$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa File: e6538696-8c8b-4e22-8582-42e86ff86c5f.roa (raw, json) Hash identifier: q59Kz8Wez9zZAnK+U3lsU7Oxzd6GcEUAXSLx1WD1F1M= Subject key identifier: B9:C2:99:DE:B7:65:76:43:BD:23:98:31:9E:7A:F7:DC:DC:8E:6B:89 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 71DF12D9C45E4A8EB13ECFDE3684CB1939DE7F44 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa Signing time: Tue 22 Apr 2025 17:10:17 +0000 ROA not before: Tue 22 Apr 2025 17:10:17 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2f:4000::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:df:12:d9:c4:5e:4a:8e:b1:3e:cf:de:36:84:cb:19:39:de:7f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:10:17 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=95f2b963fe4b67d4a50be6aa7f0f158cd1749bd34f81d4b04798433731e99781, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:f5:17:1d:fa:15:d7:bd:d0:51:6c:17:81: 2e:e9:78:5e:3d:bf:0e:1e:6c:bd:20:d6:de:7d:f2: 94:9a:38:d3:c4:8c:74:0b:f7:dd:ba:a6:2f:85:43: 3b:a1:97:02:d8:4b:d1:9a:27:6c:29:58:e9:b8:be: d0:fa:b7:5b:e9:6f:79:ca:a8:f0:45:e4:7f:c4:a3: bd:ce:6f:31:12:cb:c1:ec:70:b9:fb:aa:52:a8:ec: 85:14:8a:24:da:a0:94:86:67:ca:af:1f:23:9b:1c: 5d:16:8e:9b:8e:85:92:ca:36:02:b1:37:5c:57:a1: 50:79:59:6b:85:f0:99:c0:bf:c8:ae:8e:e2:41:77: ec:8d:64:8c:ff:8b:ac:32:fe:52:b8:d1:9c:e8:fd: b6:d1:6c:8f:15:c6:59:32:78:79:a8:51:d6:2e:cb: ef:e7:5f:7d:cb:a6:c7:0c:32:b3:cb:5e:14:e5:ac: 92:f4:f3:9b:b4:13:01:2c:63:8f:27:fe:c7:47:e8: 1f:7f:0a:e1:88:ac:98:ba:53:c8:27:db:89:9b:7f: f6:9f:84:d6:62:4c:a6:1c:df:bc:41:ff:44:bc:5d: 28:e9:e9:7c:1d:e9:87:6e:5a:1e:c5:7a:fb:8f:0f: 05:d2:8e:9d:39:0a:bf:f8:0f:ec:c4:e2:8c:f3:95: 2f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C2:99:DE:B7:65:76:43:BD:23:98:31:9E:7A:F7:DC:DC:8E:6B:89 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6538696-8c8b-4e22-8582-42e86ff86c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2f:4000::/37 Signature Algorithm: sha256WithRSAEncryption 77:63:9c:89:cc:83:06:81:71:59:c5:a9:39:5d:b7:d1:4f:eb: 78:1d:32:03:f6:d8:d1:95:4c:6b:45:aa:61:07:90:99:34:56: 24:4b:11:e5:87:64:d0:8b:72:8f:93:8d:08:ab:12:87:a3:cb: 2b:57:8a:e8:26:b7:d2:64:8b:69:11:cb:ee:ee:15:0c:ca:1b: e7:c5:f5:5d:a0:e8:84:8f:be:7e:34:8f:4b:69:9b:ba:c0:94: 2d:07:0d:0a:37:3a:12:94:6d:3d:97:93:ea:68:95:9f:86:3c: be:79:f0:07:e8:46:20:1b:b3:19:b0:15:be:e1:4f:84:89:55: 72:2e:41:f7:4d:c4:78:4c:f3:00:d2:fa:7a:dd:8d:3b:2f:5c: 94:4f:2f:06:8d:87:4a:32:58:7b:7e:44:f1:53:91:c2:53:fa: 4a:66:03:aa:4c:6a:02:9d:a6:30:fa:1b:36:fa:19:58:75:90: ae:f6:ec:f0:b9:a0:12:52:78:60:db:21:f8:65:c0:60:e4:93: 6b:76:aa:09:2a:10:dd:be:ac:15:3c:07:0a:73:b2:fa:6c:be: 17:4c:33:e2:37:24:ce:d0:22:7f:bc:28:75:f3:dc:aa:96:eb: b4:6c:a7:f2:79:56:9a:b0:2d:49:4a:52:a2:51:f1:02:d0:90: 77:e5:d8:39 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcd8S2cReSo6xPs/eNoTLGTnef0QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcxMDE3WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWYyYjk2M2ZlNGI2N2Q0YTUwYmU2YWE3ZjBmMTU4Y2Qx NzQ5YmQzNGY4MWQ0YjA0Nzk4NDMzNzMxZTk5NzgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIdvUXHfoV173QUWwXgS7peF49vw4ebL0g1t598pSaONPE jHQL9926pi+FQzuhlwLYS9GaJ2wpWOm4vtD6t1vpb3nKqPBF5H/Eo73ObzESy8Hs cLn7qlKo7IUUiiTaoJSGZ8qvHyObHF0WjpuOhZLKNgKxN1xXoVB5WWuF8JnAv8iu juJBd+yNZIz/i6wy/lK40Zzo/bbRbI8VxlkyeHmoUdYuy+/nX33LpscMMrPLXhTl rJL085u0EwEsY48n/sdH6B9/CuGIrJi6U8gn24mbf/afhNZiTKYc37xB/0S8XSjp 6Xwd6YduWh7FevuPDwXSjp05Cr/4D+zE4ozzlS+fAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUucKZ3rdldkO9I5gxnnr33NyOa4kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U2NTM4Njk2LThjOGItNGUyMi04NTgyLTQyZTg2ZmY4NmM1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8vQDANBgkqhkiG9w0BAQsFAAOCAQEAd2OcicyDBoFxWcWpOV230U/r eB0yA/bY0ZVMa0WqYQeQmTRWJEsR5Ydk0Ityj5ONCKsSh6PLK1eK6Ca30mSLaRHL 7u4VDMob58X1XaDohI++fjSPS2mbusCULQcNCjc6EpRtPZeT6miVn4Y8vnnwB+hG IBuzGbAVvuFPhIlVci5B903EeEzzANL6et2NOy9clE8vBo2HSjJYe35E8VORwlP6 SmYDqkxqAp2mMPobNvoZWHWQrvbs8LmgElJ4YNsh+GXAYOSTa3aqCSoQ3b6sFTwH CnOy+my+F0wz4jckztAif7wodfPcqpbrtGyn8nlWmrAtSUpSolHxAtCQd+XYOQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:57 2025 by rpki-client