$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2360110-885d-4b32-b87d-dc39fd9d8c91.roa File: a2360110-885d-4b32-b87d-dc39fd9d8c91.roa (raw, json) Hash identifier: 2xQqVSRoFct1GKrXSGFESN0IjKWvuMT4N0Z2kfG36qI= Subject key identifier: 07:FC:8C:3B:CE:91:0F:D5:12:E0:24:48:87:B5:B0:CE:0B:F1:69:52 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4436F1B8226D65CDC7216A8A56DC6E7033883692 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2360110-885d-4b32-b87d-dc39fd9d8c91.roa Signing time: Tue 22 Apr 2025 16:20:15 +0000 ROA not before: Tue 22 Apr 2025 16:20:15 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:a4c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:36:f1:b8:22:6d:65:cd:c7:21:6a:8a:56:dc:6e:70:33:88:36:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:20:15 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=3d0540f8f9fa8b9855f0d13891b166d8403f0c583e3d64ae1ba29c201d0c7c3d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8e:36:7e:44:13:cd:a4:2c:03:c6:ae:b0:04: d5:e7:f8:15:c9:44:01:b7:8e:0e:d3:1b:fc:dd:3c: cd:81:87:76:c7:bc:3a:e5:e6:70:3a:1f:c8:90:28: c3:54:cb:60:a6:1c:e6:cc:fd:68:df:c6:4f:0a:98: 97:5d:9a:d0:fd:bc:8d:55:40:3e:6a:59:7a:6d:65: 42:56:88:16:ba:a2:67:cf:62:ba:54:fa:0b:cd:1b: 61:5c:11:d9:a8:a5:e9:73:80:1b:ea:a8:7d:b0:77: 44:48:59:32:5b:dc:57:7c:5e:06:03:2d:9f:c7:c0: 1c:3a:68:6d:9c:09:46:f7:f9:8f:50:14:cb:50:dd: 64:73:f8:b8:13:e5:06:38:2b:11:c9:66:b1:39:83: 2e:ea:dd:3c:06:ba:69:de:b2:60:f3:1b:ab:f8:42: b6:1a:81:8f:ed:f8:35:e1:db:7f:c4:79:81:85:b4: 7b:0c:e2:91:57:8e:fc:db:45:6a:00:de:b5:35:81: a1:78:0a:94:87:b8:6f:58:9b:15:11:10:a2:81:d9: fe:67:ee:97:d8:37:61:db:aa:20:16:88:f4:17:89: e8:d2:e4:65:c8:cd:e2:56:fa:46:b4:e3:2f:96:a2: c4:c2:bc:84:42:15:cc:9d:8c:bb:3e:bc:a1:9e:5b: a8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FC:8C:3B:CE:91:0F:D5:12:E0:24:48:87:B5:B0:CE:0B:F1:69:52 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2360110-885d-4b32-b87d-dc39fd9d8c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:a4c0::/46 Signature Algorithm: sha256WithRSAEncryption 68:19:0e:a3:9f:ce:2a:36:c4:31:c5:bd:8f:9a:1f:4a:56:9a: 23:d1:5f:b3:cc:0c:69:7b:4a:7e:53:75:3b:fc:38:56:72:b6: 6d:00:ad:37:ae:02:d2:17:4d:70:cc:15:64:4a:4b:c3:c4:e3: 3b:f8:4b:ae:21:01:15:62:f0:f8:57:0c:02:84:7f:db:55:f5: f1:7c:03:cb:13:8e:16:30:86:af:7f:06:db:82:d0:cb:8d:bd: b6:57:86:04:10:be:86:80:a9:29:8a:6e:1f:6c:cb:12:2e:a6: db:8e:3c:65:ce:7c:18:cb:fa:34:2f:eb:29:ce:aa:c2:51:da: ad:f4:82:8c:a0:7d:92:45:8f:9b:d7:51:75:95:42:e8:a5:d8: 33:8b:00:e9:cf:31:09:f3:62:3a:17:8d:6e:28:81:84:79:91: d6:58:46:e4:a4:eb:d3:40:1c:b9:f3:42:3e:20:ab:ae:d4:db: 44:3e:e7:1a:16:47:66:77:c5:fe:d1:a0:09:4b:4f:c1:49:28: 9b:96:25:3c:37:5a:5c:d5:6f:c5:ea:c7:49:d1:64:3c:06:dc: 7d:25:76:bc:99:5a:05:d2:6f:d7:0e:9c:b5:4a:10:ae:2d:89: 98:99:36:ae:6d:99:01:8d:d1:72:8d:9b:4e:9f:dd:33:58:89: de:c5:cc:0c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURDbxuCJtZc3HIWqKVtxucDOINpIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYyMDE1WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDA1NDBmOGY5ZmE4Yjk4NTVmMGQxMzg5MWIxNjZkODQw M2YwYzU4M2UzZDY0YWUxYmEyOWMyMDFkMGM3YzNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCajjZ+RBPNpCwDxq6wBNXn+BXJRAG3jg7TG/zdPM2Bh3bH vDrl5nA6H8iQKMNUy2CmHObM/Wjfxk8KmJddmtD9vI1VQD5qWXptZUJWiBa6omfP YrpU+gvNG2FcEdmopelzgBvqqH2wd0RIWTJb3Fd8XgYDLZ/HwBw6aG2cCUb3+Y9Q FMtQ3WRz+LgT5QY4KxHJZrE5gy7q3TwGumnesmDzG6v4QrYagY/t+DXh23/EeYGF tHsM4pFXjvzbRWoA3rU1gaF4CpSHuG9YmxUREKKB2f5n7pfYN2HbqiAWiPQXiejS 5GXIzeJW+ka04y+WosTCvIRCFcydjLs+vKGeW6gJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUB/yMO86RD9US4CRIh7WwzgvxaVIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyMzYwMTEwLTg4NWQtNGIzMi1iODdkLWRjMzlmZDlkOGM5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/7pMAwDQYJKoZIhvcNAQELBQADggEBAGgZDqOfzio2xDHFvY+aH0pW miPRX7PMDGl7Sn5TdTv8OFZytm0ArTeuAtIXTXDMFWRKS8PE4zv4S64hARVi8PhX DAKEf9tV9fF8A8sTjhYwhq9/BtuC0MuNvbZXhgQQvoaAqSmKbh9syxIuptuOPGXO fBjL+jQv6ynOqsJR2q30goygfZJFj5vXUXWVQuil2DOLAOnPMQnzYjoXjW4ogYR5 kdZYRuSk69NAHLnzQj4gq67U20Q+5xoWR2Z3xf7RoAlLT8FJKJuWJTw3WlzVb8Xq x0nRZDwG3H0ldryZWgXSb9cOnLVKEK4tiZiZNq5tmQGN0XKNm06f3TNYid7FzAw= -----END CERTIFICATE-----Generated at Sat Apr 26 19:24:00 2025 by rpki-client