$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa File: 6c921a1b-c5be-4c53-9918-5f35190b51a3.roa (raw, json) Hash identifier: ggNXQIPshLBFAybx9etbP0reJVNwHeyovFgQDf/pDhQ= Subject key identifier: 31:F3:7B:3C:01:F2:15:EE:49:1A:31:1A:AE:3D:9E:B4:02:65:54:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7AB8CC1815486DA18F34F800F86EF562CB138DB2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa Signing time: Tue 22 Apr 2025 15:32:42 +0000 ROA not before: Tue 22 Apr 2025 15:32:42 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b8:cc:18:15:48:6d:a1:8f:34:f8:00:f8:6e:f5:62:cb:13:8d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:32:42 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=80e43cb15bdeb01407b2053637e32431c95a3ef963526a8a01ca714da31c6d42, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c6:1d:e5:47:bc:3f:3c:86:d2:e5:69:d0:91: 96:ec:03:81:17:1b:e9:6c:94:b3:93:fa:6a:ce:36: 23:37:98:1b:c5:0b:99:f5:4a:7e:65:fd:84:c5:e4: 39:38:8a:c2:64:53:f6:25:f2:3e:3d:02:eb:e1:40: 1c:4f:e1:01:2f:40:82:62:57:74:6b:60:6f:73:21: 88:ec:ab:81:98:f7:67:4b:61:d5:5e:9e:42:de:35: e6:ad:dc:7b:33:f4:b5:01:59:46:85:47:eb:d5:36: 67:28:e3:21:32:67:5a:62:1e:da:8b:b7:86:61:45: ac:f5:2a:00:b0:b7:b5:c3:7b:36:cd:a2:bf:1a:81: cb:a9:10:c3:44:49:82:b7:f2:22:71:a9:aa:b3:cc: 1f:b4:7c:3b:5a:6c:c5:cf:fc:1d:90:b3:54:76:8b: b8:a2:51:ca:3b:0d:75:24:aa:7a:aa:c1:aa:57:74: ea:43:7f:e2:76:c7:aa:ed:11:37:6c:9a:fe:a6:29: 50:91:db:3e:a4:e3:06:c9:e2:f3:e8:c8:0a:a5:8d: 07:ee:17:e0:14:38:a9:49:db:94:4a:1f:da:91:29: 47:dd:ae:7d:6d:0e:66:e4:d2:a9:3d:ab:dc:ec:ec: 61:cf:47:94:ef:cd:a5:11:28:96:7d:32:ef:39:07: 9a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F3:7B:3C:01:F2:15:EE:49:1A:31:1A:AE:3D:9E:B4:02:65:54:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c921a1b-c5be-4c53-9918-5f35190b51a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:3400::/40 Signature Algorithm: sha256WithRSAEncryption 1c:3f:c9:7f:dd:5a:f1:63:ee:db:19:d1:f3:b1:0f:fd:79:e3: 1a:bf:0b:ce:c7:7a:18:22:ec:1c:4c:73:77:43:b5:fb:fe:13: db:c2:be:2d:f1:27:6e:3e:2d:d3:ce:d9:ae:86:b9:b1:46:e6: 2a:ae:84:ec:87:70:bc:93:ac:e6:5a:1e:24:d1:4c:2d:0e:00: 31:b3:63:09:1b:07:82:3f:d9:07:7d:ea:c4:24:23:72:64:aa: 36:db:83:53:8b:e3:ae:bb:c2:57:d9:64:a1:2d:b0:68:70:2b: 75:90:fa:eb:4e:09:d7:77:33:35:b6:be:d1:18:99:a4:15:1d: 7b:8b:a9:34:6a:21:d9:fa:39:fd:80:7f:a3:7b:28:e0:cb:f9: e7:2b:3b:96:65:4b:61:bb:5d:39:1f:3a:ad:41:ce:ec:6b:43: 9e:37:58:0a:b8:73:2b:22:cb:21:43:63:93:10:6b:58:eb:ae: ff:48:c3:b9:3b:9c:fa:02:41:98:1c:a0:2e:df:4b:15:51:d2: 40:50:ee:26:c3:db:79:06:83:fe:3d:32:b3:8c:9d:09:5d:bd: 5d:60:62:bc:75:f5:f4:9c:b7:ef:dc:a2:36:a3:0e:2a:81:c5: 18:bb:37:06:61:76:b2:58:9a:43:b1:5e:b2:bc:c3:46:70:51: ba:02:3c:6c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUerjMGBVIbaGPNPgA+G71YssTjbIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUzMjQyWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MGU0M2NiMTViZGViMDE0MDdiMjA1MzYzN2UzMjQzMWM5 NWEzZWY5NjM1MjZhOGEwMWNhNzE0ZGEzMWM2ZDQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsxh3lR7w/PIbS5WnQkZbsA4EXG+lslLOT+mrONiM3mBvF C5n1Sn5l/YTF5Dk4isJkU/Yl8j49AuvhQBxP4QEvQIJiV3RrYG9zIYjsq4GY92dL YdVenkLeNeat3Hsz9LUBWUaFR+vVNmco4yEyZ1piHtqLt4ZhRaz1KgCwt7XDezbN or8agcupEMNESYK38iJxqaqzzB+0fDtabMXP/B2Qs1R2i7iiUco7DXUkqnqqwapX dOpDf+J2x6rtETdsmv6mKVCR2z6k4wbJ4vPoyAqljQfuF+AUOKlJ25RKH9qRKUfd rn1tDmbk0qk9q9zs7GHPR5TvzaURKJZ9Mu85B5olAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMfN7PAHyFe5JGjEarj2etAJlVPUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjOTIxYTFiLWM1YmUtNGM1My05OTE4LTVmMzUxOTBiNTFhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8ANDANBgkqhkiG9w0BAQsFAAOCAQEAHD/Jf91a8WPu2xnR87EP/Xnj Gr8Lzsd6GCLsHExzd0O1+/4T28K+LfEnbj4t087Zroa5sUbmKq6E7IdwvJOs5loe JNFMLQ4AMbNjCRsHgj/ZB33qxCQjcmSqNtuDU4vjrrvCV9lkoS2waHArdZD6604J 13czNba+0RiZpBUde4upNGoh2fo5/YB/o3so4Mv55ys7lmVLYbtdOR86rUHO7GtD njdYCrhzKyLLIUNjkxBrWOuu/0jDuTuc+gJBmBygLt9LFVHSQFDuJsPbeQaD/j0y s4ydCV29XWBivHX19Jy379yiNqMOKoHFGLs3BmF2sliaQ7FesrzDRnBRugI8bA== -----END CERTIFICATE-----Generated at Sat Apr 26 19:48:48 2025 by rpki-client