$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa File: aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa (raw, json) Hash identifier: szbbG305x/Lt1Y0b9VcKxtKl2GjI+uuKDO4cGTWtt/8= Subject key identifier: 82:F8:51:7E:15:53:3C:67:5F:EC:D9:5F:21:4D:FC:B4:31:59:81:03 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6C6E20DC350BB237EDA13BEBF2F575DBA8B72E95 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa Signing time: Tue 22 Apr 2025 00:21:06 +0000 ROA not before: Tue 22 Apr 2025 00:21:06 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 7224 IP address blocks: 2600:1ffd:1008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6e:20:dc:35:0b:b2:37:ed:a1:3b:eb:f2:f5:75:db:a8:b7:2e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:21:06 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=bf50b81ec369bffddb0673225ea9f5e6233b11b7ade0d7f934d52a8be1cb594d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:55:1b:9b:99:60:3a:8c:d5:93:c0:60:1f:71: aa:76:33:00:c6:92:40:a8:4d:d8:54:4f:b1:89:0c: a0:1f:f9:2e:dc:b5:e7:26:20:bb:a9:d8:bd:3e:09: c9:b8:d4:df:95:c0:79:e2:50:72:d1:9e:12:4a:94: 3d:5a:8e:e5:34:3b:da:e2:db:49:b8:44:d8:16:6a: da:92:8b:4b:1b:4a:cb:ef:b8:e7:6d:e5:38:26:ff: 8a:ca:22:65:92:83:60:99:66:1f:ab:92:20:9e:dc: 4b:9d:0f:5c:a0:e6:9f:58:d8:ca:2b:14:2f:1b:51: 0d:f9:bd:29:79:96:1a:2e:6a:3e:5b:65:b0:84:08: b1:07:5b:a9:77:33:b2:91:74:14:1c:26:34:f0:11: cf:27:91:69:1c:cb:05:98:12:55:f9:ea:84:fb:8c: d4:01:22:70:38:c6:01:93:4c:ec:a6:ee:64:6f:51: d5:2a:80:45:5e:45:9e:81:aa:ac:64:09:eb:ad:57: bb:36:f2:51:3e:e1:a7:52:3b:9c:e7:65:af:a4:ca: 58:67:c7:57:b1:96:f0:24:9b:6b:0e:ef:20:89:0f: e8:aa:e4:83:3b:ae:6a:b9:96:66:4b:ac:2e:58:26: 38:fd:34:08:69:5b:14:4a:6c:88:fa:27:85:5f:01: 74:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F8:51:7E:15:53:3C:67:5F:EC:D9:5F:21:4D:FC:B4:31:59:81:03 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:1008::/48 Signature Algorithm: sha256WithRSAEncryption c5:99:b1:a8:b2:7b:27:eb:f3:92:32:73:cb:c7:a5:06:44:99: 32:f1:4f:f9:ec:e6:be:a7:ff:8e:63:68:66:9a:f2:4f:22:33: e8:c2:0e:72:bb:a6:7e:80:e9:5b:95:ac:ac:29:54:98:a9:22: 29:69:90:14:98:a1:5f:84:93:b7:b3:06:15:bd:0d:95:f1:5b: 57:33:ec:f2:33:b3:cf:30:7f:05:b5:cc:9e:70:94:b5:b8:07: f7:d2:00:6b:ef:58:b5:4d:87:ab:a5:73:06:ef:2f:5c:01:de: 6f:cd:d6:75:4e:56:14:53:2a:b3:4a:d7:ab:0f:97:4d:3d:30: bc:ae:f6:eb:62:dd:5a:3b:30:f2:44:de:e5:e3:6f:ad:6d:35: f9:4d:4d:2e:2b:81:b3:ea:5b:09:9e:7f:be:ff:81:fb:3d:e7: e4:78:36:fc:25:12:a5:a3:ea:f0:8f:17:ca:09:e6:37:70:c3: 6b:c6:87:49:69:ac:7c:e6:83:23:b4:fb:35:12:0f:c6:ba:45: 67:0d:3e:ec:2b:39:eb:c6:1f:e1:58:b3:3c:94:6a:f8:38:32: c5:18:70:4a:1a:61:d0:ba:92:36:e8:62:7e:d1:2c:b7:c1:6c: 0a:c9:8a:b6:9c:89:f8:7d:cc:0b:3f:06:2a:52:a1:c9:2a:ff: 97:a5:01:a5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbG4g3DULsjftoTvr8vV126i3LpUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAyMTA2WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjUwYjgxZWMzNjliZmZkZGIwNjczMjI1ZWE5ZjVlNjIz M2IxMWI3YWRlMGQ3ZjkzNGQ1MmE4YmUxY2I1OTRkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnVRubmWA6jNWTwGAfcap2MwDGkkCoTdhUT7GJDKAf+S7c tecmILup2L0+Ccm41N+VwHniUHLRnhJKlD1ajuU0O9ri20m4RNgWatqSi0sbSsvv uOdt5Tgm/4rKImWSg2CZZh+rkiCe3EudD1yg5p9Y2MorFC8bUQ35vSl5lhouaj5b ZbCECLEHW6l3M7KRdBQcJjTwEc8nkWkcywWYElX56oT7jNQBInA4xgGTTOym7mRv UdUqgEVeRZ6BqqxkCeutV7s28lE+4adSO5znZa+kylhnx1exlvAkm2sO7yCJD+iq 5IM7rmq5lmZLrC5YJjj9NAhpWxRKbIj6J4VfAXTxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgvhRfhVTPGdf7NlfIU38tDFZgQMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhNGI5M2M0LTUxMjMtNGQyZi1hMmU0LWRkOThhYmMxOWU3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9EAgwDQYJKoZIhvcNAQELBQADggEBAMWZsaiyeyfr85Iyc8vHpQZE mTLxT/ns5r6n/45jaGaa8k8iM+jCDnK7pn6A6VuVrKwpVJipIilpkBSYoV+Ek7ez BhW9DZXxW1cz7PIzs88wfwW1zJ5wlLW4B/fSAGvvWLVNh6ulcwbvL1wB3m/N1nVO VhRTKrNK16sPl009MLyu9uti3Vo7MPJE3uXjb61tNflNTS4rgbPqWwmef77/gfs9 5+R4NvwlEqWj6vCPF8oJ5jdww2vGh0lprHzmgyO0+zUSD8a6RWcNPuwrOevGH+FY szyUavg4MsUYcEoaYdC6kjboYn7RLLfBbArJiracifh9zAs/BipSockq/5elAaU= -----END CERTIFICATE-----Generated at Sat Apr 26 20:52:19 2025 by rpki-client