$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a82d155-cd0e-44c5-b30f-c6065a513667.roa File: 9a82d155-cd0e-44c5-b30f-c6065a513667.roa (raw, json) Hash identifier: U4PiwNMUyDUSqXODS44QpYiAOEIYZs2a3bfcfmnc4oQ= Subject key identifier: 1D:25:C9:A9:5F:66:36:38:62:4F:B2:91:CC:53:42:EA:05:88:1A:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 77D11CF9E1D684707CCEE28E6DF690EA410AD93B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a82d155-cd0e-44c5-b30f-c6065a513667.roa Signing time: Mon 21 Apr 2025 18:21:49 +0000 ROA not before: Mon 21 Apr 2025 18:21:49 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f61:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d1:1c:f9:e1:d6:84:70:7c:ce:e2:8e:6d:f6:90:ea:41:0a:d9:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 18:21:49 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=970e75499acaf577dfc55df0676ee5f939b5a39d5a80d6f0fa0d63bc3c472838, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3c:e8:83:e5:e6:ef:9b:ce:19:e1:16:8b:34: 68:a4:32:3e:22:3d:96:da:ff:b8:a7:d4:f4:f2:3c: cf:2c:3a:14:11:f7:29:8a:a8:49:73:60:47:6b:85: 9f:93:ee:4d:20:a3:f8:1c:75:71:d8:f7:49:11:d4: 06:b9:c2:77:7a:c4:20:93:1a:41:af:75:93:5c:67: 64:5e:ed:e1:8b:56:39:1e:4e:f5:e2:9f:fb:6a:76: ef:37:73:f9:51:a5:cc:fc:6f:34:f9:21:87:15:27: 87:19:39:02:62:b3:99:c6:59:53:ac:92:10:ab:b8: 31:d7:f9:57:9c:84:a5:9f:41:f4:0f:9a:3a:88:60: 96:1e:7c:66:a1:27:87:c4:0c:99:6d:1e:be:c7:af: 69:c4:bd:52:31:c9:a4:f6:90:90:7d:af:ae:e2:49: 98:11:1b:dd:e1:f3:32:ca:1e:73:01:6f:86:47:98: db:91:9e:98:a5:67:59:a2:10:1c:b1:8a:ee:59:35: 07:ca:69:89:ea:d5:62:bb:0b:62:87:f4:68:f6:48: 4c:19:ec:74:4d:35:1f:f3:46:1c:5e:e3:c2:3f:07: e9:09:bb:75:3f:ff:60:fe:c0:13:b3:72:a9:dd:ae: 12:bc:8c:7f:eb:80:ed:71:bc:41:f6:42:58:d3:6d: 11:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:25:C9:A9:5F:66:36:38:62:4F:B2:91:CC:53:42:EA:05:88:1A:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a82d155-cd0e-44c5-b30f-c6065a513667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 24:0a:14:7a:cc:dc:55:f7:48:99:a9:c8:77:30:cc:34:47:5f: 05:0b:9a:61:8b:ca:2f:f5:04:83:69:3c:ca:b6:b2:f5:8e:e4: 29:0e:e4:59:5e:97:0c:e3:c9:c3:ff:14:db:a4:c1:86:ea:7d: d0:90:93:ca:8e:81:94:f5:53:3c:3b:3e:de:f2:16:a7:f4:f5: 5e:f1:30:66:c4:8f:c0:74:0f:f0:24:66:be:a7:f1:63:5c:6e: 3a:4c:b3:3e:97:35:0a:3f:08:a0:74:e7:2b:6e:17:cc:4c:4b: 6a:7e:c1:a1:20:24:f6:4a:26:1c:51:bf:18:be:43:b6:a6:51: 72:e0:e9:a9:5b:c9:90:1c:eb:9b:8e:da:5b:96:37:97:8e:a7: 84:d7:ad:fc:82:b7:6f:90:62:79:db:18:d1:09:e7:b3:b7:e7: 82:89:3e:fb:33:fa:97:1e:18:4e:ee:9c:7f:81:76:1f:c9:96: ce:a5:45:1c:ea:5b:6e:f7:5c:62:46:25:74:36:4c:b5:08:86: d5:5a:e8:e3:bd:f4:ab:4d:da:71:ba:c1:ea:a4:40:25:17:bf: 32:81:65:bd:48:1c:26:45:61:85:bf:7e:40:d6:95:1f:61:eb: 90:2e:12:f1:b1:89:7f:cf:88:01:eb:57:d4:ee:8e:fe:fe:04: 82:99:6c:cd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd9Ec+eHWhHB8zuKObfaQ6kEK2TswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTgyMTQ5WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzBlNzU0OTlhY2FmNTc3ZGZjNTVkZjA2NzZlZTVmOTM5 YjVhMzlkNWE4MGQ2ZjBmYTBkNjNiYzNjNDcyODM4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSPOiD5ebvm84Z4RaLNGikMj4iPZba/7in1PTyPM8sOhQR 9ymKqElzYEdrhZ+T7k0go/gcdXHY90kR1Aa5wnd6xCCTGkGvdZNcZ2Re7eGLVjke TvXin/tqdu83c/lRpcz8bzT5IYcVJ4cZOQJis5nGWVOskhCruDHX+VechKWfQfQP mjqIYJYefGahJ4fEDJltHr7Hr2nEvVIxyaT2kJB9r67iSZgRG93h8zLKHnMBb4ZH mNuRnpilZ1miEByxiu5ZNQfKaYnq1WK7C2KH9Gj2SEwZ7HRNNR/zRhxe48I/B+kJ u3U//2D+wBOzcqndrhK8jH/rgO1xvEH2QljTbRGhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHSXJqV9mNjhiT7KRzFNC6gWIGnwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlhODJkMTU1LWNkMGUtNDRjNS1iMzBmLWM2MDY1YTUxMzY2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hIMAwDQYJKoZIhvcNAQELBQADggEBACQKFHrM3FX3SJmpyHcwzDRH XwULmmGLyi/1BINpPMq2svWO5CkO5FlelwzjycP/FNukwYbqfdCQk8qOgZT1Uzw7 Pt7yFqf09V7xMGbEj8B0D/AkZr6n8WNcbjpMsz6XNQo/CKB05ytuF8xMS2p+waEg JPZKJhxRvxi+Q7amUXLg6albyZAc65uO2luWN5eOp4TXrfyCt2+QYnnbGNEJ57O3 54KJPvsz+pceGE7unH+Bdh/Jls6lRRzqW273XGJGJXQ2TLUIhtVa6OO99KtN2nG6 weqkQCUXvzKBZb1IHCZFYYW/fkDWlR9h65AuEvGxiX/PiAHrV9Tujv7+BIKZbM0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:20:17 2025 by rpki-client