$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa File: f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa (raw, json) Hash identifier: vugTwF1aQkkSfXVFLYwgubCESsI9rpDL5X+U4JV0cbM= Subject key identifier: A3:30:11:54:08:67:0B:3A:7F:79:0D:A0:69:0C:65:24:AF:73:38:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 08E90B2A46363D3FC59E85415F382F9FDDE89BC8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa Signing time: Mon 21 Apr 2025 18:21:28 +0000 ROA not before: Mon 21 Apr 2025 18:21:28 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:4070::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e9:0b:2a:46:36:3d:3f:c5:9e:85:41:5f:38:2f:9f:dd:e8:9b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 21 18:21:28 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=13aff47cdfb5208865c1beae3376f8b8508ad615aa1f2551f187f3e0ad50f7e1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:78:a2:51:27:c7:96:b1:cc:f4:28:7c:e9:6f: 04:62:62:ba:bc:d6:8c:f0:48:8a:69:bd:a9:59:0e: 90:ea:dc:0e:b0:b6:cd:ea:00:78:92:cc:2c:e0:8c: a5:ab:46:0a:c2:46:b5:57:7d:92:dd:29:ea:7a:38: 27:97:52:cd:fe:95:2a:8f:cb:6e:27:90:ed:ea:96: f4:e3:48:8c:70:ce:62:7a:0e:d1:24:3d:82:ef:5e: e3:9e:9f:e3:42:92:6f:db:38:94:b9:69:ab:ff:79: 32:47:be:d3:f5:79:89:b0:2a:b0:9a:c5:d1:0e:89: 49:80:10:64:89:c3:a6:1f:d3:15:55:db:52:eb:3c: 7f:97:37:90:be:25:8a:a9:ee:b9:f2:f7:ae:f1:e8: 9a:f1:d6:9b:09:8a:dc:5b:71:33:3b:4d:a6:fb:80: 24:b7:7a:e4:5a:5a:6b:22:9f:93:bb:14:a7:08:2b: 9e:0a:53:ce:03:9e:04:fb:44:72:bc:bf:2e:54:89: fc:20:1d:e6:69:19:81:33:59:5d:22:79:28:96:eb: c1:0b:ac:7e:03:a1:d9:f9:b8:24:4f:15:dd:5f:0c: 53:9b:ef:db:81:4f:03:03:4c:fb:4a:f8:b5:18:f2: 87:e2:ab:81:ed:50:c9:95:58:3e:6a:2c:21:49:50: 47:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:30:11:54:08:67:0B:3A:7F:79:0D:A0:69:0C:65:24:AF:73:38:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:4070::/48 Signature Algorithm: sha256WithRSAEncryption 18:1b:85:49:4e:7d:d1:61:e0:5d:e1:ff:a7:3e:3a:de:86:a6: 69:f4:77:0c:cc:8c:45:0e:d6:20:77:63:bf:fe:a1:9d:32:87: fd:6b:6d:2b:1c:d7:e8:b6:29:57:68:8d:1f:de:9e:be:43:81: 72:31:7c:12:a7:dc:9b:1f:6a:97:7f:90:cb:97:6e:c9:d8:d2: f2:a7:e3:15:3b:7b:8b:7d:54:db:22:09:8c:e6:6f:cc:5a:b2: 70:e8:b5:dd:f4:a2:d2:f2:fa:99:52:77:2f:ec:cc:de:e3:93: 52:de:d2:17:1d:d1:9a:47:82:53:4c:aa:14:8c:fe:f1:83:6b: 1d:1b:df:98:b8:f4:70:23:66:9f:56:d5:dd:36:f3:81:a6:70: d1:6d:cf:3a:ea:b9:28:de:b1:f7:05:56:8d:ac:79:e8:87:52: 1c:9f:5c:ca:78:e4:06:69:b3:f0:96:de:2c:5a:80:1c:9d:67: 90:57:1e:e6:cf:d2:b1:e7:0c:8d:01:20:23:4a:b3:ad:ab:f0: 98:52:a7:64:44:d6:43:66:b8:f6:3b:29:86:18:27:c0:3a:9f: 9e:df:c4:a6:01:b5:dc:d8:ab:dc:d8:0a:86:f1:df:e5:d5:e1: fa:1d:36:31:92:52:98:0f:7d:7c:2a:9f:da:8d:52:69:8e:d4: 80:88:fc:47 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCOkLKkY2PT/FnoVBXzgvn93om8gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIxMTgyMTI4WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxM2FmZjQ3Y2RmYjUyMDg4NjVjMWJlYWUzMzc2ZjhiODUw OGFkNjE1YWExZjI1NTFmMTg3ZjNlMGFkNTBmN2UxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpeKJRJ8eWscz0KHzpbwRiYrq81ozwSIppvalZDpDq3A6w ts3qAHiSzCzgjKWrRgrCRrVXfZLdKep6OCeXUs3+lSqPy24nkO3qlvTjSIxwzmJ6 DtEkPYLvXuOen+NCkm/bOJS5aav/eTJHvtP1eYmwKrCaxdEOiUmAEGSJw6Yf0xVV 21LrPH+XN5C+JYqp7rny967x6Jrx1psJitxbcTM7Tab7gCS3euRaWmsin5O7FKcI K54KU84DngT7RHK8vy5UifwgHeZpGYEzWV0ieSiW68ELrH4Dodn5uCRPFd1fDFOb 79uBTwMDTPtK+LUY8ofiq4HtUMmVWD5qLCFJUEdBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUozARVAhnCzp/eQ2gaQxlJK9zOPowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3MDkxOWVjLWY2ZWYtNGJhNS1hMmI3LWMwNGM5YTJmYzQ1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AQHAwDQYJKoZIhvcNAQELBQADggEBABgbhUlOfdFh4F3h/6c+Ot6G pmn0dwzMjEUO1iB3Y7/+oZ0yh/1rbSsc1+i2KVdojR/enr5DgXIxfBKn3Jsfapd/ kMuXbsnY0vKn4xU7e4t9VNsiCYzmb8xasnDotd30otLy+plSdy/szN7jk1Le0hcd 0ZpHglNMqhSM/vGDax0b35i49HAjZp9W1d0284GmcNFtzzrquSjesfcFVo2seeiH UhyfXMp45AZps/CW3ixagBydZ5BXHubP0rHnDI0BICNKs62r8JhSp2RE1kNmuPY7 KYYYJ8A6n57fxKYBtdzYq9zYCobx3+XV4fodNjGSUpgPfXwqn9qNUmmO1ICI/Ec= -----END CERTIFICATE-----Generated at Sat Apr 26 15:57:33 2025 by rpki-client