$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed316d2f-cc47-41c6-a128-4baa596fed4a.roa File: ed316d2f-cc47-41c6-a128-4baa596fed4a.roa (raw, json) Hash identifier: ZkHyEC5Je2iuKyMAm2b8ZX4YEstZKrpKoc8SmKZ7Ssw= Subject key identifier: F8:49:FF:7E:FF:BD:90:AD:51:D2:46:11:A6:94:40:27:3A:D7:AB:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B5126AD4D9720F99BD0F5ABF168C40B15AADE7D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed316d2f-cc47-41c6-a128-4baa596fed4a.roa Signing time: Tue 22 Apr 2025 15:32:37 +0000 ROA not before: Tue 22 Apr 2025 15:32:37 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:51:26:ad:4d:97:20:f9:9b:d0:f5:ab:f1:68:c4:0b:15:aa:de:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:32:37 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=9a5a008156f93da8181cc092755f0f758e40428ce8c4873531cfb7d77bec60b7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:15:63:0b:4d:f9:c3:3f:a3:cc:bd:22:a5:a6: a8:4d:50:0e:c9:fa:4e:c0:ea:fc:5d:99:2d:d4:28: cd:81:e8:f2:83:3c:94:7d:92:b1:77:6a:24:ee:4c: b9:04:b9:8f:50:f2:f2:1e:f3:4b:50:1e:f6:e8:f1: db:45:13:1e:f8:94:d9:48:bf:f4:e6:7f:86:a8:74: 92:84:51:d3:32:09:3c:1b:48:08:b2:9f:5b:28:30: d5:81:22:dc:32:2a:59:f2:b3:f1:15:17:e4:99:56: 4d:e4:ea:9c:f4:6f:b0:ae:48:dc:e2:89:26:99:a9: f5:d5:48:f9:02:93:b4:73:7a:be:81:bb:d7:09:75: 71:5b:e7:ce:f8:84:fb:4d:86:d1:54:52:b7:cb:17: b6:63:b7:4f:33:19:7f:7b:8a:a4:a8:18:19:c0:7e: c3:95:f7:91:fa:44:bf:2e:57:4d:33:4a:78:aa:64: 0d:66:50:f7:43:e7:8b:74:37:5c:af:4e:95:b7:2e: 46:db:31:ed:85:58:c8:20:8c:cd:c6:fd:bb:4d:aa: 66:f7:a4:45:68:af:3f:6f:aa:69:e2:1e:55:26:93: 28:be:39:66:aa:9d:70:27:1e:03:af:7f:bf:a4:3a: f1:ae:ef:d4:a7:8d:0b:d2:53:36:4a:a3:f6:4c:91: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:49:FF:7E:FF:BD:90:AD:51:D2:46:11:A6:94:40:27:3A:D7:AB:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed316d2f-cc47-41c6-a128-4baa596fed4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4050::/48 Signature Algorithm: sha256WithRSAEncryption 27:9f:06:78:28:b9:83:81:eb:9d:0f:79:24:f6:ae:09:7a:60: a9:5a:8a:be:79:60:64:24:d3:9d:54:e8:8f:e9:64:03:57:0f: ec:87:09:6d:c4:ec:34:6a:d1:4c:74:59:46:e2:49:bd:24:6c: 2f:af:6e:ab:4c:64:68:22:37:fd:fb:bc:be:49:2c:f5:e2:8b: 54:3b:af:e0:00:ca:ce:3e:46:d9:9b:02:10:01:3c:c1:b5:8e: 25:2d:d0:ce:8a:21:1d:29:63:cf:5d:d8:11:d4:1f:26:7d:b6: 2a:ec:e6:61:21:f6:46:29:db:98:9a:39:b3:0b:41:e8:a8:80: bf:7e:56:cd:06:c1:b7:97:7c:09:13:fb:43:5f:28:5c:42:48: da:10:0f:59:2a:b8:3a:d4:94:86:ca:a6:8c:aa:80:b7:3f:a1: 1d:a5:1c:a7:40:12:98:7d:45:3f:85:0a:d8:15:12:2d:93:04: 6d:89:e8:cd:92:9f:82:7f:f7:80:2c:eb:f2:2e:99:f3:4e:f1: a6:bf:2f:39:5e:e2:bb:5b:97:c6:df:35:08:14:e9:bf:0b:dd: fd:54:2b:a0:cd:36:f7:af:e8:ee:de:5d:2f:26:45:20:66:ce: 2a:66:e2:b4:ab:59:4a:fb:3f:76:bf:69:63:de:8d:5e:dc:ee: b2:29:37:8e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC1EmrU2XIPmb0PWr8WjECxWq3n0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUzMjM3WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTVhMDA4MTU2ZjkzZGE4MTgxY2MwOTI3NTVmMGY3NThl NDA0MjhjZThjNDg3MzUzMWNmYjdkNzdiZWM2MGI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1FWMLTfnDP6PMvSKlpqhNUA7J+k7A6vxdmS3UKM2B6PKD PJR9krF3aiTuTLkEuY9Q8vIe80tQHvbo8dtFEx74lNlIv/Tmf4aodJKEUdMyCTwb SAiyn1soMNWBItwyKlnys/EVF+SZVk3k6pz0b7CuSNziiSaZqfXVSPkCk7Rzer6B u9cJdXFb5874hPtNhtFUUrfLF7Zjt08zGX97iqSoGBnAfsOV95H6RL8uV00zSniq ZA1mUPdD54t0N1yvTpW3LkbbMe2FWMggjM3G/btNqmb3pEVorz9vqmniHlUmkyi+ OWaqnXAnHgOvf7+kOvGu79SnjQvSUzZKo/ZMkaIzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+En/fv+9kK1R0kYRppRAJzrXq7YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VkMzE2ZDJmLWNjNDctNDFjNi1hMTI4LTRiYWE1OTZmZWQ0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QFAwDQYJKoZIhvcNAQELBQADggEBACefBngouYOB650PeST2rgl6 YKlair55YGQk051U6I/pZANXD+yHCW3E7DRq0Ux0WUbiSb0kbC+vbqtMZGgiN/37 vL5JLPXii1Q7r+AAys4+RtmbAhABPMG1jiUt0M6KIR0pY89d2BHUHyZ9tirs5mEh 9kYp25iaObMLQeiogL9+Vs0GwbeXfAkT+0NfKFxCSNoQD1kquDrUlIbKpoyqgLc/ oR2lHKdAEph9RT+FCtgVEi2TBG2J6M2Sn4J/94As6/IumfNO8aa/Lzle4rtbl8bf NQgU6b8L3f1UK6DNNvev6O7eXS8mRSBmzipm4rSrWUr7P3a/aWPejV7c7rIpN44= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:27 2025 by rpki-client