$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017836f-79ac-458c-a671-00131a37e9d6.roa File: c017836f-79ac-458c-a671-00131a37e9d6.roa (raw, json) Hash identifier: 4iUGK0tRWiDgu+nGSKdyZp1/CfxUKJeLSWOzCxNNRcw= Subject key identifier: 7C:20:40:CC:44:62:67:3F:66:76:0E:46:45:33:79:AA:F6:B5:FC:EF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D0BDCE3FA0C5AA24ADEF0827F6415A96DF75A09 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017836f-79ac-458c-a671-00131a37e9d6.roa Signing time: Tue 22 Apr 2025 15:02:42 +0000 ROA not before: Tue 22 Apr 2025 15:02:42 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:60c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0b:dc:e3:fa:0c:5a:a2:4a:de:f0:82:7f:64:15:a9:6d:f7:5a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:02:42 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=902a9ae1f4b9e7307359614270e3d16a75f5c3411d5e97e319d8a5cda20a3094, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:25:65:e2:dd:31:ff:ea:b3:35:06:28:7b: 8c:6a:8e:1b:e3:8e:fb:67:38:f0:49:7b:ec:c6:38: 41:52:12:9b:f9:a7:45:61:39:3f:c8:33:d3:45:2e: d3:60:e3:78:92:98:70:c1:c8:ab:77:16:77:f8:8e: ef:07:3f:09:59:32:c0:2d:e8:95:77:2d:c4:a1:33: 63:26:67:4f:84:87:be:df:95:57:53:f5:ef:26:f3: b6:bc:c7:d9:08:ce:e6:5c:3e:ca:f6:e4:1e:35:0b: 89:ff:15:e5:de:30:9d:7a:1e:f4:85:5f:33:85:7c: 88:a5:7b:6e:d0:e0:49:b6:83:fa:74:c3:86:70:f6: bd:a6:f3:38:ce:b3:33:47:bc:97:60:78:92:8c:cc: d9:4b:cc:62:d6:e5:1d:71:c5:54:be:29:4d:03:a9: 99:dc:27:75:9e:ba:4a:23:98:62:37:27:73:f3:a9: 2a:c6:9a:5c:cd:08:57:65:d9:5b:b7:f9:ad:af:fa: f3:c8:3d:54:80:14:71:ee:6a:c1:4b:63:98:f8:bb: 0c:94:5e:45:6d:3f:e6:eb:03:1d:5d:99:0a:4e:15: b2:32:1d:38:fc:b0:72:db:1e:c2:69:75:4f:70:ee: c7:d4:f3:f3:f8:4b:92:2d:9a:0c:d9:b4:15:c8:64: fc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:20:40:CC:44:62:67:3F:66:76:0E:46:45:33:79:AA:F6:B5:FC:EF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017836f-79ac-458c-a671-00131a37e9d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:60c0::/46 Signature Algorithm: sha256WithRSAEncryption bf:73:0c:6e:bd:04:b1:d7:99:f7:a9:af:47:f9:be:70:52:43: fe:67:fb:dd:ff:00:3b:15:34:1d:00:7b:1d:a9:42:f4:cd:ee: d3:2b:5e:75:0d:67:2c:7c:a5:b1:1f:94:43:4c:3a:2c:e0:59: 29:f6:32:ca:90:de:94:cd:6d:64:bc:90:ef:39:1f:78:9b:03: c8:77:96:1b:91:4d:f7:c7:bd:64:a1:63:f7:b8:9a:a7:dd:84: a4:ba:5c:64:93:27:d5:8d:c5:bf:89:89:2a:da:ef:4f:c3:8c: a7:64:7b:ed:89:63:41:88:8e:df:29:56:3a:f8:65:78:9a:4f: 5e:5d:8f:87:e9:8e:ab:3d:b8:95:d8:0b:90:d9:40:71:d8:5a: bc:42:da:60:de:a5:71:18:46:b2:2a:28:d1:65:61:6f:3d:25: f0:bf:4a:25:1e:fa:af:d9:6c:05:54:84:4a:a8:a6:64:90:5c: 66:69:0f:22:86:fa:14:ac:df:f3:a0:5e:9a:ad:e7:21:43:31: e1:e7:d2:9a:33:97:63:4f:53:08:5b:f8:e0:65:b6:8c:ad:6c: 1f:36:ad:90:dc:d6:c9:9d:2c:36:fb:3a:7b:a6:db:e6:86:60: 93:37:92:45:67:10:c1:64:7d:ab:0f:2c:85:b3:ab:ce:79:87: d2:0c:78:2c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbQvc4/oMWqJK3vCCf2QVqW33WgkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUwMjQyWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDJhOWFlMWY0YjllNzMwNzM1OTYxNDI3MGUzZDE2YTc1 ZjVjMzQxMWQ1ZTk3ZTMxOWQ4YTVjZGEyMGEzMDk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNoyVl4t0x/+qzNQYoe4xqjhvjjvtnOPBJe+zGOEFSEpv5 p0VhOT/IM9NFLtNg43iSmHDByKt3Fnf4ju8HPwlZMsAt6JV3LcShM2MmZ0+Eh77f lVdT9e8m87a8x9kIzuZcPsr25B41C4n/FeXeMJ16HvSFXzOFfIile27Q4Em2g/p0 w4Zw9r2m8zjOszNHvJdgeJKMzNlLzGLW5R1xxVS+KU0DqZncJ3WeukojmGI3J3Pz qSrGmlzNCFdl2Vu3+a2v+vPIPVSAFHHuasFLY5j4uwyUXkVtP+brAx1dmQpOFbIy HTj8sHLbHsJpdU9w7sfU8/P4S5ItmgzZtBXIZPzfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfCBAzERiZz9mdg5GRTN5qva1/O8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwMTc4MzZmLTc5YWMtNDU4Yy1hNjcxLTAwMTMxYTM3ZTlkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pYMAwDQYJKoZIhvcNAQELBQADggEBAL9zDG69BLHXmfepr0f5vnBS Q/5n+93/ADsVNB0Aex2pQvTN7tMrXnUNZyx8pbEflENMOizgWSn2MsqQ3pTNbWS8 kO85H3ibA8h3lhuRTffHvWShY/e4mqfdhKS6XGSTJ9WNxb+JiSra70/DjKdke+2J Y0GIjt8pVjr4ZXiaT15dj4fpjqs9uJXYC5DZQHHYWrxC2mDepXEYRrIqKNFlYW89 JfC/SiUe+q/ZbAVUhEqopmSQXGZpDyKG+hSs3/OgXpqt5yFDMeHn0pozl2NPUwhb +OBltoytbB82rZDc1smdLDb7Onum2+aGYJM3kkVnEMFkfasPLIWzq855h9IMeCw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:22 2025 by rpki-client