$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbeb2c0b-8a71-454d-8f89-6e499008ee79.roa File: dbeb2c0b-8a71-454d-8f89-6e499008ee79.roa (raw, json) Hash identifier: 9WTOv56qQNqQXSianaSusOm491Fn10mrjAK4lz8Y410= Subject key identifier: 16:32:BE:69:2F:BD:DA:92:81:66:9F:E4:B9:9A:07:C7:EF:DD:87:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58200020F4274ABEF87F489AF889C2449CF27FE2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbeb2c0b-8a71-454d-8f89-6e499008ee79.roa Signing time: Mon 21 Apr 2025 17:31:08 +0000 ROA not before: Mon 21 Apr 2025 17:31:08 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:20:00:20:f4:27:4a:be:f8:7f:48:9a:f8:89:c2:44:9c:f2:7f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 17:31:08 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=1c212a4f15640b5811632c5eef4fe399007ee737090fd58950a1f2c94fd79b9b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:4d:e4:fe:48:c6:35:7f:06:57:0a:3e:60: 6f:5a:47:06:0d:4b:bc:6a:41:a3:c1:e8:e0:e4:e6: 06:fc:37:a2:31:ac:98:30:a8:f0:b3:4a:37:a0:9f: 9d:10:e4:e2:14:d9:61:9c:aa:71:a6:40:26:45:e4: dd:09:4b:26:42:69:b2:33:96:e0:0e:4c:e3:60:38: d6:24:41:1e:6c:b3:61:14:6f:3b:3b:66:e5:6f:07: 2a:b2:81:34:8b:f7:ef:93:1c:2b:fe:4d:6c:a9:0e: f9:34:00:5c:f1:8d:8b:c1:92:3c:26:7f:01:45:ba: 21:3e:64:3c:7d:f7:f7:dd:11:53:0e:6a:7c:b3:b6: 01:0a:48:fb:72:95:50:7c:ab:cb:9f:1e:58:49:58: 92:2d:84:99:f7:6c:60:bc:5f:ff:e3:54:6c:c6:24: 4b:89:78:1c:91:f9:87:f7:2b:2d:9e:b9:6a:97:68: ab:98:62:7c:68:24:d8:a7:4b:46:80:96:e1:0a:8d: 64:2f:18:9c:94:37:d3:aa:66:ca:6b:a1:03:2f:84: 53:b7:94:da:47:73:9b:6d:30:9e:ba:c6:82:67:fd: d7:92:ab:23:05:0d:79:88:5e:53:d2:3c:b4:f8:e3: a0:a9:2c:1e:5f:7c:6f:2d:59:b8:83:e1:db:da:09: 82:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:32:BE:69:2F:BD:DA:92:81:66:9F:E4:B9:9A:07:C7:EF:DD:87:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbeb2c0b-8a71-454d-8f89-6e499008ee79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:2080::/48 Signature Algorithm: sha256WithRSAEncryption 21:11:f7:35:cc:5b:6b:45:da:3e:cd:f0:cc:f6:41:19:86:c4: d3:10:ff:af:9e:79:08:cf:56:11:79:b1:fd:e5:9f:9a:c9:e5: 73:cd:1b:2f:ec:8e:29:a8:15:fa:ae:65:e0:9c:ed:a3:9a:4e: 28:a6:1a:ca:29:33:47:cc:96:16:65:55:08:3a:9e:f5:68:40: 4e:02:4b:0c:ba:71:6a:f2:47:e0:fc:0d:16:e6:33:12:77:b9: f7:ef:dc:68:97:bf:90:9f:c4:04:60:90:cb:4e:3c:2d:6d:cf: c2:09:99:71:53:38:35:94:97:ec:89:47:e1:33:ad:42:80:e6: 8d:ef:85:3a:e6:cd:86:43:70:22:33:9f:3c:01:00:12:0f:18: 5d:e5:35:a8:26:98:e1:66:11:37:ce:ab:f6:d0:3c:95:ba:2a: a2:48:07:bc:1b:9a:fa:60:96:2b:ab:fb:a6:f9:42:bc:a0:c9: 20:a7:1d:b8:07:97:83:97:d8:40:95:8c:f4:17:f0:2d:6d:07: d1:e2:35:48:87:24:62:41:4f:99:e4:26:a1:3d:67:ac:2d:87: ce:d1:8e:a7:64:6e:42:2a:d5:bb:08:ed:d6:99:50:fb:4b:2d: fc:43:7c:44:e8:a3:40:8a:f3:6f:2b:06:88:9e:3c:3d:77:09: 8f:8d:f7:0c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWCAAIPQnSr74f0ia+InCRJzyf+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTczMTA4WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzIxMmE0ZjE1NjQwYjU4MTE2MzJjNWVlZjRmZTM5OTAw N2VlNzM3MDkwZmQ1ODk1MGExZjJjOTRmZDc5YjliMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkA03k/kjGNX8GVwo+YG9aRwYNS7xqQaPB6ODk5gb8N6Ix rJgwqPCzSjegn50Q5OIU2WGcqnGmQCZF5N0JSyZCabIzluAOTONgONYkQR5ss2EU bzs7ZuVvByqygTSL9++THCv+TWypDvk0AFzxjYvBkjwmfwFFuiE+ZDx99/fdEVMO anyztgEKSPtylVB8q8ufHlhJWJIthJn3bGC8X//jVGzGJEuJeByR+Yf3Ky2euWqX aKuYYnxoJNinS0aAluEKjWQvGJyUN9OqZsproQMvhFO3lNpHc5ttMJ66xoJn/deS qyMFDXmIXlPSPLT446CpLB5ffG8tWbiD4dvaCYIBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFjK+aS+92pKBZp/kuZoHx+/dhyMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiZWIyYzBiLThhNzEtNDU0ZC04Zjg5LTZlNDk5MDA4ZWU3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/0IIAwDQYJKoZIhvcNAQELBQADggEBACER9zXMW2tF2j7N8Mz2QRmG xNMQ/6+eeQjPVhF5sf3ln5rJ5XPNGy/sjimoFfquZeCc7aOaTiimGsopM0fMlhZl VQg6nvVoQE4CSwy6cWryR+D8DRbmMxJ3uffv3GiXv5CfxARgkMtOPC1tz8IJmXFT ODWUl+yJR+EzrUKA5o3vhTrmzYZDcCIznzwBABIPGF3lNagmmOFmETfOq/bQPJW6 KqJIB7wbmvpgliur+6b5QrygySCnHbgHl4OX2ECVjPQX8C1tB9HiNUiHJGJBT5nk JqE9Z6wth87RjqdkbkIq1bsI7daZUPtLLfxDfEToo0CK828rBoiePD13CY+N9ww= -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:42 2025 by rpki-client