:39:c9:22:d8:ec:e2: 0e:67:ad:33:26:e4:aa:f2:b1:84:d3:dc:72:0f:17: 2b:b1:20:a3:07:0d:90:c4:f0:54:07:9c:16:02:31: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:96:13:48:62:FD:60:0A:D5:72:08:03:54:0B:8D:03:97:94:A3:E1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69f5fc0a-604d-4737-91d0-fb70b7f8d47f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f21:4000::/36 Signature Algorithm: sha256WithRSAEncryption 29:88:fe:54:28:bf:3d:12:49:12:6c:fe:7d:69:0f:5a:a0:7f: e9:da:72:df:f3:d9:6e:4f:67:61:ae:57:3e:39:c4:02:de:1c: ff:29:ba:cd:f1:bf:5f:ce:11:e6:ca:b8:10:42:ac:69:3c:c4: ce:09:86:2b:4a:78:2a:52:03:cd:ae:4e:ce:7a:16:9f:2a:ae: 4b:76:dd:06:11:c1:13:6d:1a:07:a4:7b:36:47:0b:3b:aa:bb: 47:64:35:b5:ad:9f:b1:67:28:0a:7e:0d:f6:9e:5b:29:19:f9: 55:b3:ac:81:f8:04:db:67:03:b1:64:a8:a8:42:48:df:bf:d6: fb:93:1c:d1:03:56:5c:56:1b:20:ec:96:1a:61:b2:ce:3b:a9: 00:98:f4:05:fa:13:ec:d9:e3:48:ab:b3:35:f1:25:f5:d7:5f: 59:62:c3:b9:7f:65:fa:fa:ef:16:1c:92:fa:38:49:84:b4:e6: 9b:d8:55:29:2d:0c:ec:bf:69:ea:bb:a3:d1:7d:7f:c5:ab:f0: 06:58:23:8b:b1:5f:d0:d1:08:97:fc:54:84:a1:89:ac:ff:37: e1:01:80:8c:2f:22:e7:95:8a:9a:93:c7:23:ec:2e:c2:29:e8: d0:2f:33:c0:23:43:ce:93:0b:93:26:54:1c:d4:65:93:61:5a: a3:5f:7e:f6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOqJNJoeY7RzvzeD8QLkeaoTrBxAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcxMTUyWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMGMyOWU3ZGVlZWE2OTkzMGEzODQ1N2Q3NTcwODg0YTEy ZThiMTE0NzRlZDhlYWE1NmNkNDY0ZjQ5N2Q5NjgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSksKbmyAX4roNBQUurWfeP+fbq4mujqYZAHjiyS+0hb34 QoWsgOKC6bansdV1D7jGN6/ua11XRjnvMZ452Q9gFt+2cnirlgRGToy3nfqMAdw/ 5WK7O0Oh+X+ZEEcvf7QDXRq99YAWO9hW+/GkL/RT6hjXeVnWosymQmMjWvpO2viw Zhb+qeELpOtVdyfwL0RTOVzwqYimQsulpjOC6JUd3rgacfzOfUe7SfQEULMhaaIo +m3lsWP9C/ft0BaaKOae9qoC9cEgmPRU30SDiwhP3u2G4b7urBUOHjnJItjs4g5n rTMm5KrysYTT3HIPFyuxIKMHDZDE8FQHnBYCMUlxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUoZYTSGL9YArVcggDVAuNA5eUo+EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY5ZjVmYzBhLTYwNGQtNDczNy05MWQwLWZiNzBiN2Y4ZDQ3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8hQDANBgkqhkiG9w0BAQsFAAOCAQEAKYj+VCi/PRJJEmz+fWkPWqB/ 6dpy3/PZbk9nYa5XPjnEAt4c/ym6zfG/X84R5sq4EEKsaTzEzgmGK0p4KlIDza5O znoWnyquS3bdBhHBE20aB6R7NkcLO6q7R2Q1ta2fsWcoCn4N9p5bKRn5VbOsgfgE 22cDsWSoqEJI37/W+5Mc0QNWXFYbIOyWGmGyzjupAJj0BfoT7NnjSKuzNfEl9ddf WWLDuX9l+vrvFhyS+jhJhLTmm9hVKS0M7L9p6ruj0X1/xavwBlgji7Ff0NEIl/xU hKGJrP834QGAjC8i55WKmpPHI+wuwino0C8zwCNDzpMLkyZUHNRlk2Fao19+9g== -----END CERTIFICATE-----Generated at Sat Apr 26 13:34:00 2025 by rpki-client