$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1c25f49-463e-4031-8326-5279365c1126.roa File: b1c25f49-463e-4031-8326-5279365c1126.roa (raw, json) Hash identifier: biAVaCYVgCBk1lrcqgFpJ45zdT6QnwF4SLhrIeYiVrA= Subject key identifier: 38:42:52:7D:7A:8E:7F:20:37:F6:DF:9C:2A:ED:5C:37:A0:6D:90:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 49443A6CC4B7117A747D1071CBF204073812C839 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1c25f49-463e-4031-8326-5279365c1126.roa Signing time: Tue 08 Apr 2025 00:11:34 +0000 ROA not before: Tue 08 Apr 2025 00:11:34 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fa0:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:44:3a:6c:c4:b7:11:7a:74:7d:10:71:cb:f2:04:07:38:12:c8:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:11:34 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=7160d6795c782e7273acdd2b71fbfaaf4e9dc3edbe053c7fe6421379584fb1b3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a2:83:15:ba:5c:7d:8c:07:fc:aa:dd:8c:d6: bc:58:9c:13:c5:6c:c5:48:16:0c:f0:39:af:83:2f: a4:31:89:18:e3:ba:3c:90:86:77:3c:c4:d0:63:a7: 7f:a7:54:72:ac:f8:4d:ab:c4:0b:50:43:0d:ec:e0: f4:5f:63:2e:69:6a:96:eb:57:cc:89:26:5b:f0:f0: 1a:e4:2c:60:6e:79:10:20:4a:f8:8c:3c:04:30:12: e3:98:30:de:d6:f8:29:16:ef:78:9f:00:61:b8:8d: 95:6b:16:b3:68:37:d9:73:1c:10:d8:d9:68:01:0a: f1:f9:6b:1d:36:03:c1:21:62:d8:6c:55:58:36:d1: ea:75:46:c6:cf:69:de:23:a6:f3:8e:93:8d:2e:40: a3:88:70:fe:52:8f:af:4c:0d:f5:3d:f3:58:7c:d2: 5b:e1:ea:d0:36:a6:19:a6:e2:96:f1:3c:b2:79:80: d9:28:32:ed:ad:b8:d5:33:69:4a:54:9b:67:ec:b6: b8:3b:5f:aa:44:a9:c3:22:fb:70:93:43:64:de:62: cd:2b:18:7a:ab:0f:a4:35:c5:44:aa:b4:ad:7d:25: ec:ef:67:bf:f4:b6:4b:69:f5:39:27:24:23:d0:29: 53:4d:bd:d1:4d:40:91:b8:2b:5d:70:db:e2:a5:85: fa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:42:52:7D:7A:8E:7F:20:37:F6:DF:9C:2A:ED:5C:37:A0:6D:90:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1c25f49-463e-4031-8326-5279365c1126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:2000::/40 Signature Algorithm: sha256WithRSAEncryption 65:cd:98:30:9d:71:b4:3c:9d:b5:25:b1:90:b7:74:6a:e6:77: 9c:af:48:ea:c4:00:39:dd:15:14:9d:7f:17:d0:04:be:94:90: 07:47:60:32:42:32:67:42:11:51:c1:c3:f2:ba:37:d0:4f:08: 29:62:fa:b0:9a:fa:0d:0e:a2:71:81:74:58:71:06:b3:2d:77: 2c:39:64:7c:d8:47:9f:3d:ad:0d:66:17:b8:7a:47:61:a0:45: 32:3b:9a:66:2e:26:10:ab:f8:8c:92:bb:2f:91:64:b3:b7:24: c8:f9:77:b4:0b:da:21:02:cf:4c:4c:e4:fd:1b:65:0c:8b:f1: 05:ca:26:1d:8e:09:96:02:e4:2c:72:1e:47:53:68:16:bb:67: 46:11:e1:8b:dd:5b:4d:b0:52:11:ab:94:a6:b7:be:70:63:a8: f7:ca:78:df:1a:36:93:c0:ac:bd:bf:77:c6:1d:42:f4:6d:80: 5a:1c:19:88:1b:a0:7a:48:e2:2e:2e:de:c9:ea:08:ab:b0:1e: 47:9c:b3:96:86:e4:04:c3:35:89:a8:e4:41:6a:bc:d8:d9:d6: 6c:a6:06:d0:f3:1b:4c:a2:ac:2a:ee:6b:15:a7:7d:39:80:36: f5:92:08:5a:a1:fa:9c:11:10:90:6b:3e:c9:e2:e0:18:77:e2: f6:2c:27:fc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSUQ6bMS3EXp0fRBxy/IEBzgSyDkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAxMTM0WhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTYwZDY3OTVjNzgyZTcyNzNhY2RkMmI3MWZiZmFhZjRl OWRjM2VkYmUwNTNjN2ZlNjQyMTM3OTU4NGZiMWIzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXooMVulx9jAf8qt2M1rxYnBPFbMVIFgzwOa+DL6QxiRjj ujyQhnc8xNBjp3+nVHKs+E2rxAtQQw3s4PRfYy5papbrV8yJJlvw8BrkLGBueRAg SviMPAQwEuOYMN7W+CkW73ifAGG4jZVrFrNoN9lzHBDY2WgBCvH5ax02A8EhYths VVg20ep1RsbPad4jpvOOk40uQKOIcP5Sj69MDfU981h80lvh6tA2phmm4pbxPLJ5 gNkoMu2tuNUzaUpUm2fstrg7X6pEqcMi+3CTQ2TeYs0rGHqrD6Q1xUSqtK19Jezv Z7/0tktp9TknJCPQKVNNvdFNQJG4K11w2+KlhfrjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUOEJSfXqOfyA39t+cKu1cN6BtkNgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxYzI1ZjQ5LTQ2M2UtNDAzMS04MzI2LTUyNzkzNjVjMTEyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gIDANBgkqhkiG9w0BAQsFAAOCAQEAZc2YMJ1xtDydtSWxkLd0auZ3 nK9I6sQAOd0VFJ1/F9AEvpSQB0dgMkIyZ0IRUcHD8ro30E8IKWL6sJr6DQ6icYF0 WHEGsy13LDlkfNhHnz2tDWYXuHpHYaBFMjuaZi4mEKv4jJK7L5Fks7ckyPl3tAva IQLPTEzk/RtlDIvxBcomHY4JlgLkLHIeR1NoFrtnRhHhi91bTbBSEauUpre+cGOo 98p43xo2k8Csvb93xh1C9G2AWhwZiBugekjiLi7eyeoIq7AeR5yzlobkBMM1iajk QWq82NnWbKYG0PMbTKKsKu5rFad9OYA29ZIIWqH6nBEQkGs+yeLgGHfi9iwn/A== -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:42 2025 by rpki-client