$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/2592ade6-505a-4e24-928b-9a1e71b309ae.roa File: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (raw, json) Hash identifier: eE8X1RrVrKvvUXD1nxNU9vKXuwUWRpAhLKt4i27dkVc= Subject key identifier: 08:5C:7E:08:FF:E5:11:2F:B5:9D:36:1D:35:92:C0:AA:17:D5:9D:13 Certificate issuer: /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Certificate serial: 591C03B32AD13A4FC615CFF2B22B933A9DBC9ADD Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/2592ade6-505a-4e24-928b-9a1e71b309ae.roa Signing time: Fri 25 Apr 2025 17:40:03 +0000 ROA not before: Fri 25 Apr 2025 17:40:03 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:c940::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1c:03:b3:2a:d1:3a:4f:c6:15:cf:f2:b2:2b:93:3a:9d:bc:9a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Validity Not Before: Apr 25 17:40:03 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=54e3a26ac7df28921b94289687c2b261d4116b7e93753d1912bc4a57e4874445, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:14:52:96:30:83:0a:a6:33:80:ae:1b:e6:dc: cd:2f:71:78:d5:7e:40:61:ed:f1:51:3e:f4:99:b9: 31:8e:40:cf:87:8e:9d:f7:8e:a9:90:19:73:a3:2f: c2:bc:0e:3f:34:29:21:a2:f3:84:df:7b:13:6c:b6: 62:28:b3:3b:1f:6c:d9:06:d0:9b:47:ff:83:41:36: 91:41:de:ac:a5:52:4c:e3:ba:ef:b6:f2:45:a2:33: 30:a9:a4:95:3c:a3:76:21:8e:9b:8e:34:30:79:f2: 9c:54:ad:ab:8a:76:ac:c3:05:71:a2:4e:9d:cb:04: dd:a3:0b:35:e1:44:17:04:30:76:e8:84:97:8f:2d: 2d:eb:1b:26:b7:50:c8:58:48:e2:be:bc:f9:f9:cf: 2f:08:b5:f9:04:52:69:17:a8:ab:fc:bd:45:9e:7a: d6:2b:c4:66:06:b1:31:8c:de:f4:f7:af:fa:21:e5: cd:32:0b:6c:a5:13:4f:dc:c1:0b:29:b7:c0:b0:0d: e6:08:43:96:17:f6:65:88:0b:98:4c:bf:1c:dc:d4: 05:39:ee:6b:8f:a0:e3:3e:ab:a0:57:93:b7:37:2a: 9d:7c:0c:e4:cd:b0:e6:01:60:2b:72:29:d0:92:39: 2d:a9:57:28:b6:03:07:ea:3e:94:07:48:de:01:76: 7a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5C:7E:08:FF:E5:11:2F:B5:9D:36:1D:35:92:C0:AA:17:D5:9D:13 X509v3 Authority Key Identifier: keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/2592ade6-505a-4e24-928b-9a1e71b309ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:c940::/32 Signature Algorithm: sha256WithRSAEncryption 7b:75:ac:5a:39:39:d8:3f:c5:e9:f3:0c:e5:90:9c:2e:56:99: ac:35:97:6a:dc:12:dc:49:7d:e3:a8:a0:7e:ff:30:4d:56:b3: ab:f9:d7:65:8a:03:ed:ee:35:1d:b0:77:ac:1b:c3:c3:ed:81: 84:0f:13:f4:2c:ce:a0:13:18:b3:6d:db:bd:61:b0:c6:f6:97: 05:e4:25:62:96:fb:79:06:54:eb:ff:ee:48:48:aa:ed:34:e8: 3f:02:a8:4d:a3:88:99:5a:16:87:a9:fe:af:2e:2b:96:50:e3: 44:de:5d:38:6c:e1:be:83:c7:3a:58:f1:dd:58:69:15:37:4c: 04:a4:96:0e:a4:86:5f:96:d9:70:f7:43:63:3b:30:87:41:fe: e7:dd:be:07:46:83:40:38:95:5a:e6:1e:7d:4f:27:fb:51:7c: cd:1b:ee:fe:29:40:76:56:56:5d:58:2a:42:6b:11:c5:e6:d6: 42:70:98:82:c5:13:b8:22:19:6a:47:9a:31:ef:32:51:8f:7e: f0:60:26:97:0f:bc:38:76:d6:da:8e:15:68:07:c0:de:77:df: 61:57:7a:65:b7:ac:f7:6b:4b:b9:cc:09:2a:4b:b8:d1:84:5a: c2:ce:6a:05:b7:c8:34:53:a7:13:f9:04:cf:fc:12:85:b7:df: fa:59:28:af -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUWRwDsyrROk/GFc/ysiuTOp28mt0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmY5Yjk4NWIwZmU1ZGVmMDliOTk0ZjhjZjYwYmFkOGM5 MDI5YzAwNjU3NzUwYjIyNjcwHhcNMjUwNDI1MTc0MDAzWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NGUzYTI2YWM3ZGYyODkyMWI5NDI4OTY4N2MyYjI2MWQ0 MTE2YjdlOTM3NTNkMTkxMmJjNGE1N2U0ODc0NDQ1MS0wKwYDVQQDEyQxNWYxNjgz YS1jMGMyLTQyNjYtOWE5Ni1lY2Y5ZWJhMzIzOWMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuFFKWMIMKpjOArhvm3M0vcXjVfkBh7fFRPvSZuTGOQM+H jp33jqmQGXOjL8K8Dj80KSGi84TfexNstmIoszsfbNkG0JtH/4NBNpFB3qylUkzj uu+28kWiMzCppJU8o3YhjpuONDB58pxUrauKdqzDBXGiTp3LBN2jCzXhRBcEMHbo hJePLS3rGya3UMhYSOK+vPn5zy8ItfkEUmkXqKv8vUWeetYrxGYGsTGM3vT3r/oh 5c0yC2ylE0/cwQspt8CwDeYIQ5YX9mWIC5hMvxzc1AU57muPoOM+q6BXk7c3Kp18 DOTNsOYBYCtyKdCSOS2pVyi2AwfqPpQHSN4BdnqVAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUCFx+CP/lES+1nTYdNZLAqhfVnRMwHwYDVR0jBBgwFoAUbcpl0HFNfvJW kLwJE9NU26yJKl4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83Mjc2YjJmYS01 NDhkLTQ5NzAtODMxNC04ZDczOTQ1YzM0ZDgvNmY5Yjk4NWIwZmU1ZGVmMDliOTk0 ZjhjZjYwYmFkOGM5MDI5YzAwNjU3NzUwYjIyNjcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjNmNmI2ODgtY2ZmNC00MDJmLTk3ZDUtMDJm NmYxODg2YjdlLzI1OTJhZGU2LTUwNWEtNGUyNC05MjhiLTlhMWU3MWIzMDlhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2IzZjZiNjg4LWNmZjQtNDAyZi05N2Q1 LTAyZjZmMTg4NmI3ZS81ZDd3bTVsUGpQWUxyWXlRS2NBR1YzVUxJbWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBclAMA0GCSqGSIb3DQEBCwUAA4IBAQB7daxaOTnYP8Xp8wzlkJwuVpms NZdq3BLcSX3jqKB+/zBNVrOr+ddligPt7jUdsHesG8PD7YGEDxP0LM6gExizbdu9 YbDG9pcF5CVilvt5BlTr/+5ISKrtNOg/AqhNo4iZWhaHqf6vLiuWUONE3l04bOG+ g8c6WPHdWGkVN0wEpJYOpIZfltlw90NjOzCHQf7n3b4HRoNAOJVa5h59Tyf7UXzN G+7+KUB2VlZdWCpCaxHF5tZCcJiCxRO4IhlqR5ox7zJRj37wYCaXD7w4dtbajhVo B8Ded99hV3plt6z3a0u5zAkqS7jRhFrCzmoFt8g0U6cT+QTP/BKFt9/6WSiv -----END CERTIFICATE-----Generated at Sat Apr 26 19:24:15 2025 by rpki-client