$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b82094ce-0b12-48a0-b623-334c153ef9e2.roa File: b82094ce-0b12-48a0-b623-334c153ef9e2.roa (raw, json) Hash identifier: wLPuhw5JZTK4z00TezHO18afymP28sRIYTh0kNzeROY= Subject key identifier: B7:79:E0:04:27:10:AE:25:DF:64:13:CF:C0:11:E3:D7:9A:EE:37:F0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4898B3C0876FB19652BF8C7E1B11838E1156F2BE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b82094ce-0b12-48a0-b623-334c153ef9e2.roa Signing time: Tue 22 Apr 2025 00:20:26 +0000 ROA not before: Tue 22 Apr 2025 00:20:26 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8070::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:98:b3:c0:87:6f:b1:96:52:bf:8c:7e:1b:11:83:8e:11:56:f2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:20:26 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=ef50132be1c2ff1f7f1398bb932a2e7b0dd6df80245c9f17547aa8187b735148, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:16:41:eb:c8:9d:19:e1:ff:42:a4:5b:d0:1c: 6e:dc:f9:b6:36:c5:5b:a8:ae:d1:fa:70:94:c9:97: 1b:73:4d:56:11:ce:a5:dc:3f:21:40:3b:24:09:9f: 4d:4d:8a:90:23:c5:2d:8f:cf:75:42:af:1c:14:9e: 7e:5b:87:af:e2:a8:44:a1:a1:12:1b:1d:a1:f0:d8: bf:32:aa:7b:c2:7f:b4:ee:f4:3c:75:18:a1:96:f5: 5b:15:a7:17:1a:a5:71:ca:52:4f:b5:69:8f:55:0a: b8:7f:cc:6f:4e:12:ba:31:0b:02:98:2a:d9:18:f0: 0b:d6:81:57:4c:00:eb:6a:8b:ea:31:a7:0b:c2:d3: eb:88:2a:c5:8d:d0:cf:1c:ec:b9:98:28:1e:62:2d: 70:23:2f:47:35:36:ec:67:df:c2:3e:72:84:7b:e6: 54:42:94:54:d2:d1:d5:09:77:a1:f0:e4:71:e4:1a: 55:6d:90:ce:a8:cd:57:83:12:cd:60:09:97:13:52: 7b:60:f8:97:97:4c:3b:cc:a5:d1:c8:be:54:2e:da: 9e:a2:bc:7a:8b:2a:2e:20:52:9a:f8:60:9f:d3:ca: 75:a3:1e:2b:29:46:2f:fc:68:a3:86:3f:42:3e:01: 28:40:1d:31:90:7c:50:f3:32:1d:9a:f8:78:03:8a: e7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:79:E0:04:27:10:AE:25:DF:64:13:CF:C0:11:E3:D7:9A:EE:37:F0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b82094ce-0b12-48a0-b623-334c153ef9e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8070::/48 Signature Algorithm: sha256WithRSAEncryption 18:4a:5b:86:f2:58:c9:cf:dc:f4:a0:77:d7:ab:18:9c:c8:c3: 58:32:f7:4f:30:ef:1f:f4:3d:91:3d:d8:c1:ba:a1:ce:be:3e: cf:31:29:65:b5:b9:a1:02:67:12:22:ae:de:3c:5d:76:49:c8: 01:64:bf:17:07:4b:d8:a1:42:e7:1f:c1:da:d7:92:5b:be:21: 19:bf:5a:9a:57:d2:78:8d:21:53:8e:6f:06:9d:8c:a3:16:49: 6a:c5:ec:2e:c0:95:5e:a2:25:4c:a2:ab:14:54:27:c8:6d:bb: 67:4c:c4:7c:a3:94:cf:9d:19:68:fb:47:f1:8b:24:08:8c:58: 20:57:85:b6:fe:e8:a8:71:69:7f:f9:7d:8e:2a:c7:97:fb:29: 0e:1e:ec:e7:cd:58:e9:a2:7f:6a:ff:da:bb:2f:d8:74:1e:5f: 84:ff:51:5a:ea:02:51:0d:15:f4:1b:b4:18:69:e0:91:97:fb: 25:a4:67:15:40:94:5c:fd:f1:0d:2e:3c:f2:5b:52:e9:77:03: 28:0a:aa:e2:34:d9:02:fb:f6:6d:f6:81:59:a1:18:e2:db:db: 99:4f:cc:a1:5d:bd:50:37:d0:40:89:fd:e8:56:84:2c:d7:83: 25:12:cb:90:3d:43:84:bf:da:7d:b3:db:8a:d6:2e:c6:16:b3: 5d:a0:ad:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSJizwIdvsZZSv4x+GxGDjhFW8r4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAyMDI2WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjUwMTMyYmUxYzJmZjFmN2YxMzk4YmI5MzJhMmU3YjBk ZDZkZjgwMjQ1YzlmMTc1NDdhYTgxODdiNzM1MTQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJFkHryJ0Z4f9CpFvQHG7c+bY2xVuortH6cJTJlxtzTVYR zqXcPyFAOyQJn01NipAjxS2Pz3VCrxwUnn5bh6/iqEShoRIbHaHw2L8yqnvCf7Tu 9Dx1GKGW9VsVpxcapXHKUk+1aY9VCrh/zG9OEroxCwKYKtkY8AvWgVdMAOtqi+ox pwvC0+uIKsWN0M8c7LmYKB5iLXAjL0c1Nuxn38I+coR75lRClFTS0dUJd6Hw5HHk GlVtkM6ozVeDEs1gCZcTUntg+JeXTDvMpdHIvlQu2p6ivHqLKi4gUpr4YJ/TynWj HispRi/8aKOGP0I+AShAHTGQfFDzMh2a+HgDiuf9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUt3ngBCcQriXfZBPPwBHj15ruN/AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4MjA5NGNlLTBiMTItNDhhMC1iNjIzLTMzNGMxNTNlZjllMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gHAwDQYJKoZIhvcNAQELBQADggEBABhKW4byWMnP3PSgd9erGJzI w1gy908w7x/0PZE92MG6oc6+Ps8xKWW1uaECZxIirt48XXZJyAFkvxcHS9ihQucf wdrXklu+IRm/WppX0niNIVOObwadjKMWSWrF7C7AlV6iJUyiqxRUJ8htu2dMxHyj lM+dGWj7R/GLJAiMWCBXhbb+6KhxaX/5fY4qx5f7KQ4e7OfNWOmif2r/2rsv2HQe X4T/UVrqAlENFfQbtBhp4JGX+yWkZxVAlFz98Q0uPPJbUul3AygKquI02QL79m32 gVmhGOLb25lPzKFdvVA30ECJ/ehWhCzXgyUSy5A9Q4S/2n2z24rWLsYWs12grSs= -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:26 2025 by rpki-client