$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6053747c-2d18-4318-b6f0-8cc795ce2a12.roa File: 6053747c-2d18-4318-b6f0-8cc795ce2a12.roa (raw, json) Hash identifier: pJnZ2s7IPwRc03ZTEY6hpwFPR9tIBaHccwKvGoTqGfI= Subject key identifier: 63:AA:C0:91:DB:A6:78:E7:77:F4:00:13:C0:AF:83:F8:3C:DF:F3:D4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2DB1DC0DD7852C87FC5464246C606BF96126DDFC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6053747c-2d18-4318-b6f0-8cc795ce2a12.roa Signing time: Fri 28 Mar 2025 16:31:53 +0000 ROA not before: Fri 28 Mar 2025 16:31:53 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b1:dc:0d:d7:85:2c:87:fc:54:64:24:6c:60:6b:f9:61:26:dd:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 16:31:53 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e6:2a:e7:09:c6:d1:55:4e:34:56:5b:4d:c0: 8f:2f:c9:40:52:2e:2e:4b:24:70:5b:44:51:f6:55: 27:3a:9a:eb:22:5f:d8:b2:83:ae:ec:f4:95:06:51: 8e:ca:bb:95:11:b4:04:e2:9b:6f:d1:82:0e:4e:27: 2d:6c:34:9f:9b:e0:76:fb:de:2a:dd:ff:c4:88:f9: 3e:2f:65:11:1a:b2:4c:be:ff:dc:2b:59:b2:b1:b4: 96:da:cb:26:3e:85:74:5e:cb:cd:ad:ee:78:f5:31: 4b:0c:70:53:b8:f6:14:33:51:b2:22:7d:01:cd:ea: d4:62:dc:c3:a4:82:7b:8e:e2:fe:4a:27:c4:7f:0b: 9f:e3:ab:7b:ea:a0:bb:7a:47:f8:40:e2:58:a7:89: 9b:d4:50:c7:71:f9:3f:97:6d:60:e1:10:ea:e1:d9: 0c:28:74:eb:59:b9:d4:f6:fe:77:36:90:1b:dc:7a: ee:50:32:64:a1:48:c4:22:00:d3:e2:0f:0c:86:21: 54:c9:bf:a9:26:0c:14:57:fe:ff:55:59:19:6d:7e: 41:73:2f:cb:fc:c3:7b:aa:e2:12:d4:47:d8:de:0c: 44:b9:bb:fc:13:f8:98:de:a1:bc:a7:06:d7:ba:c3: 8a:90:a8:9b:fe:72:8f:a6:5e:e1:8c:80:23:f0:a1: b4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AA:C0:91:DB:A6:78:E7:77:F4:00:13:C0:AF:83:F8:3C:DF:F3:D4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6053747c-2d18-4318-b6f0-8cc795ce2a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:8000::/40 Signature Algorithm: sha256WithRSAEncryption 95:14:6a:cd:a2:d8:22:f9:6c:28:ef:fd:70:72:99:5f:e8:66: fb:86:4e:5c:45:c6:a9:29:18:5e:54:11:23:f3:4a:a4:25:06: 4a:89:4e:f6:17:a7:5d:e4:2d:1f:2c:2d:e7:00:62:7b:2e:3a: 88:8b:dd:8b:f0:9e:e1:14:db:a1:41:3b:25:a6:41:e4:38:96: c6:f7:f5:90:16:96:a1:37:8c:65:61:84:d8:54:27:6d:b1:35: db:1c:25:67:10:fe:fd:ec:cf:38:d0:b8:66:0e:62:98:c3:b6: c1:c9:2f:b4:ee:d8:30:20:e3:c7:e2:bb:25:77:ed:a6:1d:f2: fd:91:84:41:a1:4f:b9:9f:08:9b:ed:31:dc:6f:73:d2:cb:43: 25:cb:ea:cb:36:d1:e7:b0:73:89:a5:02:53:9a:a0:9e:70:11: f9:34:c0:42:97:3c:2d:29:64:36:f4:e8:ec:35:b3:91:75:c5: cd:c5:d1:f0:f9:3d:fa:ca:ef:f8:e6:f2:c5:f5:e0:42:14:a6: dd:08:e1:a2:03:63:f4:2c:08:ec:c0:bd:26:d1:22:7f:ee:ec: 20:44:23:18:98:00:fd:e5:a8:2d:12:18:2e:4d:c1:9c:6f:d7: 4d:b1:29:90:98:45:ac:4e:4b:b9:b1:05:36:c6:8c:3d:a4:0a: 12:21:8f:93 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULbHcDdeFLIf8VGQkbGBr+WEm3fwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTYzMTUzWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OWQwMzNkOGE4ZDM4NmQwMmNjZjU3YzRhNjI1OWZiY2Nl YzYzYTliM2Y2NjJhNTliM2VlNzI5YWJiYWZkY2JhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDw5irnCcbRVU40VltNwI8vyUBSLi5LJHBbRFH2VSc6musi X9iyg67s9JUGUY7Ku5URtATim2/Rgg5OJy1sNJ+b4Hb73ird/8SI+T4vZREasky+ /9wrWbKxtJbayyY+hXRey82t7nj1MUsMcFO49hQzUbIifQHN6tRi3MOkgnuO4v5K J8R/C5/jq3vqoLt6R/hA4liniZvUUMdx+T+XbWDhEOrh2QwodOtZudT2/nc2kBvc eu5QMmShSMQiANPiDwyGIVTJv6kmDBRX/v9VWRltfkFzL8v8w3uq4hLUR9jeDES5 u/wT+JjeobynBte6w4qQqJv+co+mXuGMgCPwobRlAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUY6rAkdumeOd39AATwK+D+Dzf89QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYwNTM3NDdjLTJkMTgtNDMxOC1iNmYwLThjYzc5NWNlMmExMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4gDANBgkqhkiG9w0BAQsFAAOCAQEAlRRqzaLYIvlsKO/9cHKZX+hm +4ZOXEXGqSkYXlQRI/NKpCUGSolO9henXeQtHywt5wBiey46iIvdi/Ce4RTboUE7 JaZB5DiWxvf1kBaWoTeMZWGE2FQnbbE12xwlZxD+/ezPONC4Zg5imMO2wckvtO7Y MCDjx+K7JXftph3y/ZGEQaFPuZ8Im+0x3G9z0stDJcvqyzbR57BziaUCU5qgnnAR +TTAQpc8LSlkNvTo7DWzkXXFzcXR8Pk9+srv+ObyxfXgQhSm3QjhogNj9CwI7MC9 JtEif+7sIEQjGJgA/eWoLRIYLk3BnG/XTbEpkJhFrE5LubEFNsaMPaQKEiGPkw== -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:39 2025 by rpki-client