$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece8eb8f-37d1-4797-8746-990300c8ab75.roa File: ece8eb8f-37d1-4797-8746-990300c8ab75.roa (raw, json) Hash identifier: a5MTLBYRRqgW/libs6RMTwgJWBz/rxRQ3GiZEQabZQA= Subject key identifier: 7F:1B:D2:60:FA:F5:DE:65:03:45:9F:67:BB:92:8B:B9:1E:C0:4B:3A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 13F4C13E0373729897BFCBDA0E87A73C0B7E4B3A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece8eb8f-37d1-4797-8746-990300c8ab75.roa Signing time: Tue 08 Apr 2025 00:10:16 +0000 ROA not before: Tue 08 Apr 2025 00:10:16 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:8422::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f4:c1:3e:03:73:72:98:97:bf:cb:da:0e:87:a7:3c:0b:7e:4b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:10:16 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=ea2d094f75cce0ae0fd838528dc87525456e2f1753433191f014308b1e093d7d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:24:ac:7d:ee:b0:bd:68:19:00:a0:eb:16: 25:73:56:9d:10:92:a7:c3:9c:ed:ab:e7:4f:f3:44: bc:4c:07:3f:d7:f8:b9:5e:0d:5e:90:71:e9:bb:bc: dc:05:07:ad:ba:ee:fb:ff:67:65:bd:bf:43:bf:29: f8:1e:ab:19:08:2d:c0:0b:a0:de:a9:02:1e:6d:72: 00:f2:97:ad:d7:f9:28:71:d2:22:55:2d:30:08:da: 52:02:34:8b:f9:10:d7:da:92:7c:a6:bf:05:8c:12: 6a:e6:a6:eb:47:70:56:4f:d7:fc:87:0b:9b:c7:98: f3:91:0d:9b:51:4e:d1:f0:be:d6:f1:e8:72:ce:5a: 11:ce:a5:7f:37:71:34:e0:71:95:f1:7a:a6:4b:83: f5:a2:19:9d:4f:01:31:bc:b6:53:5d:85:19:e2:24: a1:8d:c6:cb:57:b6:de:96:af:c2:b9:f5:65:ef:53: 2c:0d:86:07:7f:cf:b6:61:9f:89:f5:86:7e:ac:04: 4d:73:7c:9a:f8:d3:42:75:97:8b:ee:54:4b:50:6c: b0:1c:2d:dc:7d:6f:ef:58:ac:b3:bf:bb:e7:90:f4: 70:5a:43:59:5b:ec:6c:eb:6d:e6:19:ab:c9:28:fb: b0:ea:d7:90:8c:0f:01:fd:70:be:c0:d4:67:60:d7: ee:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1B:D2:60:FA:F5:DE:65:03:45:9F:67:BB:92:8B:B9:1E:C0:4B:3A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ece8eb8f-37d1-4797-8746-990300c8ab75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:8422::/48 Signature Algorithm: sha256WithRSAEncryption 90:6d:9e:d7:6d:05:fc:f3:51:39:62:5b:26:94:39:6c:8e:bc: e1:a5:51:f1:7e:33:b4:ae:d8:d1:89:ea:06:53:08:4d:6c:27: 36:89:4e:1d:a4:45:29:c8:fd:92:de:a0:c2:28:f8:e4:e8:6f: 90:e0:38:49:18:4b:21:a1:07:17:0e:99:a0:2c:63:35:6b:1b: 23:a8:c1:f0:35:c5:28:91:e1:2c:aa:48:ec:45:e5:06:bf:8d: 7f:19:60:1a:0f:48:ea:bc:4c:1f:5b:6c:ab:5a:81:fe:3c:0a: 77:55:63:d6:91:2b:ed:34:78:9b:ee:7d:2b:6a:87:4e:31:ef: ad:11:5d:21:3c:0b:0e:dd:3a:ae:45:73:fc:6d:e4:b5:80:56: 53:23:bb:c5:e2:c0:79:ab:0e:94:c6:99:b5:25:72:9d:64:e4: 48:e3:04:b1:8d:17:ed:1e:4b:d0:04:ea:d3:35:89:3c:6b:5b: 7c:e1:34:e2:1a:f0:75:49:e4:18:d9:f0:14:e2:06:c6:68:fa: 16:16:df:91:ac:e4:4d:64:44:f1:27:93:8a:3e:2d:1d:87:ad: 22:00:85:3a:b2:e6:65:a3:7b:3a:75:a5:d3:45:a3:9c:a6:ae: 56:fe:ce:ea:52:8c:96:ed:18:36:46:8e:6c:09:02:d2:5f:35: db:7e:61:13 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE/TBPgNzcpiXv8vaDoenPAt+SzowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAxMDE2WhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTJkMDk0Zjc1Y2NlMGFlMGZkODM4NTI4ZGM4NzUyNTQ1 NmUyZjE3NTM0MzMxOTFmMDE0MzA4YjFlMDkzZDdkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3DiSsfe6wvWgZAKDrFiVzVp0QkqfDnO2r50/zRLxMBz/X +LleDV6Qcem7vNwFB6267vv/Z2W9v0O/KfgeqxkILcALoN6pAh5tcgDyl63X+Shx 0iJVLTAI2lICNIv5ENfaknymvwWMEmrmputHcFZP1/yHC5vHmPORDZtRTtHwvtbx 6HLOWhHOpX83cTTgcZXxeqZLg/WiGZ1PATG8tlNdhRniJKGNxstXtt6Wr8K59WXv UywNhgd/z7Zhn4n1hn6sBE1zfJr400J1l4vuVEtQbLAcLdx9b+9YrLO/u+eQ9HBa Q1lb7GzrbeYZq8ko+7Dq15CMDwH9cL7A1Gdg1+4fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfxvSYPr13mUDRZ9nu5KLuR7ASzowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VjZThlYjhmLTM3ZDEtNDc5Ny04NzQ2LTk5MDMwMGM4YWI3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9hCIwDQYJKoZIhvcNAQELBQADggEBAJBtntdtBfzzUTliWyaUOWyO vOGlUfF+M7Su2NGJ6gZTCE1sJzaJTh2kRSnI/ZLeoMIo+OTob5DgOEkYSyGhBxcO maAsYzVrGyOowfA1xSiR4SyqSOxF5Qa/jX8ZYBoPSOq8TB9bbKtagf48CndVY9aR K+00eJvufStqh04x760RXSE8Cw7dOq5Fc/xt5LWAVlMju8XiwHmrDpTGmbUlcp1k 5EjjBLGNF+0eS9AE6tM1iTxrW3zhNOIa8HVJ5BjZ8BTiBsZo+hYW35Gs5E1kRPEn k4o+LR2HrSIAhTqy5mWjezp1pdNFo5ymrlb+zupSjJbtGDZGjmwJAtJfNdt+YRM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:28:44 2025 by rpki-client