$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a60e67-a460-4b24-b4ff-3e3adb9ae7c1.roa File: 74a60e67-a460-4b24-b4ff-3e3adb9ae7c1.roa (raw, json) Hash identifier: ByBLERbBqNaRsw3piC8LuTb7RXY6KcAVlpW33929n2M= Subject key identifier: 8F:A5:CE:AA:A3:D5:EB:AD:BA:E5:02:90:7A:B1:FE:AB:33:51:25:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 747CCB7AE1852F4598B99E2062FA993FCCBF6361 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a60e67-a460-4b24-b4ff-3e3adb9ae7c1.roa Signing time: Wed 16 Apr 2025 00:01:17 +0000 ROA not before: Wed 16 Apr 2025 00:01:17 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff6:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7c:cb:7a:e1:85:2f:45:98:b9:9e:20:62:fa:99:3f:cc:bf:63:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:01:17 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=8172b9a9445252338bacf6c38c9c094feff45125b3b354fcea226c2477ff407e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:3d:8b:24:f9:15:28:5d:9e:09:1f:a5:78: eb:ba:75:fa:3a:16:e7:70:96:08:38:d9:0b:77:b6: a9:06:e2:ed:bd:38:a3:b8:30:3f:55:8d:9c:9a:76: e3:55:d2:40:d8:22:85:ba:ae:bb:3b:15:9e:5c:2d: b0:0a:21:f7:3e:14:5d:2b:39:b5:6e:50:22:e6:84: de:20:7b:31:7a:95:86:a3:7c:63:d8:b2:e0:ff:fb: 1c:63:b1:f8:aa:87:3c:c4:ad:e7:44:dc:81:3e:92: a5:f9:59:82:23:79:50:20:e3:05:de:b0:69:27:7a: d0:c5:db:f5:85:5b:29:e1:f1:03:dc:57:ef:91:42: b1:3c:ed:30:82:d7:5a:c6:c4:36:c4:8a:0d:6e:b1: 97:99:ee:e9:44:23:21:48:57:e9:00:30:84:fe:4e: 2c:79:03:7d:eb:b7:33:12:cf:fc:5e:7d:8c:e7:cd: 59:fb:70:17:1f:cb:79:c1:22:b3:c6:a1:9f:cf:da: 19:3a:73:6c:11:1d:cf:c6:11:f6:d8:78:97:26:84: f5:43:7e:d3:fe:7a:25:7e:f9:9c:39:5a:87:03:06: 52:32:73:a6:ee:ae:49:b5:38:0e:2d:83:d9:fe:2a: ca:22:47:42:51:40:e9:7d:91:c0:2a:16:28:d7:c5: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A5:CE:AA:A3:D5:EB:AD:BA:E5:02:90:7A:B1:FE:AB:33:51:25:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a60e67-a460-4b24-b4ff-3e3adb9ae7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:5000::/40 Signature Algorithm: sha256WithRSAEncryption ae:f6:a0:80:06:d7:5f:6b:c4:f3:b6:c6:1f:f3:66:dc:8c:d8: 8a:d4:39:36:72:07:f6:94:40:c8:d4:f3:07:23:3e:56:1a:3b: 1c:57:bc:07:cb:c6:c6:98:97:15:f2:de:5d:56:92:9e:97:30: 06:ca:8c:fe:04:38:e5:a8:99:6a:b8:5f:b1:d4:ab:63:63:10: b2:7d:32:99:61:fd:4e:b1:63:97:b1:98:b8:39:15:13:af:b8: 51:0f:8a:87:c3:13:2d:d3:75:f5:0e:06:e0:95:66:99:d6:05: fb:01:23:70:88:91:e3:9e:24:8b:a0:7c:13:75:c2:f9:c1:c6: b7:ec:92:3f:91:de:81:96:8f:78:c8:36:10:b4:f3:43:f5:5c: ae:f5:72:f9:3b:c1:02:d8:8b:7c:c1:cb:30:37:f5:df:48:f3: 4f:8f:8d:66:2d:3b:36:f3:98:cf:29:f1:3e:63:b8:ae:c4:c6: 20:2b:85:90:9a:4a:47:46:5c:ed:de:9a:f6:8b:98:4f:98:07: e3:3c:73:a9:ca:8d:74:9c:6b:27:e1:6f:f0:be:59:e7:44:18: ac:5a:3f:ae:d5:57:d2:7d:1b:92:e2:e7:c1:41:42:95:1c:ee: 1c:bd:2a:d5:8a:f6:db:ba:72:e8:f3:19:2b:6f:d7:d3:07:18: 34:d2:25:a8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdHzLeuGFL0WYuZ4gYvqZP8y/Y2EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDE2MDAwMTE3WhcNMjUwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTcyYjlhOTQ0NTI1MjMzOGJhY2Y2YzM4YzljMDk0ZmVm ZjQ1MTI1YjNiMzU0ZmNlYTIyNmMyNDc3ZmY0MDdlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIxj2LJPkVKF2eCR+leOu6dfo6Fudwlgg42Qt3tqkG4u29 OKO4MD9VjZyaduNV0kDYIoW6rrs7FZ5cLbAKIfc+FF0rObVuUCLmhN4gezF6lYaj fGPYsuD/+xxjsfiqhzzEredE3IE+kqX5WYIjeVAg4wXesGknetDF2/WFWynh8QPc V++RQrE87TCC11rGxDbEig1usZeZ7ulEIyFIV+kAMIT+Tix5A33rtzMSz/xefYzn zVn7cBcfy3nBIrPGoZ/P2hk6c2wRHc/GEfbYeJcmhPVDftP+eiV++Zw5WocDBlIy c6burkm1OA4tg9n+KsoiR0JRQOl9kcAqFijXxVcvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUj6XOqqPV66265QKQerH+qzNRJbYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc0YTYwZTY3LWE0NjAtNGIyNC1iNGZmLTNlM2FkYjlhZTdjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/2UDANBgkqhkiG9w0BAQsFAAOCAQEArvaggAbXX2vE87bGH/Nm3IzY itQ5NnIH9pRAyNTzByM+Vho7HFe8B8vGxpiXFfLeXVaSnpcwBsqM/gQ45aiZarhf sdSrY2MQsn0ymWH9TrFjl7GYuDkVE6+4UQ+Kh8MTLdN19Q4G4JVmmdYF+wEjcIiR 454ki6B8E3XC+cHGt+ySP5HegZaPeMg2ELTzQ/VcrvVy+TvBAtiLfMHLMDf130jz T4+NZi07NvOYzynxPmO4rsTGICuFkJpKR0Zc7d6a9ouYT5gH4zxzqcqNdJxrJ+Fv 8L5Z50QYrFo/rtVX0n0bkuLnwUFClRzuHL0q1Yr227py6PMZK2/X0wcYNNIlqA== -----END CERTIFICATE-----Generated at Wed Apr 16 16:39:52 2025 by rpki-client