$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a887eddf-23b6-4a95-bacd-cb7f8e096ff1.roa File: a887eddf-23b6-4a95-bacd-cb7f8e096ff1.roa (raw, json) Hash identifier: zwKbQQXSRtfq+eOmyjdisz5bIBuwTyrgCBe1GcCXpUA= Subject key identifier: D7:8B:CA:E3:56:C6:F2:EA:6F:08:AD:2F:41:78:75:0C:FB:78:FB:0A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7E4918E35CA19D8CA4162CA4A6C7EECC63613103 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a887eddf-23b6-4a95-bacd-cb7f8e096ff1.roa Signing time: Tue 22 Apr 2025 15:32:55 +0000 ROA not before: Tue 22 Apr 2025 15:32:55 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:49:18:e3:5c:a1:9d:8c:a4:16:2c:a4:a6:c7:ee:cc:63:61:31:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:32:55 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=fe98ccc3d403b9d5cccb22fe66b4b2ab96783e8fcd99a15acc132bbc2592cffa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ab:b2:48:ea:3b:bb:09:c5:a7:07:eb:9f:5b: 3d:96:cd:cd:9a:98:df:95:e5:f7:05:4e:a6:ad:36: a5:14:35:0d:06:57:1c:57:70:b1:07:5e:4a:d8:8c: 95:08:f3:ad:ee:df:b2:5a:33:1a:83:a2:45:b8:ca: af:71:11:5e:d6:cc:80:3a:8c:67:e1:b4:16:f8:e9: 1e:0d:2d:1f:65:60:67:7a:05:e7:c4:3d:70:3e:c4: 81:4a:86:ed:e6:54:37:f9:e9:9f:3d:7d:94:1b:c7: 4f:f3:c3:6b:94:9d:24:57:ac:a9:3c:75:55:f3:cc: a8:05:ce:88:27:3c:17:6d:b4:a1:53:bd:8c:5b:c3: 08:61:43:25:2b:da:90:3d:c0:1b:29:5e:2a:e9:12: 3e:8b:3d:34:31:b0:78:6b:b5:82:70:df:3d:23:a1: 97:2a:e0:d5:8b:3a:7e:3f:28:17:60:d3:8e:9d:02: bc:a6:45:06:c6:bf:14:bc:cc:cc:88:2e:81:27:f7: 5f:d1:65:bb:34:30:f8:dc:b3:1d:0d:36:b3:81:8b: 2c:dc:5b:17:00:1b:b5:30:99:22:f3:6e:df:5f:ff: ef:03:f3:7d:17:72:16:85:6d:a0:62:e9:52:44:7e: 43:32:75:f9:d9:84:a7:c1:8c:a3:a6:03:47:34:0f: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8B:CA:E3:56:C6:F2:EA:6F:08:AD:2F:41:78:75:0C:FB:78:FB:0A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a887eddf-23b6-4a95-bacd-cb7f8e096ff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8000::/40 Signature Algorithm: sha256WithRSAEncryption 8d:c8:a2:e9:10:05:cc:48:f1:2a:6b:7f:b4:e9:87:29:b7:57: 05:54:0d:fb:1d:2d:81:af:29:82:6d:bc:74:0b:5d:88:c5:a8: 26:3f:98:1c:03:2f:5b:e5:d1:cd:06:42:6b:cc:19:e4:31:27: e7:09:e7:08:08:3d:cf:85:12:47:75:18:57:e6:0a:29:3b:e4: dd:7b:6f:7a:54:53:27:aa:c8:1a:4f:50:7b:f3:ea:da:62:19: 4a:ae:e3:26:f1:78:9c:74:b1:99:5c:66:c2:52:1a:7b:8b:9b: 15:2d:43:91:0d:9e:0e:04:df:b5:28:8b:97:e4:f0:df:70:84: ba:e3:30:99:46:c6:72:50:ef:4f:a3:1f:ad:54:33:33:1d:eb: 24:d5:6d:2b:ab:1c:50:1f:7e:27:41:bd:96:55:44:95:d4:b4: 7a:35:05:35:6c:a0:91:d5:a4:20:56:94:10:e3:f7:a8:1a:98: 06:7a:4f:75:c2:2f:25:05:68:8f:af:7c:52:03:b7:12:10:51: cc:8f:43:27:ea:b2:1e:95:e3:d8:80:69:e0:85:f8:0e:ff:8f: 32:d0:27:e9:83:60:e3:8d:98:24:b3:81:fd:1e:2a:74:4d:60: 20:96:07:27:20:47:9f:e7:6a:7d:22:91:63:cf:4a:84:e4:e8: f7:94:f8:ac -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfkkY41yhnYykFiykpsfuzGNhMQMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUzMjU1WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTk4Y2NjM2Q0MDNiOWQ1Y2NjYjIyZmU2NmI0YjJhYjk2 NzgzZThmY2Q5OWExNWFjYzEzMmJiYzI1OTJjZmZhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaq7JI6ju7CcWnB+ufWz2Wzc2amN+V5fcFTqatNqUUNQ0G VxxXcLEHXkrYjJUI863u37JaMxqDokW4yq9xEV7WzIA6jGfhtBb46R4NLR9lYGd6 BefEPXA+xIFKhu3mVDf56Z89fZQbx0/zw2uUnSRXrKk8dVXzzKgFzognPBdttKFT vYxbwwhhQyUr2pA9wBspXirpEj6LPTQxsHhrtYJw3z0joZcq4NWLOn4/KBdg046d ArymRQbGvxS8zMyILoEn91/RZbs0MPjcsx0NNrOBiyzcWxcAG7UwmSLzbt9f/+8D 830XchaFbaBi6VJEfkMydfnZhKfBjKOmA0c0D5BvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU14vK41bG8upvCK0vQXh1DPt4+wowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E4ODdlZGRmLTIzYjYtNGE5NS1iYWNkLWNiN2Y4ZTA5NmZmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//gDANBgkqhkiG9w0BAQsFAAOCAQEAjcii6RAFzEjxKmt/tOmHKbdX BVQN+x0tga8pgm28dAtdiMWoJj+YHAMvW+XRzQZCa8wZ5DEn5wnnCAg9z4USR3UY V+YKKTvk3XtvelRTJ6rIGk9Qe/Pq2mIZSq7jJvF4nHSxmVxmwlIae4ubFS1DkQ2e DgTftSiLl+Tw33CEuuMwmUbGclDvT6MfrVQzMx3rJNVtK6scUB9+J0G9llVEldS0 ejUFNWygkdWkIFaUEOP3qBqYBnpPdcIvJQVoj698UgO3EhBRzI9DJ+qyHpXj2IBp 4IX4Dv+PMtAn6YNg442YJLOB/R4qdE1gIJYHJyBHn+dqfSKRY89KhOTo95T4rA== -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:44 2025 by rpki-client