$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e193cd01-50f2-4d32-8891-d900a7c959d2.roa File: e193cd01-50f2-4d32-8891-d900a7c959d2.roa (raw, json) Hash identifier: ObQP9COEmaKciFQBlqiVTx8Prw0rcS1hCt9LTPJyvWI= Subject key identifier: 32:A8:4A:BE:75:00:20:E5:BF:25:C4:C9:79:DE:D1:51:1B:91:05:E2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 21058A92D4CBB698AE543DF9FBF8ED01A2A051B8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e193cd01-50f2-4d32-8891-d900a7c959d2.roa Signing time: Tue 22 Apr 2025 16:30:32 +0000 ROA not before: Tue 22 Apr 2025 16:30:32 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f70:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:05:8a:92:d4:cb:b6:98:ae:54:3d:f9:fb:f8:ed:01:a2:a0:51:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:30:32 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=4bed9ee0ed44b38807de14252f940e1b28b4f85ebd905682f0601dccbe14a7c2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:64:0b:12:ed:68:15:c5:43:c9:1e:75:78:2d: b7:e0:3d:92:f0:7e:e9:86:7e:30:a0:1d:29:f7:d0: cf:5c:af:cf:14:0f:19:7b:6c:5b:04:3c:49:3c:15: b6:d0:f2:6b:60:0e:8b:ae:f1:f1:4c:7e:f5:3e:06: 7c:30:74:fe:18:7b:24:d1:9d:53:05:05:1f:c4:a3: de:84:25:0e:cc:29:74:56:44:cc:52:04:d0:c6:2e: 4b:d6:49:a6:7f:cc:ed:8a:ab:4e:1d:86:90:31:83: bd:90:d7:f0:6b:49:4a:50:f9:3c:c1:36:df:5a:5e: d9:9a:26:33:11:0e:33:95:b5:e3:b8:45:ae:bf:97: 72:52:03:82:b3:1c:50:f4:28:dd:f9:71:9d:47:5b: 5b:8c:28:c2:40:79:ce:e3:89:4c:e8:8e:e2:67:94: 64:40:d7:04:eb:41:82:f0:5a:b1:80:6d:9f:c4:ed: b3:bd:c6:4c:56:d5:67:16:bb:95:52:ab:77:0a:4d: 0c:a2:3b:ea:7d:ed:54:8f:f9:e7:c2:29:b5:50:b0: fc:b6:03:8c:70:53:ec:ae:89:1b:0b:1b:90:1f:f6: 9f:7c:2e:3a:2b:b5:ce:8f:3e:b9:f2:7b:94:9e:20: 75:2a:e0:e6:82:22:e9:1d:71:ef:7a:84:d6:ae:e0: ac:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A8:4A:BE:75:00:20:E5:BF:25:C4:C9:79:DE:D1:51:1B:91:05:E2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e193cd01-50f2-4d32-8891-d900a7c959d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f70:8000::/39 Signature Algorithm: sha256WithRSAEncryption 44:58:ea:6f:b8:23:20:3f:f3:98:7a:61:3e:de:9f:48:e4:b5: 0c:37:02:b0:99:4a:18:3b:79:d5:8d:79:ea:fe:63:7a:66:62: 9a:1d:a6:45:9e:45:02:a9:c3:9d:2d:32:5b:86:55:ba:f2:a9: 13:60:d7:ee:26:9c:42:93:59:85:23:bf:16:0f:84:36:cc:03: 77:89:09:e6:13:a9:ee:0a:80:ad:0c:42:db:62:34:e2:4e:88: 24:e1:f9:01:5d:c6:95:df:a9:6c:b7:b2:47:6d:df:c2:34:c7: a9:4f:f2:62:a0:f4:7d:32:ab:e6:a3:01:b3:8e:f6:0d:ad:ed: c6:9f:7f:08:81:a6:a4:9e:c9:c1:d1:b0:db:c9:a1:26:1f:62: 38:fe:8f:95:db:1f:94:54:6e:d9:5d:92:d6:32:1d:78:bd:8d: 60:f0:d6:76:82:2f:ae:f1:06:dc:ec:7e:01:7e:ba:08:6c:b6: 51:e9:7c:5f:3b:8d:9c:49:ab:d5:88:bb:4d:07:7d:d5:ec:fc: ce:47:88:7c:a2:dd:79:67:61:9b:92:9e:b5:cc:8b:2e:b9:c5: 63:99:40:1b:71:f4:92:27:f2:7d:9e:68:50:51:62:6a:8e:09: fc:79:3c:de:89:66:6f:c0:51:4d:95:cd:cd:a5:0a:90:c7:be: 2c:00:22:d4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUIQWKktTLtpiuVD35+/jtAaKgUbgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYzMDMyWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YmVkOWVlMGVkNDRiMzg4MDdkZTE0MjUyZjk0MGUxYjI4 YjRmODVlYmQ5MDU2ODJmMDYwMWRjY2JlMTRhN2MyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChZAsS7WgVxUPJHnV4LbfgPZLwfumGfjCgHSn30M9cr88U Dxl7bFsEPEk8FbbQ8mtgDouu8fFMfvU+BnwwdP4YeyTRnVMFBR/Eo96EJQ7MKXRW RMxSBNDGLkvWSaZ/zO2Kq04dhpAxg72Q1/BrSUpQ+TzBNt9aXtmaJjMRDjOVteO4 Ra6/l3JSA4KzHFD0KN35cZ1HW1uMKMJAec7jiUzojuJnlGRA1wTrQYLwWrGAbZ/E 7bO9xkxW1WcWu5VSq3cKTQyiO+p97VSP+efCKbVQsPy2A4xwU+yuiRsLG5Af9p98 Ljortc6PPrnye5SeIHUq4OaCIukdce96hNau4KyXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMqhKvnUAIOW/JcTJed7RURuRBeIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UxOTNjZDAxLTUwZjItNGQzMi04ODkxLWQ5MDBhN2M5NTlkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB9wgDANBgkqhkiG9w0BAQsFAAOCAQEARFjqb7gjID/zmHphPt6fSOS1 DDcCsJlKGDt51Y156v5jemZimh2mRZ5FAqnDnS0yW4ZVuvKpE2DX7iacQpNZhSO/ Fg+ENswDd4kJ5hOp7gqArQxC22I04k6IJOH5AV3Gld+pbLeyR23fwjTHqU/yYqD0 fTKr5qMBs472Da3txp9/CIGmpJ7JwdGw28mhJh9iOP6PldsflFRu2V2S1jIdeL2N YPDWdoIvrvEG3Ox+AX66CGy2Uel8XzuNnEmr1Yi7TQd91ez8zkeIfKLdeWdhm5Ke tcyLLrnFY5lAG3H0kifyfZ5oUFFiao4J/Hk83olmb8BRTZXNzaUKkMe+LAAi1A== -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:19 2025 by rpki-client