$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde42f65-0ec0-46f5-ba64-f838927269dc.roa File: bde42f65-0ec0-46f5-ba64-f838927269dc.roa (raw, json) Hash identifier: jDzyAuVPMQMA7klg7VevP6I5llauJZK0UG4alxB427A= Subject key identifier: DD:5F:54:E9:4B:68:9B:95:F6:0A:C8:BC:53:E5:8E:9B:B0:19:C9:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7C5FBD567AF8FA3D00FDA0555462156A45D4C28A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde42f65-0ec0-46f5-ba64-f838927269dc.roa Signing time: Tue 22 Apr 2025 00:30:16 +0000 ROA not before: Tue 22 Apr 2025 00:30:16 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5f:bd:56:7a:f8:fa:3d:00:fd:a0:55:54:62:15:6a:45:d4:c2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:30:16 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=e0d6a885b8c0229abafd7255d651d17c08b2f5665d5b37c9846f1eb9615e959b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:a6:7e:2a:b8:8e:24:a9:3b:8a:b6:51:cd: f1:c9:98:26:78:46:7d:15:16:62:62:42:6b:25:85: e4:28:a3:67:57:b5:61:bb:a2:4a:bf:d4:04:d9:6e: 8b:4f:43:5c:a2:77:a9:8b:18:05:8a:80:31:34:12: f9:de:31:45:74:93:68:18:ea:3c:04:bc:a2:e1:52: 53:81:26:88:0d:35:16:66:86:00:62:e3:12:68:a8: 2e:33:32:7a:7e:98:0d:f8:e7:2f:01:88:da:cb:75: 9e:68:e9:cb:79:ff:8a:c0:e6:36:13:55:00:f9:8b: 15:5f:00:c9:80:dd:a1:7a:17:64:dc:1f:86:93:3d: b6:dc:b1:40:68:93:27:2f:e3:bf:c6:ee:45:ec:43: 84:ad:42:61:5f:33:9e:13:b8:57:36:93:a0:eb:50: b0:b2:a5:32:83:c9:51:b1:5a:93:0f:81:3b:eb:31: b2:c5:39:75:ee:77:81:d5:51:dd:bb:5f:0b:33:d2: fe:59:e1:2c:73:16:f0:dc:fc:1e:43:66:09:e6:e0: a9:d2:0a:50:4d:03:43:cc:13:cc:ed:d8:15:7f:61: 6c:2f:ce:20:40:9e:08:44:a9:40:80:e2:e3:d3:f2: 8d:cd:c9:23:e7:c9:80:af:03:5b:e4:48:0a:d8:e4: 7d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5F:54:E9:4B:68:9B:95:F6:0A:C8:BC:53:E5:8E:9B:B0:19:C9:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde42f65-0ec0-46f5-ba64-f838927269dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:8040::/48 Signature Algorithm: sha256WithRSAEncryption 55:44:64:63:01:6f:a3:af:01:20:e5:74:0b:07:7a:02:ae:54: cf:9d:19:cf:f3:ab:e2:94:7d:3f:f7:0c:5c:2f:74:54:34:8f: 8f:5a:6c:c8:fb:36:19:cc:db:bc:10:f5:44:fa:e8:1c:d7:3f: 2a:8d:61:81:a3:d6:30:69:34:7c:b7:ab:00:ec:67:de:cc:50: 34:6c:a4:95:2b:f8:97:03:5e:b6:d1:8e:25:6a:bd:54:62:f1: 2d:4f:5c:7f:47:84:80:1d:50:c2:d8:31:80:e2:49:23:b4:fd: 20:88:a3:bf:a8:8c:50:e4:18:0a:f1:f0:7d:d2:98:ce:01:eb: 78:34:1c:0d:0e:51:27:31:65:b5:d5:f2:9a:92:98:99:bc:09: 0d:4f:7a:ae:4b:e8:a9:e7:e2:4d:dc:98:08:23:3c:ce:09:f5: b9:91:03:16:26:70:e7:85:97:bc:21:5f:5c:8e:92:dc:49:53: 2d:85:d6:55:db:9e:c7:14:14:9e:ef:0a:60:3b:71:a0:7d:62: d8:6b:49:9a:f8:7a:bf:dc:a9:40:bb:43:b6:17:00:cb:1c:fc: af:4e:2a:b5:b9:6d:c8:d3:47:62:d7:1f:0f:95:48:25:13:85: 2b:4b:9f:cc:ff:b0:64:a6:1b:20:49:d4:5a:97:86:44:c9:92: 9d:80:1c:c4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfF+9Vnr4+j0A/aBVVGIVakXUwoowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAzMDE2WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMGQ2YTg4NWI4YzAyMjlhYmFmZDcyNTVkNjUxZDE3YzA4 YjJmNTY2NWQ1YjM3Yzk4NDZmMWViOTYxNWU5NTliMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTD6Z+KriOJKk7irZRzfHJmCZ4Rn0VFmJiQmslheQoo2dX tWG7okq/1ATZbotPQ1yid6mLGAWKgDE0EvneMUV0k2gY6jwEvKLhUlOBJogNNRZm hgBi4xJoqC4zMnp+mA345y8BiNrLdZ5o6ct5/4rA5jYTVQD5ixVfAMmA3aF6F2Tc H4aTPbbcsUBokycv47/G7kXsQ4StQmFfM54TuFc2k6DrULCypTKDyVGxWpMPgTvr MbLFOXXud4HVUd27Xwsz0v5Z4SxzFvDc/B5DZgnm4KnSClBNA0PME8zt2BV/YWwv ziBAnghEqUCA4uPT8o3NySPnyYCvA1vkSArY5H03AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3V9U6Utom5X2Csi8U+WOm7AZyewwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkZTQyZjY1LTBlYzAtNDZmNS1iYTY0LWY4Mzg5MjcyNjlkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hgEAwDQYJKoZIhvcNAQELBQADggEBAFVEZGMBb6OvASDldAsHegKu VM+dGc/zq+KUfT/3DFwvdFQ0j49abMj7NhnM27wQ9UT66BzXPyqNYYGj1jBpNHy3 qwDsZ97MUDRspJUr+JcDXrbRjiVqvVRi8S1PXH9HhIAdUMLYMYDiSSO0/SCIo7+o jFDkGArx8H3SmM4B63g0HA0OUScxZbXV8pqSmJm8CQ1Peq5L6Knn4k3cmAgjPM4J 9bmRAxYmcOeFl7whX1yOktxJUy2F1lXbnscUFJ7vCmA7caB9YthrSZr4er/cqUC7 Q7YXAMsc/K9OKrW5bcjTR2LXHw+VSCUThStLn8z/sGSmGyBJ1FqXhkTJkp2AHMQ= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:46 2025 by rpki-client