$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8154526-c01c-48c3-8ec1-c20945af33b0.roa File: c8154526-c01c-48c3-8ec1-c20945af33b0.roa (raw, json) Hash identifier: k96Gkx2WB1Hg+xayl/jh2Im6X09tp76edD2bXkJkp8I= Subject key identifier: 95:A3:E4:93:FB:0C:AF:7A:24:60:B1:86:12:57:FD:A5:CF:04:11:51 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3988644DA4184B96D651BCEEAB0B3C9DE815E322 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8154526-c01c-48c3-8ec1-c20945af33b0.roa Signing time: Mon 21 Apr 2025 17:31:36 +0000 ROA not before: Mon 21 Apr 2025 17:31:36 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:a4c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:88:64:4d:a4:18:4b:96:d6:51:bc:ee:ab:0b:3c:9d:e8:15:e3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:31:36 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=f52755a652d26723ed4ea4e508e93e12cda7354a222433f7d3a20ff13a84d8b6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:35:47:df:a5:18:45:47:88:59:fa:53:7c: 2b:88:4a:7d:fb:bf:cf:86:7a:c3:6d:19:24:33:3b: 56:17:28:53:77:cf:19:fd:06:fa:f5:c7:c0:7a:ca: 90:54:d5:cf:6a:23:f0:9b:95:ea:dc:8b:dd:55:7e: b0:6d:18:c2:00:5d:eb:c0:08:32:47:4a:9a:48:c1: eb:0a:aa:e8:bd:26:71:9f:30:7e:1d:05:82:f8:b9: d2:f6:43:49:ad:c3:88:7e:af:dd:d8:c8:4a:57:2b: e5:04:72:bf:62:20:f4:d6:d0:b0:56:33:ae:23:c9: 8e:d7:2f:98:23:39:ba:47:fa:a3:69:5c:7e:95:a5: 40:f1:52:63:e4:cc:cf:d0:65:93:41:06:c4:df:dd: b5:41:1f:29:c6:52:80:d3:36:8d:8e:50:ff:2c:52: fe:53:32:89:cc:d3:ea:33:d4:7d:ae:82:49:39:fe: 0c:c2:b1:85:8a:40:9a:e7:19:5a:d2:c5:78:f5:99: 2e:66:b4:ad:c8:8b:a2:06:3c:fe:f2:26:ec:08:d9: a4:13:b4:b6:5a:48:d2:31:f0:cc:f4:15:a3:69:3c: 64:fa:d5:d4:f9:d7:87:ba:94:bd:de:9e:db:da:1e: dc:20:6e:7b:d5:e2:a4:38:7b:7c:b0:95:02:f9:fc: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A3:E4:93:FB:0C:AF:7A:24:60:B1:86:12:57:FD:A5:CF:04:11:51 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8154526-c01c-48c3-8ec1-c20945af33b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:a4c0::/48 Signature Algorithm: sha256WithRSAEncryption c0:fe:38:f2:5b:1a:ea:26:b4:e1:2e:98:6d:ea:f3:d0:cf:26: 07:28:75:f3:b1:c8:33:f5:1e:4f:88:b3:65:c5:da:24:9d:97: 89:ca:cc:bc:ad:15:d3:9e:b9:44:a5:78:b1:cc:7f:f6:0d:f7: fc:6e:1b:35:85:88:06:9d:16:f2:0b:bf:54:e0:66:4a:df:1a: c4:58:7b:46:7a:9d:b2:b9:42:56:c2:f2:b7:a1:16:9c:04:2a: 10:6c:3c:0a:64:f3:0b:ff:e3:e0:84:eb:59:f6:bc:2b:a8:2a: 1f:9b:76:1d:8e:08:99:91:17:0f:e3:a5:e2:0a:f3:24:9b:bb: 77:47:aa:9e:04:39:d9:27:20:60:b2:c0:10:0c:c7:e9:f1:9c: b3:cb:5f:3f:47:8e:8f:d8:10:f6:fb:3f:a4:de:a3:3f:65:ff: 19:e3:07:5c:db:df:51:ba:a8:83:1f:0d:97:26:03:da:b2:ee: 20:ac:61:61:c1:9e:2d:c7:f8:a6:e2:bf:90:10:1d:dc:40:de: a1:77:88:23:df:61:e1:dc:84:22:53:c6:d6:58:84:50:f8:36: ba:7c:0b:fd:f4:ba:4f:3f:6d:a3:6d:0e:3c:7c:04:42:ab:b0: 08:c7:ed:46:5a:7f:2f:69:c8:0c:70:3f:58:c0:af:96:6a:79: c2:d1:ac:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOYhkTaQYS5bWUbzuqws8negV4yIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTczMTM2WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTI3NTVhNjUyZDI2NzIzZWQ0ZWE0ZTUwOGU5M2UxMmNk YTczNTRhMjIyNDMzZjdkM2EyMGZmMTNhODRkOGI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPLDVH36UYRUeIWfpTfCuISn37v8+GesNtGSQzO1YXKFN3 zxn9Bvr1x8B6ypBU1c9qI/Cblerci91VfrBtGMIAXevACDJHSppIwesKqui9JnGf MH4dBYL4udL2Q0mtw4h+r93YyEpXK+UEcr9iIPTW0LBWM64jyY7XL5gjObpH+qNp XH6VpUDxUmPkzM/QZZNBBsTf3bVBHynGUoDTNo2OUP8sUv5TMonM0+oz1H2ugkk5 /gzCsYWKQJrnGVrSxXj1mS5mtK3Ii6IGPP7yJuwI2aQTtLZaSNIx8Mz0FaNpPGT6 1dT514e6lL3entvaHtwgbnvV4qQ4e3ywlQL5/EDpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlaPkk/sMr3okYLGGElf9pc8EEVEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4MTU0NTI2LWMwMWMtNDhjMy04ZWMxLWMyMDk0NWFmMzNiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/0pMAwDQYJKoZIhvcNAQELBQADggEBAMD+OPJbGuomtOEumG3q89DP JgcodfOxyDP1Hk+Is2XF2iSdl4nKzLytFdOeuUSleLHMf/YN9/xuGzWFiAadFvIL v1TgZkrfGsRYe0Z6nbK5QlbC8rehFpwEKhBsPApk8wv/4+CE61n2vCuoKh+bdh2O CJmRFw/jpeIK8ySbu3dHqp4EOdknIGCywBAMx+nxnLPLXz9Hjo/YEPb7P6Teoz9l /xnjB1zb31G6qIMfDZcmA9qy7iCsYWHBni3H+Kbiv5AQHdxA3qF3iCPfYeHchCJT xtZYhFD4Nrp8C/30uk8/baNtDjx8BEKrsAjH7UZafy9pyAxwP1jAr5ZqecLRrHk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:53:18 2025 by rpki-client