$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d0f45b-da47-4002-8704-27d6060f7b36.roa File: c7d0f45b-da47-4002-8704-27d6060f7b36.roa (raw, json) Hash identifier: oRXLXHDfZCwDoIHN1hXZ4SQ3a5tiv36kPSUt6AI0NC0= Subject key identifier: 29:66:A5:D1:EF:BB:72:2B:20:2D:9A:D7:35:AA:66:3B:09:20:FE:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 06ECFDC8987755D3BE9AE1B7842D49411EB7BFE5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d0f45b-da47-4002-8704-27d6060f7b36.roa Signing time: Mon 21 Apr 2025 18:21:47 +0000 ROA not before: Mon 21 Apr 2025 18:21:47 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ec:fd:c8:98:77:55:d3:be:9a:e1:b7:84:2d:49:41:1e:b7:bf:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 18:21:47 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=65971e0886a54e92d4b90525ea22f9a7ef52011d8e107af9f3f774d7ad2e1126, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:e8:9a:28:06:bb:bd:ce:34:ff:d0:6e:ca: c0:0d:6c:c1:17:da:4d:dd:30:17:64:34:e4:23:af: 90:13:92:4d:04:b9:56:83:5c:fd:49:9a:c6:b1:9c: 50:94:ea:cc:4d:fd:ed:53:a4:94:88:21:41:ac:c6: b4:a4:4d:c6:8e:83:aa:a1:c1:1b:f3:02:42:30:f6: 31:64:00:ee:70:b3:b8:e8:aa:5c:e0:ed:96:d0:38: 1a:0f:2b:12:dc:34:83:e7:cf:8a:59:e1:d6:78:b2: 8f:36:3e:cb:6f:dd:a1:c0:e5:15:80:43:95:9c:5f: b5:99:fd:9e:1e:cf:06:a1:cf:1d:5d:18:09:54:e0: 92:52:18:48:7d:28:33:79:c4:bc:01:66:51:9f:d8: 37:f2:f6:62:36:30:f4:a3:c5:6d:5b:f1:63:ec:01: 83:0b:4f:a2:e6:38:3e:3f:88:6e:8c:b5:39:32:91: 9d:4a:08:97:d2:70:1f:76:b2:db:e9:51:fc:a7:e4: 61:ef:60:42:9c:c7:bb:33:20:12:07:47:58:d3:80: 9a:84:42:aa:a0:f8:ef:2c:66:3b:00:b8:c7:c3:c7: 8d:89:60:b9:3f:a7:4f:89:1c:f0:7c:6f:56:f4:b5: 01:40:18:c5:cd:84:ac:45:d2:8e:dd:b5:63:f0:e2: aa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:66:A5:D1:EF:BB:72:2B:20:2D:9A:D7:35:AA:66:3B:09:20:FE:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7d0f45b-da47-4002-8704-27d6060f7b36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 49:c9:1e:ac:95:cb:8b:b3:15:bc:9e:4b:02:96:66:98:f5:76: c2:2f:80:fe:d9:5e:f1:dd:15:82:f6:62:9c:c9:15:7c:39:29: 3e:82:ef:f1:f5:83:fc:ae:20:16:43:63:f0:18:b8:db:22:c3: 9c:67:81:ab:5f:b0:bf:88:39:c7:70:94:f7:b4:b8:4e:93:12: 7e:57:56:77:d3:1f:8a:0b:04:8a:b4:27:88:bc:d5:3d:c7:d3: 17:d4:6a:13:e8:26:a4:5e:d2:f4:99:09:b4:b6:ec:cd:d6:ae: fe:4d:5c:98:e1:ed:71:c0:88:f1:85:3d:38:a8:16:a0:b3:63: 22:17:27:2a:00:7f:9a:3f:d4:f0:2f:15:de:38:54:35:0f:73: e8:d5:ba:05:9a:7a:7d:24:13:aa:be:70:29:9e:07:36:23:96: 96:fd:95:60:9f:df:45:8d:00:07:40:1c:27:c8:a8:2d:39:72: 3d:44:b2:d8:3a:86:44:f0:fc:87:d5:26:11:ef:47:71:a6:71: bf:0b:e6:81:04:bf:6a:fa:c6:db:8d:c9:13:91:97:15:b6:08: 22:55:bd:02:5d:f1:13:c7:6d:8b:b1:36:42:54:4c:64:f7:6b: 8f:56:9e:56:4e:53:f8:3c:89:54:14:a3:21:c0:92:a6:b4:ed: 03:fb:7a:6f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBuz9yJh3VdO+muG3hC1JQR63v+UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTgyMTQ3WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTk3MWUwODg2YTU0ZTkyZDRiOTA1MjVlYTIyZjlhN2Vm NTIwMTFkOGUxMDdhZjlmM2Y3NzRkN2FkMmUxMTI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+2+iaKAa7vc40/9BuysANbMEX2k3dMBdkNOQjr5ATkk0E uVaDXP1JmsaxnFCU6sxN/e1TpJSIIUGsxrSkTcaOg6qhwRvzAkIw9jFkAO5ws7jo qlzg7ZbQOBoPKxLcNIPnz4pZ4dZ4so82Pstv3aHA5RWAQ5WcX7WZ/Z4ezwahzx1d GAlU4JJSGEh9KDN5xLwBZlGf2Dfy9mI2MPSjxW1b8WPsAYMLT6LmOD4/iG6MtTky kZ1KCJfScB92stvpUfyn5GHvYEKcx7szIBIHR1jTgJqEQqqg+O8sZjsAuMfDx42J YLk/p0+JHPB8b1b0tQFAGMXNhKxF0o7dtWPw4qprAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKWal0e+7cisgLZrXNapmOwkg/qAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M3ZDBmNDViLWRhNDctNDAwMi04NzA0LTI3ZDYwNjBmN2IzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hIMAwDQYJKoZIhvcNAQELBQADggEBAEnJHqyVy4uzFbyeSwKWZpj1 dsIvgP7ZXvHdFYL2YpzJFXw5KT6C7/H1g/yuIBZDY/AYuNsiw5xngatfsL+IOcdw lPe0uE6TEn5XVnfTH4oLBIq0J4i81T3H0xfUahPoJqRe0vSZCbS27M3Wrv5NXJjh 7XHAiPGFPTioFqCzYyIXJyoAf5o/1PAvFd44VDUPc+jVugWaen0kE6q+cCmeBzYj lpb9lWCf30WNAAdAHCfIqC05cj1Estg6hkTw/IfVJhHvR3Gmcb8L5oEEv2r6xtuN yRORlxW2CCJVvQJd8RPHbYuxNkJUTGT3a49WnlZOU/g8iVQUoyHAkqa07QP7em8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:36 2025 by rpki-client