$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/026d9e0e-e9f3-4245-8184-2f5a17b3204e.roa File: 026d9e0e-e9f3-4245-8184-2f5a17b3204e.roa (raw, json) Hash identifier: Ixy8nTIlFVADrfwiwD4VyVU8WDxJ55wjlRrAq8jZvXI= Subject key identifier: F6:E1:9A:D2:3E:9F:25:2D:BC:C2:53:06:FB:07:33:0C:AC:2E:FB:C1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 353A0E2487FAAC43974E98D38F6E4C03F2E25DD4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/026d9e0e-e9f3-4245-8184-2f5a17b3204e.roa Signing time: Wed 09 Apr 2025 00:10:48 +0000 ROA not before: Wed 09 Apr 2025 00:10:48 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f32:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3a:0e:24:87:fa:ac:43:97:4e:98:d3:8f:6e:4c:03:f2:e2:5d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:10:48 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=a63e52322ac864cda02689c6f7f78e4c89f7bd73e91fbbac44b864fcf5aecd28, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:85:a4:07:c4:1b:33:7a:e1:1d:98:f7:ce: e2:53:b8:01:94:9a:c8:44:bc:58:44:e1:7d:89:e8: b5:07:9d:78:d2:c9:be:91:14:ab:bf:e5:cf:d5:9a: 1a:5f:b0:e3:6c:c4:96:11:e5:f6:56:19:ea:70:27: e7:d5:f6:a0:54:21:65:6d:87:51:9b:dc:bd:aa:53: b3:da:1c:01:f0:ba:50:6f:9f:9d:32:d8:45:ca:22: 84:1a:f1:75:33:bd:42:fc:27:de:d7:96:b9:6f:88: 28:bd:6b:ff:16:56:c4:f8:a4:e9:cf:5b:4e:79:90: e2:0c:f9:15:12:ef:41:88:b8:77:b7:85:64:18:d2: c3:4b:ef:79:9a:24:a6:b4:1a:a5:b9:cf:18:31:49: c0:2a:87:32:1d:69:30:88:0b:16:45:7e:b9:83:be: 53:80:6c:24:0c:d8:67:31:82:e9:75:6e:d0:38:8f: 45:8f:04:a2:8b:17:ce:71:09:b7:ab:41:6e:7d:41: d2:3e:72:4c:ea:0a:fe:91:c2:8d:c7:f0:b6:01:28: 6f:d5:1d:02:83:d5:7c:ca:31:23:fe:f8:2f:29:c3: 0c:45:10:e2:06:02:3d:72:31:5e:21:cf:d6:86:c1: 13:2e:d9:cb:0c:ab:bf:c0:29:94:d2:6c:91:e3:4e: c2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E1:9A:D2:3E:9F:25:2D:BC:C2:53:06:FB:07:33:0C:AC:2E:FB:C1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/026d9e0e-e9f3-4245-8184-2f5a17b3204e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32:e000::/40 Signature Algorithm: sha256WithRSAEncryption 92:03:96:e3:27:f4:0f:7a:59:46:2f:50:9c:30:91:d7:52:7f: a7:4f:4d:ab:23:d3:39:3d:2e:d1:85:91:6a:32:5e:d2:25:90: 6a:54:02:1c:50:c1:a0:30:a7:e1:1d:f5:45:db:9a:e0:82:d4: 48:18:0d:19:aa:7d:1b:26:a9:8f:75:cf:82:9f:30:30:d7:ae: ca:60:99:e5:64:3e:3f:79:7b:6e:20:70:b6:24:55:a3:0c:ef: f5:b4:00:1f:76:37:34:5c:c5:34:6a:4f:61:6a:0b:c7:04:bd: 7c:f0:86:58:e6:9e:9b:a0:3b:b6:ff:e9:d3:3e:0e:42:38:29: a3:fd:bc:68:26:b9:a3:52:25:9b:e2:a0:74:34:4a:f2:59:e5: 0b:47:3f:dd:cf:cf:9b:1e:a9:f7:78:69:72:aa:54:1a:10:74: b1:f1:43:5b:de:40:62:af:ba:a3:57:2a:c1:85:3d:32:88:c3: b7:51:73:fc:67:4c:ed:8f:2a:41:8c:d8:16:b6:ed:2c:45:fc: dc:59:11:73:32:92:3c:fc:aa:7a:f4:03:ea:27:1a:e9:fc:6d: 05:d3:eb:17:3c:22:dd:c7:22:4f:84:e9:8a:a5:b9:3e:52:53: 02:0a:c1:c7:06:ef:76:ee:8f:f9:7d:e9:97:dd:62:38:69:62: 21:1e:e5:75 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNToOJIf6rEOXTpjTj25MA/LiXdQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDAxMDQ4WhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjNlNTIzMjJhYzg2NGNkYTAyNjg5YzZmN2Y3OGU0Yzg5 ZjdiZDczZTkxZmJiYWM0NGI4NjRmY2Y1YWVjZDI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8p4WkB8QbM3rhHZj3zuJTuAGUmshEvFhE4X2J6LUHnXjS yb6RFKu/5c/VmhpfsONsxJYR5fZWGepwJ+fV9qBUIWVth1Gb3L2qU7PaHAHwulBv n50y2EXKIoQa8XUzvUL8J97XlrlviCi9a/8WVsT4pOnPW055kOIM+RUS70GIuHe3 hWQY0sNL73maJKa0GqW5zxgxScAqhzIdaTCICxZFfrmDvlOAbCQM2Gcxgul1btA4 j0WPBKKLF85xCberQW59QdI+ckzqCv6Rwo3H8LYBKG/VHQKD1XzKMSP++C8pwwxF EOIGAj1yMV4hz9aGwRMu2csMq7/AKZTSbJHjTsIPAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9uGa0j6fJS28wlMG+wczDKwu+8EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzAyNmQ5ZTBlLWU5ZjMtNDI0NS04MTg0LTJmNWExN2IzMjA0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8y4DANBgkqhkiG9w0BAQsFAAOCAQEAkgOW4yf0D3pZRi9QnDCR11J/ p09NqyPTOT0u0YWRajJe0iWQalQCHFDBoDCn4R31Rdua4ILUSBgNGap9Gyapj3XP gp8wMNeuymCZ5WQ+P3l7biBwtiRVowzv9bQAH3Y3NFzFNGpPYWoLxwS9fPCGWOae m6A7tv/p0z4OQjgpo/28aCa5o1Ilm+KgdDRK8lnlC0c/3c/Pmx6p93hpcqpUGhB0 sfFDW95AYq+6o1cqwYU9MojDt1Fz/GdM7Y8qQYzYFrbtLEX83FkRczKSPPyqevQD 6ica6fxtBdPrFzwi3cciT4TpiqW5PlJTAgrBxwbvdu6P+X3pl91iOGliIR7ldQ== -----END CERTIFICATE-----Generated at Wed Apr 16 16:54:40 2025 by rpki-client