$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a934e471-5df1-4419-ac71-1200ef98b113.roa File: a934e471-5df1-4419-ac71-1200ef98b113.roa (raw, json) Hash identifier: n7lNdEnf0jc+XBwWZftAok7+sxcrdQNiKvOq2t0fiQ0= Subject key identifier: 0D:53:7C:EB:39:FC:29:94:8A:4A:01:C5:40:92:E3:4C:7F:97:4A:F3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6AF2251E872E4A9617AA8812CEE1AD94428F8D05 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a934e471-5df1-4419-ac71-1200ef98b113.roa Signing time: Tue 22 Apr 2025 15:20:31 +0000 ROA not before: Tue 22 Apr 2025 15:20:31 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:2040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f2:25:1e:87:2e:4a:96:17:aa:88:12:ce:e1:ad:94:42:8f:8d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:20:31 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=3604a5c4da22cb84688ad3bae1ee17a7bcfddfe2de68f74f664af75b17064f21, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7f:a1:ec:1b:4d:4e:e1:49:39:88:d3:5d:97: 23:45:77:dd:d2:87:0f:cc:4a:8b:8c:44:a2:2e:32: aa:34:2c:e7:d9:70:ed:ba:11:08:30:50:37:a7:26: 07:2d:fe:26:75:30:68:ac:e7:12:f8:a2:b1:8d:1d: 42:30:75:84:e6:bd:65:c3:48:46:dd:41:c5:86:62: d2:62:59:95:7f:53:c5:8f:fc:58:2d:f9:bb:57:1d: 16:e9:f4:76:51:8e:e3:60:ba:08:cf:36:72:89:ad: bf:e8:ff:d7:c4:f4:20:c9:f8:df:34:39:fa:65:de: 1c:47:68:09:ce:f7:a2:f7:9d:5c:04:a6:b9:25:a1: 77:18:d9:57:6b:e3:2c:b1:1d:ee:28:28:0b:7f:f9: c1:5c:8f:06:5b:76:f2:94:c5:b2:43:c6:b4:dc:e4: 5b:b0:d0:6e:f1:fc:66:55:8b:c4:ae:82:18:53:85: 6d:6b:39:a3:46:4b:96:fa:3d:6b:82:5e:d1:a6:8f: 79:50:56:73:8b:59:fa:23:3e:13:ba:40:8a:30:e3: 5f:84:87:c0:29:47:82:0d:d1:33:45:71:eb:88:07: 19:0e:0d:7b:c0:13:9d:e7:75:dd:72:15:c4:7e:f4: 31:42:a7:ba:15:fd:d6:af:b5:18:0e:55:9a:93:f3: a8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:53:7C:EB:39:FC:29:94:8A:4A:01:C5:40:92:E3:4C:7F:97:4A:F3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a934e471-5df1-4419-ac71-1200ef98b113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:2040::/46 Signature Algorithm: sha256WithRSAEncryption 44:89:1f:f3:82:4c:1e:c8:0b:32:6c:55:99:aa:e5:8b:34:c4: 31:b5:65:b5:10:8c:65:05:7c:07:98:f0:1e:3c:23:48:d7:18: 6f:f0:64:c4:75:77:db:b1:ba:b7:f2:84:a2:a5:60:7e:7f:83: 22:ca:10:d2:d9:ff:45:67:8d:66:9d:72:f6:64:9c:5b:0c:46: f2:35:8a:2d:4b:e5:74:89:c0:94:df:cd:bd:b7:4f:02:46:9b: 46:25:d6:c2:0a:7b:71:c6:3a:bc:f6:5e:9d:84:86:ff:45:85: a6:26:58:7c:8d:bb:89:34:5e:fe:86:8f:90:3c:33:c3:db:0e: 44:10:fb:1c:fa:fa:58:63:6e:77:68:66:67:f1:35:52:cc:a9: 08:01:39:50:82:3c:dd:5f:01:59:97:fb:0d:a1:2b:44:0b:70: 96:d9:35:af:2a:f9:85:2f:a7:01:cd:14:9a:83:8d:05:1d:44: 01:33:fc:c4:d9:f4:9b:83:8d:e8:04:f3:23:31:4b:95:ad:8d: 48:70:ae:21:51:0f:42:46:5b:49:1b:ab:88:ae:02:0f:ba:60: d7:9f:8b:58:90:6f:6a:14:86:f9:4c:41:f5:7a:4e:1f:4e:d6: 83:23:6d:c9:5f:80:2f:53:59:c9:5b:6e:b7:7f:40:a7:7a:ed: 61:35:96:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUavIlHocuSpYXqogSzuGtlEKPjQUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUyMDMxWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjA0YTVjNGRhMjJjYjg0Njg4YWQzYmFlMWVlMTdhN2Jj ZmRkZmUyZGU2OGY3NGY2NjRhZjc1YjE3MDY0ZjIxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQf6HsG01O4Uk5iNNdlyNFd93Shw/MSouMRKIuMqo0LOfZ cO26EQgwUDenJgct/iZ1MGis5xL4orGNHUIwdYTmvWXDSEbdQcWGYtJiWZV/U8WP /Fgt+btXHRbp9HZRjuNgugjPNnKJrb/o/9fE9CDJ+N80Ofpl3hxHaAnO96L3nVwE prkloXcY2Vdr4yyxHe4oKAt/+cFcjwZbdvKUxbJDxrTc5Fuw0G7x/GZVi8SughhT hW1rOaNGS5b6PWuCXtGmj3lQVnOLWfojPhO6QIow41+Eh8ApR4IN0TNFceuIBxkO DXvAE53ndd1yFcR+9DFCp7oV/davtRgOVZqT86jXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDVN86zn8KZSKSgHFQJLjTH+XSvMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E5MzRlNDcxLTVkZjEtNDQxOS1hYzcxLTEyMDBlZjk4YjExMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3IEAwDQYJKoZIhvcNAQELBQADggEBAESJH/OCTB7ICzJsVZmq5Ys0 xDG1ZbUQjGUFfAeY8B48I0jXGG/wZMR1d9uxurfyhKKlYH5/gyLKENLZ/0VnjWad cvZknFsMRvI1ii1L5XSJwJTfzb23TwJGm0Yl1sIKe3HGOrz2Xp2Ehv9FhaYmWHyN u4k0Xv6Gj5A8M8PbDkQQ+xz6+lhjbndoZmfxNVLMqQgBOVCCPN1fAVmX+w2hK0QL cJbZNa8q+YUvpwHNFJqDjQUdRAEz/MTZ9JuDjegE8yMxS5WtjUhwriFRD0JGW0kb q4iuAg+6YNefi1iQb2oUhvlMQfV6Th9O1oMjbclfgC9TWclbbrd/QKd67WE1lts= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:56 2025 by rpki-client