$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17c7f0c7-06dc-48f1-9024-2e064e010ed6.roa File: 17c7f0c7-06dc-48f1-9024-2e064e010ed6.roa (raw, json) Hash identifier: TdWsj8IlRMvb+Lw0n5UPEU2Vm2tWVH2ephXJKAAvzvE= Subject key identifier: B0:42:6D:A0:5A:34:8E:7E:0B:56:C3:4F:92:59:21:83:CA:F2:2D:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 338840BB407A31A3DB812546D8DCDFCB544A3A7E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17c7f0c7-06dc-48f1-9024-2e064e010ed6.roa Signing time: Tue 25 Mar 2025 17:41:34 +0000 ROA not before: Tue 25 Mar 2025 17:41:34 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:8160::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:88:40:bb:40:7a:31:a3:db:81:25:46:d8:dc:df:cb:54:4a:3a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 17:41:34 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=fa12dcfc5e41c195c10859fe7bdbfe644d1e549d9c0d272f9c1654a13b155911, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:80:11:fb:63:88:27:d4:de:f1:35:56:a2: e1:ec:98:2a:64:61:bf:38:2d:77:dd:01:4d:34:99: b1:ea:d3:e0:8b:b0:09:b9:68:45:be:5f:f0:67:9a: 7b:87:93:fb:19:f7:bc:57:21:97:ef:26:cf:06:98: 30:3c:09:2f:a7:fd:a2:47:2e:6c:7a:04:99:7c:f9: 96:c6:b7:3f:0d:d3:e1:71:61:b6:3f:1b:db:b8:1c: 86:bc:9e:21:8d:cb:9f:21:59:2b:0d:62:a8:d0:4d: 17:a1:4c:e9:12:8f:2d:e4:da:44:85:78:94:d7:b9: df:54:43:7d:7d:6f:46:bb:a1:89:9a:17:ac:c0:f9: 7d:21:57:2f:33:57:74:66:ba:23:7c:36:22:eb:6a: 82:d1:d8:87:a1:c1:14:ac:5f:e3:68:a7:79:62:f9: 31:a6:26:ea:7b:0d:f9:42:77:05:2f:ca:04:66:d8: f1:d7:e1:f7:a2:05:a8:38:7a:3e:1c:4a:68:be:50: 5e:75:35:8d:52:4d:5d:76:08:c9:31:b0:ec:e0:dd: c5:49:78:80:95:cf:19:ae:57:99:b8:95:dc:e2:73: b7:39:4a:b6:49:8e:06:f4:07:c8:5a:af:34:ee:3d: 09:54:26:40:58:a7:52:61:ea:21:aa:dd:66:41:ec: 23:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:42:6D:A0:5A:34:8E:7E:0B:56:C3:4F:92:59:21:83:CA:F2:2D:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/17c7f0c7-06dc-48f1-9024-2e064e010ed6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8160::/48 Signature Algorithm: sha256WithRSAEncryption 60:1b:ef:13:e2:46:05:d3:b2:95:28:17:e9:cc:3e:fc:e4:d3: 75:81:52:e2:14:92:08:4e:56:42:82:76:14:f3:4f:a5:20:48: 9a:2f:bb:bc:27:b4:94:0d:2f:5a:e5:a4:1d:b9:94:af:1f:6c: 5c:f8:63:3d:ad:57:ee:d3:28:d0:40:bb:ef:83:08:c4:af:4b: 3a:91:e1:31:c0:4b:47:27:0f:29:37:b9:a2:60:42:b9:8e:1b: 92:5f:9c:ca:ab:6c:ad:ba:c2:14:e1:b1:87:ea:4f:ce:d9:bc: 60:b0:a4:c1:15:e9:dc:d3:d8:d9:60:15:8c:62:54:d7:df:9b: 1a:c3:76:0b:81:e7:bf:f0:da:7d:88:96:0c:e5:38:a9:e1:86: 28:90:a6:b0:67:e6:32:43:52:7b:fc:d8:ad:b2:2b:c7:03:87: cd:2f:f1:c6:40:c5:4a:c9:23:d1:ee:8c:61:6d:f6:6a:a3:30: 2f:72:d2:f1:bf:3e:7e:78:a6:9a:51:cd:4d:2e:7e:48:e8:fa: 27:d7:43:67:fc:b4:ae:1c:e0:35:1f:f1:2b:79:68:27:43:fa: f8:43:16:f3:84:a0:4c:e5:36:f4:1e:1b:17:2c:d8:b5:2d:00: 20:00:e1:61:88:44:f0:79:51:af:c4:89:39:8a:01:66:44:b1: 06:69:ef:76 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM4hAu0B6MaPbgSVG2Nzfy1RKOn4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTc0MTM0WhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTEyZGNmYzVlNDFjMTk1YzEwODU5ZmU3YmRiZmU2NDRk MWU1NDlkOWMwZDI3MmY5YzE2NTRhMTNiMTU1OTExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaaIAR+2OIJ9Te8TVWouHsmCpkYb84LXfdAU00mbHq0+CL sAm5aEW+X/BnmnuHk/sZ97xXIZfvJs8GmDA8CS+n/aJHLmx6BJl8+ZbGtz8N0+Fx YbY/G9u4HIa8niGNy58hWSsNYqjQTRehTOkSjy3k2kSFeJTXud9UQ319b0a7oYma F6zA+X0hVy8zV3RmuiN8NiLraoLR2IehwRSsX+Nop3li+TGmJup7DflCdwUvygRm 2PHX4feiBag4ej4cSmi+UF51NY1STV12CMkxsOzg3cVJeICVzxmuV5m4ldzic7c5 SrZJjgb0B8harzTuPQlUJkBYp1Jh6iGq3WZB7CMrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsEJtoFo0jn4LVsNPklkhg8ryLQQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE3YzdmMGM3LTA2ZGMtNDhmMS05MDI0LTJlMDY0ZTAxMGVkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgWAwDQYJKoZIhvcNAQELBQADggEBAGAb7xPiRgXTspUoF+nMPvzk 03WBUuIUkghOVkKCdhTzT6UgSJovu7wntJQNL1rlpB25lK8fbFz4Yz2tV+7TKNBA u++DCMSvSzqR4THAS0cnDyk3uaJgQrmOG5JfnMqrbK26whThsYfqT87ZvGCwpMEV 6dzT2NlgFYxiVNffmxrDdguB57/w2n2IlgzlOKnhhiiQprBn5jJDUnv82K2yK8cD h80v8cZAxUrJI9HujGFt9mqjMC9y0vG/Pn54pppRzU0ufkjo+ifXQ2f8tK4c4DUf 8St5aCdD+vhDFvOEoEzlNvQeGxcs2LUtACAA4WGIRPB5Ua/EiTmKAWZEsQZp73Y= -----END CERTIFICATE-----Generated at Wed Apr 16 16:51:57 2025 by rpki-client