$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6516091-40a7-43c9-9806-67c76e768787.roa File: a6516091-40a7-43c9-9806-67c76e768787.roa (raw, json) Hash identifier: zUCOvf8c1bzy+g2EZQ4aX7csoJ+9ahdV24WT3ZNGchM= Subject key identifier: 88:13:71:60:7C:5A:60:C0:54:7B:95:7E:A2:F5:B1:F2:B0:80:6D:37 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52E35C09C88C116C17274CCFD0BF1C0076FFC0A7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6516091-40a7-43c9-9806-67c76e768787.roa Signing time: Tue 22 Apr 2025 00:41:59 +0000 ROA not before: Tue 22 Apr 2025 00:41:59 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:3480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e3:5c:09:c8:8c:11:6c:17:27:4c:cf:d0:bf:1c:00:76:ff:c0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:41:59 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=dea0066583c4a42fe97022a35e0f914989da35e2661bb0904a9ded64e46530c1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d4:68:e5:bb:40:dc:47:13:2b:45:80:e0:51: 34:65:18:0f:73:fb:6c:d5:af:c1:f4:69:3f:24:95: f0:9d:65:db:23:9f:b8:01:ba:5b:25:a0:3f:df:37: 85:d4:fa:97:44:26:a2:d0:22:f1:6b:b0:10:fa:14: 64:5c:4c:e9:4f:d0:82:ec:45:d3:d3:cf:08:bd:46: 7e:67:55:50:2d:81:0b:06:63:38:43:a5:d2:47:03: cc:d6:b1:1e:32:75:d7:d6:03:be:4f:af:32:a6:95: a8:b5:f5:25:87:16:f1:05:93:49:fb:37:1a:c3:8c: c8:78:a6:41:db:aa:4f:4a:75:84:d1:52:87:0c:db: 76:13:0c:bf:43:5e:bf:a6:5b:50:4a:0a:92:a4:4a: d3:70:80:06:76:c5:bc:c3:bc:f8:05:23:5c:0e:e5: 89:1d:00:36:fa:6d:1d:68:6a:fd:23:25:6b:36:21: d7:91:fa:d4:e4:28:06:47:bf:b3:c3:5b:cd:0b:0c: ab:a9:05:30:4d:12:72:4c:5f:67:56:c9:5d:c8:dd: 2c:c7:ab:35:37:cb:d2:46:1b:71:61:30:48:bd:4b: ac:f4:83:fd:d5:dc:62:42:1e:1f:b2:dc:83:7c:87: 54:38:ae:62:c3:cb:89:4c:bc:a3:d3:0e:d2:9d:a0: 33:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:13:71:60:7C:5A:60:C0:54:7B:95:7E:A2:F5:B1:F2:B0:80:6D:37 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6516091-40a7-43c9-9806-67c76e768787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:3480::/48 Signature Algorithm: sha256WithRSAEncryption 38:bd:ab:28:61:76:7b:ed:9d:26:94:d9:0f:24:a9:72:fa:9d: 6e:38:8f:5b:c8:bd:cb:61:75:17:16:7c:91:88:45:43:4c:d2: 4c:bf:4e:a3:aa:4d:a9:c4:6a:fd:08:1b:cb:9a:e4:b8:ff:24: 8a:f2:43:5b:c3:3f:7b:28:21:14:ff:15:f2:be:69:e8:01:9a: 93:0d:e8:20:02:8d:05:6e:30:bc:f2:cd:fe:fe:dc:26:eb:62: c0:03:40:12:60:1d:31:25:a2:83:fc:fa:c1:98:02:d0:56:9b: aa:c1:6d:d8:d0:eb:93:89:4f:f9:f7:5f:7d:53:36:6e:35:12: 32:8e:f9:cb:76:00:d2:46:45:22:4d:08:02:85:22:3a:a0:70: 98:fe:5b:20:34:e1:db:6e:55:ef:1f:c5:6a:3c:d2:c2:95:02: a9:0b:b3:a2:84:38:13:be:0d:16:93:6d:fb:e1:2f:65:b4:19: 5d:00:83:99:e8:8b:07:fe:38:de:35:a8:5a:ca:d7:48:e0:1e: 2a:74:77:4f:c1:e9:a0:22:58:39:fd:d0:14:0e:9c:77:15:92: fe:3b:54:6f:f0:0d:55:ac:58:90:6a:ad:ff:2b:e2:e7:3f:c7: ff:d2:d0:9d:9a:5b:b7:c2:8d:ac:54:49:eb:92:89:2a:ed:d4: 9c:09:b5:ee -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUuNcCciMEWwXJ0zP0L8cAHb/wKcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDA0MTU5WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZWEwMDY2NTgzYzRhNDJmZTk3MDIyYTM1ZTBmOTE0OTg5 ZGEzNWUyNjYxYmIwOTA0YTlkZWQ2NGU0NjUzMGMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd1Gjlu0DcRxMrRYDgUTRlGA9z+2zVr8H0aT8klfCdZdsj n7gBulsloD/fN4XU+pdEJqLQIvFrsBD6FGRcTOlP0ILsRdPTzwi9Rn5nVVAtgQsG YzhDpdJHA8zWsR4yddfWA75PrzKmlai19SWHFvEFk0n7NxrDjMh4pkHbqk9KdYTR UocM23YTDL9DXr+mW1BKCpKkStNwgAZ2xbzDvPgFI1wO5YkdADb6bR1oav0jJWs2 IdeR+tTkKAZHv7PDW80LDKupBTBNEnJMX2dWyV3I3SzHqzU3y9JGG3FhMEi9S6z0 g/3V3GJCHh+y3IN8h1Q4rmLDy4lMvKPTDtKdoDMZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiBNxYHxaYMBUe5V+ovWx8rCAbTcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E2NTE2MDkxLTQwYTctNDNjOS05ODA2LTY3Yzc2ZTc2ODc4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8ANIAwDQYJKoZIhvcNAQELBQADggEBADi9qyhhdnvtnSaU2Q8kqXL6 nW44j1vIvcthdRcWfJGIRUNM0ky/TqOqTanEav0IG8ua5Lj/JIryQ1vDP3soIRT/ FfK+aegBmpMN6CACjQVuMLzyzf7+3CbrYsADQBJgHTElooP8+sGYAtBWm6rBbdjQ 65OJT/n3X31TNm41EjKO+ct2ANJGRSJNCAKFIjqgcJj+WyA04dtuVe8fxWo80sKV AqkLs6KEOBO+DRaTbfvhL2W0GV0Ag5noiwf+ON41qFrK10jgHip0d0/B6aAiWDn9 0BQOnHcVkv47VG/wDVWsWJBqrf8r4uc/x//S0J2aW7fCjaxUSeuSiSrt1JwJte4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:43:55 2025 by rpki-client