$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fc7b11-27c5-436c-9c47-2bc31fd12223.roa File: 88fc7b11-27c5-436c-9c47-2bc31fd12223.roa (raw, json) Hash identifier: dBgAOi4pGSo9Ey24LoyLQfitPG2HOul3xutan/88gi4= Subject key identifier: D8:B5:F0:A4:46:05:B5:57:90:93:D3:A6:82:72:C8:E2:29:DA:C3:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2C0DA6498E8D6132D10BBB9043A9BD4068D83C05 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fc7b11-27c5-436c-9c47-2bc31fd12223.roa Signing time: Wed 09 Apr 2025 00:11:06 +0000 ROA not before: Wed 09 Apr 2025 00:11:06 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f68:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0d:a6:49:8e:8d:61:32:d1:0b:bb:90:43:a9:bd:40:68:d8:3c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:11:06 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=0198e312f3ca821d4bc41c9fd57e6c101ae0fc411171c76589a78e445663ac3e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fa:9a:4b:9e:6a:34:91:47:cb:1e:0a:8b:bc: 28:9a:9b:b9:05:b0:2c:0b:98:3a:f9:79:34:58:5d: 33:58:b1:64:d2:28:94:3f:1d:ff:08:55:7b:73:e1: 6e:50:2c:57:f2:d6:af:cb:2a:7a:2b:16:1e:88:5e: bb:46:79:65:6a:f8:19:62:14:27:3b:bd:da:55:22: c1:94:80:00:fd:ad:f4:fe:9f:8a:71:69:80:d5:64: 81:36:39:35:b2:e4:76:83:f3:78:09:74:e9:5a:db: e6:26:7f:5a:02:aa:0a:b9:bb:be:ac:3b:ff:00:56: ed:27:b4:d5:1a:03:c1:75:8e:77:9f:5f:08:ca:af: 92:15:44:12:cb:d1:73:57:e6:5d:6c:e1:8f:02:7e: 7f:df:13:24:1f:46:87:e9:ca:98:05:1b:66:ec:b3: 3f:b1:77:98:8f:16:9e:bf:8a:9a:03:a8:34:27:fd: 2a:32:46:d9:bb:a0:c3:a8:db:9f:b3:49:96:0a:76: 54:5b:3e:f1:9a:ea:17:69:35:e5:3b:de:c0:27:49: 67:5f:91:64:80:e2:7f:c1:05:1e:7e:a5:ee:75:10: c0:f9:84:26:01:11:5d:2a:01:57:af:c2:b3:2d:ac: 52:1d:ee:a3:b1:e7:42:a5:7f:1a:19:66:d7:53:4b: c2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B5:F0:A4:46:05:B5:57:90:93:D3:A6:82:72:C8:E2:29:DA:C3:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fc7b11-27c5-436c-9c47-2bc31fd12223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f68:c000::/40 Signature Algorithm: sha256WithRSAEncryption 39:f6:e0:95:69:86:79:f7:1f:ce:e4:7e:d2:e7:4f:2d:95:fe: fc:07:51:20:c3:84:e8:03:ed:17:f4:56:9f:96:e6:e5:f5:10: 2e:2b:cf:d7:cc:f4:b5:fa:ea:ea:75:97:06:4b:5f:11:cf:2f: a1:c4:87:ec:6f:97:a1:0e:09:29:34:66:ce:7a:a4:6b:3b:e7: 1d:66:9b:dd:c2:5a:7c:4a:88:ee:e0:f3:83:2b:7a:78:1a:7f: 06:96:5a:77:6b:c8:48:39:be:c0:bd:d1:0d:0d:51:c3:09:ca: ca:a6:f4:5f:55:54:b6:b2:1e:66:34:02:0b:8d:a6:44:e5:fb: ec:05:f1:70:96:98:f1:d1:67:2a:6f:e1:d2:2b:34:c5:0d:cb: cb:af:ac:e1:95:09:01:54:f6:6e:ca:56:23:d3:c9:75:af:c3: 4e:df:93:cb:ef:5b:aa:58:c3:86:c1:ab:53:12:c9:40:ba:ad: 3e:f8:2e:41:d0:8c:a6:36:44:88:d3:79:c4:c6:ef:28:9c:b7: 39:c0:cf:8f:c2:2c:fc:4a:90:80:7d:40:00:c2:d6:01:81:a1: a7:25:42:97:f6:55:1e:ee:19:aa:52:d8:7b:71:69:0b:b0:10: d8:a5:6f:5d:ca:d3:0f:47:28:68:37:66:15:cf:ae:74:a9:fd: 23:d4:4f:30 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULA2mSY6NYTLRC7uQQ6m9QGjYPAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDAxMTA2WhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTk4ZTMxMmYzY2E4MjFkNGJjNDFjOWZkNTdlNmMxMDFh ZTBmYzQxMTE3MWM3NjU4OWE3OGU0NDU2NjNhYzNlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDu+ppLnmo0kUfLHgqLvCiam7kFsCwLmDr5eTRYXTNYsWTS KJQ/Hf8IVXtz4W5QLFfy1q/LKnorFh6IXrtGeWVq+BliFCc7vdpVIsGUgAD9rfT+ n4pxaYDVZIE2OTWy5HaD83gJdOla2+Ymf1oCqgq5u76sO/8AVu0ntNUaA8F1jnef XwjKr5IVRBLL0XNX5l1s4Y8Cfn/fEyQfRofpypgFG2bssz+xd5iPFp6/ipoDqDQn /SoyRtm7oMOo25+zSZYKdlRbPvGa6hdpNeU73sAnSWdfkWSA4n/BBR5+pe51EMD5 hCYBEV0qAVevwrMtrFId7qOx50KlfxoZZtdTS8LHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2LXwpEYFtVeQk9OmgnLI4inaw8YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg4ZmM3YjExLTI3YzUtNDM2Yy05YzQ3LTJiYzMxZmQxMjIyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9owDANBgkqhkiG9w0BAQsFAAOCAQEAOfbglWmGefcfzuR+0udPLZX+ /AdRIMOE6APtF/RWn5bm5fUQLivP18z0tfrq6nWXBktfEc8vocSH7G+XoQ4JKTRm znqkazvnHWab3cJafEqI7uDzgyt6eBp/BpZad2vISDm+wL3RDQ1RwwnKyqb0X1VU trIeZjQCC42mROX77AXxcJaY8dFnKm/h0is0xQ3Ly6+s4ZUJAVT2bspWI9PJda/D Tt+Ty+9bqljDhsGrUxLJQLqtPvguQdCMpjZEiNN5xMbvKJy3OcDPj8Is/EqQgH1A AMLWAYGhpyVCl/ZVHu4ZqlLYe3FpC7AQ2KVvXcrTD0coaDdmFc+udKn9I9RPMA== -----END CERTIFICATE-----Generated at Sat Apr 26 20:52:10 2025 by rpki-client