$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e17c69e-b02b-4a9d-b382-51893c648e00.roa File: 4e17c69e-b02b-4a9d-b382-51893c648e00.roa (raw, json) Hash identifier: y3kyXmaYn6cIzYoiMYRqMRYO8J5wEF5bwmkG3fjug8Y= Subject key identifier: AD:3C:9C:24:98:CA:F1:B5:50:37:FA:2D:48:CC:82:BA:BC:B2:BC:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1CF82F9B064F5393A9C6F5DECFBE7093026A8F46 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e17c69e-b02b-4a9d-b382-51893c648e00.roa Signing time: Tue 25 Mar 2025 17:30:26 +0000 ROA not before: Tue 25 Mar 2025 17:30:26 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:8190::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f8:2f:9b:06:4f:53:93:a9:c6:f5:de:cf:be:70:93:02:6a:8f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 17:30:26 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=3e36b225fab0324595b70ab9c5dabd1c6d93a415539329a928c495379fc90ed6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c4:27:b9:f2:1e:92:ec:1b:be:87:fc:ca:ed: 0c:f3:70:e6:c7:ee:18:90:9b:7d:f0:88:85:9c:d0: 31:e5:40:84:81:38:da:4d:92:24:5e:08:98:47:1b: 75:f5:fd:85:ea:6b:d5:47:6d:3d:1e:e2:fd:aa:d2: 40:cc:07:f5:d2:1d:8a:ad:e0:f5:87:83:00:55:c3: f1:56:c4:db:87:f7:bd:7d:c9:f5:ef:94:af:eb:af: b1:13:1c:10:1a:0a:3d:08:07:fd:eb:83:b5:ed:81: 2a:cd:dc:6d:ad:35:41:52:8d:1e:b9:c2:78:50:7c: be:74:b0:14:3b:f9:d4:91:e7:a0:08:67:ab:e2:0f: bb:b0:b4:31:d4:88:65:ea:ab:f5:30:79:67:e1:3e: 63:66:10:bd:dd:8b:ed:5f:b0:f1:68:63:75:bc:3c: 45:a8:e0:66:ff:ed:a6:3c:24:03:0e:6c:de:b8:53: 8e:b2:23:09:bd:5d:49:62:7c:64:06:7e:46:0c:ea: c4:0d:b5:4f:45:a0:32:8f:4b:8e:c2:3c:37:e1:eb: 19:65:69:47:a2:d9:40:db:d3:dc:26:7e:c4:4b:f1: ae:ba:69:f8:11:ad:65:1d:b6:c3:04:8e:9e:11:d7: 80:3f:9e:07:1c:ec:75:22:b5:92:b3:da:28:be:c5: 5d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3C:9C:24:98:CA:F1:B5:50:37:FA:2D:48:CC:82:BA:BC:B2:BC:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e17c69e-b02b-4a9d-b382-51893c648e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8190::/48 Signature Algorithm: sha256WithRSAEncryption 34:92:57:fc:1c:cd:ca:72:cb:29:c5:15:f4:5a:b1:1b:07:ef: cb:e2:c5:b9:66:ca:0f:a4:3a:9c:6d:6f:54:9a:00:9c:3a:d1: a5:5b:f9:eb:d3:fa:5c:c3:8e:28:eb:f2:7a:c2:ae:01:ef:84: 3b:74:2c:0d:de:fb:c9:5d:74:2d:a5:e6:38:5f:5b:07:cb:38: 47:7b:ba:93:89:93:1c:00:22:2a:fd:60:32:a2:8c:5a:d6:eb: 62:3c:2f:87:67:8e:c9:48:a6:fc:8c:5c:5d:fb:0f:a3:81:b5: 2f:7a:08:fd:cc:1f:f8:72:ba:da:64:94:a8:f6:8f:8d:08:e6: e8:04:76:81:8d:f9:35:71:50:13:92:36:80:1c:54:41:58:48: 8f:9b:8a:ad:c1:1f:57:5f:62:b7:4c:1a:10:ab:3a:08:f9:7c: 82:5e:df:46:f2:91:ed:7d:48:1e:69:a5:51:fc:14:d6:e2:71: ae:1e:4a:b1:15:a1:e8:49:a8:d4:0a:d9:52:f6:3a:f1:ed:39: d3:a7:44:42:e4:b6:2f:6f:af:ed:3f:61:15:cf:ef:df:bd:5c: 94:c5:04:7f:3d:ac:16:bf:62:84:d2:49:03:13:e3:03:ee:59: 45:d6:bc:cc:a8:9f:ea:b0:cd:b0:a3:55:02:93:cc:7e:c9:03: 3c:e5:8a:b7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHPgvmwZPU5OpxvXez75wkwJqj0YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTczMDI2WhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTM2YjIyNWZhYjAzMjQ1OTViNzBhYjljNWRhYmQxYzZk OTNhNDE1NTM5MzI5YTkyOGM0OTUzNzlmYzkwZWQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmxCe58h6S7Bu+h/zK7QzzcObH7hiQm33wiIWc0DHlQISB ONpNkiReCJhHG3X1/YXqa9VHbT0e4v2q0kDMB/XSHYqt4PWHgwBVw/FWxNuH9719 yfXvlK/rr7ETHBAaCj0IB/3rg7XtgSrN3G2tNUFSjR65wnhQfL50sBQ7+dSR56AI Z6viD7uwtDHUiGXqq/UweWfhPmNmEL3di+1fsPFoY3W8PEWo4Gb/7aY8JAMObN64 U46yIwm9XUlifGQGfkYM6sQNtU9FoDKPS47CPDfh6xllaUei2UDb09wmfsRL8a66 afgRrWUdtsMEjp4R14A/ngcc7HUitZKz2ii+xV1LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrTycJJjK8bVQN/otSMyCuryyvAcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRlMTdjNjllLWIwMmItNGE5ZC1iMzgyLTUxODkzYzY0OGUwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgZAwDQYJKoZIhvcNAQELBQADggEBADSSV/wczcpyyynFFfRasRsH 78vixblmyg+kOpxtb1SaAJw60aVb+evT+lzDjijr8nrCrgHvhDt0LA3e+8lddC2l 5jhfWwfLOEd7upOJkxwAIir9YDKijFrW62I8L4dnjslIpvyMXF37D6OBtS96CP3M H/hyutpklKj2j40I5ugEdoGN+TVxUBOSNoAcVEFYSI+biq3BH1dfYrdMGhCrOgj5 fIJe30byke19SB5ppVH8FNbica4eSrEVoehJqNQK2VL2OvHtOdOnRELkti9vr+0/ YRXP79+9XJTFBH89rBa/YoTSSQMT4wPuWUXWvMyon+qwzbCjVQKTzH7JAzzlirc= -----END CERTIFICATE-----Generated at Wed Apr 16 16:54:30 2025 by rpki-client