$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c163596-3504-4d1c-ac66-c039ee66cb59.roa File: 7c163596-3504-4d1c-ac66-c039ee66cb59.roa (raw, json) Hash identifier: cRWxrDPL5Fsr8lEZ/XA/MAz8H/auNBgTbLkiksHyors= Subject key identifier: D8:5E:02:CF:49:49:9D:BA:CE:E4:6D:02:30:64:E1:AE:8D:8A:86:13 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 10E5B229DD6048FFC1E676CEA4A7D397127D0DAF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c163596-3504-4d1c-ac66-c039ee66cb59.roa Signing time: Tue 08 Apr 2025 00:21:13 +0000 ROA not before: Tue 08 Apr 2025 00:21:13 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2e:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e5:b2:29:dd:60:48:ff:c1:e6:76:ce:a4:a7:d3:97:12:7d:0d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:21:13 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=556ca78ebe308991264bee5e2ed8237d970ef24c1441accc85819f558d6c2e78, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:f3:1c:e1:b6:24:7e:0f:76:37:5a:00:48: 3c:0f:f7:14:6f:89:ba:09:01:5a:7d:d1:2a:6c:23: 53:a3:28:bf:ea:9f:e0:fc:20:bc:6e:8c:dc:7c:62: 08:fa:71:a4:f2:08:66:a4:6f:bb:d7:94:de:81:97: b1:be:0b:fb:6e:f2:00:fd:b4:11:99:7f:d3:c5:74: 3b:0f:a2:03:0e:80:62:22:5f:14:22:08:1e:8c:9e: fa:cd:ec:c1:80:06:ff:c8:7c:0f:40:00:4c:31:23: 8a:4d:43:fe:56:86:11:3e:6e:3a:dd:4f:d6:55:41: 4e:84:87:a8:fa:55:96:5a:a5:d9:05:89:2f:ea:ec: 57:27:a4:84:ef:8a:d0:4a:9d:f3:77:0d:fe:4d:63: 01:40:ee:bc:2e:7c:c4:e8:fd:71:61:49:aa:41:ac: 93:8c:1f:bc:6c:dc:94:dc:81:0a:b5:29:5f:51:db: 23:b2:26:2e:81:c4:df:26:9f:8d:6c:d8:b0:a8:6e: 4a:54:ca:8f:3e:9b:9b:e6:b8:e8:b8:57:fd:8c:d2: 18:c7:8b:a2:25:9e:e4:3b:e1:1b:0c:dd:49:c7:f9: 81:1f:d2:3d:fa:38:ae:21:b1:ed:4f:9e:3c:2c:30: f5:8e:0a:21:93:ee:fa:d5:d9:db:fb:73:3f:6c:7c: bb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5E:02:CF:49:49:9D:BA:CE:E4:6D:02:30:64:E1:AE:8D:8A:86:13 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c163596-3504-4d1c-ac66-c039ee66cb59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2e:8000::/36 Signature Algorithm: sha256WithRSAEncryption c5:45:cb:91:c8:37:80:f2:bb:3f:45:7e:63:6b:c1:e7:45:ab: 3f:8e:d8:7e:0e:25:92:9e:0c:ae:3f:7b:e5:c0:2d:d6:7b:21: 3f:86:aa:2e:e2:3b:fd:b7:af:ad:be:2f:d1:3e:a0:f4:e0:64: 40:af:bd:a5:81:45:1b:8f:49:0b:b6:cd:1d:cf:bf:50:b1:5e: 2f:e4:88:93:8a:4d:94:30:5c:72:7e:dc:89:c0:0a:90:2e:7f: 7b:d1:35:b7:e1:05:c5:c6:4e:66:ba:53:28:f1:df:98:14:2c: b3:ea:33:4f:99:9c:61:73:14:f7:74:b2:71:bb:9c:9b:7a:de: 21:59:0e:d4:20:73:72:be:e7:a0:c1:9c:fc:b3:84:a2:e3:fc: 4e:96:05:3a:09:f5:68:06:e7:b8:3c:f5:0d:ef:70:4c:46:33: 74:14:de:1d:1f:01:80:6d:fa:88:70:78:38:6f:0f:04:6b:67: 34:e6:03:b0:80:9c:fc:44:c7:75:f2:7d:53:03:55:0d:28:24: 4f:cc:47:69:cc:c0:49:1a:34:04:86:ad:27:7f:55:88:58:06: 6b:f8:a9:3d:0a:3b:f3:83:84:48:6f:c2:f0:76:3f:c0:60:ee: 9f:98:4a:58:ea:60:53:76:ab:c0:e6:2d:23:aa:75:74:2b:de: 87:cc:3a:ef -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEOWyKd1gSP/B5nbOpKfTlxJ9Da8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAyMTEzWhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTZjYTc4ZWJlMzA4OTkxMjY0YmVlNWUyZWQ4MjM3ZDk3 MGVmMjRjMTQ0MWFjY2M4NTgxOWY1NThkNmMyZTc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwC/Mc4bYkfg92N1oASDwP9xRviboJAVp90SpsI1OjKL/q n+D8ILxujNx8Ygj6caTyCGakb7vXlN6Bl7G+C/tu8gD9tBGZf9PFdDsPogMOgGIi XxQiCB6MnvrN7MGABv/IfA9AAEwxI4pNQ/5WhhE+bjrdT9ZVQU6Eh6j6VZZapdkF iS/q7FcnpITvitBKnfN3Df5NYwFA7rwufMTo/XFhSapBrJOMH7xs3JTcgQq1KV9R 2yOyJi6BxN8mn41s2LCobkpUyo8+m5vmuOi4V/2M0hjHi6IlnuQ74RsM3UnH+YEf 0j36OK4hse1PnjwsMPWOCiGT7vrV2dv7cz9sfLunAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2F4Cz0lJnbrO5G0CMGThro2KhhMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjMTYzNTk2LTM1MDQtNGQxYy1hYzY2LWMwMzllZTY2Y2I1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8ugDANBgkqhkiG9w0BAQsFAAOCAQEAxUXLkcg3gPK7P0V+Y2vB50Wr P47Yfg4lkp4Mrj975cAt1nshP4aqLuI7/bevrb4v0T6g9OBkQK+9pYFFG49JC7bN Hc+/ULFeL+SIk4pNlDBccn7cicAKkC5/e9E1t+EFxcZOZrpTKPHfmBQss+ozT5mc YXMU93Sycbucm3reIVkO1CBzcr7noMGc/LOEouP8TpYFOgn1aAbnuDz1De9wTEYz dBTeHR8BgG36iHB4OG8PBGtnNOYDsICc/ETHdfJ9UwNVDSgkT8xHaczASRo0BIat J39ViFgGa/ipPQo784OESG/C8HY/wGDun5hKWOpgU3arwOYtI6p1dCveh8w67w== -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:16 2025 by rpki-client