$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8420826-a4f4-4292-a458-ce267ddf8415.roa File: c8420826-a4f4-4292-a458-ce267ddf8415.roa (raw, json) Hash identifier: 82DXnC7dNI6uJzolNPpPHxt8xKmHKEhqlWe407AYQSc= Subject key identifier: D9:15:FA:13:5B:AD:4A:72:FC:4D:DC:22:84:BF:C7:50:6D:53:E8:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 155414990612D028ADB49D3C7016933B99004DBF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8420826-a4f4-4292-a458-ce267ddf8415.roa Signing time: Mon 21 Apr 2025 18:30:31 +0000 ROA not before: Mon 21 Apr 2025 18:30:31 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:6080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:54:14:99:06:12:d0:28:ad:b4:9d:3c:70:16:93:3b:99:00:4d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 18:30:31 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=0bf23d7fef243eb1954e1a900abbf2b50eccf0825232c8e1da2cdcc6be25eda5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:d6:04:bc:1d:4e:19:d2:7c:fa:9d:93:b4: 46:90:54:4a:71:a3:2a:db:32:94:ee:d5:26:17:e7: 0a:1a:d7:d9:be:25:21:e5:46:0a:14:50:0d:a9:13: cb:35:ca:07:b6:9c:a5:0c:bf:e4:19:f2:99:a2:dc: 90:90:fd:9d:61:11:84:45:d2:2b:12:0b:db:ba:5e: 02:0d:61:ee:10:a1:33:5d:8e:c1:42:59:e0:2f:ec: af:bd:d4:d8:10:20:76:ab:34:26:46:7c:54:fb:e3: b4:6b:ec:1f:a4:d6:7e:64:bf:f5:35:e9:a2:46:e0: 7d:f4:ce:94:59:77:84:2a:74:1e:67:a5:ed:e5:fb: 67:50:56:79:17:a4:43:b6:c3:39:90:2d:b5:6b:bb: 6a:b4:dc:e5:20:33:32:ea:f1:67:1e:6c:65:33:f1: 6b:be:8b:3e:e4:f8:c9:a3:fe:05:36:36:1d:ea:d6: 6b:fe:76:e8:24:2e:d4:c5:7d:5e:97:e8:30:3a:5b: e5:0c:e4:76:e5:ab:d7:03:26:fe:f5:a3:78:83:e6: 97:41:40:1b:0a:85:09:89:a1:83:bd:5f:65:cb:89: 02:b5:9e:a1:0e:b1:23:3b:35:1e:cd:cd:b0:ce:54: 5a:c7:54:c2:d1:9e:0a:35:d2:de:bd:d5:a9:a2:2f: f7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:15:FA:13:5B:AD:4A:72:FC:4D:DC:22:84:BF:C7:50:6D:53:E8:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8420826-a4f4-4292-a458-ce267ddf8415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:6080::/48 Signature Algorithm: sha256WithRSAEncryption 15:c0:03:ac:90:e7:1f:0f:24:07:fe:0b:e6:4e:bd:29:57:6d: 42:1c:e7:09:8a:d7:59:72:9c:6b:c3:14:a0:1f:17:99:6c:4f: f6:0f:3d:32:af:3e:45:2b:59:14:ae:ec:60:1e:93:aa:33:f5: 03:1b:80:d3:57:29:38:ce:6b:be:dd:86:16:ba:28:44:ba:f7: c4:e4:9c:bf:4e:2d:36:08:e1:be:0e:4f:59:ba:83:b4:6a:f4: 1a:ff:cc:f3:58:89:11:86:9e:aa:e7:d4:e0:eb:d5:3b:96:5d: 40:82:ed:f4:4e:53:16:ed:c6:65:b0:ce:78:c5:48:02:46:a2: 77:f7:e9:62:bc:e7:a7:b0:76:99:5d:d2:cf:fe:20:7b:ab:54: 28:10:9c:9c:ae:e3:29:46:b3:3c:50:d8:f5:b4:9b:da:0a:96: 9f:c2:68:7f:f1:a4:06:44:f5:95:7d:3a:f5:09:e4:53:5a:22: 17:6b:20:c2:ff:04:28:b9:5e:44:6e:11:44:26:30:f7:cb:a1: 4f:58:f8:09:84:7d:06:7d:65:f0:70:b1:18:0f:72:73:9b:6c: b5:76:f0:16:1c:eb:53:1e:e0:ab:b1:38:19:84:73:f4:fb:45: 5d:eb:4d:e1:8f:77:fd:e4:6b:84:83:9d:2f:82:05:aa:a3:07: 4b:b5:c5:68 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFVQUmQYS0CittJ08cBaTO5kATb8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTgzMDMxWhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmYyM2Q3ZmVmMjQzZWIxOTU0ZTFhOTAwYWJiZjJiNTBl Y2NmMDgyNTIzMmM4ZTFkYTJjZGNjNmJlMjVlZGE1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzBtYEvB1OGdJ8+p2TtEaQVEpxoyrbMpTu1SYX5woa19m+ JSHlRgoUUA2pE8s1yge2nKUMv+QZ8pmi3JCQ/Z1hEYRF0isSC9u6XgINYe4QoTNd jsFCWeAv7K+91NgQIHarNCZGfFT747Rr7B+k1n5kv/U16aJG4H30zpRZd4QqdB5n pe3l+2dQVnkXpEO2wzmQLbVru2q03OUgMzLq8WcebGUz8Wu+iz7k+Mmj/gU2Nh3q 1mv+dugkLtTFfV6X6DA6W+UM5Hblq9cDJv71o3iD5pdBQBsKhQmJoYO9X2XLiQK1 nqEOsSM7NR7NzbDOVFrHVMLRngo10t691amiL/cJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2RX6E1utSnL8TdwihL/HUG1T6A0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2M4NDIwODI2LWE0ZjQtNDI5Mi1hNDU4LWNlMjY3ZGRmODQxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84YIAwDQYJKoZIhvcNAQELBQADggEBABXAA6yQ5x8PJAf+C+ZOvSlX bUIc5wmK11lynGvDFKAfF5lsT/YPPTKvPkUrWRSu7GAek6oz9QMbgNNXKTjOa77d hha6KES698TknL9OLTYI4b4OT1m6g7Rq9Br/zPNYiRGGnqrn1ODr1TuWXUCC7fRO UxbtxmWwznjFSAJGonf36WK856ewdpld0s/+IHurVCgQnJyu4ylGszxQ2PW0m9oK lp/CaH/xpAZE9ZV9OvUJ5FNaIhdrIML/BCi5XkRuEUQmMPfLoU9Y+AmEfQZ9ZfBw sRgPcnObbLV28BYc61Me4KuxOBmEc/T7RV3rTeGPd/3ka4SDnS+CBaqjB0u1xWg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:37:22 2025 by rpki-client