$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc03b0b8-dc48-442a-b40c-185ce689ee9e.roa File: dc03b0b8-dc48-442a-b40c-185ce689ee9e.roa (raw, json) Hash identifier: WOHCoFvQ5vYebhdnTeOUXo5X0U6YMlkD2Kthi0qg6hY= Subject key identifier: 32:BB:D8:11:35:94:FD:59:09:5B:8D:A4:63:0F:8B:BB:F5:BB:56:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4BB902A484484BB0BFDF5EEEB5413508720B21DB Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc03b0b8-dc48-442a-b40c-185ce689ee9e.roa Signing time: Tue 22 Apr 2025 00:11:53 +0000 ROA not before: Tue 22 Apr 2025 00:11:53 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f38:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b9:02:a4:84:48:4b:b0:bf:df:5e:ee:b5:41:35:08:72:0b:21:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:11:53 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=e3ca2ab79bb855eb1b57bccfeec2223452e14471b5796b61386ecac3f6c5ef5d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:1a:11:46:19:de:47:80:0a:83:b6:eb:de: b7:bb:af:72:da:e9:4e:f2:f7:29:1f:c1:c7:b9:6a: 7b:43:d2:ed:7f:9b:55:da:9d:cc:46:d7:be:22:4b: 85:1c:94:8a:78:36:db:6f:e2:3e:d7:6d:e2:28:a7: 43:ff:5d:46:3e:12:ae:7f:08:8b:10:57:2c:61:e5: c1:e0:1f:7d:7d:a7:76:6a:55:cc:c1:90:45:17:f2: 00:4e:24:fc:e1:21:52:3d:fc:5f:1f:93:68:a6:86: 38:fa:96:00:94:63:34:49:d7:37:ed:76:3b:d3:6d: 87:f2:db:b0:57:f1:65:16:d4:2c:12:a4:46:fd:ae: 6a:31:e7:d0:77:52:84:d5:54:63:15:bf:2c:f5:d3: 55:47:d3:74:e9:75:90:00:4e:d3:f7:1b:89:62:2b: 09:73:bf:38:90:84:00:e6:d4:04:da:0d:a6:a4:8f: c0:ca:98:e3:12:f9:ce:08:0d:f7:a5:10:d1:5b:d8: 00:aa:13:cd:56:40:20:0c:fe:83:67:6d:81:4b:22: 7a:85:b2:5e:45:00:85:f2:eb:92:5d:36:b9:45:43: 03:3a:8d:31:f1:83:b0:ca:4f:a9:3c:6c:81:fd:fb: 21:fd:c3:8b:d2:37:4e:f3:5a:7f:08:0d:e4:98:7e: 3a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BB:D8:11:35:94:FD:59:09:5B:8D:A4:63:0F:8B:BB:F5:BB:56:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc03b0b8-dc48-442a-b40c-185ce689ee9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:2000::/40 Signature Algorithm: sha256WithRSAEncryption 0e:a1:5f:34:5f:d5:9e:c7:30:df:db:51:5e:46:be:29:de:b7: c4:d5:27:10:c6:e2:21:b8:8b:3a:90:4c:80:6e:5b:ef:ea:a8: 04:ba:24:c7:04:d1:14:7d:e1:9a:05:fd:83:8c:c2:6e:db:48: c1:66:42:54:71:19:11:bd:79:90:3c:ec:c8:e5:b7:38:94:1c: 99:8c:df:f8:80:d7:e7:57:bd:b7:89:b3:ef:31:dd:bd:41:b1: 34:10:67:db:79:88:16:82:e6:5e:92:7c:3f:2e:3e:90:99:3e: 49:07:7d:6a:59:27:ab:c2:f8:40:9b:44:92:c1:55:6d:3f:83: bb:14:71:7c:04:5c:82:61:4c:9d:14:5a:66:ca:a0:02:ba:14: f4:a7:99:d4:6c:31:d6:b3:aa:bb:ed:23:b7:a4:3f:c9:6a:8e: e5:06:ab:0c:e7:d2:ad:1a:e4:08:d6:3b:55:94:5d:1c:bc:99: a7:bb:1b:63:c9:c6:f7:ca:54:46:56:f1:31:24:3f:15:c3:8b: 8a:ff:26:b0:2a:55:6d:af:f3:f8:ea:6d:78:46:c0:e1:18:31: 57:19:5d:5a:9a:ac:e9:45:e5:43:ca:9e:25:96:61:9e:bd:1a: fc:5e:98:19:42:59:34:86:84:4a:ce:df:5b:61:9e:cc:dc:47: 54:45:92:84 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUS7kCpIRIS7C/317utUE1CHILIdswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAxMTUzWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlM2NhMmFiNzliYjg1NWViMWI1N2JjY2ZlZWMyMjIzNDUy ZTE0NDcxYjU3OTZiNjEzODZlY2FjM2Y2YzVlZjVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpIxoRRhneR4AKg7br3re7r3La6U7y9ykfwce5antD0u1/ m1XancxG174iS4UclIp4Nttv4j7XbeIop0P/XUY+Eq5/CIsQVyxh5cHgH319p3Zq VczBkEUX8gBOJPzhIVI9/F8fk2imhjj6lgCUYzRJ1zftdjvTbYfy27BX8WUW1CwS pEb9rmox59B3UoTVVGMVvyz101VH03TpdZAATtP3G4liKwlzvziQhADm1ATaDaak j8DKmOMS+c4IDfelENFb2ACqE81WQCAM/oNnbYFLInqFsl5FAIXy65JdNrlFQwM6 jTHxg7DKT6k8bIH9+yH9w4vSN07zWn8IDeSYfjqTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMrvYETWU/VkJW42kYw+Lu/W7VuwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RjMDNiMGI4LWRjNDgtNDQyYS1iNDBjLTE4NWNlNjg5ZWU5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB84IDANBgkqhkiG9w0BAQsFAAOCAQEADqFfNF/Vnscw39tRXka+Kd63 xNUnEMbiIbiLOpBMgG5b7+qoBLokxwTRFH3hmgX9g4zCbttIwWZCVHEZEb15kDzs yOW3OJQcmYzf+IDX51e9t4mz7zHdvUGxNBBn23mIFoLmXpJ8Py4+kJk+SQd9alkn q8L4QJtEksFVbT+DuxRxfARcgmFMnRRaZsqgAroU9KeZ1Gwx1rOqu+0jt6Q/yWqO 5QarDOfSrRrkCNY7VZRdHLyZp7sbY8nG98pURlbxMSQ/FcOLiv8msCpVba/z+Opt eEbA4RgxVxldWpqs6UXlQ8qeJZZhnr0a/F6YGUJZNIaESs7fW2GezNxHVEWShA== -----END CERTIFICATE-----Generated at Sat Apr 26 16:15:02 2025 by rpki-client