$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09eb33-9642-4506-acdc-cda09a75dedd.roa File: 8c09eb33-9642-4506-acdc-cda09a75dedd.roa (raw, json) Hash identifier: aV2dSbrXDcHZP03Sm1xHp2oazWZaBt+qVHaLyCdJiIQ= Subject key identifier: 97:A8:28:0B:70:5E:E5:F2:95:A2:8D:CA:7A:78:43:FB:8A:0D:7A:A9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61342DEBBBBB51820B04C1EF92C8298EF90AB73B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09eb33-9642-4506-acdc-cda09a75dedd.roa Signing time: Tue 22 Apr 2025 15:30:33 +0000 ROA not before: Tue 22 Apr 2025 15:30:33 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:34:2d:eb:bb:bb:51:82:0b:04:c1:ef:92:c8:29:8e:f9:0a:b7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:30:33 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=679427fc91986876268fd99a9b30a304ed4ca2cd148b66f2d3e27e6292aadc53, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9b:0d:75:d1:57:80:f4:ef:36:62:bb:be:b1: 43:97:1f:19:bd:6d:6e:f0:5a:e4:c1:45:d6:6b:ff: d3:8d:f5:0e:31:0a:2a:9a:6b:27:19:64:ab:55:93: d7:e5:3a:4e:46:31:f9:3c:86:20:b2:f1:be:ea:10: fa:4d:7a:a6:f6:ef:92:35:03:e6:14:e9:2c:91:51: 8a:ac:bb:c2:2b:3c:95:ea:6d:49:7e:1a:bf:72:b3: c5:31:d1:24:d0:48:19:63:ea:f2:03:18:6e:12:03: 42:4d:28:9f:b2:d4:38:87:44:07:40:81:86:8a:2c: 82:ad:28:90:d1:78:d8:ea:e9:b6:50:76:53:a5:35: 7b:fa:5d:e8:17:79:f2:55:e7:b6:d3:d6:c3:a9:27: 27:c1:e0:9b:c0:5d:c9:84:08:b4:b0:93:23:92:4c: 5d:78:9a:b6:cd:b6:4e:e5:e0:30:e8:bb:62:1d:22: ab:da:43:77:37:36:d4:a1:20:c8:2d:39:c2:ee:63: b7:b6:d4:a9:55:34:79:04:5e:32:86:16:0d:8d:0d: 1d:35:68:a2:c5:57:4c:5d:35:db:a8:f7:52:4f:da: 55:99:1b:0f:7a:1d:5b:51:81:43:53:43:f3:ff:b8: 84:73:80:80:cd:b1:4d:e2:fd:27:fe:77:44:4e:4b: 57:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A8:28:0B:70:5E:E5:F2:95:A2:8D:CA:7A:78:43:FB:8A:0D:7A:A9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09eb33-9642-4506-acdc-cda09a75dedd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:1000::/40 Signature Algorithm: sha256WithRSAEncryption 80:5f:26:46:9d:e7:64:6b:d4:a7:06:26:09:7d:55:0b:07:e7: e3:56:b7:b0:a0:33:de:3a:e5:89:a7:33:68:8a:66:05:db:16: d9:76:3f:24:4f:03:e7:65:be:2d:c8:ac:05:dd:fe:f9:38:22: 56:73:8e:88:67:be:72:f4:ae:f9:90:23:03:e0:a8:3d:21:d7: 14:3b:ef:ac:0c:3a:c4:ed:03:4a:b5:f9:2d:bc:64:c8:68:02: 4b:e1:b0:78:6f:f8:6a:9d:79:2a:68:d2:25:4c:eb:a2:54:14: d5:ba:70:b4:9a:3b:b3:38:aa:ca:96:1a:54:fd:99:ef:dc:50: 8f:a3:d0:18:71:66:56:43:1b:e5:3b:81:c1:73:87:f2:df:78: 93:09:e8:e4:7e:10:fe:1d:01:6f:2e:56:04:94:4c:b2:87:d8: 9c:c1:00:43:01:9d:54:74:01:14:9f:f1:d8:c7:f2:fc:db:ed: d9:ec:41:dc:f6:5f:9c:b0:7a:f6:d3:eb:66:51:dc:89:9f:eb: 2f:77:b8:ad:86:98:ec:fa:ba:07:30:df:89:64:4f:30:88:3d: 89:68:b7:47:00:bc:73:e9:57:df:8e:23:bf:7a:54:e5:c5:a9: da:32:50:ce:16:f4:1c:14:70:6b:97:76:18:ac:2a:81:b0:07: 9e:45:9b:92 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYTQt67u7UYILBMHvksgpjvkKtzswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUzMDMzWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2Nzk0MjdmYzkxOTg2ODc2MjY4ZmQ5OWE5YjMwYTMwNGVk NGNhMmNkMTQ4YjY2ZjJkM2UyN2U2MjkyYWFkYzUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfmw110VeA9O82Yru+sUOXHxm9bW7wWuTBRdZr/9ON9Q4x CiqaaycZZKtVk9flOk5GMfk8hiCy8b7qEPpNeqb275I1A+YU6SyRUYqsu8IrPJXq bUl+Gr9ys8Ux0STQSBlj6vIDGG4SA0JNKJ+y1DiHRAdAgYaKLIKtKJDReNjq6bZQ dlOlNXv6XegXefJV57bT1sOpJyfB4JvAXcmECLSwkyOSTF14mrbNtk7l4DDou2Id IqvaQ3c3NtShIMgtOcLuY7e21KlVNHkEXjKGFg2NDR01aKLFV0xdNduo91JP2lWZ Gw96HVtRgUNTQ/P/uIRzgIDNsU3i/Sf+d0ROS1dPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUl6goC3Be5fKVoo3KenhD+4oNeqkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhjMDllYjMzLTk2NDItNDUwNi1hY2RjLWNkYTA5YTc1ZGVkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/yEDANBgkqhkiG9w0BAQsFAAOCAQEAgF8mRp3nZGvUpwYmCX1VCwfn 41a3sKAz3jrliaczaIpmBdsW2XY/JE8D52W+LcisBd3++TgiVnOOiGe+cvSu+ZAj A+CoPSHXFDvvrAw6xO0DSrX5LbxkyGgCS+GweG/4ap15KmjSJUzrolQU1bpwtJo7 sziqypYaVP2Z79xQj6PQGHFmVkMb5TuBwXOH8t94kwno5H4Q/h0Bby5WBJRMsofY nMEAQwGdVHQBFJ/x2Mfy/Nvt2exB3PZfnLB69tPrZlHciZ/rL3e4rYaY7Pq6BzDf iWRPMIg9iWi3RwC8c+lX344jv3pU5cWp2jJQzhb0HBRwa5d2GKwqgbAHnkWbkg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:14:43 2025 by rpki-client