$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7540042-1736-4305-ba9f-219cf482d093.roa File: e7540042-1736-4305-ba9f-219cf482d093.roa (raw, json) Hash identifier: hp/6L+ESN+zMR2zh6K1lCZzPPxvYCMJSF+QGeM0DlHo= Subject key identifier: 4A:66:0C:D9:4B:4A:17:6A:B9:BF:8F:74:16:06:6B:99:02:AC:A3:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 52F3E5D9C91B26B1875AC8B6259409D99E9F8085 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7540042-1736-4305-ba9f-219cf482d093.roa Signing time: Tue 22 Apr 2025 00:32:21 +0000 ROA not before: Tue 22 Apr 2025 00:32:21 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f61:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f3:e5:d9:c9:1b:26:b1:87:5a:c8:b6:25:94:09:d9:9e:9f:80:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:32:21 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=24db0ac92f06c921f7984f45f0784ef72c930b3ab4fe2a04dcb350e5c441a9e3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c4:0f:1a:0f:d7:38:15:dd:48:41:f8:7d:8c: 7f:17:92:ea:94:e7:ab:68:f7:a1:d1:aa:4e:96:ff: de:b9:2a:ed:f5:1f:a3:91:91:7b:66:82:67:b1:57: 69:97:ea:d0:db:fc:2d:99:1a:3f:b6:ae:62:0b:cb: 19:3f:67:2d:11:62:0e:e8:6a:ae:e1:52:10:d9:fd: 7c:a6:a4:cd:88:a6:2e:6b:7b:55:8a:2e:30:d0:e5: bc:99:23:81:6b:c3:78:19:6a:4d:17:fe:b0:f7:e5: 53:10:3a:3a:2e:c7:68:35:5c:45:a0:b0:23:1f:e0: 36:2a:86:ab:a1:08:85:74:e2:7a:ce:d9:db:9d:20: 95:c4:c2:cf:05:a5:c5:b6:fe:ec:95:48:6b:2c:e9: cd:0e:c6:c2:d8:61:48:b6:33:2f:52:79:69:34:d3: 02:9c:53:22:8f:8a:26:0e:98:a9:c2:df:d4:d1:89: c0:49:54:6e:61:73:27:83:d4:e1:d0:73:f3:70:44: f1:78:44:fa:e0:ac:21:5b:00:51:ba:95:b6:2f:5d: c3:12:27:c0:aa:83:e5:39:0e:00:7f:be:48:63:eb: 89:7e:3d:f1:7d:c7:44:9b:a3:40:44:3c:a3:fa:a5: c5:d3:a7:27:17:0e:d4:d5:1c:71:b7:ad:36:71:3c: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:66:0C:D9:4B:4A:17:6A:B9:BF:8F:74:16:06:6B:99:02:AC:A3:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e7540042-1736-4305-ba9f-219cf482d093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:8000::/39 Signature Algorithm: sha256WithRSAEncryption a2:4a:c6:f3:bc:5d:00:be:f1:d7:6c:57:ed:f2:45:87:4e:ab: 62:c6:8e:ce:a2:a0:ea:fb:fd:c0:d6:ed:42:d5:17:73:0d:62: cf:4f:2a:cf:33:46:46:a4:d1:df:93:3f:e1:e8:57:4e:59:6f: 70:f9:5f:9e:5d:20:e3:ff:dd:bc:19:b4:cc:09:b0:9b:4d:f8: 99:36:51:d6:13:46:a8:27:3e:02:be:73:a8:a7:b2:8c:72:8f: 7f:89:74:fb:80:e3:ad:c2:21:19:ea:af:3c:cb:65:29:13:5d: 3e:db:9b:40:16:c7:28:ba:a6:6e:30:8c:6d:09:07:b0:5b:90: 01:88:fe:5b:87:b4:25:18:a1:44:12:f8:39:81:3d:ca:89:d9: 5e:e5:91:80:57:4b:ad:66:37:64:2e:d0:0b:73:c4:fc:85:b6: 66:1e:fb:b1:7d:15:36:a5:da:55:4e:94:52:dd:bd:ff:5b:4f: 7c:60:52:9c:55:ae:0f:63:f7:9b:b8:52:43:6c:87:53:9f:dc: a2:c5:2d:f8:b2:4b:73:4c:a8:bb:34:ad:0d:94:7a:b9:50:49: 35:e1:34:c3:76:8f:6f:9d:b9:d9:4c:34:00:2d:d2:9e:ce:d4: f7:09:80:43:66:c8:14:8e:20:66:e0:d1:ff:53:b0:af:60:41: f1:d3:b4:f9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUvPl2ckbJrGHWsi2JZQJ2Z6fgIUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAzMjIxWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGRiMGFjOTJmMDZjOTIxZjc5ODRmNDVmMDc4NGVmNzJj OTMwYjNhYjRmZTJhMDRkY2IzNTBlNWM0NDFhOWUzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDixA8aD9c4Fd1IQfh9jH8XkuqU56to96HRqk6W/965Ku31 H6ORkXtmgmexV2mX6tDb/C2ZGj+2rmILyxk/Zy0RYg7oaq7hUhDZ/XympM2Ipi5r e1WKLjDQ5byZI4Frw3gZak0X/rD35VMQOjoux2g1XEWgsCMf4DYqhquhCIV04nrO 2dudIJXEws8FpcW2/uyVSGss6c0OxsLYYUi2My9SeWk00wKcUyKPiiYOmKnC39TR icBJVG5hcyeD1OHQc/NwRPF4RPrgrCFbAFG6lbYvXcMSJ8Cqg+U5DgB/vkhj64l+ PfF9x0Sbo0BEPKP6pcXTpycXDtTVHHG3rTZxPFTrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSmYM2UtKF2q5v490FgZrmQKso8AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U3NTQwMDQyLTE3MzYtNDMwNS1iYTlmLTIxOWNmNDgyZDA5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB9hgDANBgkqhkiG9w0BAQsFAAOCAQEAokrG87xdAL7x12xX7fJFh06r YsaOzqKg6vv9wNbtQtUXcw1iz08qzzNGRqTR35M/4ehXTllvcPlfnl0g4//dvBm0 zAmwm034mTZR1hNGqCc+Ar5zqKeyjHKPf4l0+4DjrcIhGeqvPMtlKRNdPtubQBbH KLqmbjCMbQkHsFuQAYj+W4e0JRihRBL4OYE9yonZXuWRgFdLrWY3ZC7QC3PE/IW2 Zh77sX0VNqXaVU6UUt29/1tPfGBSnFWuD2P3m7hSQ2yHU5/cosUt+LJLc0youzSt DZR6uVBJNeE0w3aPb5252Uw0AC3Sns7U9wmAQ2bIFI4gZuDR/1Owr2BB8dO0+Q== -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:46 2025 by rpki-client