$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c85c5f4-860c-4773-95be-569fc08d91d7.roa File: 7c85c5f4-860c-4773-95be-569fc08d91d7.roa (raw, json) Hash identifier: Dz5BIA84dE4k5gLAi/QZR07eEd2F0UvwY5SzijyztY0= Subject key identifier: 28:11:48:E5:DF:74:C1:91:D8:62:30:F6:48:04:0E:55:C2:C5:A6:25 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7D6221EE45D43265933D969EC2439B39F05F03AA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c85c5f4-860c-4773-95be-569fc08d91d7.roa Signing time: Mon 21 Apr 2025 18:12:09 +0000 ROA not before: Mon 21 Apr 2025 18:12:09 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:62:21:ee:45:d4:32:65:93:3d:96:9e:c2:43:9b:39:f0:5f:03:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 18:12:09 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=fa30b9f67ba97ac3fb0bd5afe53c2ddaae6069dab63d8c80c3578aa320184055, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:52:3d:ca:a1:08:09:8c:94:59:a6:55:b0:3e: 2e:0f:67:a7:0d:6b:7b:5f:79:40:dc:66:b5:95:c0: 98:64:3f:2d:08:63:4b:de:d6:5e:c3:0e:36:82:16: 43:92:4c:b0:97:7c:a5:1f:57:2e:ba:dc:0b:4f:77: 86:46:94:b6:12:c5:ad:d5:c3:dc:65:85:9b:3c:62: 16:ea:59:90:df:55:30:93:05:f7:b6:d3:25:6d:ae: 17:ff:c7:db:cd:11:3c:d4:28:f5:f0:75:57:ed:9f: 40:b6:27:c2:3a:8d:55:95:9b:a6:f3:d8:66:77:d6: 54:be:90:51:94:20:fc:64:27:58:6a:9c:ae:40:4d: 4c:4c:ef:42:ed:b4:98:ad:54:af:ba:41:3e:bd:ee: 80:c4:c3:0d:91:dd:13:d3:bc:ee:4f:f2:91:0e:fc: 07:aa:c1:c7:17:33:c2:ab:ce:c9:a4:c8:78:b6:5a: 36:d4:8b:82:da:c0:cc:7d:f9:77:cf:16:bb:55:7b: cd:41:2c:a7:ef:db:34:eb:6c:dd:5e:2d:10:1f:2f: 0a:dd:ec:c0:c3:f2:1b:2e:1c:08:7e:be:07:2f:e8: 19:43:67:b5:4b:8d:19:36:6f:92:42:c2:4b:3e:c5: 6f:09:89:66:cc:ee:60:76:db:77:dc:8d:10:b9:c7: 60:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:11:48:E5:DF:74:C1:91:D8:62:30:F6:48:04:0E:55:C2:C5:A6:25 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7c85c5f4-860c-4773-95be-569fc08d91d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 27:7e:1c:9f:c3:e5:df:e5:45:f3:7e:74:8b:c4:2f:9d:9a:ed: 60:cc:65:68:63:59:e0:ad:e2:11:3b:14:31:04:e6:66:f4:df: c9:b1:26:47:4e:a1:6b:63:48:66:eb:76:e6:00:cb:0d:65:54: 1e:80:9d:d4:dc:f6:de:6c:9e:35:55:b4:7a:81:f9:e0:51:7b: 23:99:9c:f0:91:65:c8:a0:11:03:27:e4:83:05:04:ed:95:c2: 69:7c:04:c5:23:ab:15:64:15:8c:0c:5e:f8:42:51:12:ce:44: c7:2a:1c:b4:5e:00:1b:64:fb:ff:1e:d7:ef:42:cf:6a:78:40: 25:6d:3d:f9:a8:3c:7a:14:46:26:26:2f:e3:53:a4:ce:40:e9: b7:77:cc:d2:dd:84:f1:b3:c5:ed:b6:0b:fd:25:bb:e5:4e:88: 78:9d:fe:ab:ed:e7:f1:d8:e6:6e:b3:22:f4:e4:9a:31:ad:11: 71:aa:fe:17:4d:0c:55:4e:b5:64:7e:59:dc:05:08:d4:ed:26: bf:e7:e0:38:ef:b2:16:a6:b8:b8:8b:a4:77:80:30:43:2e:53: b9:53:97:ac:47:cd:75:45:ed:fb:f1:f0:8e:29:27:47:cd:a5: e5:9d:91:e5:85:9c:ca:e1:d5:f7:ba:6f:89:32:ab:fc:14:7d: ec:77:72:fa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfWIh7kXUMmWTPZaewkObOfBfA6owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTgxMjA5WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTMwYjlmNjdiYTk3YWMzZmIwYmQ1YWZlNTNjMmRkYWFl NjA2OWRhYjYzZDhjODBjMzU3OGFhMzIwMTg0MDU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSUj3KoQgJjJRZplWwPi4PZ6cNa3tfeUDcZrWVwJhkPy0I Y0ve1l7DDjaCFkOSTLCXfKUfVy663AtPd4ZGlLYSxa3Vw9xlhZs8YhbqWZDfVTCT Bfe20yVtrhf/x9vNETzUKPXwdVftn0C2J8I6jVWVm6bz2GZ31lS+kFGUIPxkJ1hq nK5ATUxM70LttJitVK+6QT697oDEww2R3RPTvO5P8pEO/AeqwccXM8KrzsmkyHi2 WjbUi4LawMx9+XfPFrtVe81BLKfv2zTrbN1eLRAfLwrd7MDD8hsuHAh+vgcv6BlD Z7VLjRk2b5JCwks+xW8JiWbM7mB223fcjRC5x2BJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKBFI5d90wZHYYjD2SAQOVcLFpiUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdjODVjNWY0LTg2MGMtNDc3My05NWJlLTU2OWZjMDhkOTFkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgMAwDQYJKoZIhvcNAQELBQADggEBACd+HJ/D5d/lRfN+dIvEL52a 7WDMZWhjWeCt4hE7FDEE5mb038mxJkdOoWtjSGbrduYAyw1lVB6AndTc9t5snjVV tHqB+eBReyOZnPCRZcigEQMn5IMFBO2Vwml8BMUjqxVkFYwMXvhCURLORMcqHLRe ABtk+/8e1+9Cz2p4QCVtPfmoPHoURiYmL+NTpM5A6bd3zNLdhPGzxe22C/0lu+VO iHid/qvt5/HY5m6zIvTkmjGtEXGq/hdNDFVOtWR+WdwFCNTtJr/n4DjvshamuLiL pHeAMEMuU7lTl6xHzXVF7fvx8I4pJ0fNpeWdkeWFnMrh1fe6b4kyq/wUfex3cvo= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:44 2025 by rpki-client