$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfe495ac-e186-410f-be4e-c3ff0c3254cc.roa File: dfe495ac-e186-410f-be4e-c3ff0c3254cc.roa (raw, json) Hash identifier: n1IqrClhD6SqjQ8sPk4lyvw1p5YKJiIY3n+JXxBavlc= Subject key identifier: 25:76:85:EC:16:48:CA:43:AB:32:B5:84:3D:D4:5B:FE:53:9F:6B:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 569E9085AEC2C1C33EEADE06AEEB8EC9BC400354 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfe495ac-e186-410f-be4e-c3ff0c3254cc.roa Signing time: Tue 22 Apr 2025 16:20:53 +0000 ROA not before: Tue 22 Apr 2025 16:20:53 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f36:7400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:9e:90:85:ae:c2:c1:c3:3e:ea:de:06:ae:eb:8e:c9:bc:40:03:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:20:53 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=2dd3c034e9f4a6ae82b4c6a9d14f9c831e670dc44f619f3ca3e4cf571bd46c83, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:64:b1:25:fb:08:d9:fc:fc:d9:41:f9:c4:c8: 76:2f:6b:46:76:cb:17:d0:94:ef:8f:55:88:7c:9e: ee:cd:c2:06:5c:14:ec:df:64:00:3c:34:2e:5f:5f: 50:9f:4d:c1:87:5e:78:07:01:0a:7c:96:29:19:bb: 66:44:bd:e2:37:54:41:73:51:ec:8a:37:ab:40:e5: de:1e:15:64:76:0d:92:e8:eb:2e:9b:1b:66:9d:fa: 14:3f:37:c4:8b:09:ff:a4:ae:f8:3f:1b:5a:b4:e6: 25:01:a2:f2:00:7a:f6:be:33:cb:30:aa:dc:19:c5: 9f:9f:08:7c:27:08:90:3e:14:21:3c:1c:15:84:7b: 04:1e:5b:5a:ea:b3:e1:a9:8a:5b:93:85:e7:9a:66: f3:28:82:a7:69:79:d4:71:56:79:24:4b:7c:99:9c: 22:d5:af:61:25:3a:dc:5a:b8:46:7e:d4:ec:36:35: 0a:f5:e8:64:71:47:5e:b1:fc:62:22:47:66:0f:ca: ec:a5:23:22:44:d6:1e:b4:81:b8:de:69:07:a5:e6: 80:bf:17:95:73:5a:46:ca:eb:4c:74:b4:09:64:76: f3:de:36:45:62:42:db:1d:6e:fb:da:00:f6:d0:d1: 0f:43:17:ce:e9:40:61:d6:e2:fa:db:a3:05:d3:1c: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:76:85:EC:16:48:CA:43:AB:32:B5:84:3D:D4:5B:FE:53:9F:6B:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dfe495ac-e186-410f-be4e-c3ff0c3254cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f36:7400::/40 Signature Algorithm: sha256WithRSAEncryption 38:bf:09:87:be:1f:1a:6d:d4:d5:71:46:f7:fd:44:cd:0d:2a: b6:55:7a:31:7a:70:1a:6b:9e:82:ac:10:2a:1e:12:af:47:f3: 0c:9e:70:69:02:b3:5e:7a:81:4b:21:68:b6:f5:e9:3c:5e:58: 0f:df:0f:6b:1d:0d:98:15:54:4a:1e:de:12:c2:09:0e:f5:3c: 9a:64:97:c3:0f:d4:80:0a:fb:4f:f8:15:5c:35:31:10:c2:14: bc:e4:34:03:b5:71:af:11:0a:6b:99:19:59:25:cd:a3:44:50: 98:df:26:dd:5d:68:96:6f:36:5f:79:64:63:fe:c2:3f:2a:68: b9:8b:8c:81:3e:72:34:01:05:90:b2:4b:3f:d3:d9:ad:e4:41: b5:15:1a:6b:d1:cd:ca:6d:41:8e:6f:c0:1e:2a:c7:60:4e:e5: f8:c4:eb:8c:08:7d:b0:ca:bf:b0:7b:cd:c7:6c:5f:2e:f9:1b: b8:8a:d3:76:c3:f6:bd:89:3b:e1:97:af:ef:13:ac:d0:31:85: a9:0b:ea:3a:63:cd:b1:d2:10:49:ae:e9:d9:cb:b2:40:47:8f: 76:c2:e3:3c:fa:3d:e2:7c:21:f4:2c:d5:f2:93:1b:fe:4c:77: 67:d5:4a:89:cd:85:f0:7a:3a:d1:21:40:b0:85:84:bc:34:ec: a2:fe:18:72 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVp6Qha7CwcM+6t4GruuOybxAA1QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYyMDUzWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZGQzYzAzNGU5ZjRhNmFlODJiNGM2YTlkMTRmOWM4MzFl NjcwZGM0NGY2MTlmM2NhM2U0Y2Y1NzFiZDQ2YzgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcZLEl+wjZ/PzZQfnEyHYva0Z2yxfQlO+PVYh8nu7NwgZc FOzfZAA8NC5fX1CfTcGHXngHAQp8likZu2ZEveI3VEFzUeyKN6tA5d4eFWR2DZLo 6y6bG2ad+hQ/N8SLCf+krvg/G1q05iUBovIAeva+M8swqtwZxZ+fCHwnCJA+FCE8 HBWEewQeW1rqs+GpiluTheeaZvMogqdpedRxVnkkS3yZnCLVr2ElOtxauEZ+1Ow2 NQr16GRxR16x/GIiR2YPyuylIyJE1h60gbjeaQel5oC/F5VzWkbK60x0tAlkdvPe NkViQtsdbvvaAPbQ0Q9DF87pQGHW4vrbowXTHGzDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJXaF7BZIykOrMrWEPdRb/lOfazkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmZTQ5NWFjLWUxODYtNDEwZi1iZTRlLWMzZmYwYzMyNTRjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB82dDANBgkqhkiG9w0BAQsFAAOCAQEAOL8Jh74fGm3U1XFG9/1EzQ0q tlV6MXpwGmuegqwQKh4Sr0fzDJ5waQKzXnqBSyFotvXpPF5YD98Pax0NmBVUSh7e EsIJDvU8mmSXww/UgAr7T/gVXDUxEMIUvOQ0A7VxrxEKa5kZWSXNo0RQmN8m3V1o lm82X3lkY/7CPypouYuMgT5yNAEFkLJLP9PZreRBtRUaa9HNym1Bjm/AHirHYE7l +MTrjAh9sMq/sHvNx2xfLvkbuIrTdsP2vYk74Zev7xOs0DGFqQvqOmPNsdIQSa7p 2cuyQEePdsLjPPo94nwh9CzV8pMb/kx3Z9VKic2F8Ho60SFAsIWEvDTsov4Ycg== -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:52 2025 by rpki-client