$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8abf14e-6680-4c4c-89ee-4b6e6a375e4a.roa File: e8abf14e-6680-4c4c-89ee-4b6e6a375e4a.roa (raw, json) Hash identifier: NAacEXm7JW6ZeYCz5tfhv7xmPmHxRRRHv3MlSb1faGo= Subject key identifier: 4E:66:D6:F1:C0:29:C2:F2:17:57:42:9A:47:8D:CB:EE:F6:DF:A1:F3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33647F557E54A6C38541B15BF2FA62CC09330378 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8abf14e-6680-4c4c-89ee-4b6e6a375e4a.roa Signing time: Tue 22 Apr 2025 16:11:19 +0000 ROA not before: Tue 22 Apr 2025 16:11:19 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:c080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:64:7f:55:7e:54:a6:c3:85:41:b1:5b:f2:fa:62:cc:09:33:03:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:11:19 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=88e4d443836198fa9c31a32cf4db0e02cbf627a872560fd59c5559d7d8878aeb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4a:fb:da:a8:42:06:a8:f3:a0:8e:3c:f1:09: 3b:cb:df:92:56:16:f9:f8:a1:38:b2:0c:26:0e:c9: 76:b8:2f:7e:06:19:bb:d4:66:9f:b8:a0:f5:08:5a: ed:3a:05:09:ab:13:0e:6a:b5:d3:71:f2:c3:1d:bd: 1b:d0:93:65:7a:e4:c7:7b:5d:5b:e9:9d:b3:03:83: cd:45:cd:9b:03:be:cd:68:8b:19:72:c1:8e:cb:94: f2:79:c5:cf:84:3e:f8:fd:fa:f9:3e:3b:04:0b:47: 53:02:e1:3f:94:1c:f3:03:13:61:ee:e4:65:19:ff: 69:c9:e2:61:26:b0:dc:75:f9:79:7b:6e:e3:2d:e8: d5:0a:76:e0:7a:ba:34:7d:d7:8b:e4:a6:5f:68:2e: c7:ab:31:60:0e:5b:c0:5d:1c:2f:f8:5f:a8:19:39: 15:a2:8e:25:66:04:f1:da:ec:92:0e:a5:67:9c:25: 1e:25:76:40:83:a4:10:1e:d5:33:8d:d8:51:34:a9: f6:83:36:e1:bd:35:56:a6:f7:72:41:f5:dc:64:2d: 82:bc:3d:38:a4:d4:fa:7c:2b:9f:fd:e1:7a:dc:54: 78:f3:31:23:3d:fa:e1:4b:18:93:7a:9b:82:eb:ec: bc:ec:ea:f3:04:6e:20:50:3e:c4:39:4b:c8:34:80: 3e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:66:D6:F1:C0:29:C2:F2:17:57:42:9A:47:8D:CB:EE:F6:DF:A1:F3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8abf14e-6680-4c4c-89ee-4b6e6a375e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:c080::/46 Signature Algorithm: sha256WithRSAEncryption 4d:92:08:d0:af:b0:f9:81:d4:4e:25:7e:b3:0c:01:16:3c:51: f1:2f:20:d0:7c:d7:e2:10:a7:bb:bb:27:66:d4:42:d0:f5:1d: 34:2a:2b:d4:e3:2f:d0:5f:6c:2c:13:5c:30:e3:a2:dd:88:fe: 10:2f:16:63:b3:9b:48:25:0d:8f:e7:22:c7:4a:ee:c5:30:f5: be:2e:4b:e9:20:4b:ab:d5:8e:09:db:c8:01:33:3b:fa:d2:4e: 9d:12:79:4c:43:48:f9:fd:e9:39:08:c0:ac:4d:2b:f3:a1:ea: d0:23:6f:c6:e0:25:90:49:df:02:d9:8c:a2:ab:f6:fd:85:5d: 12:e7:02:7c:47:f6:01:0c:b8:de:cb:d4:ae:68:ff:59:e5:31: 65:9e:21:26:07:e3:6a:f7:a2:e6:3f:ed:2a:b8:b4:84:bc:86: 03:44:d6:eb:ca:4b:73:f6:5d:bf:42:f4:2a:46:36:e1:bf:9e: 6f:3b:be:52:03:d2:08:2d:a4:5b:6f:3c:6c:8c:ef:43:20:ed: 48:06:ad:53:fe:83:3d:c4:dd:89:03:5b:91:94:60:1d:65:68: 32:20:b6:01:a0:9d:6c:5c:4c:2e:1c:b1:28:d9:62:51:96:af: ee:40:c5:c3:ce:33:89:db:3d:a0:51:3e:d3:5b:1d:bf:5a:c4: d6:8e:63:91 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM2R/VX5UpsOFQbFb8vpizAkzA3gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYxMTE5WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGU0ZDQ0MzgzNjE5OGZhOWMzMWEzMmNmNGRiMGUwMmNi ZjYyN2E4NzI1NjBmZDU5YzU1NTlkN2Q4ODc4YWViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMSvvaqEIGqPOgjjzxCTvL35JWFvn4oTiyDCYOyXa4L34G GbvUZp+4oPUIWu06BQmrEw5qtdNx8sMdvRvQk2V65Md7XVvpnbMDg81FzZsDvs1o ixlywY7LlPJ5xc+EPvj9+vk+OwQLR1MC4T+UHPMDE2Hu5GUZ/2nJ4mEmsNx1+Xl7 buMt6NUKduB6ujR914vkpl9oLserMWAOW8BdHC/4X6gZORWijiVmBPHa7JIOpWec JR4ldkCDpBAe1TON2FE0qfaDNuG9NVam93JB9dxkLYK8PTik1Pp8K5/94XrcVHjz MSM9+uFLGJN6m4Lr7Lzs6vMEbiBQPsQ5S8g0gD73AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTmbW8cApwvIXV0KaR43L7vbfofMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4YWJmMTRlLTY2ODAtNGM0Yy04OWVlLTRiNmU2YTM3NWU0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3wIAwDQYJKoZIhvcNAQELBQADggEBAE2SCNCvsPmB1E4lfrMMARY8 UfEvINB81+IQp7u7J2bUQtD1HTQqK9TjL9BfbCwTXDDjot2I/hAvFmOzm0glDY/n IsdK7sUw9b4uS+kgS6vVjgnbyAEzO/rSTp0SeUxDSPn96TkIwKxNK/Oh6tAjb8bg JZBJ3wLZjKKr9v2FXRLnAnxH9gEMuN7L1K5o/1nlMWWeISYH42r3ouY/7Sq4tIS8 hgNE1uvKS3P2Xb9C9CpGNuG/nm87vlID0ggtpFtvPGyM70Mg7UgGrVP+gz3E3YkD W5GUYB1laDIgtgGgnWxcTC4csSjZYlGWr+5AxcPOM4nbPaBRPtNbHb9axNaOY5E= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:59 2025 by rpki-client