$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4ae4400-d755-410a-8030-0c3ce316310d.roa File: d4ae4400-d755-410a-8030-0c3ce316310d.roa (raw, json) Hash identifier: GBeeABDH6JhaOj7o3cdkXZ3heF1KQlddO5PVrBoe3dw= Subject key identifier: 33:28:3F:AA:E4:E7:E2:3F:84:FA:A2:03:A1:98:3D:F1:D9:D9:12:8B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6725C8DE32B5CA5598202F57408C2B1053F91D3B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4ae4400-d755-410a-8030-0c3ce316310d.roa Signing time: Mon 21 Apr 2025 18:21:41 +0000 ROA not before: Mon 21 Apr 2025 18:21:41 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:25:c8:de:32:b5:ca:55:98:20:2f:57:40:8c:2b:10:53:f9:1d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 18:21:41 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=0eca6d9fe71258c38ab6db050f536942d1f3a1d1f9d9f68bc5d9b3a7e9a5e44f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:8a:55:9b:f7:a1:39:02:5b:6a:6b:41:e3: 14:a7:82:0a:d1:13:0f:25:e6:71:3c:52:0a:6e:f9: ba:5b:69:2e:e9:51:e8:da:b8:45:c5:4b:cb:dc:d8: e4:6a:dd:b8:87:f1:fd:01:f9:fd:3a:ae:4d:9f:af: 72:d9:da:bb:98:ed:12:5c:90:77:7b:6e:1b:36:e0: 71:e6:c8:e1:e3:df:08:58:ea:44:6c:fc:95:89:00: 5f:01:36:26:6c:8d:b2:62:7a:bd:e5:cf:91:b2:3d: ca:d2:f3:0b:ae:bb:a8:67:fe:e3:c4:61:dc:71:7c: e3:c7:f3:15:96:38:64:f4:d2:d4:d4:4d:d2:5e:c6: 8f:f6:e0:73:71:3e:c3:0c:92:24:d6:3e:60:18:a0: ea:2a:0c:a4:9e:2d:bb:e8:48:2a:77:30:ff:58:8d: b9:99:61:05:dd:65:bd:37:97:35:80:03:d6:61:39: cf:87:62:2b:f4:b6:b0:6c:26:38:b6:c3:86:98:05: 2d:26:63:c1:00:76:c7:78:ac:b7:e1:ce:4f:bb:2f: c1:b2:8f:79:38:2a:11:aa:5e:ec:a1:88:c5:d4:fc: b1:6c:b9:5d:16:37:98:2f:93:14:e5:13:7f:fa:38: d5:16:01:5d:10:44:a0:dd:29:5d:23:ba:58:ba:00: d0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:28:3F:AA:E4:E7:E2:3F:84:FA:A2:03:A1:98:3D:F1:D9:D9:12:8B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4ae4400-d755-410a-8030-0c3ce316310d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8140::/48 Signature Algorithm: sha256WithRSAEncryption bc:15:4b:93:aa:78:4c:45:e1:4e:3a:e9:4e:81:a6:5c:80:a7: 51:e6:2d:a5:a5:fe:26:25:e6:36:54:5c:03:44:eb:32:48:35: 8d:fd:4b:2d:06:2a:b1:ca:97:b4:66:67:94:48:21:09:be:78: df:6d:4f:f6:21:69:3c:cd:18:70:5f:18:2d:d9:e4:1d:cc:4d: 44:7c:08:53:c9:8d:aa:9d:1a:26:cf:19:73:0a:6b:90:2e:3d: e8:23:30:42:22:24:cd:cb:6e:0d:e5:f6:77:5c:3e:07:0e:ca: 78:6d:ef:ba:97:e2:32:42:0b:3b:d4:ad:87:4c:30:67:be:25: a0:39:24:73:03:42:62:42:a0:cc:96:11:1a:b0:46:e7:fd:83: f0:5a:4e:69:f0:2f:3f:70:fd:f4:70:7a:bd:cd:ed:23:b4:89: 29:f5:cf:dd:26:c2:27:2a:ee:82:b7:74:f2:77:c0:a3:24:60: 2b:e5:cb:4b:41:9b:a1:26:d7:55:7e:27:35:69:0b:02:a9:45: 12:98:99:4c:3c:22:b9:3b:df:ce:a1:01:43:81:3a:42:47:1f: 90:1d:8b:1b:81:e2:6f:3a:79:ed:d7:12:f1:73:f2:f3:0f:cf: 44:8c:b1:e1:74:e9:d6:e0:5a:ed:99:11:1c:71:19:e6:ea:28: 9b:d0:05:eb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZyXI3jK1ylWYIC9XQIwrEFP5HTswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTgyMTQxWhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWNhNmQ5ZmU3MTI1OGMzOGFiNmRiMDUwZjUzNjk0MmQx ZjNhMWQxZjlkOWY2OGJjNWQ5YjNhN2U5YTVlNDRmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXSopVm/ehOQJbamtB4xSnggrREw8l5nE8Ugpu+bpbaS7p UejauEXFS8vc2ORq3biH8f0B+f06rk2fr3LZ2ruY7RJckHd7bhs24HHmyOHj3whY 6kRs/JWJAF8BNiZsjbJier3lz5GyPcrS8wuuu6hn/uPEYdxxfOPH8xWWOGT00tTU TdJexo/24HNxPsMMkiTWPmAYoOoqDKSeLbvoSCp3MP9YjbmZYQXdZb03lzWAA9Zh Oc+HYiv0trBsJji2w4aYBS0mY8EAdsd4rLfhzk+7L8Gyj3k4KhGqXuyhiMXU/LFs uV0WN5gvkxTlE3/6ONUWAV0QRKDdKV0juli6ANCnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMyg/quTn4j+E+qIDoZg98dnZEoswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q0YWU0NDAwLWQ3NTUtNDEwYS04MDMwLTBjM2NlMzE2MzEwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gUAwDQYJKoZIhvcNAQELBQADggEBALwVS5OqeExF4U466U6BplyA p1HmLaWl/iYl5jZUXANE6zJINY39Sy0GKrHKl7RmZ5RIIQm+eN9tT/YhaTzNGHBf GC3Z5B3MTUR8CFPJjaqdGibPGXMKa5AuPegjMEIiJM3Lbg3l9ndcPgcOynht77qX 4jJCCzvUrYdMMGe+JaA5JHMDQmJCoMyWERqwRuf9g/BaTmnwLz9w/fRwer3N7SO0 iSn1z90mwicq7oK3dPJ3wKMkYCvly0tBm6Em11V+JzVpCwKpRRKYmUw8Irk7386h AUOBOkJHH5AdixuB4m86ee3XEvFz8vMPz0SMseF06dbgWu2ZERxxGebqKJvQBes= -----END CERTIFICATE-----Generated at Sat Apr 26 14:12:53 2025 by rpki-client