$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b3424f-9bad-4599-a0a2-6507f7c70050.roa File: 24b3424f-9bad-4599-a0a2-6507f7c70050.roa (raw, json) Hash identifier: QJVfTa3Acg4c1RcyqZQ1vpVIGYeC751arTiKrdeor74= Subject key identifier: 42:B6:CC:9C:84:FB:F8:1A:66:9F:7F:D3:74:A8:DA:4C:34:58:36:41 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F4A14ED8DA156F082C9E665F61104EE07CC93C1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b3424f-9bad-4599-a0a2-6507f7c70050.roa Signing time: Fri 28 Mar 2025 17:31:13 +0000 ROA not before: Fri 28 Mar 2025 17:31:13 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f11:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4a:14:ed:8d:a1:56:f0:82:c9:e6:65:f6:11:04:ee:07:cc:93:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 17:31:13 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: serialNumber=a45fce097e283ad0d9d05c1ac9cf361360894cd70ef80119aa58c582ea83468a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2c:59:ed:9b:ea:5c:5b:01:5b:1d:4a:89:a1: b1:32:31:a9:6c:f6:b3:38:07:98:a8:7f:85:88:06: a6:07:93:e9:02:e2:79:fe:47:3a:08:c1:a6:9b:24: ec:cf:11:f2:01:d5:b3:5b:2f:01:4a:a7:eb:e0:5c: b7:1b:ea:56:48:72:f4:99:3a:f5:3f:63:c0:e4:54: de:68:ef:ad:dd:cc:93:9c:10:29:bf:9f:30:3c:a4: 1a:14:7f:3e:23:d1:d5:65:dd:4f:32:14:7d:f8:f5: 2b:8e:f9:f0:3e:bc:37:5e:9b:65:55:d1:0d:8a:78: e5:10:f7:2a:fc:b2:1f:74:14:0b:ba:7a:71:7d:2f: 66:2c:d4:70:61:4a:e3:3c:77:c1:96:c2:54:52:04: f4:37:eb:71:3b:65:8d:63:50:f5:77:3c:6d:59:c5: 81:07:52:ba:7d:ad:ef:bd:32:ab:30:64:75:c6:4b: 42:38:45:68:6c:1f:c6:0f:a3:2d:e2:6d:61:4a:2a: 22:f0:9f:26:86:e6:91:c6:58:96:34:a5:94:76:1b: f4:97:7b:a4:30:cd:37:9e:67:d1:b3:18:fd:dd:6b: cf:fa:56:56:37:8c:8d:07:2b:f7:ab:97:b1:6f:68: 6a:27:73:df:f4:d7:11:38:29:be:82:ad:2b:fd:5b: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B6:CC:9C:84:FB:F8:1A:66:9F:7F:D3:74:A8:DA:4C:34:58:36:41 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b3424f-9bad-4599-a0a2-6507f7c70050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f11:8000::/36 Signature Algorithm: sha256WithRSAEncryption 66:5c:c9:3d:fe:32:5e:23:0c:c0:e6:8f:37:46:94:ca:e9:13: 67:7c:4a:ad:0f:f3:e4:79:f1:ec:54:aa:e5:6c:16:37:45:64: b2:b1:b6:6e:10:c7:49:b8:b1:e4:c6:f2:8d:72:0e:6d:4a:16: ce:53:1a:0f:9e:92:14:06:33:fe:bd:63:89:00:e5:ea:b3:c4: 4b:ad:cd:c4:99:54:81:9e:a6:c5:4e:ad:33:8d:a6:58:6d:3e: 75:49:fa:ec:e7:f7:d4:cc:6a:6f:e5:7c:5f:1b:6f:64:ae:db: aa:1a:84:88:d1:ae:15:88:4a:d7:3d:7f:08:9e:4b:91:f7:a0: 07:e4:1c:64:fc:00:71:65:7c:40:c3:3a:5c:cb:f9:d7:c7:c8: 80:94:b3:69:6e:c5:f6:ea:10:f7:7e:4b:37:33:5a:81:b3:85: f8:a9:b0:01:4e:8f:5c:30:0d:68:00:c0:f0:11:bc:12:da:5e: 31:da:e2:9f:d7:2c:28:85:c0:50:e9:d8:98:ea:2e:50:76:67: 19:c1:00:41:46:28:b7:03:36:47:dd:65:78:45:13:97:b8:83: cc:59:cb:48:35:7a:20:55:da:8a:14:01:b4:88:d1:a0:16:7c: 9a:bc:8e:a2:63:82:95:39:2c:05:ed:2b:42:ae:37:8a:44:81: aa:37:f5:de -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUf0oU7Y2hVvCCyeZl9hEE7gfMk8EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTczMTEzWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDVmY2UwOTdlMjgzYWQwZDlkMDVjMWFjOWNmMzYxMzYw ODk0Y2Q3MGVmODAxMTlhYTU4YzU4MmVhODM0NjhhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSLFntm+pcWwFbHUqJobEyMals9rM4B5iof4WIBqYHk+kC 4nn+RzoIwaabJOzPEfIB1bNbLwFKp+vgXLcb6lZIcvSZOvU/Y8DkVN5o763dzJOc ECm/nzA8pBoUfz4j0dVl3U8yFH349SuO+fA+vDdem2VV0Q2KeOUQ9yr8sh90FAu6 enF9L2Ys1HBhSuM8d8GWwlRSBPQ363E7ZY1jUPV3PG1ZxYEHUrp9re+9MqswZHXG S0I4RWhsH8YPoy3ibWFKKiLwnyaG5pHGWJY0pZR2G/SXe6QwzTeeZ9GzGP3da8/6 VlY3jI0HK/erl7FvaGonc9/01xE4Kb6CrSv9W0MlAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQrbMnIT7+Bpmn3/TdKjaTDRYNkEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0YjM0MjRmLTliYWQtNDU5OS1hMGEyLTY1MDdmN2M3MDA1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8RgDANBgkqhkiG9w0BAQsFAAOCAQEAZlzJPf4yXiMMwOaPN0aUyukT Z3xKrQ/z5Hnx7FSq5WwWN0VksrG2bhDHSbix5MbyjXIObUoWzlMaD56SFAYz/r1j iQDl6rPES63NxJlUgZ6mxU6tM42mWG0+dUn67Of31Mxqb+V8XxtvZK7bqhqEiNGu FYhK1z1/CJ5LkfegB+QcZPwAcWV8QMM6XMv518fIgJSzaW7F9uoQ935LNzNagbOF +KmwAU6PXDANaADA8BG8EtpeMdrin9csKIXAUOnYmOouUHZnGcEAQUYotwM2R91l eEUTl7iDzFnLSDV6IFXaihQBtIjRoBZ8mryOomOClTksBe0rQq43ikSBqjf13g== -----END CERTIFICATE-----Generated at Wed Apr 16 17:00:41 2025 by rpki-client