$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9879d20-7d75-4e5c-8841-28289c14ef4d.roa File: d9879d20-7d75-4e5c-8841-28289c14ef4d.roa (raw, json) Hash identifier: 01a9Rx/8KDDrU5P4XpkgQTQfoDca6rPUjuMIQCDsqz8= Subject key identifier: 19:2C:32:EA:C9:EF:7F:C4:1A:E9:96:BB:FC:C4:D2:DA:4F:68:91:F1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21B594826E92086EB5FFB529FA010E380952E2CA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9879d20-7d75-4e5c-8841-28289c14ef4d.roa Signing time: Tue 22 Apr 2025 16:21:12 +0000 ROA not before: Tue 22 Apr 2025 16:21:12 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff1:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b5:94:82:6e:92:08:6e:b5:ff:b5:29:fa:01:0e:38:09:52:e2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:21:12 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=cf5157146b2772afb11b1ae08567d7b22e5b15aa0bc72e96be86a178e45bb3d2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:d0:35:16:f9:34:7e:eb:8c:38:bb:9f:b5: 53:86:35:58:76:09:3a:7e:be:f8:71:37:c2:bb:43: 57:83:9c:4c:fc:67:7c:1c:25:ac:04:e9:ed:c3:20: aa:06:16:d1:30:47:09:f1:4a:cb:ba:48:7d:c9:2d: 0a:d0:89:62:7d:20:e2:a4:3c:f3:d3:a0:9c:b6:f5: 7b:77:7e:50:4a:b0:a5:de:13:99:8a:6f:49:3d:4e: d3:e6:42:c4:c9:bb:c4:a9:9c:b8:0e:3c:3c:ce:61: ba:67:e7:a0:8e:a0:28:bb:44:52:91:dc:e8:38:bf: f1:38:d3:d5:4d:73:94:71:02:15:db:93:52:3b:dc: 1a:25:30:e7:6d:ef:88:b1:a1:4a:e9:e0:74:c6:2f: 50:97:1c:74:76:58:cd:95:74:a3:38:58:60:8b:e4: ac:81:26:10:85:2d:f5:73:88:c6:07:bf:7f:55:0d: 9f:37:21:5f:25:e0:dc:07:4a:fb:8e:05:39:21:68: 80:02:06:db:e2:fa:d2:0b:45:9c:54:47:48:ce:62: 79:24:3a:0f:2a:67:14:4a:95:50:8a:bf:04:53:de: 77:c9:43:ce:40:5b:3e:d1:30:2e:3e:d1:b4:67:93: c3:78:fd:40:ed:ae:3c:2d:f1:5d:6c:b1:ae:5e:df: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2C:32:EA:C9:EF:7F:C4:1A:E9:96:BB:FC:C4:D2:DA:4F:68:91:F1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9879d20-7d75-4e5c-8841-28289c14ef4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:8000::/40 Signature Algorithm: sha256WithRSAEncryption 0d:e7:57:f7:18:6a:71:81:bf:8f:81:e5:8f:90:a9:44:f3:94: 31:c0:c4:c0:2c:c5:8a:43:85:ff:b2:d8:03:5d:15:de:30:97: f5:10:7c:40:a7:1c:4a:7e:06:20:53:21:0a:eb:ef:d0:60:8c: 93:d2:93:6f:5a:71:0d:da:56:59:6c:27:7b:5e:6c:67:d1:a4: 6a:5f:66:0e:43:71:ce:9d:1a:39:82:7d:6a:86:75:3a:a8:ad: 53:7b:ed:5e:2c:23:06:3c:a0:a6:74:3a:ae:05:a3:ae:09:da: ce:69:2c:dc:24:31:fc:80:8c:e5:bd:61:00:26:85:e6:17:74: 60:ab:90:c3:0f:d3:26:cc:4d:2e:c0:8b:e7:10:8c:4b:6f:09: 14:3e:43:f7:5d:c4:11:53:a2:70:11:f3:41:e7:8a:3c:18:c7: fe:48:14:b3:35:e9:19:a7:6a:92:d9:1e:82:58:ac:b1:a9:b6: 42:10:e4:97:d8:d2:27:bd:12:d1:32:b9:36:8e:ae:c1:11:f8: 83:5b:ee:73:52:11:11:9c:28:87:9f:9d:2e:fe:5f:68:32:a3: f5:03:19:50:57:81:76:48:c5:a0:9a:d3:3b:c3:60:83:16:96: 44:52:67:c1:94:c7:78:ff:e4:2b:c2:dc:88:da:56:82:d1:07: 99:49:25:fb -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUIbWUgm6SCG61/7Up+gEOOAlS4sowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYyMTEyWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjUxNTcxNDZiMjc3MmFmYjExYjFhZTA4NTY3ZDdiMjJl NWIxNWFhMGJjNzJlOTZiZTg2YTE3OGU0NWJiM2QyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEgNA1Fvk0fuuMOLuftVOGNVh2CTp+vvhxN8K7Q1eDnEz8 Z3wcJawE6e3DIKoGFtEwRwnxSsu6SH3JLQrQiWJ9IOKkPPPToJy29Xt3flBKsKXe E5mKb0k9TtPmQsTJu8SpnLgOPDzOYbpn56COoCi7RFKR3Og4v/E409VNc5RxAhXb k1I73BolMOdt74ixoUrp4HTGL1CXHHR2WM2VdKM4WGCL5KyBJhCFLfVziMYHv39V DZ83IV8l4NwHSvuOBTkhaIACBtvi+tILRZxUR0jOYnkkOg8qZxRKlVCKvwRT3nfJ Q85AWz7RMC4+0bRnk8N4/UDtrjwt8V1ssa5e31SzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUGSwy6snvf8Qa6Za7/MTS2k9okfEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q5ODc5ZDIwLTdkNzUtNGU1Yy04ODQxLTI4Mjg5YzE0ZWY0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/xgDANBgkqhkiG9w0BAQsFAAOCAQEADedX9xhqcYG/j4Hlj5CpRPOU McDEwCzFikOF/7LYA10V3jCX9RB8QKccSn4GIFMhCuvv0GCMk9KTb1pxDdpWWWwn e15sZ9Gkal9mDkNxzp0aOYJ9aoZ1OqitU3vtXiwjBjygpnQ6rgWjrgnazmks3CQx /ICM5b1hACaF5hd0YKuQww/TJsxNLsCL5xCMS28JFD5D913EEVOicBHzQeeKPBjH /kgUszXpGadqktkeglissam2QhDkl9jSJ70S0TK5No6uwRH4g1vuc1IREZwoh5+d Lv5faDKj9QMZUFeBdkjFoJrTO8NggxaWRFJnwZTHeP/kK8LciNpWgtEHmUkl+w== -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:06 2025 by rpki-client