$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98c67ad0-cdb3-438b-bc73-6caa17c508f1.roa File: 98c67ad0-cdb3-438b-bc73-6caa17c508f1.roa (raw, json) Hash identifier: b1cWVbnOO1tFOfpZOwByXZzIYXZq6ppABKaiP8299q8= Subject key identifier: 9E:66:B4:C1:EA:34:62:B9:08:AB:56:67:5C:73:87:B0:FE:AF:DF:15 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 547E406C86729DF2EAAEAA3D09CD879025DE7A9F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98c67ad0-cdb3-438b-bc73-6caa17c508f1.roa Signing time: Tue 22 Apr 2025 15:50:15 +0000 ROA not before: Tue 22 Apr 2025 15:50:15 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:7e:40:6c:86:72:9d:f2:ea:ae:aa:3d:09:cd:87:90:25:de:7a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:50:15 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=82533bee263cb26c03fd4be0b7f658266985a7886b402555b4beec315b4f1083, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5b:cc:67:4a:e7:f9:3e:e1:5d:c5:b8:2a:d5: c4:75:9d:0f:c9:74:9d:6d:11:e9:74:58:d6:47:32: 55:c8:8a:8a:28:bb:c2:bb:7d:9c:d7:71:a0:49:7e: fb:50:d3:ed:7e:e8:ff:76:e7:c0:95:bd:50:2e:85: b1:ef:f9:f2:0b:a6:21:eb:8c:21:64:83:db:bd:93: 63:85:0c:35:ad:a1:d7:27:6c:11:a0:20:92:21:e7: 5a:13:92:bf:16:5e:33:64:97:97:c3:f3:b8:a7:86: 92:31:45:7e:b0:e1:41:27:b0:d4:8c:bc:f3:d3:31: 55:f5:2d:e8:2c:ae:9b:f9:bd:f3:bc:16:7b:92:cd: c2:8b:2c:75:2c:20:53:01:6b:fe:05:44:fd:a9:c1: 23:bf:9c:86:34:57:8b:c6:79:53:0f:05:64:09:1f: 6b:ac:14:2c:37:00:a2:af:b8:4d:65:dd:20:8d:db: 0c:12:85:78:48:41:34:75:2a:d2:f5:ab:d0:ad:36: 28:1c:7b:d9:6d:11:5c:2a:8e:3b:7f:1f:aa:75:f7: ea:89:67:c8:d2:b5:d8:9e:2e:ca:a6:c1:c8:52:5d: 85:81:0c:55:7f:f3:b3:a8:74:1f:01:c6:9f:6c:99: af:69:b1:71:8a:ae:6e:a2:b0:05:0c:42:35:5a:ab: 64:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:66:B4:C1:EA:34:62:B9:08:AB:56:67:5C:73:87:B0:FE:AF:DF:15 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98c67ad0-cdb3-438b-bc73-6caa17c508f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:5000::/40 Signature Algorithm: sha256WithRSAEncryption 05:3e:ef:f2:cd:ad:32:51:f1:9b:ee:e0:eb:b6:3a:fa:d6:c4: 08:b9:22:eb:64:02:9d:8a:c3:a0:2f:cc:6b:df:67:d7:27:f7: d6:db:a6:ef:60:07:df:b9:f8:5c:b7:fc:71:ed:65:c1:1d:37: 45:33:f0:b1:38:4e:0c:c9:4a:68:bb:d6:5a:7d:b9:be:3f:3d: 23:8e:28:52:0a:43:1e:1c:20:e9:85:ff:a1:59:45:3a:b0:3b: a6:86:06:18:04:c9:c0:13:d8:7b:26:04:0e:af:eb:de:81:eb: f2:da:37:95:af:ba:a7:9b:c2:89:1f:3a:f4:8a:8a:bc:c1:54: ff:6d:4e:2f:70:89:75:0b:ca:1f:bc:2f:7b:73:6c:d1:b0:b9: b8:a2:e7:da:83:3e:eb:32:ad:b7:69:c5:ac:c0:70:1b:e5:80: 3b:b9:89:8e:0e:c8:ed:28:47:c3:aa:49:dd:77:9b:14:a7:5f: fb:1d:c2:55:b7:fa:b4:59:f0:bd:4f:f1:e6:63:31:23:43:45: 48:a2:28:d4:5b:c5:fd:55:54:91:fd:9b:0c:b1:49:dd:06:b4: 73:db:11:0e:f6:0f:46:5a:99:b6:63:3c:b7:7c:2c:f1:97:cb: 4d:5f:fd:d5:88:16:5a:f3:78:cb:51:5b:14:9c:ea:b8:1a:0a: 3b:5c:95:5d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVH5AbIZynfLqrqo9Cc2HkCXeep8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTU1MDE1WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MjUzM2JlZTI2M2NiMjZjMDNmZDRiZTBiN2Y2NTgyNjY5 ODVhNzg4NmI0MDI1NTViNGJlZWMzMTViNGYxMDgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaW8xnSuf5PuFdxbgq1cR1nQ/JdJ1tEel0WNZHMlXIiooo u8K7fZzXcaBJfvtQ0+1+6P9258CVvVAuhbHv+fILpiHrjCFkg9u9k2OFDDWtodcn bBGgIJIh51oTkr8WXjNkl5fD87inhpIxRX6w4UEnsNSMvPPTMVX1Legsrpv5vfO8 FnuSzcKLLHUsIFMBa/4FRP2pwSO/nIY0V4vGeVMPBWQJH2usFCw3AKKvuE1l3SCN 2wwShXhIQTR1KtL1q9CtNigce9ltEVwqjjt/H6p19+qJZ8jStdieLsqmwchSXYWB DFV/87OodB8Bxp9sma9psXGKrm6isAUMQjVaq2SRAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUnma0weo0YrkIq1ZnXHOHsP6v3xUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk4YzY3YWQwLWNkYjMtNDM4Yi1iYzczLTZjYWExN2M1MDhmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9hUDANBgkqhkiG9w0BAQsFAAOCAQEABT7v8s2tMlHxm+7g67Y6+tbE CLki62QCnYrDoC/Ma99n1yf31tum72AH37n4XLf8ce1lwR03RTPwsThODMlKaLvW Wn25vj89I44oUgpDHhwg6YX/oVlFOrA7poYGGATJwBPYeyYEDq/r3oHr8to3la+6 p5vCiR869IqKvMFU/21OL3CJdQvKH7wve3Ns0bC5uKLn2oM+6zKtt2nFrMBwG+WA O7mJjg7I7ShHw6pJ3XebFKdf+x3CVbf6tFnwvU/x5mMxI0NFSKIo1FvF/VVUkf2b DLFJ3Qa0c9sRDvYPRlqZtmM8t3ws8ZfLTV/91YgWWvN4y1FbFJzquBoKO1yVXQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:11 2025 by rpki-client