$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750dd1da-97f3-486b-a958-d4f08b962aec.roa File: 750dd1da-97f3-486b-a958-d4f08b962aec.roa (raw, json) Hash identifier: GuYgSEDJRWXz4k/qIY7+ViUPEKqpqy3Wg5av7BTytT0= Subject key identifier: 7B:F9:C1:3D:A1:91:AE:60:87:AE:AF:17:28:38:AB:7F:39:17:5F:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E4A420B04CC263BA7CC9B4CA6986917D86F0344 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750dd1da-97f3-486b-a958-d4f08b962aec.roa Signing time: Tue 22 Apr 2025 17:20:30 +0000 ROA not before: Tue 22 Apr 2025 17:20:30 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f10:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4a:42:0b:04:cc:26:3b:a7:cc:9b:4c:a6:98:69:17:d8:6f:03:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:20:30 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=3c03c776d327863a9e76d3598caecf6918a6e24106de547b0dea41fc2f907770, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:b1:5f:5f:7b:d5:f5:d5:ed:c5:b3:a5:36: 26:02:b4:06:2e:a4:f1:b7:80:8e:6d:1b:4d:fa:ae: ed:ec:07:8e:31:6b:75:5e:20:c6:11:53:78:c2:d6: 9a:d4:48:f4:a6:0c:0b:b7:07:34:ff:39:45:fb:b6: cd:8b:b3:72:bd:92:62:8b:79:83:a7:f0:88:9f:d4: 59:4b:ae:32:18:43:84:e6:41:96:a8:44:d0:8d:85: 7d:24:48:70:93:37:a8:19:74:86:45:65:88:75:b4: 7f:8f:d3:9a:02:f4:a7:4a:01:00:40:b1:b1:fc:64: 80:aa:95:86:47:38:67:d3:8f:95:78:a4:1f:ce:9a: fc:3e:2f:5c:13:c2:aa:68:8f:f9:3a:ac:60:b6:96: f1:a0:a0:a2:b1:8d:bc:39:71:b5:58:74:bd:81:8d: fe:b2:11:42:95:a9:93:a0:07:9e:b8:77:aa:40:88: 9d:8e:5e:fa:44:5d:cc:a8:f2:6a:f9:c0:87:e7:35: b0:a1:2f:1f:cc:d0:c2:64:f0:34:01:4f:a9:25:29: 25:8b:1d:be:56:13:b2:33:00:4c:b6:b9:0a:96:14: cc:9c:41:55:65:de:77:55:ec:b8:b0:0a:e9:32:ff: 89:ed:43:04:4e:58:ca:a8:cc:a3:39:ca:d1:7e:1b: e0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F9:C1:3D:A1:91:AE:60:87:AE:AF:17:28:38:AB:7F:39:17:5F:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750dd1da-97f3-486b-a958-d4f08b962aec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f10:c000::/36 Signature Algorithm: sha256WithRSAEncryption d5:ad:3c:48:a6:6f:7e:fe:ff:64:60:00:ad:e9:ad:9c:13:a2: 53:82:78:2b:c4:88:62:66:9d:db:00:46:18:ea:a0:fa:f4:b7: 9e:96:c4:21:4f:5a:e6:4f:d1:42:4b:da:82:59:2a:22:7e:92: 4d:55:97:ea:10:9d:eb:55:84:fb:4c:b9:43:0a:bc:9f:27:5f: fd:0a:23:07:69:95:81:c1:09:51:1d:5b:db:bc:16:3a:5a:9a: e2:7c:a6:ae:09:9a:9a:82:37:77:6b:43:79:a5:5e:2a:6d:b9: 44:b8:71:cd:50:cf:57:e0:9d:a9:7c:33:0f:50:0d:7b:a3:ed: f9:29:0f:20:08:14:5a:ab:ce:99:e6:17:31:3d:64:3f:05:b5: 61:41:19:63:ac:70:b6:44:05:cb:22:1e:53:9e:94:1b:75:ad: 79:1b:91:a4:66:85:ac:1f:6d:af:f9:9a:6c:7f:33:12:63:2c: 85:52:c9:2c:7c:d9:df:d8:4b:a7:dc:1a:8e:91:90:7e:59:2b: e7:a7:3c:f0:f9:16:19:1b:f2:d1:24:a4:c1:25:d7:02:03:a5: a6:9e:21:f3:6d:6c:ce:31:21:67:a2:da:7a:90:17:cf:85:2e: f8:a8:15:17:6e:fe:62:92:d4:57:82:44:83:b3:0d:6e:77:c7: c8:46:96:c2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTkpCCwTMJjunzJtMpphpF9hvA0QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcyMDMwWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzAzYzc3NmQzMjc4NjNhOWU3NmQzNTk4Y2FlY2Y2OTE4 YTZlMjQxMDZkZTU0N2IwZGVhNDFmYzJmOTA3NzcwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3ebFfX3vV9dXtxbOlNiYCtAYupPG3gI5tG036ru3sB44x a3VeIMYRU3jC1prUSPSmDAu3BzT/OUX7ts2Ls3K9kmKLeYOn8Iif1FlLrjIYQ4Tm QZaoRNCNhX0kSHCTN6gZdIZFZYh1tH+P05oC9KdKAQBAsbH8ZICqlYZHOGfTj5V4 pB/Omvw+L1wTwqpoj/k6rGC2lvGgoKKxjbw5cbVYdL2Bjf6yEUKVqZOgB564d6pA iJ2OXvpEXcyo8mr5wIfnNbChLx/M0MJk8DQBT6klKSWLHb5WE7IzAEy2uQqWFMyc QVVl3ndV7LiwCuky/4ntQwROWMqozKM5ytF+G+AnAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUe/nBPaGRrmCHrq8XKDirfzkXX9gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc1MGRkMWRhLTk3ZjMtNDg2Yi1hOTU4LWQ0ZjA4Yjk2MmFlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8QwDANBgkqhkiG9w0BAQsFAAOCAQEA1a08SKZvfv7/ZGAAremtnBOi U4J4K8SIYmad2wBGGOqg+vS3npbEIU9a5k/RQkvaglkqIn6STVWX6hCd61WE+0y5 Qwq8nydf/QojB2mVgcEJUR1b27wWOlqa4nymrgmamoI3d2tDeaVeKm25RLhxzVDP V+CdqXwzD1ANe6Pt+SkPIAgUWqvOmeYXMT1kPwW1YUEZY6xwtkQFyyIeU56UG3Wt eRuRpGaFrB9tr/mabH8zEmMshVLJLHzZ39hLp9wajpGQflkr56c88PkWGRvy0SSk wSXXAgOlpp4h821szjEhZ6LaepAXz4Uu+KgVF27+YpLUV4JEg7MNbnfHyEaWwg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:48 2025 by rpki-client