$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df7147dc-5eac-4e5b-8652-3e122c2559c1.roa File: df7147dc-5eac-4e5b-8652-3e122c2559c1.roa (raw, json) Hash identifier: OnqgPpAT1VzhlFo28g4z5OjXFBrdaumiQdSuaGs6nEI= Subject key identifier: 9D:1E:EB:9A:D1:CC:0F:F4:F3:3B:96:76:B3:8E:83:D6:29:9C:9E:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3F597E24AAF6027A94335F7372F20B6519F998FE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df7147dc-5eac-4e5b-8652-3e122c2559c1.roa Signing time: Tue 22 Apr 2025 15:52:03 +0000 ROA not before: Tue 22 Apr 2025 15:52:03 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:e080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:59:7e:24:aa:f6:02:7a:94:33:5f:73:72:f2:0b:65:19:f9:98:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:52:03 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=1eea4e51a1cc9d48da0d4b0e18ad93d75bea557daa053ceb4ff58bcbbeb97788, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:80:5d:32:5c:d8:4f:e2:ab:8b:e6:f5:52:db: 38:b7:17:2d:15:d2:20:cc:42:6d:6e:a5:88:17:c4: 61:89:2b:ae:de:97:9e:ab:d8:33:81:48:dc:52:5c: 57:d3:92:a9:4a:8e:0a:94:73:6d:f9:90:23:9e:92: bc:e2:cc:9f:57:a9:a5:8f:45:4d:f1:d3:4d:2b:88: 30:81:47:47:c7:e0:8e:14:5e:72:6a:65:b7:21:4d: f9:5f:f8:1d:30:70:a7:02:bb:94:3f:9b:dd:50:f2: ee:ff:dc:77:d3:5c:ca:ee:dc:16:35:4e:01:df:44: 36:9a:49:12:10:1b:31:4a:55:ee:b2:b2:35:95:69: 75:77:25:41:ea:c1:b0:6f:a4:0d:8c:e6:a4:20:7e: f2:44:1f:cc:6d:c1:86:fc:ac:a8:2b:12:51:8a:7b: e1:7a:f5:19:9b:ba:fa:20:24:a8:05:7e:11:9f:d4: d6:2d:67:c9:e9:40:28:ce:7e:a5:17:93:c4:84:d0: ed:4e:9d:b4:96:a8:66:36:33:8d:d4:b4:72:cb:d6: 56:48:df:a7:09:9b:04:5d:76:53:42:b3:e6:84:20: f9:fb:e9:cc:22:55:0a:81:ba:93:df:91:c6:8c:75: 94:d2:80:95:f3:bd:21:1d:29:94:7b:c1:63:4c:98: 81:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1E:EB:9A:D1:CC:0F:F4:F3:3B:96:76:B3:8E:83:D6:29:9C:9E:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df7147dc-5eac-4e5b-8652-3e122c2559c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:e080::/46 Signature Algorithm: sha256WithRSAEncryption 7e:a4:c7:7c:55:8b:7f:11:c5:fe:20:ea:70:b0:b5:4e:ff:77: 24:5a:9b:58:25:3c:77:3a:04:c7:21:70:9e:83:8e:99:14:90: 3d:1f:c4:dc:c7:54:16:04:98:e1:66:22:f4:6f:4d:3f:d2:8e: 47:40:76:ab:fa:ec:0e:f1:18:fe:de:e0:2f:b5:a9:cd:c2:fe: fa:13:12:d2:d6:80:5a:9e:b8:d7:37:0b:c2:a1:fa:23:75:1a: 7b:50:13:4c:5b:6c:80:bc:93:92:f8:9d:45:26:0e:e0:11:e4: 46:60:2e:a7:51:50:30:c4:ea:0c:65:2c:ef:0c:85:37:3b:06: 3d:b5:45:7e:bf:2e:91:87:df:03:e5:bd:bb:f0:fa:0d:ad:48: c4:8e:a4:48:97:ff:80:8c:5e:ff:55:de:f0:98:b2:d6:5e:60: 27:77:5f:34:50:21:ce:01:b1:97:66:8e:07:9d:ed:ce:98:d4: da:e8:dc:6c:c2:0f:12:3f:1d:21:a6:72:98:0d:31:ed:53:d4: 22:58:07:00:ed:3c:74:df:f8:6e:cf:2e:8b:4b:f1:ad:da:b7: 67:ef:9a:75:b3:19:82:68:f4:18:f8:dc:90:aa:4d:50:93:94: 21:76:f1:48:ab:ec:a6:be:5d:bb:c1:02:a2:c0:f0:87:bc:25: 47:fb:7d:00 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP1l+JKr2AnqUM19zcvILZRn5mP4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTU1MjAzWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZWVhNGU1MWExY2M5ZDQ4ZGEwZDRiMGUxOGFkOTNkNzVi ZWE1NTdkYWEwNTNjZWI0ZmY1OGJjYmJlYjk3Nzg4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfgF0yXNhP4quL5vVS2zi3Fy0V0iDMQm1upYgXxGGJK67e l56r2DOBSNxSXFfTkqlKjgqUc235kCOekrzizJ9XqaWPRU3x000riDCBR0fH4I4U XnJqZbchTflf+B0wcKcCu5Q/m91Q8u7/3HfTXMru3BY1TgHfRDaaSRIQGzFKVe6y sjWVaXV3JUHqwbBvpA2M5qQgfvJEH8xtwYb8rKgrElGKe+F69RmbuvogJKgFfhGf 1NYtZ8npQCjOfqUXk8SE0O1OnbSWqGY2M43UtHLL1lZI36cJmwRddlNCs+aEIPn7 6cwiVQqBupPfkcaMdZTSgJXzvSEdKZR7wWNMmIFtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnR7rmtHMD/TzO5Z2s46D1imcnmYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmNzE0N2RjLTVlYWMtNGU1Yi04NjUyLTNlMTIyYzI1NTljMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/34IAwDQYJKoZIhvcNAQELBQADggEBAH6kx3xVi38Rxf4g6nCwtU7/ dyRam1glPHc6BMchcJ6DjpkUkD0fxNzHVBYEmOFmIvRvTT/SjkdAdqv67A7xGP7e 4C+1qc3C/voTEtLWgFqeuNc3C8Kh+iN1GntQE0xbbIC8k5L4nUUmDuAR5EZgLqdR UDDE6gxlLO8MhTc7Bj21RX6/LpGH3wPlvbvw+g2tSMSOpEiX/4CMXv9V3vCYstZe YCd3XzRQIc4BsZdmjged7c6Y1Nro3GzCDxI/HSGmcpgNMe1T1CJYBwDtPHTf+G7P LotL8a3at2fvmnWzGYJo9Bj43JCqTVCTlCF28Uir7Ka+XbvBAqLA8Ie8JUf7fQA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:49:59 2025 by rpki-client