$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89344d0a-b23d-41c9-97cf-93cb233458c4.roa File: 89344d0a-b23d-41c9-97cf-93cb233458c4.roa (raw, json) Hash identifier: fAz38doTq/n5o8luoH8IuXo/MQihc9igKYiHcP5IRMY= Subject key identifier: 03:18:94:71:9C:51:0E:E5:7D:0F:C8:11:C3:D2:44:56:79:4F:7D:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 65464DF5B35F0F72EB1A4795F033AC58386D2809 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89344d0a-b23d-41c9-97cf-93cb233458c4.roa Signing time: Tue 25 Mar 2025 17:50:19 +0000 ROA not before: Tue 25 Mar 2025 17:50:19 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:46:4d:f5:b3:5f:0f:72:eb:1a:47:95:f0:33:ac:58:38:6d:28:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 17:50:19 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:4d:6c:59:d1:be:e5:c9:7f:86:0a:3c:a7: be:b0:ee:bb:4b:93:50:e0:d5:9b:d8:c6:aa:4b:09: b5:2f:6a:4d:6a:96:0d:08:68:ae:2d:91:21:86:f2: 7a:89:4d:fb:cb:97:ed:9f:9b:3d:49:88:1a:04:4f: 0d:82:0f:8a:10:6a:00:79:d5:79:84:a3:44:9c:39: 9b:d8:15:5c:e8:e3:b6:6f:be:bc:1a:15:e1:24:83: 24:01:5c:69:29:2d:69:3d:e4:68:6e:b0:5d:c2:fa: d3:b8:61:5d:da:34:53:3f:1a:52:f5:3c:32:f9:0f: 90:c3:82:4d:b0:6e:96:a8:bc:8a:75:82:b7:af:19: c1:2f:60:b2:7f:0f:d6:9a:7e:ec:7c:39:23:0c:1d: d5:a3:b3:16:29:e1:a2:fc:b0:06:32:8a:fd:d8:f9: b5:26:7e:ca:f6:7f:d8:66:4d:76:78:90:67:cf:db: 4e:08:d1:6c:06:f7:87:4f:16:e8:c5:88:05:33:80: 57:86:b1:50:0b:07:66:7c:b3:5e:e0:f9:b9:62:a1: 2c:e1:1e:e2:5a:e8:1d:4b:7e:d3:1e:0a:d8:4a:87: 74:2a:6e:4c:8a:bb:49:86:46:7f:93:12:0d:b2:f8: 73:6a:c1:67:40:5b:ea:1a:1a:fc:7c:29:bf:96:e0: d6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:18:94:71:9C:51:0E:E5:7D:0F:C8:11:C3:D2:44:56:79:4F:7D:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89344d0a-b23d-41c9-97cf-93cb233458c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:80a0::/48 Signature Algorithm: sha256WithRSAEncryption 75:95:f6:33:28:6b:5f:74:ff:c0:e2:71:5f:a4:f2:b7:5d:8d: 70:78:c9:dc:63:72:06:19:16:97:3d:40:ae:00:76:a6:ef:2a: 81:b4:73:6d:05:30:f9:d6:dd:7a:c7:9e:4c:01:7d:2b:c7:a8: 22:63:19:5c:4c:1a:e1:46:06:16:3d:ca:5d:ce:4e:ea:22:4a: 71:55:41:53:cd:70:0e:94:62:a2:d6:37:7c:2e:f0:47:24:95: 44:28:d1:3e:15:d8:34:b8:42:7b:2b:96:46:8e:16:6f:66:91: 0f:ca:59:a2:d6:af:50:77:ca:a6:cc:a3:1a:4a:46:66:bb:01: e6:bf:dd:a1:5c:1c:90:39:cf:94:36:5d:c0:f9:e5:b2:ff:3c: df:65:f8:ab:ba:24:46:09:8a:47:97:b5:28:56:8f:8b:65:4c: a7:1e:5f:f0:89:d6:d9:3a:00:e0:ea:85:e9:9a:b2:37:5d:38: 44:2c:64:48:ab:50:a0:f7:41:9f:5f:96:11:28:62:f4:e5:0a: 2e:d5:73:a2:de:4f:4c:ee:b4:c3:4c:8d:ca:d3:1e:36:17:95: 99:a7:c7:08:23:87:77:f7:0a:3f:03:5a:66:ae:89:1e:3b:5b: 7f:92:b8:18:6c:46:ff:26:27:30:a1:01:c0:9b:02:a9:63:55: bd:2b:ee:7e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZUZN9bNfD3LrGkeV8DOsWDhtKAkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTc1MDE5WhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDNiMzFkMGM5OWYyMmY2NTI3ZjAzZGJjYmE4ZGQwN2Fl ZGZjYmVmMGM4MWUzY2EzMzc0YTlhZDA0NGI0Y2YyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAq01sWdG+5cl/hgo8p76w7rtLk1Dg1ZvYxqpLCbUvak1q lg0IaK4tkSGG8nqJTfvLl+2fmz1JiBoETw2CD4oQagB51XmEo0ScOZvYFVzo47Zv vrwaFeEkgyQBXGkpLWk95GhusF3C+tO4YV3aNFM/GlL1PDL5D5DDgk2wbpaovIp1 grevGcEvYLJ/D9aafux8OSMMHdWjsxYp4aL8sAYyiv3Y+bUmfsr2f9hmTXZ4kGfP 204I0WwG94dPFujFiAUzgFeGsVALB2Z8s17g+blioSzhHuJa6B1LftMeCthKh3Qq bkyKu0mGRn+TEg2y+HNqwWdAW+oaGvx8Kb+W4NbpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAxiUcZxRDuV9D8gRw9JEVnlPfZUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5MzQ0ZDBhLWIyM2QtNDFjOS05N2NmLTkzY2IyMzM0NThjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ygKAwDQYJKoZIhvcNAQELBQADggEBAHWV9jMoa190/8DicV+k8rdd jXB4ydxjcgYZFpc9QK4AdqbvKoG0c20FMPnW3XrHnkwBfSvHqCJjGVxMGuFGBhY9 yl3OTuoiSnFVQVPNcA6UYqLWN3wu8EcklUQo0T4V2DS4QnsrlkaOFm9mkQ/KWaLW r1B3yqbMoxpKRma7Aea/3aFcHJA5z5Q2XcD55bL/PN9l+Ku6JEYJikeXtShWj4tl TKceX/CJ1tk6AODqhemasjddOEQsZEirUKD3QZ9flhEoYvTlCi7Vc6LeT0zutMNM jcrTHjYXlZmnxwgjh3f3Cj8DWmauiR47W3+SuBhsRv8mJzChAcCbAqljVb0r7n4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:34 2025 by rpki-client