$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f07183-eacc-4e18-aac2-f0abdd72b563.roa File: e5f07183-eacc-4e18-aac2-f0abdd72b563.roa (raw, json) Hash identifier: Touw23UUumT2yTnaCsDktnNLb2v+JWPcy8J6A6VDXRI= Subject key identifier: 76:63:67:5E:61:47:73:90:9B:FB:55:B6:78:54:98:00:2B:D6:ED:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 10AE2F880E9836A4D5B016D0A19FCC95FC63311D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f07183-eacc-4e18-aac2-f0abdd72b563.roa Signing time: Mon 21 Apr 2025 18:01:34 +0000 ROA not before: Mon 21 Apr 2025 18:01:34 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ae:2f:88:0e:98:36:a4:d5:b0:16:d0:a1:9f:cc:95:fc:63:31:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 18:01:34 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=5b84c06ed033a3e6f40a113d1931a632221b8236473f890566fb03f7de11eb10, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:ca:c5:78:a4:4c:80:b2:1d:bf:f5:1e:a0: b5:ac:0e:0b:2c:5c:15:2b:b2:90:5c:c1:e8:f8:46: 3c:2c:40:61:83:37:74:1b:ef:f7:47:e1:be:66:9c: 70:c0:78:10:f6:b8:27:49:d6:4a:67:c3:2e:be:c5: a0:91:42:d7:49:34:47:d9:9b:f0:22:29:0a:a8:69: 5a:45:73:4f:cc:86:c1:46:2a:86:49:ad:30:8e:40: 43:77:8b:11:f2:a1:3b:ce:f9:4b:3b:3f:31:01:a8: c3:3e:80:17:98:59:0f:fe:ea:77:93:5a:d4:28:23: 98:56:ad:be:78:44:2c:09:53:5e:8c:63:02:94:4d: a9:0f:45:29:a0:aa:4a:e1:d1:90:8b:b1:88:0c:80: d5:9b:74:02:d0:8d:f7:d4:a6:4e:39:a0:85:44:6f: a6:4a:a0:54:04:94:6e:69:2a:f2:0e:ec:91:81:a5: e9:a7:a6:02:2a:f2:f9:7a:8d:6f:b4:61:2c:e2:d7: 6f:3f:7a:a8:f2:bc:87:82:0f:f6:3b:b3:9c:19:7a: f6:2e:9e:cd:df:0a:31:45:a5:87:45:6b:2f:2c:72: f3:7e:a9:7f:8c:8b:2b:b2:73:10:12:d5:b1:16:f5: 09:1a:30:c4:b8:c5:bb:33:70:24:e8:0b:b1:3e:77: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:63:67:5E:61:47:73:90:9B:FB:55:B6:78:54:98:00:2B:D6:ED:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f07183-eacc-4e18-aac2-f0abdd72b563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:2040::/48 Signature Algorithm: sha256WithRSAEncryption b8:91:8c:81:d9:6e:df:73:ba:27:0f:98:68:7d:3f:d1:7f:9b: e0:e6:4c:d2:5e:f0:d3:28:97:00:82:f7:16:e0:4f:38:1d:ba: 39:29:0f:f2:f5:a7:64:bb:4c:ed:b8:80:02:44:ce:46:6f:21: bf:6b:fa:53:e9:cc:db:b7:24:48:0f:b3:6c:d9:5c:c4:0a:3b: c7:a1:47:d7:5a:03:68:ef:6e:12:b6:87:73:35:87:b4:bf:5e: 22:64:91:6d:8d:c4:86:7a:d1:dc:13:9d:b4:ef:59:e8:34:dd: bd:78:41:01:89:5b:ce:0a:1d:fb:1d:12:14:d9:b5:4a:35:fe: 8d:f1:d5:74:98:db:97:da:0c:4b:23:9c:ed:cc:88:2b:9f:d8: 82:fc:33:ce:ff:9e:9f:ec:1e:25:7c:c2:60:b8:64:ad:14:e8: 01:1a:c3:c6:7c:be:d6:fc:f9:23:28:47:4d:0f:78:10:3d:8d: be:10:25:b4:c0:b7:c1:63:79:ba:af:9e:80:96:cd:d1:23:58: b0:b8:08:1e:e0:e5:4c:71:01:1a:80:94:d8:6d:74:63:49:bc: f7:52:ce:85:ac:2f:3d:29:8e:71:8e:f2:a8:3b:ef:97:72:8c: 92:e5:e7:62:ed:50:f6:e7:5b:57:d3:4f:11:f3:69:ae:0e:d8: a7:31:5d:11 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEK4viA6YNqTVsBbQoZ/MlfxjMR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTgwMTM0WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Yjg0YzA2ZWQwMzNhM2U2ZjQwYTExM2QxOTMxYTYzMjIy MWI4MjM2NDczZjg5MDU2NmZiMDNmN2RlMTFlYjEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2FsrFeKRMgLIdv/UeoLWsDgssXBUrspBcwej4RjwsQGGD N3Qb7/dH4b5mnHDAeBD2uCdJ1kpnwy6+xaCRQtdJNEfZm/AiKQqoaVpFc0/MhsFG KoZJrTCOQEN3ixHyoTvO+Us7PzEBqMM+gBeYWQ/+6neTWtQoI5hWrb54RCwJU16M YwKUTakPRSmgqkrh0ZCLsYgMgNWbdALQjffUpk45oIVEb6ZKoFQElG5pKvIO7JGB pemnpgIq8vl6jW+0YSzi128/eqjyvIeCD/Y7s5wZevYuns3fCjFFpYdFay8scvN+ qX+MiyuycxAS1bEW9QkaMMS4xbszcCToC7E+d+RTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdmNnXmFHc5Cb+1W2eFSYACvW7QcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U1ZjA3MTgzLWVhY2MtNGUxOC1hYWMyLWYwYWJkZDcyYjU2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yIEAwDQYJKoZIhvcNAQELBQADggEBALiRjIHZbt9zuicPmGh9P9F/ m+DmTNJe8NMolwCC9xbgTzgdujkpD/L1p2S7TO24gAJEzkZvIb9r+lPpzNu3JEgP s2zZXMQKO8ehR9daA2jvbhK2h3M1h7S/XiJkkW2NxIZ60dwTnbTvWeg03b14QQGJ W84KHfsdEhTZtUo1/o3x1XSY25faDEsjnO3MiCuf2IL8M87/np/sHiV8wmC4ZK0U 6AEaw8Z8vtb8+SMoR00PeBA9jb4QJbTAt8FjebqvnoCWzdEjWLC4CB7g5UxxARqA lNhtdGNJvPdSzoWsLz0pjnGO8qg775dyjJLl52LtUPbnW1fTTxHzaa4O2KcxXRE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:35 2025 by rpki-client