$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac2b0034-4b76-4f93-b423-ea6b7faf42e9.roa File: ac2b0034-4b76-4f93-b423-ea6b7faf42e9.roa (raw, json) Hash identifier: B3T6CmA8b7euIpYKzn/BzqBEyDNtW4+weuVl7Vg56VE= Subject key identifier: 10:FD:24:5E:9A:76:F1:82:77:C8:E9:71:8B:27:23:78:8B:8F:72:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03E4D95D2D98C40524E334C024BA49BC942020D9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac2b0034-4b76-4f93-b423-ea6b7faf42e9.roa Signing time: Tue 22 Apr 2025 15:01:48 +0000 ROA not before: Tue 22 Apr 2025 15:01:48 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ffb:8020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e4:d9:5d:2d:98:c4:05:24:e3:34:c0:24:ba:49:bc:94:20:20:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:01:48 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=d32efb82ea3bc1054da844822732d663c5213b1d2745e6fdd383e0ba0f5f7550, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:35:6b:26:59:da:66:b5:11:e6:a7:7b:21:50: 21:db:59:e0:84:ea:90:0a:68:0b:3a:94:21:be:8e: 2f:44:88:ac:68:59:75:00:2f:d8:0a:0c:e1:43:e4: 2b:07:0d:2a:c6:e8:57:3d:dc:d9:08:d4:ab:e4:15: 36:e7:68:90:06:90:ec:9c:b8:0a:34:32:94:18:0e: df:8a:45:2f:d8:b9:d8:6d:d5:5a:59:2f:aa:bd:93: 0e:69:58:25:c9:ab:38:5f:fc:52:f9:4c:42:9f:eb: 31:ae:f2:b3:94:82:54:d5:d1:b2:1c:d5:5b:5f:3b: c5:58:cc:14:2c:7f:7f:ae:f1:0b:42:7a:fd:c4:0b: 02:89:12:0e:1a:d1:4a:ce:9c:f9:ad:eb:b1:09:85: 0d:8c:31:41:95:40:df:db:15:0f:f0:fb:ae:a2:49: 9e:7b:f7:a9:97:6c:23:68:52:cf:bf:de:72:2d:32: 15:79:4e:bd:97:00:5f:68:f9:ce:91:b4:2b:8b:8a: b3:47:09:16:50:12:e4:95:8d:8a:0c:61:1f:a5:5e: 48:25:be:ca:b9:be:14:d3:27:38:52:6c:92:17:41: 0e:78:7d:6f:3b:e6:95:d4:cf:7e:30:03:ee:50:53: 05:e8:74:7b:d7:49:ad:5b:2a:fd:33:0d:23:3b:3e: 77:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FD:24:5E:9A:76:F1:82:77:C8:E9:71:8B:27:23:78:8B:8F:72:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac2b0034-4b76-4f93-b423-ea6b7faf42e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:8020::/46 Signature Algorithm: sha256WithRSAEncryption 3b:a8:91:ce:e4:86:2a:df:fd:df:73:19:59:dc:91:20:ca:dd: ea:10:fe:cb:85:51:9f:f3:50:5b:ca:0a:33:89:6c:ec:28:fa: 2c:b1:92:24:bf:39:77:03:34:0f:0c:55:eb:d7:e0:8c:92:23: 56:bb:f4:31:34:26:5a:44:8b:dc:8e:99:1c:e0:48:93:38:07: 11:b0:72:69:b0:b2:41:9b:7e:2c:02:c4:2d:2d:3d:b6:ae:05: b0:10:86:83:54:c0:70:a1:ed:eb:59:67:07:08:cb:bf:43:aa: c4:3c:66:05:a5:d5:72:9b:4e:23:d2:08:14:50:7d:7c:f2:82: 59:58:c8:c6:41:51:1f:91:37:58:55:89:f3:4c:dd:72:07:6a: fa:68:e7:5a:fe:1f:e3:02:3a:76:00:bf:b5:bb:20:62:d9:a1: b9:94:ad:f3:45:07:e7:5b:fb:33:76:0b:43:7e:ea:b2:f6:02: 7f:e1:08:51:ae:75:65:74:09:31:92:94:f0:93:c1:33:8b:40: c7:19:2f:1a:2e:1e:b8:31:8e:ed:30:36:6f:44:63:3e:bf:08: 5a:d5:cf:06:a5:4c:31:39:46:16:87:05:ca:6c:8d:00:35:04: 18:a5:3d:a8:ce:f0:16:48:d4:35:a8:52:e3:de:e6:e3:b5:16: cb:9a:93:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUA+TZXS2YxAUk4zTAJLpJvJQgINkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUwMTQ4WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzJlZmI4MmVhM2JjMTA1NGRhODQ0ODIyNzMyZDY2M2M1 MjEzYjFkMjc0NWU2ZmRkMzgzZTBiYTBmNWY3NTUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHNWsmWdpmtRHmp3shUCHbWeCE6pAKaAs6lCG+ji9EiKxo WXUAL9gKDOFD5CsHDSrG6Fc93NkI1KvkFTbnaJAGkOycuAo0MpQYDt+KRS/Yudht 1VpZL6q9kw5pWCXJqzhf/FL5TEKf6zGu8rOUglTV0bIc1VtfO8VYzBQsf3+u8QtC ev3ECwKJEg4a0UrOnPmt67EJhQ2MMUGVQN/bFQ/w+66iSZ5796mXbCNoUs+/3nIt MhV5Tr2XAF9o+c6RtCuLirNHCRZQEuSVjYoMYR+lXkglvsq5vhTTJzhSbJIXQQ54 fW875pXUz34wA+5QUwXodHvXSa1bKv0zDSM7PneHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEP0kXpp28YJ3yOlxiycjeIuPcogwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjMmIwMDM0LTRiNzYtNGY5My1iNDIzLWVhNmI3ZmFmNDJlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/7gCAwDQYJKoZIhvcNAQELBQADggEBADuokc7khirf/d9zGVnckSDK 3eoQ/suFUZ/zUFvKCjOJbOwo+iyxkiS/OXcDNA8MVevX4IySI1a79DE0JlpEi9yO mRzgSJM4BxGwcmmwskGbfiwCxC0tPbauBbAQhoNUwHCh7etZZwcIy79DqsQ8ZgWl 1XKbTiPSCBRQfXzygllYyMZBUR+RN1hVifNM3XIHavpo51r+H+MCOnYAv7W7IGLZ obmUrfNFB+db+zN2C0N+6rL2An/hCFGudWV0CTGSlPCTwTOLQMcZLxouHrgxju0w Nm9EYz6/CFrVzwalTDE5RhaHBcpsjQA1BBilPajO8BZI1DWoUuPe5uO1Fsuak8o= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:00 2025 by rpki-client