$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e838ff70-6a69-4c82-93ca-6ef1672659e1.roa File: e838ff70-6a69-4c82-93ca-6ef1672659e1.roa (raw, json) Hash identifier: LwYEydNRkkcv39+u6+NcnfTmR1WyjYTn1KS9bQfuMGI= Subject key identifier: 3A:77:F8:84:D9:E2:F0:20:44:07:56:9E:6D:68:78:68:35:37:EE:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72CEFE88298AB3B66C902B3A1ED15E70F9CBAE97 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e838ff70-6a69-4c82-93ca-6ef1672659e1.roa Signing time: Tue 22 Apr 2025 17:22:06 +0000 ROA not before: Tue 22 Apr 2025 17:22:06 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f14:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ce:fe:88:29:8a:b3:b6:6c:90:2b:3a:1e:d1:5e:70:f9:cb:ae:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:22:06 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=1dc6fa75388ff8a942e2f37a74154e5a73b67049bc797d2c2db572873ce05fe8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:42:ee:5f:9c:64:fc:f8:ab:b7:a2:6b:f1: 9b:52:21:a3:e8:03:8a:5f:96:08:45:45:bb:f1:9b: 6b:80:5e:f3:1a:c2:66:0f:ca:c2:1d:0f:7b:96:69: ff:22:91:20:bb:80:5a:31:b3:56:19:a2:a4:22:1c: fc:d9:54:16:9b:19:ea:07:71:fc:ff:33:24:42:90: 4d:b4:4f:fc:b1:51:10:13:f9:f6:b2:8f:37:df:05: 58:fa:03:d8:b8:35:85:6b:9f:08:f7:23:92:dd:02: f7:bc:b4:27:4e:f7:2a:6f:71:5d:21:02:a9:d9:3f: be:50:c2:a7:7d:2f:13:ac:bd:53:e7:d1:92:e1:bb: 0d:5a:c9:d8:b9:7f:18:3c:0a:56:ae:d9:81:3e:fc: 5d:42:d0:b3:7b:e4:d2:9e:9e:2e:b7:41:7a:35:e2: 88:9a:bb:04:ad:e1:26:bf:14:a5:7f:78:22:cc:64: 3e:da:49:11:c7:50:cb:fc:05:f3:8f:09:e0:77:a0: 5d:e3:ef:d9:ca:01:4f:46:9f:8c:8d:8b:fb:a4:64: 67:5b:35:11:1b:69:ba:7f:fa:ce:d9:97:6c:b0:fa: d5:ab:f9:14:4c:8f:b2:ce:24:58:35:be:01:6b:fe: 1e:bf:b0:fd:b5:08:df:27:8b:72:24:ae:12:4a:79: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:77:F8:84:D9:E2:F0:20:44:07:56:9E:6D:68:78:68:35:37:EE:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e838ff70-6a69-4c82-93ca-6ef1672659e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14:4000::/36 Signature Algorithm: sha256WithRSAEncryption c4:41:77:80:dd:5e:6f:13:00:bc:d2:59:54:bb:d1:d5:37:0d: 6f:77:2d:71:1d:c8:b5:f3:8a:f4:64:c5:fc:11:d6:bc:14:13: 45:c1:a6:d7:79:eb:71:a8:1c:c6:a9:d5:d6:78:34:c7:0e:0c: ae:df:73:e5:8e:d5:0a:7e:26:c6:a4:f3:ab:60:83:cd:6a:67: cc:1e:ab:5e:64:0b:8a:43:fb:95:b6:d7:61:8f:bd:e2:62:68: 50:be:8b:88:1f:a8:1d:95:b0:a5:53:a1:8d:b3:2f:57:fd:96: ed:92:07:64:72:07:ff:5d:b5:0a:48:b1:26:7c:d2:95:11:8f: 4d:24:08:dd:8c:66:7d:47:6f:6b:40:81:8f:b4:f3:0e:7c:50: 40:ba:22:b1:ad:65:be:c0:86:64:88:bd:1d:61:1b:32:84:b3: 08:4d:c1:ca:8c:0e:55:41:e7:89:1d:2d:70:11:0e:9f:76:cd: 8f:27:d2:b7:05:b0:27:d9:c2:81:5d:56:f3:f6:54:5f:03:2f: 7f:31:db:5b:5c:77:72:bf:bc:50:f8:f0:af:0d:76:a6:4c:6e: ef:b2:74:96:cf:e3:e4:b6:e7:68:1b:71:80:10:07:90:df:13: 96:21:d3:9b:81:87:fe:bd:31:48:9d:17:6e:a0:fc:be:32:68: fc:bd:b0:c6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcs7+iCmKs7ZskCs6HtFecPnLrpcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcyMjA2WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGM2ZmE3NTM4OGZmOGE5NDJlMmYzN2E3NDE1NGU1YTcz YjY3MDQ5YmM3OTdkMmMyZGI1NzI4NzNjZTA1ZmU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6/ELuX5xk/Pirt6Jr8ZtSIaPoA4pflghFRbvxm2uAXvMa wmYPysIdD3uWaf8ikSC7gFoxs1YZoqQiHPzZVBabGeoHcfz/MyRCkE20T/yxURAT +fayjzffBVj6A9i4NYVrnwj3I5LdAve8tCdO9ypvcV0hAqnZP75Qwqd9LxOsvVPn 0ZLhuw1aydi5fxg8Clau2YE+/F1C0LN75NKeni63QXo14oiauwSt4Sa/FKV/eCLM ZD7aSRHHUMv8BfOPCeB3oF3j79nKAU9Gn4yNi/ukZGdbNREbabp/+s7Zl2yw+tWr +RRMj7LOJFg1vgFr/h6/sP21CN8ni3IkrhJKeYEjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUOnf4hNni8CBEB1aebWh4aDU37nwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4MzhmZjcwLTZhNjktNGM4Mi05M2NhLTZlZjE2NzI2NTllMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8UQDANBgkqhkiG9w0BAQsFAAOCAQEAxEF3gN1ebxMAvNJZVLvR1TcN b3ctcR3ItfOK9GTF/BHWvBQTRcGm13nrcagcxqnV1ng0xw4Mrt9z5Y7VCn4mxqTz q2CDzWpnzB6rXmQLikP7lbbXYY+94mJoUL6LiB+oHZWwpVOhjbMvV/2W7ZIHZHIH /121CkixJnzSlRGPTSQI3YxmfUdva0CBj7TzDnxQQLoisa1lvsCGZIi9HWEbMoSz CE3ByowOVUHniR0tcBEOn3bNjyfStwWwJ9nCgV1W8/ZUXwMvfzHbW1x3cr+8UPjw rw12pkxu77J0ls/j5LbnaBtxgBAHkN8TliHTm4GH/r0xSJ0XbqD8vjJo/L2wxg== -----END CERTIFICATE-----Generated at Sat Apr 26 13:33:52 2025 by rpki-client