$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a6ff27f-3952-408d-9589-6f9c0a6d7883.roa File: 9a6ff27f-3952-408d-9589-6f9c0a6d7883.roa (raw, json) Hash identifier: 01LymU5zz10cG+i/ZskQZce9DTyjwbVKmBc5FGnpAjw= Subject key identifier: 06:C7:74:6C:96:56:59:94:35:83:74:39:EF:C0:64:50:4C:1D:13:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 48622B94E0DA053ED119B1B7FE74070458CCDDEA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a6ff27f-3952-408d-9589-6f9c0a6d7883.roa Signing time: Tue 22 Apr 2025 16:11:22 +0000 ROA not before: Tue 22 Apr 2025 16:11:22 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:5040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:62:2b:94:e0:da:05:3e:d1:19:b1:b7:fe:74:07:04:58:cc:dd:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:11:22 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=df913be2b0fec336b9435d49a8d717fff91688c04a4f35b31d0afd029ff478d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a4:67:02:61:e6:19:56:55:0d:98:c2:7b:ee: 16:4c:6f:ed:b7:49:f5:19:78:6d:7e:0e:db:8e:da: e6:80:5b:fc:b8:ab:94:ad:f4:78:d6:61:03:35:7d: 93:ab:8a:76:b9:7c:ce:18:b8:cc:4b:d2:d7:cc:d9: cf:5a:8a:bc:7f:0f:e5:e7:64:ad:b2:d3:f5:31:e1: d9:e5:c8:9c:30:cc:57:8f:22:6c:87:23:93:aa:17: dc:be:52:2d:cd:8c:e3:01:dc:5a:62:a6:78:33:25: e2:bb:c1:61:09:1c:a7:c6:69:04:39:08:1f:c7:9f: d0:1f:fb:1a:df:a3:1e:55:87:f0:3d:ce:01:e5:aa: ad:95:a5:98:72:70:1e:e5:65:60:65:f3:fc:7b:86: 79:9f:88:a8:d4:b9:19:6f:cd:b7:a4:0d:66:63:32: e2:f9:f5:e6:3c:71:c8:6e:de:7d:4f:c6:54:83:a0: 7c:38:b8:ef:ef:05:4a:e4:79:44:dd:67:38:87:c6: 79:28:f3:b5:8f:4f:d6:2c:c0:48:1e:0a:d8:b4:ff: f3:77:2e:58:a2:2f:15:14:39:de:72:2a:e2:17:15: f7:d4:4a:44:32:4b:47:4e:cb:1d:17:26:6f:1c:0a: 70:59:78:24:1e:1c:1a:cb:32:f4:0a:7b:11:bc:39: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C7:74:6C:96:56:59:94:35:83:74:39:EF:C0:64:50:4C:1D:13:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a6ff27f-3952-408d-9589-6f9c0a6d7883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:5040::/46 Signature Algorithm: sha256WithRSAEncryption b8:3a:3a:80:65:f7:b9:2b:03:2a:c6:f0:ba:50:8f:1a:c3:2c: 7e:28:c4:ca:73:d5:07:f6:08:3c:71:9d:e9:4a:1c:e4:08:72: f1:ed:56:0f:d1:04:a6:d4:31:11:3c:b4:48:6c:32:29:2c:27: 65:14:d7:f5:81:77:e0:dd:66:93:cd:30:a0:63:75:c6:9b:e1: f9:81:a6:86:31:4c:52:ae:ef:32:05:63:a0:64:cb:38:3c:57: 44:b3:05:30:c9:92:c8:3d:e4:cd:35:a3:a3:75:68:64:b0:c9: 19:72:1d:d9:fb:e1:ee:6a:b8:54:a9:e9:38:15:7e:53:f9:43: a4:b0:ce:09:32:c0:e9:d9:53:09:0e:a2:c1:55:78:0f:c4:61: 0d:33:87:7d:b4:24:7a:c4:c4:68:a1:e6:99:62:9c:73:f8:d1: 12:2f:65:79:77:08:51:31:08:3e:19:d7:36:d9:d4:1f:f1:5c: ec:ca:6f:09:8d:8f:f0:19:e7:54:55:e7:76:b8:78:9e:27:f9: 57:37:72:5c:10:6b:6b:96:b3:31:ff:90:34:9b:e9:0f:9a:73: be:ab:c8:b1:c3:74:5c:3c:d2:3d:e5:9a:94:4a:5b:e8:68:d2: 35:c1:e3:63:1b:58:d7:62:2e:5f:ab:27:1d:d3:ba:b0:86:4e: af:37:f5:41 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSGIrlODaBT7RGbG3/nQHBFjM3eowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYxMTIyWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjkxM2JlMmIwZmVjMzM2Yjk0MzVkNDlhOGQ3MTdmZmY5 MTY4OGMwNGE0ZjM1YjMxZDBhZmQwMjlmZjQ3OGQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUpGcCYeYZVlUNmMJ77hZMb+23SfUZeG1+DtuO2uaAW/y4 q5St9HjWYQM1fZOrina5fM4YuMxL0tfM2c9airx/D+XnZK2y0/Ux4dnlyJwwzFeP ImyHI5OqF9y+Ui3NjOMB3FpipngzJeK7wWEJHKfGaQQ5CB/Hn9Af+xrfox5Vh/A9 zgHlqq2VpZhycB7lZWBl8/x7hnmfiKjUuRlvzbekDWZjMuL59eY8cchu3n1PxlSD oHw4uO/vBUrkeUTdZziHxnko87WPT9YswEgeCti0//N3LliiLxUUOd5yKuIXFffU SkQyS0dOyx0XJm8cCnBZeCQeHBrLMvQKexG8Od1BAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBsd0bJZWWZQ1g3Q578BkUEwdE7kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlhNmZmMjdmLTM5NTItNDA4ZC05NTg5LTZmOWMwYTZkNzg4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3UEAwDQYJKoZIhvcNAQELBQADggEBALg6OoBl97krAyrG8LpQjxrD LH4oxMpz1Qf2CDxxnelKHOQIcvHtVg/RBKbUMRE8tEhsMiksJ2UU1/WBd+DdZpPN MKBjdcab4fmBpoYxTFKu7zIFY6Bkyzg8V0SzBTDJksg95M01o6N1aGSwyRlyHdn7 4e5quFSp6TgVflP5Q6SwzgkywOnZUwkOosFVeA/EYQ0zh320JHrExGih5plinHP4 0RIvZXl3CFExCD4Z1zbZ1B/xXOzKbwmNj/AZ51RV53a4eJ4n+Vc3clwQa2uWszH/ kDSb6Q+ac76ryLHDdFw80j3lmpRKW+ho0jXB42MbWNdiLl+rJx3TurCGTq839UE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:29 2025 by rpki-client