$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c56ff21d-fa51-44da-8d5b-81a37c826302.roa File: c56ff21d-fa51-44da-8d5b-81a37c826302.roa (raw, json) Hash identifier: 5gZT+wWprbJt9Cr9927ELRjYH4ExpRvLH8ZAz8RPbl0= Subject key identifier: 29:69:6B:AC:35:30:7A:C3:FE:4A:9E:4A:0B:BA:6F:14:18:7A:3F:1E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0DE5AC073161C03D01A4BE044DAD9A33BCB2847E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c56ff21d-fa51-44da-8d5b-81a37c826302.roa Signing time: Mon 21 Apr 2025 18:01:29 +0000 ROA not before: Mon 21 Apr 2025 18:01:29 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:81d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e5:ac:07:31:61:c0:3d:01:a4:be:04:4d:ad:9a:33:bc:b2:84:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 18:01:29 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=92356d8b0f2e04f5ec8b5915933453f44c33dde0dab27a727fc80bc7b0163f0a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3f:45:c7:e5:08:85:46:7b:ab:83:77:67:ed: 65:a5:66:19:30:4e:46:10:cc:c8:7c:8d:35:1d:09: 27:f4:ec:30:e7:71:7a:e9:b7:47:11:5e:bd:91:48: a4:cb:58:d6:11:ec:37:d9:0e:d9:c0:38:84:68:d9: 02:8f:f2:7c:5b:23:cf:a9:1e:ed:78:a5:66:d1:2b: 21:f1:db:3c:e9:5f:ff:88:86:9c:cd:34:d6:0a:26: 8a:c0:a3:87:18:a8:db:88:3b:1a:24:24:57:ff:54: 57:07:a8:c1:27:f3:0d:cc:51:78:59:2a:ac:27:ac: 3b:9c:06:9c:7c:7d:f9:36:00:27:67:1c:01:74:f4: 7f:c1:5d:cf:cc:d8:89:cf:9b:42:2d:55:fb:46:20: 17:91:53:94:59:9d:49:7b:81:97:d6:e9:35:94:29: e0:35:99:db:3a:3d:c0:db:c2:57:fd:ce:9c:b7:3a: bd:bb:3a:32:4d:af:c6:50:10:bc:5b:1a:10:68:83: 00:f4:5c:ea:f3:7e:4d:ee:5d:12:f5:ef:60:53:ca: 94:f4:20:26:21:40:f9:e7:31:cb:84:b4:b9:b6:ac: c1:d4:7c:24:31:81:70:c0:3b:9c:cb:18:be:02:5a: 0e:67:36:30:e6:59:4c:66:c9:ba:a5:24:03:ce:a3: 5f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:69:6B:AC:35:30:7A:C3:FE:4A:9E:4A:0B:BA:6F:14:18:7A:3F:1E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c56ff21d-fa51-44da-8d5b-81a37c826302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:81d0::/48 Signature Algorithm: sha256WithRSAEncryption 62:91:12:aa:99:fe:8a:b9:49:2b:7d:34:fe:31:5a:55:96:c2: 84:8c:d1:8e:8f:e0:96:c0:49:59:c7:1d:fa:01:ca:42:eb:f8: fb:40:c2:2f:ca:5a:bf:94:9d:de:92:5f:b5:3a:74:88:58:e4: 19:96:32:48:db:cc:a8:50:6e:f2:0e:3b:db:2b:78:f7:16:76: 27:8e:4a:70:03:b3:6e:d8:f4:47:03:ba:9f:a9:7c:fe:67:15: e2:87:9c:35:c6:2c:e5:0c:43:d8:c3:ae:47:63:cf:72:9d:4e: c7:fc:dc:11:8a:3b:34:39:d6:08:2a:62:d8:03:16:c1:53:92: d8:84:2b:ba:11:9c:46:ee:0d:d9:85:39:7f:47:ab:fe:6c:dc: bc:4d:98:9a:74:7a:7f:96:5c:6a:a6:ae:5d:1c:fb:bd:b6:96: b0:b3:e8:a2:1e:be:00:e3:26:da:f4:da:69:ff:47:e3:bb:4d: 46:c8:07:37:4f:be:eb:c4:eb:1b:d5:94:47:db:33:87:54:dc: 53:0a:85:ee:4b:c7:6f:1e:a1:43:0e:2d:2f:97:b5:2a:bf:6c: 87:d2:06:e6:d7:ce:a2:d9:a2:fa:1f:91:32:8d:b9:f2:67:c1: 16:0f:58:c1:f4:2e:c6:77:67:a3:bc:57:54:15:97:50:19:e4: bf:5e:d4:0e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDeWsBzFhwD0BpL4ETa2aM7yyhH4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTgwMTI5WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjM1NmQ4YjBmMmUwNGY1ZWM4YjU5MTU5MzM0NTNmNDRj MzNkZGUwZGFiMjdhNzI3ZmM4MGJjN2IwMTYzZjBhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTP0XH5QiFRnurg3dn7WWlZhkwTkYQzMh8jTUdCSf07DDn cXrpt0cRXr2RSKTLWNYR7DfZDtnAOIRo2QKP8nxbI8+pHu14pWbRKyHx2zzpX/+I hpzNNNYKJorAo4cYqNuIOxokJFf/VFcHqMEn8w3MUXhZKqwnrDucBpx8ffk2ACdn HAF09H/BXc/M2InPm0ItVftGIBeRU5RZnUl7gZfW6TWUKeA1mds6PcDbwlf9zpy3 Or27OjJNr8ZQELxbGhBogwD0XOrzfk3uXRL172BTypT0ICYhQPnnMcuEtLm2rMHU fCQxgXDAO5zLGL4CWg5nNjDmWUxmybqlJAPOo18vAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKWlrrDUwesP+Sp5KC7pvFBh6Px4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M1NmZmMjFkLWZhNTEtNDRkYS04ZDViLTgxYTM3YzgyNjMwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gdAwDQYJKoZIhvcNAQELBQADggEBAGKREqqZ/oq5SSt9NP4xWlWW woSM0Y6P4JbASVnHHfoBykLr+PtAwi/KWr+Und6SX7U6dIhY5BmWMkjbzKhQbvIO O9srePcWdieOSnADs27Y9EcDup+pfP5nFeKHnDXGLOUMQ9jDrkdjz3KdTsf83BGK OzQ51ggqYtgDFsFTktiEK7oRnEbuDdmFOX9Hq/5s3LxNmJp0en+WXGqmrl0c+722 lrCz6KIevgDjJtr02mn/R+O7TUbIBzdPvuvE6xvVlEfbM4dU3FMKhe5Lx28eoUMO LS+XtSq/bIfSBubXzqLZovofkTKNufJnwRYPWMH0LsZ3Z6O8V1QVl1AZ5L9e1A4= -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:59 2025 by rpki-client