$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ecae66-7a27-4fbd-a8c6-2a52d26071fb.roa File: a2ecae66-7a27-4fbd-a8c6-2a52d26071fb.roa (raw, json) Hash identifier: o3J9Uq9MIkk7+Z9nl/B9rKlR36APPDsujCtZM9mZ9A0= Subject key identifier: EC:FD:C5:5C:11:37:4A:ED:5F:96:AF:09:3B:0F:FA:C5:69:F7:25:08 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 099B5532FB7AD9112A9872505F8C62536B8608AC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ecae66-7a27-4fbd-a8c6-2a52d26071fb.roa Signing time: Tue 22 Apr 2025 15:50:28 +0000 ROA not before: Tue 22 Apr 2025 15:50:28 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff7:8060::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9b:55:32:fb:7a:d9:11:2a:98:72:50:5f:8c:62:53:6b:86:08:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:50:28 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=d36e8998d07488daa28fa8781b35f502a77dc7bc09e8211472b51bbcecceec62, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cd:4e:93:3f:23:94:33:89:8f:8d:e7:db:57: 44:34:d3:4b:d4:9b:4e:ac:93:5c:ab:ec:c5:14:f0: d5:03:94:f9:50:f4:c6:51:c0:1d:87:ed:dc:1f:59: 49:5d:72:3f:a1:b6:70:c6:a5:58:3b:cc:38:01:95: 11:2c:94:44:72:52:cb:3f:4d:26:88:79:1c:91:44: 98:73:07:ad:69:0a:dd:d1:08:9e:ef:d9:87:2e:7b: 5e:95:7a:a7:96:39:6c:42:2a:2d:6f:02:48:b7:09: 68:03:d3:4c:f9:09:b8:74:86:38:b3:2e:bd:3e:a5: be:51:73:22:e6:4c:c6:1c:f1:8b:9a:64:8d:b0:d6: fd:90:7c:e6:b9:1e:e5:28:c0:77:dc:ff:86:b1:87: cd:a9:14:94:50:4d:cb:ce:17:2b:d3:b1:28:68:a1: 2c:9b:dc:60:2c:4b:3d:63:e6:41:68:f7:a6:31:84: 3a:29:05:19:46:c4:e5:d8:8b:28:99:39:5e:15:41: ef:92:79:a4:c7:97:85:55:57:48:9d:2c:0e:7d:35: 09:e9:c3:60:09:28:cb:b2:c0:af:5a:37:5d:d5:a0: b1:33:59:95:79:be:3b:87:cb:02:28:bd:d9:1a:8e: 10:a7:5e:85:7e:56:2b:59:4a:70:1d:1c:c4:cb:f0: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FD:C5:5C:11:37:4A:ED:5F:96:AF:09:3B:0F:FA:C5:69:F7:25:08 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ecae66-7a27-4fbd-a8c6-2a52d26071fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:8060::/46 Signature Algorithm: sha256WithRSAEncryption 91:b0:4e:58:93:d3:59:d5:c8:57:95:e9:b9:a4:12:8b:80:72: eb:4b:42:df:49:47:1e:bd:74:2f:92:e7:ee:cc:3b:a6:cb:0b: b3:68:ce:c3:8f:37:b9:f0:fe:ae:f2:fb:36:cd:40:f0:13:93: 7b:4f:8c:c9:7a:a8:41:8e:5b:7b:b5:4b:a3:eb:71:fc:fe:2d: 64:69:2d:d0:c8:d5:1d:4e:64:97:e6:39:23:20:1c:af:85:a1: 09:2e:6d:4a:7c:ab:89:5d:ea:8f:10:f3:3d:19:79:a3:3e:85: 38:fe:0e:ab:40:60:91:72:3f:6e:68:92:0c:aa:2e:5d:4e:d2: a1:52:e7:57:36:25:18:bf:d1:86:a5:4a:ff:9e:80:b4:fb:3f: 68:6d:8d:36:74:4e:f6:be:b4:47:3b:8f:54:20:1b:eb:66:50: e9:77:a3:af:62:67:cf:e3:25:79:36:5e:ef:71:8e:c5:8c:db: 61:cb:a7:a2:78:cf:ee:6a:1f:92:38:a6:1a:f4:81:1f:01:80: da:81:37:6b:80:47:d3:36:91:4d:c1:f5:1d:3f:38:24:eb:7a: f2:0c:41:35:36:eb:34:2c:9b:aa:e3:1d:21:68:78:9e:18:64: 0e:0c:63:b3:97:99:e8:a5:29:2a:8c:c4:34:db:c8:b7:1d:03: 4f:92:0a:e8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCZtVMvt62REqmHJQX4xiU2uGCKwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTU1MDI4WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzZlODk5OGQwNzQ4OGRhYTI4ZmE4NzgxYjM1ZjUwMmE3 N2RjN2JjMDllODIxMTQ3MmI1MWJiY2VjY2VlYzYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCzU6TPyOUM4mPjefbV0Q000vUm06sk1yr7MUU8NUDlPlQ 9MZRwB2H7dwfWUldcj+htnDGpVg7zDgBlREslERyUss/TSaIeRyRRJhzB61pCt3R CJ7v2Ycue16VeqeWOWxCKi1vAki3CWgD00z5Cbh0hjizLr0+pb5RcyLmTMYc8Yua ZI2w1v2QfOa5HuUowHfc/4axh82pFJRQTcvOFyvTsShooSyb3GAsSz1j5kFo96Yx hDopBRlGxOXYiyiZOV4VQe+SeaTHl4VVV0idLA59NQnpw2AJKMuywK9aN13VoLEz WZV5vjuHywIovdkajhCnXoV+VitZSnAdHMTL8DbdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7P3FXBE3Su1flq8JOw/6xWn3JQgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyZWNhZTY2LTdhMjctNGZiZC1hOGM2LTJhNTJkMjYwNzFmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3gGAwDQYJKoZIhvcNAQELBQADggEBAJGwTliT01nVyFeV6bmkEouA cutLQt9JRx69dC+S5+7MO6bLC7NozsOPN7nw/q7y+zbNQPATk3tPjMl6qEGOW3u1 S6Prcfz+LWRpLdDI1R1OZJfmOSMgHK+FoQkubUp8q4ld6o8Q8z0ZeaM+hTj+DqtA YJFyP25okgyqLl1O0qFS51c2JRi/0YalSv+egLT7P2htjTZ0Tva+tEc7j1QgG+tm UOl3o69iZ8/jJXk2Xu9xjsWM22HLp6J4z+5qH5I4phr0gR8BgNqBN2uAR9M2kU3B 9R0/OCTrevIMQTU26zQsm6rjHSFoeJ4YZA4MY7OXmeilKSqMxDTbyLcdA0+SCug= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:52 2025 by rpki-client