$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a13bd1b-83be-4772-b2ef-75052230daca.roa File: 8a13bd1b-83be-4772-b2ef-75052230daca.roa (raw, json) Hash identifier: WluhuP76Q+PE1KcFtINFw1rwe3jCoxr+O3+e/eF32Os= Subject key identifier: 9D:8F:4B:4E:84:22:AB:02:EB:4D:BB:89:D9:25:8E:94:AD:C4:24:4E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4753D84A2953D54E96813C29166E1DB149EADC2C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a13bd1b-83be-4772-b2ef-75052230daca.roa Signing time: Tue 22 Apr 2025 17:20:11 +0000 ROA not before: Tue 22 Apr 2025 17:20:11 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1c:c000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:53:d8:4a:29:53:d5:4e:96:81:3c:29:16:6e:1d:b1:49:ea:dc:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:20:11 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=366c1f874158903e168909d6f19310a89e8d0f5e3771da13569dab35803aea0c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:92:5c:b1:7a:a7:a7:f5:a7:e1:a1:15:1e:fb: b1:2a:fb:5f:69:e3:3c:94:e4:3f:23:fb:98:55:0e: 83:b0:f6:8d:ce:7a:dd:2a:07:46:88:1b:00:71:ee: 3c:4a:23:eb:10:32:a6:61:a6:03:bb:9e:b6:b5:28: 27:9d:03:d9:bc:43:99:39:ef:a3:e3:38:96:b1:54: fd:8d:76:84:41:26:43:e8:a4:00:d3:bf:b5:d3:dc: 80:85:dc:09:11:0f:4c:b2:10:a1:f1:95:63:58:63: 30:13:d4:d1:5d:2b:4a:5a:72:8a:2f:3a:60:96:cb: 4b:00:4d:99:e6:b2:c4:63:0b:34:71:67:64:b1:9e: 7a:15:ab:41:d3:93:e4:af:ed:9e:81:ce:1d:56:96: 2d:37:8d:6e:05:8c:44:4f:a8:1d:65:e1:f8:34:94: 86:bd:44:16:f4:d8:8b:2b:96:b4:f9:79:c2:da:76: 5f:cc:dc:6a:cb:b1:b4:02:8c:f6:8a:d3:ea:43:a6: 40:9c:f2:31:92:e0:b2:81:81:da:e5:95:c5:04:7e: 73:52:2d:1c:93:a7:67:74:c0:00:a0:be:75:92:17: d2:81:d0:08:4a:bd:d1:33:c0:ea:0c:24:41:b0:ee: b5:f7:7a:24:58:b1:d5:c4:8b:36:21:77:67:58:1b: 61:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8F:4B:4E:84:22:AB:02:EB:4D:BB:89:D9:25:8E:94:AD:C4:24:4E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a13bd1b-83be-4772-b2ef-75052230daca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1c:c000::/37 Signature Algorithm: sha256WithRSAEncryption 1b:5e:c8:41:23:cc:05:4d:e1:17:3f:c6:11:2c:f5:e3:84:48: ca:21:8c:82:2d:39:50:c8:87:67:8f:73:b9:c8:22:84:7c:6b: 49:2f:9b:ef:c5:7b:c4:c6:aa:d2:6f:0d:e1:67:07:d0:14:c1: c8:17:b2:cb:9f:6e:25:76:ea:ee:74:c6:36:a9:14:c6:b0:f0: 89:0a:9f:f3:66:ea:73:ec:22:03:c5:a9:74:04:45:18:ea:06: 3e:8a:48:29:3b:87:5a:b3:4e:17:34:68:95:33:87:22:12:cf: 5b:e6:b8:9f:8f:9a:73:fd:6c:b6:fc:d5:20:14:16:f1:be:b8: c5:f0:87:15:5d:66:6e:e4:62:dd:1b:e2:1e:4a:e2:34:16:a2: 64:7f:4a:27:6c:38:9f:29:35:09:77:29:3a:8f:9d:d4:aa:3d: 0c:2b:f9:17:fc:52:62:fe:49:a8:3e:9e:eb:c3:93:71:35:76: 20:dc:4c:64:7c:2e:85:ba:3b:2e:74:37:1c:f4:f9:36:74:d0: 9f:9f:b0:4d:7c:e8:8a:6b:84:c8:b1:70:da:f9:78:8d:3c:01: ce:46:a2:20:29:30:5a:7d:34:39:95:33:a1:19:81:a6:fe:cd: 1a:60:8b:94:c3:38:30:62:e4:ed:92:3e:cd:f3:85:cf:3b:18: 06:7d:a9:8a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUR1PYSilT1U6WgTwpFm4dsUnq3CwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcyMDExWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjZjMWY4NzQxNTg5MDNlMTY4OTA5ZDZmMTkzMTBhODll OGQwZjVlMzc3MWRhMTM1NjlkYWIzNTgwM2FlYTBjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQklyxeqen9afhoRUe+7Eq+19p4zyU5D8j+5hVDoOw9o3O et0qB0aIGwBx7jxKI+sQMqZhpgO7nra1KCedA9m8Q5k576PjOJaxVP2NdoRBJkPo pADTv7XT3ICF3AkRD0yyEKHxlWNYYzAT1NFdK0pacoovOmCWy0sATZnmssRjCzRx Z2SxnnoVq0HTk+Sv7Z6Bzh1Wli03jW4FjERPqB1l4fg0lIa9RBb02IsrlrT5ecLa dl/M3GrLsbQCjPaK0+pDpkCc8jGS4LKBgdrllcUEfnNSLRyTp2d0wACgvnWSF9KB 0AhKvdEzwOoMJEGw7rX3eiRYsdXEizYhd2dYG2FBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUnY9LToQiqwLrTbuJ2SWOlK3EJE4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhhMTNiZDFiLTgzYmUtNDc3Mi1iMmVmLTc1MDUyMjMwZGFjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8cwDANBgkqhkiG9w0BAQsFAAOCAQEAG17IQSPMBU3hFz/GESz144RI yiGMgi05UMiHZ49zucgihHxrSS+b78V7xMaq0m8N4WcH0BTByBeyy59uJXbq7nTG NqkUxrDwiQqf82bqc+wiA8WpdARFGOoGPopIKTuHWrNOFzRolTOHIhLPW+a4n4+a c/1stvzVIBQW8b64xfCHFV1mbuRi3RviHkriNBaiZH9KJ2w4nyk1CXcpOo+d1Ko9 DCv5F/xSYv5JqD6e68OTcTV2INxMZHwuhbo7LnQ3HPT5NnTQn5+wTXzoimuEyLFw 2vl4jTwBzkaiICkwWn00OZUzoRmBpv7NGmCLlMM4MGLk7ZI+zfOFzzsYBn2pig== -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:48 2025 by rpki-client