$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/735550ff-5ef4-4eb8-9cbe-3613c454e535.roa File: 735550ff-5ef4-4eb8-9cbe-3613c454e535.roa (raw, json) Hash identifier: OFmwCjk1BfAwhbLY20Q0ZvHxJSqPeZJqZ4K56Il1NBU= Subject key identifier: 70:DB:AA:CA:9F:B2:AC:9C:1B:33:2E:6B:86:CE:65:AD:0C:4A:B1:01 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 532DF3DC00415AE286D60E40221C6FF9379B6EE0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/735550ff-5ef4-4eb8-9cbe-3613c454e535.roa Signing time: Tue 22 Apr 2025 15:01:52 +0000 ROA not before: Tue 22 Apr 2025 15:01:52 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f69:80a0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2d:f3:dc:00:41:5a:e2:86:d6:0e:40:22:1c:6f:f9:37:9b:6e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:01:52 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=4a94b30b6685fa2aee2580bbb1e24adca1ec71888d45b794bf2264c37a5aeb15, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:ef:60:98:0c:da:96:f8:d0:48:87:db:bd: d8:32:9d:4a:52:48:a1:46:16:7c:24:7c:b9:56:a7: 4c:d3:d6:32:e3:56:4d:5e:ad:ee:80:32:9d:80:90: f9:1d:42:ad:c3:97:a1:f8:71:ea:eb:4e:ee:8a:67: f6:4a:39:d9:66:d0:8d:ab:80:eb:23:3c:10:9f:6b: f3:fa:79:58:ba:0e:87:ad:42:ad:8c:8e:0d:d1:73: 4e:b2:e6:7e:61:aa:24:ed:69:06:95:65:48:a7:68: 96:0f:d5:fb:72:ee:d3:6f:a9:8e:ee:d7:4f:ae:e2: 77:53:ed:a7:0f:ec:c4:a4:32:94:60:71:18:b5:97: 73:48:d6:da:82:96:02:87:cb:27:f2:d1:b9:99:ad: 01:d6:6a:13:62:53:fb:5e:4f:3b:74:9c:23:22:ce: f1:bc:3f:a9:70:89:c4:c8:e3:b9:a2:59:c7:04:6b: 0a:70:4c:fd:a8:08:fa:69:d1:da:1f:1b:05:1f:56: ae:27:46:de:02:42:38:0d:f0:d3:f2:ce:c7:3a:58: 86:0f:4a:8b:af:dd:83:d8:68:e7:bb:98:d4:af:05: a2:24:fe:8b:16:cc:13:63:e3:81:f1:10:fc:54:31: 11:3d:c1:2e:3b:b3:46:e7:3f:81:8a:ba:b6:7b:87: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DB:AA:CA:9F:B2:AC:9C:1B:33:2E:6B:86:CE:65:AD:0C:4A:B1:01 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/735550ff-5ef4-4eb8-9cbe-3613c454e535.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:80a0::/46 Signature Algorithm: sha256WithRSAEncryption 49:e7:46:e1:30:be:54:06:80:4b:95:19:88:36:d7:c6:f5:6a: 1d:63:59:09:c8:63:47:51:db:8e:05:53:8c:75:b6:81:0b:5f: e6:04:42:56:34:cc:5c:da:9d:5e:75:a3:86:73:ff:26:65:ed: e9:77:11:2e:18:4d:63:1b:a5:47:02:63:2c:3e:95:7d:7b:d3: cf:da:38:8a:32:e4:fa:17:ad:84:a5:41:39:9b:10:2d:6b:ff: e4:79:a7:19:54:bb:94:78:69:11:04:db:88:f0:e7:e0:1a:94: 50:81:c0:08:b0:e9:cf:c4:91:07:01:af:46:87:3b:63:8b:ea: fd:d1:c5:08:87:5c:4d:85:db:e6:b7:4e:75:4a:64:07:3d:bb: 38:79:6f:5d:94:0d:31:1e:bc:16:fa:e2:24:ea:cf:e4:9c:c4: 4e:3f:10:fb:2e:e9:8a:39:4c:d8:0b:ca:4b:6b:e6:c3:fc:a6: fe:4f:af:a7:f4:49:30:d0:5e:04:31:6f:8e:fc:53:3b:5c:4b: 55:e8:7d:87:5c:85:3b:32:c1:b6:5d:0c:40:4e:f3:4a:a6:d0: f1:3d:0e:14:ed:60:2e:4f:01:27:13:4e:b5:0c:46:57:b0:f5: 1e:da:17:79:1f:f0:ed:0d:41:98:9b:a8:2a:42:59:5e:81:7b: 2c:61:32:fc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUy3z3ABBWuKG1g5AIhxv+TebbuAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUwMTUyWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTk0YjMwYjY2ODVmYTJhZWUyNTgwYmJiMWUyNGFkY2Ex ZWM3MTg4OGQ0NWI3OTRiZjIyNjRjMzdhNWFlYjE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl8+9gmAzalvjQSIfbvdgynUpSSKFGFnwkfLlWp0zT1jLj Vk1ere6AMp2AkPkdQq3Dl6H4cerrTu6KZ/ZKOdlm0I2rgOsjPBCfa/P6eVi6Doet Qq2Mjg3Rc06y5n5hqiTtaQaVZUinaJYP1fty7tNvqY7u10+u4ndT7acP7MSkMpRg cRi1l3NI1tqClgKHyyfy0bmZrQHWahNiU/teTzt0nCMizvG8P6lwicTI47miWccE awpwTP2oCPpp0dofGwUfVq4nRt4CQjgN8NPyzsc6WIYPSouv3YPYaOe7mNSvBaIk /osWzBNj44HxEPxUMRE9wS47s0bnP4GKurZ7h+/xAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcNuqyp+yrJwbMy5rhs5lrQxKsQEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzczNTU1MGZmLTVlZjQtNGViOC05Y2JlLTM2MTNjNDU0ZTUzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pgKAwDQYJKoZIhvcNAQELBQADggEBAEnnRuEwvlQGgEuVGYg218b1 ah1jWQnIY0dR244FU4x1toELX+YEQlY0zFzanV51o4Zz/yZl7el3ES4YTWMbpUcC Yyw+lX1708/aOIoy5PoXrYSlQTmbEC1r/+R5pxlUu5R4aREE24jw5+AalFCBwAiw 6c/EkQcBr0aHO2OL6v3RxQiHXE2F2+a3TnVKZAc9uzh5b12UDTEevBb64iTqz+Sc xE4/EPsu6Yo5TNgLyktr5sP8pv5Pr6f0STDQXgQxb478UztcS1XofYdchTsywbZd DEBO80qm0PE9DhTtYC5PAScTTrUMRlew9R7aF3kf8O0NQZibqCpCWV6BeyxhMvw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:49 2025 by rpki-client