$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/800c9a74-7f0a-498d-9672-65112aba8401.roa File: 800c9a74-7f0a-498d-9672-65112aba8401.roa (raw, json) Hash identifier: QK+NnAaoUOkK+XKcLQgngWNr6NFfi60Dlp0GlC5GZ7U= Subject key identifier: DC:BB:F3:25:D9:FE:FA:90:48:97:25:7F:6D:90:4D:9F:8E:D8:76:E8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 20A6AA4821A736F3A25FBE15CB78F78AAE9A4193 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/800c9a74-7f0a-498d-9672-65112aba8401.roa Signing time: Tue 22 Apr 2025 16:31:48 +0000 ROA not before: Tue 22 Apr 2025 16:31:48 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a6:aa:48:21:a7:36:f3:a2:5f:be:15:cb:78:f7:8a:ae:9a:41:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:31:48 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=6c2b285f9074625c70336a7d34c1c9fb6345ed4ccdc53c78ba7673eeb6dda572, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:c3:90:16:77:f9:16:94:57:44:77:54:8a: 66:8a:f1:91:af:59:e1:5a:84:5b:4c:e7:03:2d:cd: ec:bb:23:33:87:6a:90:12:aa:45:2c:b7:6b:31:1e: 3a:19:2d:4c:a6:fc:ed:1a:fa:77:fa:7d:50:79:a1: 53:26:d1:61:9f:1f:3b:c3:ec:e2:e9:76:05:01:45: 3d:83:6f:60:7b:29:72:d3:c8:6a:b9:26:76:97:88: 14:52:5b:cd:b5:bf:4a:fe:1f:08:7a:64:fe:01:50: 80:c2:2a:66:95:72:f9:2a:c0:bf:c3:2d:4c:27:9a: 92:7f:cf:64:82:21:e9:7f:c3:e4:ef:7e:51:2b:8a: 07:9a:c4:b3:42:91:16:38:9c:ca:7f:b0:ea:c9:de: 64:d6:57:15:08:b1:72:a5:9e:2a:15:06:c0:ea:d0: c1:d6:64:0f:aa:ad:87:f5:97:23:05:28:6e:57:a5: bc:c7:67:90:77:86:21:fb:a5:cf:21:a1:d3:50:52: e8:ac:17:27:9e:db:30:6d:33:b8:b6:59:f0:e0:b7: 22:ff:a8:ac:07:c9:dc:84:c9:24:2f:84:d9:8a:63: d5:95:6e:fb:ad:a4:5b:0d:51:c1:1f:be:5b:72:83: 98:cd:9b:07:e8:f3:77:d2:f3:f4:81:dc:b3:ad:fb: 46:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BB:F3:25:D9:FE:FA:90:48:97:25:7F:6D:90:4D:9F:8E:D8:76:E8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/800c9a74-7f0a-498d-9672-65112aba8401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff5::/32 Signature Algorithm: sha256WithRSAEncryption 74:b5:77:6c:0f:37:a9:b3:b3:0f:5a:b7:0c:3d:c9:7a:1c:be: 6b:06:8d:d5:61:fa:91:d4:2c:b2:e3:d7:49:c7:22:ee:48:13: 09:33:1a:08:10:19:0b:de:c0:34:72:12:c9:95:0c:f3:04:42: e5:7f:f7:5f:d7:ba:1d:29:e3:ed:15:4e:76:6e:41:68:ef:9c: 23:0e:7c:6c:b9:19:79:99:43:fc:ea:7f:61:a7:69:b5:54:45: 63:31:75:fd:51:b8:5a:f1:24:31:d8:23:f3:79:02:6d:e5:53: e2:1c:8b:c0:50:16:55:68:e4:6e:e0:4d:bf:d5:a8:90:d9:1e: 44:05:2e:a1:80:c0:b6:40:93:a4:83:29:cb:02:f1:4d:35:fc: bb:45:5b:a0:22:ae:3f:d7:f0:4e:86:b8:22:74:79:80:a7:14: 07:0d:20:37:46:60:84:15:ca:4a:35:9a:92:8b:b7:f8:b2:b5: 9d:ad:df:4f:73:32:8c:25:fc:dc:de:97:07:9c:2f:09:0e:78: df:b7:da:b4:7a:50:a6:fa:d2:33:7d:24:77:96:42:65:0a:34: e8:76:bf:1b:e7:8b:55:6b:37:02:24:52:87:57:5a:78:9e:dd: 5b:90:61:22:2f:86:58:44:e6:f5:97:3e:8c:7f:2d:d7:8c:5a: 74:37:66:75 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUIKaqSCGnNvOiX74Vy3j3iq6aQZMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYzMTQ4WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzJiMjg1ZjkwNzQ2MjVjNzAzMzZhN2QzNGMxYzlmYjYz NDVlZDRjY2RjNTNjNzhiYTc2NzNlZWI2ZGRhNTcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu2cOQFnf5FpRXRHdUimaK8ZGvWeFahFtM5wMtzey7IzOH apASqkUst2sxHjoZLUym/O0a+nf6fVB5oVMm0WGfHzvD7OLpdgUBRT2Db2B7KXLT yGq5JnaXiBRSW821v0r+Hwh6ZP4BUIDCKmaVcvkqwL/DLUwnmpJ/z2SCIel/w+Tv flErigeaxLNCkRY4nMp/sOrJ3mTWVxUIsXKlnioVBsDq0MHWZA+qrYf1lyMFKG5X pbzHZ5B3hiH7pc8hodNQUuisFyee2zBtM7i2WfDgtyL/qKwHydyEySQvhNmKY9WV bvutpFsNUcEfvltyg5jNmwfo83fS8/SB3LOt+0YLAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQU3LvzJdn++pBIlyV/bZBNn47YdugwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgwMGM5YTc0LTdmMGEtNDk4ZC05NjcyLTY1MTEyYWJhODQwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB/1MA0GCSqGSIb3DQEBCwUAA4IBAQB0tXdsDzeps7MPWrcMPcl6HL5r Bo3VYfqR1Cyy49dJxyLuSBMJMxoIEBkL3sA0chLJlQzzBELlf/df17odKePtFU52 bkFo75wjDnxsuRl5mUP86n9hp2m1VEVjMXX9Ubha8SQx2CPzeQJt5VPiHIvAUBZV aORu4E2/1aiQ2R5EBS6hgMC2QJOkgynLAvFNNfy7RVugIq4/1/BOhrgidHmApxQH DSA3RmCEFcpKNZqSi7f4srWdrd9PczKMJfzc3pcHnC8JDnjft9q0elCm+tIzfSR3 lkJlCjTodr8b54tVazcCJFKHV1p4nt1bkGEiL4ZYROb1lz6Mfy3XjFp0N2Z1 -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:23 2025 by rpki-client