$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90845d55-fd61-4bff-9b0c-ad0d1046127f.roa File: 90845d55-fd61-4bff-9b0c-ad0d1046127f.roa (raw, json) Hash identifier: AQhI8uZHdVJRWOaSLtviT8C85AEnwpuO1INH7f4XqO8= Subject key identifier: 82:BC:3B:C0:66:9B:01:ED:83:0D:B1:5F:73:A9:BA:CA:2A:90:3A:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 38C8432A2B5C80C30B07B676804CD478C383C3A6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90845d55-fd61-4bff-9b0c-ad0d1046127f.roa Signing time: Tue 22 Apr 2025 17:11:41 +0000 ROA not before: Tue 22 Apr 2025 17:11:41 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f15:4800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c8:43:2a:2b:5c:80:c3:0b:07:b6:76:80:4c:d4:78:c3:83:c3:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:11:41 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=23a6eb13614f36658fa39ad234fbfdd5733b0ed12ddb2f595773b1e9e354b019, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:6b:ba:75:eb:83:ea:5b:a5:32:2e:7e:82: ef:ce:c2:8b:85:31:2d:64:a3:84:39:e3:51:be:a6: dc:60:6e:de:c2:3b:da:41:8a:4d:44:d8:53:e5:b5: 6b:d2:62:95:5e:7c:ab:30:60:8c:75:91:ea:29:f8: 29:32:12:2b:05:b8:56:5d:40:fb:d5:19:0a:7d:5d: a3:39:51:9a:69:d3:f6:18:77:b1:ab:41:bd:d9:0a: 12:49:b0:ec:c0:15:0d:3a:52:ef:b4:44:55:90:18: 64:36:12:f8:ca:99:63:ff:26:66:12:c3:86:6b:a3: 1c:b5:09:f8:15:19:0c:74:d6:c0:3f:68:e5:dd:df: b3:d7:a4:a9:bf:a4:e3:e9:28:0d:d3:88:6d:44:4a: c1:ab:59:bc:20:11:dd:0b:48:30:99:c0:8c:e5:a2: 46:54:f2:68:90:9a:c8:af:55:89:59:de:52:11:6d: f6:2d:77:6f:dd:a4:ca:3e:94:f6:d2:15:b7:cc:a7: 6a:12:57:06:34:8b:c9:c4:09:07:54:6d:af:2a:0a: 7a:9c:e4:c6:50:e7:89:11:8c:fb:80:59:7f:bc:16: 87:66:5f:23:f9:49:9a:09:43:bc:56:87:12:f2:eb: f6:b7:e8:b5:bf:aa:8e:6c:aa:47:c2:34:b5:ff:86: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BC:3B:C0:66:9B:01:ED:83:0D:B1:5F:73:A9:BA:CA:2A:90:3A:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90845d55-fd61-4bff-9b0c-ad0d1046127f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f15:4800::/37 Signature Algorithm: sha256WithRSAEncryption ac:59:d7:1d:d3:7c:ae:81:0e:16:1b:b3:2f:83:99:a6:35:e9: 91:40:49:f6:29:ea:99:ce:e5:17:34:d9:43:90:98:b3:57:0f: 84:35:89:f6:55:fe:df:0d:60:64:4d:76:0b:45:d2:a2:15:58: f2:09:fb:82:3f:25:0d:ca:e6:4e:44:f4:db:f9:0f:7d:c8:45: d7:5f:d8:41:9e:fb:20:e4:91:79:f6:41:70:e0:6b:de:23:5a: 70:df:a0:b7:86:33:0a:35:e6:95:a4:a9:37:13:bd:b7:cf:eb: 55:98:a9:5d:9c:e1:de:f9:6a:c7:75:9a:2d:9f:cf:c4:0a:9a: 32:91:af:f5:74:7e:4b:73:e2:7d:1c:39:d8:fa:84:24:73:43: 8b:7a:64:ed:cd:ac:70:48:24:84:2f:15:7b:40:5d:b0:52:51: ed:b5:de:1e:af:d9:f9:62:43:d7:93:5f:f6:4b:69:58:63:7e: 03:0e:e6:de:64:7c:31:bd:d0:de:11:df:90:fb:49:87:d1:3b: b0:5e:ac:5f:5e:fc:32:3b:5e:57:f9:0a:64:fd:3b:b6:7d:93: 7e:90:f7:cc:b2:5e:93:05:f5:cb:c4:19:0c:25:c7:8e:e5:1d: 8f:b8:af:76:47:34:95:a0:b5:f0:c9:81:fd:62:4b:a1:93:e0: 06:da:ec:1a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOMhDKitcgMMLB7Z2gEzUeMODw6YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcxMTQxWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2E2ZWIxMzYxNGYzNjY1OGZhMzlhZDIzNGZiZmRkNTcz M2IwZWQxMmRkYjJmNTk1NzczYjFlOWUzNTRiMDE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEHmu6deuD6lulMi5+gu/OwouFMS1ko4Q541G+ptxgbt7C O9pBik1E2FPltWvSYpVefKswYIx1keop+CkyEisFuFZdQPvVGQp9XaM5UZpp0/YY d7GrQb3ZChJJsOzAFQ06Uu+0RFWQGGQ2EvjKmWP/JmYSw4Zroxy1CfgVGQx01sA/ aOXd37PXpKm/pOPpKA3TiG1ESsGrWbwgEd0LSDCZwIzlokZU8miQmsivVYlZ3lIR bfYtd2/dpMo+lPbSFbfMp2oSVwY0i8nECQdUba8qCnqc5MZQ54kRjPuAWX+8Fodm XyP5SZoJQ7xWhxLy6/a36LW/qo5sqkfCNLX/hj3XAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUgrw7wGabAe2DDbFfc6m6yiqQOtwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwODQ1ZDU1LWZkNjEtNGJmZi05YjBjLWFkMGQxMDQ2MTI3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8VSDANBgkqhkiG9w0BAQsFAAOCAQEArFnXHdN8roEOFhuzL4OZpjXp kUBJ9inqmc7lFzTZQ5CYs1cPhDWJ9lX+3w1gZE12C0XSohVY8gn7gj8lDcrmTkT0 2/kPfchF11/YQZ77IOSRefZBcOBr3iNacN+gt4YzCjXmlaSpNxO9t8/rVZipXZzh 3vlqx3WaLZ/PxAqaMpGv9XR+S3PifRw52PqEJHNDi3pk7c2scEgkhC8Ve0BdsFJR 7bXeHq/Z+WJD15Nf9ktpWGN+Aw7m3mR8Mb3Q3hHfkPtJh9E7sF6sX178MjteV/kK ZP07tn2TfpD3zLJekwX1y8QZDCXHjuUdj7ivdkc0laC18MmB/WJLoZPgBtrsGg== -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:39 2025 by rpki-client