$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/837b61fc-a3e4-4d74-b321-99209fe5979e.roa File: 837b61fc-a3e4-4d74-b321-99209fe5979e.roa (raw, json) Hash identifier: r1TESp8zNh7IcLQP4/a2LfAz+fxWlVgvbSyb/u4gZFw= Subject key identifier: 3B:23:73:48:36:3C:E5:F8:FE:FF:E4:9D:A5:98:7B:5A:C7:63:55:C6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1EACB75B5C2FCC27C38DC2A8D8FFBF2C77875E6A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/837b61fc-a3e4-4d74-b321-99209fe5979e.roa Signing time: Wed 09 Apr 2025 00:11:40 +0000 ROA not before: Wed 09 Apr 2025 00:11:40 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:83ad::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ac:b7:5b:5c:2f:cc:27:c3:8d:c2:a8:d8:ff:bf:2c:77:87:5e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 9 00:11:40 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=388928edb8ca1ec8d479f73ee02852ec705d8d3073847dba6825b9e0f9512cc9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:82:82:26:7c:5d:1d:54:ab:c3:44:69:f0: 1f:f8:2f:8e:6d:b9:f0:40:23:87:81:37:92:fc:42: 67:7f:05:7e:51:75:74:93:dc:59:62:04:6e:a7:7f: df:10:44:2d:09:00:f3:01:6f:5b:95:a4:27:02:2e: 03:27:54:95:ab:1a:d8:eb:44:12:c9:e5:fc:b9:b3: 43:8e:7a:f1:b2:b7:9e:30:5b:5a:82:54:29:44:93: 37:27:67:dc:ec:90:25:7a:20:55:16:22:0c:eb:37: 09:3f:e9:e4:49:22:83:76:2e:69:f6:84:84:3c:86: 75:e5:75:67:34:da:e0:20:69:76:5a:e4:78:51:e8: 18:64:82:0f:ce:c7:98:c8:22:46:0e:cd:b6:50:83: 81:ce:1e:35:58:44:6a:9d:29:9c:50:b7:cf:fc:da: 8e:6f:03:c5:49:e0:f0:fc:41:67:e3:7b:a2:f7:f6: 44:83:f9:54:0e:f5:d0:74:3a:83:e1:7e:9b:db:d2: 45:0a:fa:18:c9:39:72:8b:3f:8c:d7:2f:4d:08:2b: 64:80:86:68:79:20:77:7c:e7:2b:c5:a4:2a:d6:ec: 88:a9:be:d7:04:05:d0:4f:20:b2:62:07:37:4f:b1: f2:b9:31:0f:25:a5:7a:a8:59:f0:28:b0:57:92:36: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:23:73:48:36:3C:E5:F8:FE:FF:E4:9D:A5:98:7B:5A:C7:63:55:C6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/837b61fc-a3e4-4d74-b321-99209fe5979e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:83ad::/48 Signature Algorithm: sha256WithRSAEncryption 8b:fa:06:0f:30:0e:48:15:16:21:bf:49:70:28:32:a0:63:d1: 0d:4d:67:46:fe:cb:36:60:79:0e:7e:4d:c5:78:a7:c5:8f:70: 95:65:54:57:c9:db:88:92:55:55:cf:c3:d1:9f:ac:e1:4f:ca: 02:17:e5:db:20:e8:88:a1:86:80:c5:e3:27:84:31:88:22:92: a0:41:e5:7d:12:00:65:87:a2:01:bf:a9:4b:44:11:7c:2d:31: 91:b2:1f:c1:43:b1:ef:1c:e7:06:15:18:2e:1d:b3:da:10:41: f5:70:d3:51:ae:90:58:ed:5e:1f:63:f0:35:57:01:32:ba:93: 57:ef:48:47:af:dc:80:e4:c7:30:91:ea:a6:31:b3:63:78:5f: bb:08:27:3c:88:5d:ab:af:49:bd:99:cc:c1:e5:77:66:11:9d: b0:a3:f8:c3:ff:f7:56:d9:a5:5f:f5:ac:14:48:a2:26:3e:0a: 0e:60:9d:fc:0a:3d:76:fd:77:dc:52:25:67:e7:0b:96:ac:2b: 31:bd:80:00:a8:44:87:7f:0a:bc:dd:93:3f:0b:df:f1:ba:f4: a4:7f:e1:a5:5d:ef:71:01:4e:4c:7e:79:9a:f4:3e:53:35:8b: 11:6d:3b:6c:97:5c:25:9e:e6:8c:57:7b:c5:68:2f:3f:84:14: d2:cb:c0:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHqy3W1wvzCfDjcKo2P+/LHeHXmowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA5MDAxMTQwWhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzODg5MjhlZGI4Y2ExZWM4ZDQ3OWY3M2VlMDI4NTJlYzcw NWQ4ZDMwNzM4NDdkYmE2ODI1YjllMGY5NTEyY2M5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBjYKCJnxdHVSrw0Rp8B/4L45tufBAI4eBN5L8Qmd/BX5R dXST3FliBG6nf98QRC0JAPMBb1uVpCcCLgMnVJWrGtjrRBLJ5fy5s0OOevGyt54w W1qCVClEkzcnZ9zskCV6IFUWIgzrNwk/6eRJIoN2Lmn2hIQ8hnXldWc02uAgaXZa 5HhR6Bhkgg/Ox5jIIkYOzbZQg4HOHjVYRGqdKZxQt8/82o5vA8VJ4PD8QWfje6L3 9kSD+VQO9dB0OoPhfpvb0kUK+hjJOXKLP4zXL00IK2SAhmh5IHd85yvFpCrW7Iip vtcEBdBPILJiBzdPsfK5MQ8lpXqoWfAosFeSNug9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOyNzSDY85fj+/+SdpZh7WsdjVcYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgzN2I2MWZjLWEzZTQtNGQ3NC1iMzIxLTk5MjA5ZmU1OTc5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9g60wDQYJKoZIhvcNAQELBQADggEBAIv6Bg8wDkgVFiG/SXAoMqBj 0Q1NZ0b+yzZgeQ5+TcV4p8WPcJVlVFfJ24iSVVXPw9GfrOFPygIX5dsg6IihhoDF 4yeEMYgikqBB5X0SAGWHogG/qUtEEXwtMZGyH8FDse8c5wYVGC4ds9oQQfVw01Gu kFjtXh9j8DVXATK6k1fvSEev3IDkxzCR6qYxs2N4X7sIJzyIXauvSb2ZzMHld2YR nbCj+MP/91bZpV/1rBRIoiY+Cg5gnfwKPXb9d9xSJWfnC5asKzG9gACoRId/Crzd kz8L3/G69KR/4aVd73EBTkx+eZr0PlM1ixFtO2yXXCWe5oxXe8VoLz+EFNLLwPU= -----END CERTIFICATE-----Generated at Wed Apr 16 16:48:49 2025 by rpki-client