$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984313af-1a59-4f57-8dec-958207f6c75c.roa File: 984313af-1a59-4f57-8dec-958207f6c75c.roa (raw, json) Hash identifier: Td1fcKd84Kp/djfmzdaxQlSuK0rUpIdUNZcnNU6oEso= Subject key identifier: 88:2F:88:48:50:27:3D:41:B8:CE:B6:00:1F:40:36:4C:55:3E:7B:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67AFBA8EB840640A7BBDCCC595C1A56B1FCF7158 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984313af-1a59-4f57-8dec-958207f6c75c.roa Signing time: Tue 22 Apr 2025 00:21:58 +0000 ROA not before: Tue 22 Apr 2025 00:21:58 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:af:ba:8e:b8:40:64:0a:7b:bd:cc:c5:95:c1:a5:6b:1f:cf:71:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:21:58 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=e91e4555a0737148ea12f9b496fff3e9107c4bc87a59ad58b55e73bc43313958, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:18:7c:ce:a4:60:e0:04:a5:4e:80:aa:19: d1:03:87:a4:d9:28:b2:e0:6b:90:06:0f:26:fe:f6: 78:cb:ff:24:a2:56:0d:b9:bd:49:20:1d:12:17:cc: c4:8b:f1:6b:07:3b:49:c6:ef:c0:84:f8:6d:f0:c3: 51:7e:b6:2f:21:8b:c5:54:8d:d8:4e:d9:c7:88:aa: b8:ab:c3:15:6b:1a:d1:ed:17:5a:4d:16:34:e7:8e: f5:98:f0:2d:85:fd:70:9e:9a:fb:66:10:47:4e:0e: 67:d1:e2:4d:38:91:b4:2f:f3:76:fa:66:30:8c:07: 57:e6:30:86:7b:58:e9:e8:fe:8e:2c:6f:42:35:0c: ac:e5:d7:a6:38:96:ef:08:ce:2d:42:62:3c:c1:76: ae:75:3e:d3:39:f1:37:d3:aa:4c:8f:09:59:53:66: 87:9f:17:a4:b8:6b:61:6a:70:46:96:9d:69:4e:bb: f8:3d:6b:26:9f:bb:6e:d5:b2:6f:39:07:73:a8:13: 13:c8:cf:56:e7:f1:5b:94:85:e3:e3:32:ab:68:6f: 77:b6:e8:b2:9f:ea:f2:25:2d:de:67:43:0b:b0:8f: f8:23:6d:55:fc:ce:3b:43:c2:da:0c:e3:c3:ef:01: 0f:cb:2c:f8:2a:b2:df:76:08:da:4b:68:3a:25:16: a3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2F:88:48:50:27:3D:41:B8:CE:B6:00:1F:40:36:4C:55:3E:7B:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/984313af-1a59-4f57-8dec-958207f6c75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:6000::/40 Signature Algorithm: sha256WithRSAEncryption 8d:f5:64:1a:4c:a4:33:30:c2:1c:19:86:b0:e5:4b:0e:94:7f: 44:a4:bd:ce:14:5c:00:be:e5:11:d7:02:91:c4:89:3c:ac:fb: 6f:4c:ec:24:bb:82:51:f9:14:b3:ee:5c:1a:99:56:e5:d0:e1: a8:e3:75:b6:85:1a:07:d9:dd:69:22:c6:9c:a6:74:1d:9f:cb: 7e:44:a8:04:80:a8:2b:a8:a8:ce:62:74:37:18:75:91:bb:53: 73:9b:26:00:4d:74:7b:6b:85:f1:ae:3b:59:c3:5f:5c:29:c3: 90:d3:85:ed:0d:26:4d:f8:08:27:b9:93:47:dd:23:82:c2:d4: 8d:3a:35:0f:62:cc:af:c6:dd:f0:ae:29:7b:20:fb:4f:95:84: a2:9d:88:16:af:cc:db:e6:c4:a0:6e:0a:56:1e:fb:25:cd:b6: 35:ec:43:56:f0:15:51:c0:a7:c6:cd:9c:22:7f:9e:dd:b6:04: d2:89:21:1f:d6:86:1e:88:96:46:26:a2:52:3c:98:34:ce:aa: 24:da:3c:d6:de:64:39:ae:43:32:e8:9d:1a:90:a9:8c:20:18: 82:6d:1a:0c:db:44:a6:b0:48:17:90:11:f0:a0:16:e6:29:07: a4:b2:05:91:68:56:7d:10:7e:91:a6:44:e8:85:f3:38:4e:c0: b3:4c:e4:54 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZ6+6jrhAZAp7vczFlcGlax/PcVgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAyMTU4WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTFlNDU1NWEwNzM3MTQ4ZWExMmY5YjQ5NmZmZjNlOTEw N2M0YmM4N2E1OWFkNThiNTVlNzNiYzQzMzEzOTU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMnBh8zqRg4ASlToCqGdEDh6TZKLLga5AGDyb+9njL/ySi Vg25vUkgHRIXzMSL8WsHO0nG78CE+G3ww1F+ti8hi8VUjdhO2ceIqrirwxVrGtHt F1pNFjTnjvWY8C2F/XCemvtmEEdODmfR4k04kbQv83b6ZjCMB1fmMIZ7WOno/o4s b0I1DKzl16Y4lu8Izi1CYjzBdq51PtM58TfTqkyPCVlTZoefF6S4a2FqcEaWnWlO u/g9ayafu27Vsm85B3OoExPIz1bn8VuUhePjMqtob3e26LKf6vIlLd5nQwuwj/gj bVX8zjtDwtoM48PvAQ/LLPgqst92CNpLaDolFqMNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUiC+ISFAnPUG4zrYAH0A2TFU+e5kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4NDMxM2FmLTFhNTktNGY1Ny04ZGVjLTk1ODIwN2Y2Yzc1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB84YDANBgkqhkiG9w0BAQsFAAOCAQEAjfVkGkykMzDCHBmGsOVLDpR/ RKS9zhRcAL7lEdcCkcSJPKz7b0zsJLuCUfkUs+5cGplW5dDhqON1toUaB9ndaSLG nKZ0HZ/LfkSoBICoK6iozmJ0Nxh1kbtTc5smAE10e2uF8a47WcNfXCnDkNOF7Q0m TfgIJ7mTR90jgsLUjTo1D2LMr8bd8K4peyD7T5WEop2IFq/M2+bEoG4KVh77Jc22 NexDVvAVUcCnxs2cIn+e3bYE0okhH9aGHoiWRiaiUjyYNM6qJNo81t5kOa5DMuid GpCpjCAYgm0aDNtEprBIF5AR8KAW5ikHpLIFkWhWfRB+kaZE6IXzOE7As0zkVA== -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:56 2025 by rpki-client