$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e6356c-d13c-480e-a973-81f7a991a615.roa File: 89e6356c-d13c-480e-a973-81f7a991a615.roa (raw, json) Hash identifier: gFAdaJ9ugJKh/crvVZw3KjfmIael75z/QqunTOiVInI= Subject key identifier: 85:6B:8D:C2:50:F0:27:29:F7:BF:88:7C:94:27:7B:63:80:70:6C:55 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58DE12EBBB7333A1C0BCF944E25B7B74FE72C8BF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e6356c-d13c-480e-a973-81f7a991a615.roa Signing time: Tue 22 Apr 2025 17:10:16 +0000 ROA not before: Tue 22 Apr 2025 17:10:16 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f2f:4000::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:de:12:eb:bb:73:33:a1:c0:bc:f9:44:e2:5b:7b:74:fe:72:c8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:10:16 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=faf6fda1d35803bc50cf9dd0852f84f6f778327cdcc85a75e6eccfd0b05fe110, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a4:f7:43:7f:31:39:bf:1e:51:83:4e:10:5b: 9f:cb:52:ea:cc:68:f2:fd:55:14:a5:09:37:85:25: b5:52:2c:90:7f:52:0d:f3:bd:e0:ce:72:f7:e3:8c: 77:a3:99:16:f2:9d:69:27:a9:49:37:12:27:fa:5b: 6c:bb:be:e9:6b:76:db:94:66:df:ba:1e:13:b6:a5: c2:e4:51:a6:7f:7f:39:7c:ac:a5:fd:c0:cf:74:98: 3b:9c:81:52:fa:91:1a:96:f3:5c:6c:df:9e:d8:8e: b6:ba:cd:b3:ae:42:e8:66:52:e1:06:48:01:f2:ba: 27:0c:85:bd:4b:cc:8f:77:35:87:94:13:a7:b5:e8: a6:ee:a0:a4:b3:7d:10:53:c6:79:75:6a:a7:44:3e: cd:b4:58:d6:dd:7f:0b:c6:43:8b:d5:70:6c:c3:4a: 31:1c:23:a2:e7:73:4d:f6:b9:29:4e:ce:a6:14:62: 07:30:a6:c9:01:3d:20:18:dd:83:49:1d:23:fd:87: c8:65:7d:0c:6a:0b:56:cd:f7:13:42:b9:55:fd:11: 5f:81:31:2f:1b:60:b2:dd:98:32:8f:bc:e3:57:40: 49:a2:7c:92:59:4e:92:2c:e6:b9:37:85:6c:d3:62: db:2e:41:05:5a:de:27:d1:2e:d9:c2:cd:4b:01:d5: 3e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6B:8D:C2:50:F0:27:29:F7:BF:88:7C:94:27:7B:63:80:70:6C:55 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89e6356c-d13c-480e-a973-81f7a991a615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2f:4000::/37 Signature Algorithm: sha256WithRSAEncryption 5c:c0:ca:79:9d:c0:5c:2a:64:ab:5f:41:30:c4:f4:29:33:c4: 59:5e:06:ba:a3:af:73:59:23:1f:f7:7d:0c:ac:f7:ec:8e:ec: 5c:b0:be:a4:34:05:72:0d:6c:6c:7c:73:7e:f4:4b:95:e5:1b: 24:d7:9a:44:60:81:a2:3c:87:42:63:29:59:fc:03:01:c5:bf: 44:a2:6a:30:c9:19:5e:9e:7f:2f:aa:78:31:21:01:08:09:e6: a5:ec:d4:6b:fe:fc:fc:68:75:de:23:d5:2e:56:4e:91:d6:30: db:23:f1:c1:06:a4:d3:32:42:32:36:6e:21:c5:b9:b5:5b:28: ba:ee:78:ad:dc:06:f1:88:32:7c:9c:13:1a:1b:08:97:32:af: 9f:7b:68:69:87:35:af:bc:42:8e:58:81:6e:69:b5:68:e2:63: 4a:3d:37:26:c3:e2:e6:cc:77:21:30:f9:41:93:c7:bd:34:15: 16:68:9a:9c:50:a8:d6:de:24:1d:24:05:60:b7:90:43:cc:44: c7:8a:52:50:0e:70:e4:73:fc:c6:23:40:0b:37:60:fa:e3:98: 01:a4:c9:6c:17:6c:a6:e8:b3:16:a9:bd:de:58:96:2b:de:48: 78:19:36:c8:44:8e:f5:08:89:6c:3b:e2:0b:3f:b2:47:c7:b9: 20:b9:fe:db -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWN4S67tzM6HAvPlE4lt7dP5yyL8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcxMDE2WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYWY2ZmRhMWQzNTgwM2JjNTBjZjlkZDA4NTJmODRmNmY3 NzgzMjdjZGNjODVhNzVlNmVjY2ZkMGIwNWZlMTEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNpPdDfzE5vx5Rg04QW5/LUurMaPL9VRSlCTeFJbVSLJB/ Ug3zveDOcvfjjHejmRbynWknqUk3Eif6W2y7vulrdtuUZt+6HhO2pcLkUaZ/fzl8 rKX9wM90mDucgVL6kRqW81xs357Yjra6zbOuQuhmUuEGSAHyuicMhb1LzI93NYeU E6e16KbuoKSzfRBTxnl1aqdEPs20WNbdfwvGQ4vVcGzDSjEcI6Lnc032uSlOzqYU YgcwpskBPSAY3YNJHSP9h8hlfQxqC1bN9xNCuVX9EV+BMS8bYLLdmDKPvONXQEmi fJJZTpIs5rk3hWzTYtsuQQVa3ifRLtnCzUsB1T6DAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUhWuNwlDwJyn3v4h8lCd7Y4BwbFUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5ZTYzNTZjLWQxM2MtNDgwZS1hOTczLTgxZjdhOTkxYTYxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8vQDANBgkqhkiG9w0BAQsFAAOCAQEAXMDKeZ3AXCpkq19BMMT0KTPE WV4GuqOvc1kjH/d9DKz37I7sXLC+pDQFcg1sbHxzfvRLleUbJNeaRGCBojyHQmMp WfwDAcW/RKJqMMkZXp5/L6p4MSEBCAnmpezUa/78/Gh13iPVLlZOkdYw2yPxwQak 0zJCMjZuIcW5tVsouu54rdwG8YgyfJwTGhsIlzKvn3toaYc1r7xCjliBbmm1aOJj Sj03JsPi5sx3ITD5QZPHvTQVFmianFCo1t4kHSQFYLeQQ8xEx4pSUA5w5HP8xiNA Czdg+uOYAaTJbBdspuizFqm93liWK95IeBk2yESO9QiJbDviCz+yR8e5ILn+2w== -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:26 2025 by rpki-client