$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92d593ea-9a2d-4cb9-95b8-cfe741a70127.roa File: 92d593ea-9a2d-4cb9-95b8-cfe741a70127.roa (raw, json) Hash identifier: 4ey4PnUpCavG3NRrUZcdVa3krQJIt4BpOFOUOQnhnJc= Subject key identifier: 3A:94:57:DE:6F:BB:04:FB:61:70:B5:A5:DE:4A:4A:6D:4F:F0:C6:F3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5FB7CB825110FCC073B18F57D3388B06754B697F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92d593ea-9a2d-4cb9-95b8-cfe741a70127.roa Signing time: Tue 25 Mar 2025 17:11:14 +0000 ROA not before: Tue 25 Mar 2025 17:11:14 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f38:5040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b7:cb:82:51:10:fc:c0:73:b1:8f:57:d3:38:8b:06:75:4b:69:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 25 17:11:14 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=0860f5acbe528ddc6a47567ca23fb658d759dc128d0103dd8ff9620cf3c609f8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:ef:db:f0:f3:4e:20:d0:45:d2:3c:86:81: d5:3d:ce:08:fb:7e:ce:40:2b:f9:76:28:95:9f:00: a0:8d:31:d7:d1:86:2a:d1:08:83:1f:5a:69:cf:6a: 50:3a:df:bd:11:da:78:fc:8f:cb:8d:3b:ab:50:bd: 62:3a:e8:22:c2:8a:21:c7:35:99:ed:79:b2:0e:d3: c4:37:68:4e:44:b1:cb:11:e9:a8:df:1b:55:81:e4: d4:de:bb:5c:c7:23:2d:31:93:1f:65:c2:a5:0c:80: ad:57:30:23:19:a6:d5:e8:dd:8e:26:c1:bb:b8:52: 17:eb:f8:09:03:89:64:1b:a6:a1:8e:8c:10:79:ef: 65:18:e3:6b:bd:0d:14:7d:f5:f3:12:d4:63:d4:b1: d0:b3:ab:3d:e5:26:f8:ad:9a:76:20:06:36:3b:37: 64:71:a6:48:96:64:19:0a:35:89:9d:17:64:34:58: 94:71:7b:07:d6:e2:d9:49:43:b9:0b:09:7b:e8:a0: 6b:c0:f9:23:5f:93:3a:5c:f8:dd:4a:e9:c5:22:bf: 40:ec:ae:54:82:89:f5:e2:e7:86:86:fe:b3:50:2b: 22:23:61:d9:e9:c7:94:02:11:18:3c:84:d6:7b:ca: 55:50:26:c2:0e:35:3e:99:7c:60:fe:fd:c2:62:0b: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:94:57:DE:6F:BB:04:FB:61:70:B5:A5:DE:4A:4A:6D:4F:F0:C6:F3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92d593ea-9a2d-4cb9-95b8-cfe741a70127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:5040::/48 Signature Algorithm: sha256WithRSAEncryption d7:5e:3d:37:6f:e4:43:2e:7e:85:e5:d8:27:ae:dd:73:c1:48: 7a:42:7d:a9:3f:2c:dc:31:95:11:6a:e4:31:28:fb:4f:c5:08: 44:86:ba:95:66:b8:d7:43:c3:f0:1f:39:77:ab:10:79:10:43: ea:d8:4b:43:b8:34:87:5a:cf:42:cd:bd:3c:48:b8:dd:f3:5d: dd:d0:50:b6:b1:e8:b4:2f:13:e7:45:e0:97:6b:ed:46:cd:45: cc:93:a0:15:eb:e6:15:aa:27:d1:01:60:c6:32:a5:23:1e:1e: f1:0d:22:29:b0:1a:e5:4a:a2:cd:03:5a:5a:87:6b:06:14:1b: 8b:ea:61:c1:0d:9f:04:e1:06:af:99:ea:10:f4:1e:26:6a:e9: 18:2e:22:c1:9e:6c:fe:84:77:36:35:31:14:c2:03:b0:df:28: 72:6c:d7:b1:0f:d4:15:38:d2:67:bb:59:c6:0f:b4:b0:10:53: 41:c9:0c:b8:47:e6:f5:e7:e7:7b:c0:40:4a:60:cd:aa:90:30: 3f:dc:23:0e:3a:a6:b5:77:ee:fd:70:33:32:65:f8:2a:22:5d: 93:a6:7a:3c:f0:39:2e:1d:c1:3d:11:f9:aa:5e:57:a8:6e:5d: 41:23:c0:a4:c4:ed:13:9e:19:05:41:97:f6:5e:05:58:56:31: 3b:18:1a:6c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUX7fLglEQ/MBzsY9X0ziLBnVLaX8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI1MTcxMTE0WhcNMjUwNDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwODYwZjVhY2JlNTI4ZGRjNmE0NzU2N2NhMjNmYjY1OGQ3 NTlkYzEyOGQwMTAzZGQ4ZmY5NjIwY2YzYzYwOWY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCle/b8PNOINBF0jyGgdU9zgj7fs5AK/l2KJWfAKCNMdfR hirRCIMfWmnPalA6370R2nj8j8uNO6tQvWI66CLCiiHHNZntebIO08Q3aE5EscsR 6ajfG1WB5NTeu1zHIy0xkx9lwqUMgK1XMCMZptXo3Y4mwbu4Uhfr+AkDiWQbpqGO jBB572UY42u9DRR99fMS1GPUsdCzqz3lJvitmnYgBjY7N2RxpkiWZBkKNYmdF2Q0 WJRxewfW4tlJQ7kLCXvooGvA+SNfkzpc+N1K6cUiv0DsrlSCifXi54aG/rNQKyIj Ydnpx5QCERg8hNZ7ylVQJsIONT6ZfGD+/cJiCx+/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOpRX3m+7BPthcLWl3kpKbU/wxvMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyZDU5M2VhLTlhMmQtNGNiOS05NWI4LWNmZTc0MWE3MDEyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84UEAwDQYJKoZIhvcNAQELBQADggEBANdePTdv5EMufoXl2Ceu3XPB SHpCfak/LNwxlRFq5DEo+0/FCESGupVmuNdDw/AfOXerEHkQQ+rYS0O4NIdaz0LN vTxIuN3zXd3QULax6LQvE+dF4Jdr7UbNRcyToBXr5hWqJ9EBYMYypSMeHvENIimw GuVKos0DWlqHawYUG4vqYcENnwThBq+Z6hD0HiZq6RguIsGebP6EdzY1MRTCA7Df KHJs17EP1BU40me7WcYPtLAQU0HJDLhH5vXn53vAQEpgzaqQMD/cIw46prV37v1w MzJl+CoiXZOmejzwOS4dwT0R+apeV6huXUEjwKTE7ROeGQVBl/ZeBVhWMTsYGmw= -----END CERTIFICATE-----Generated at Wed Apr 16 17:00:43 2025 by rpki-client