$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc79b728-6509-4ac0-bcf7-f83bbe125322.roa File: cc79b728-6509-4ac0-bcf7-f83bbe125322.roa (raw, json) Hash identifier: tpj8KI/jlVavaeyKbjlpohz8ns77C/+uKp8XSPBsErA= Subject key identifier: 2C:76:F6:D5:F6:30:97:F6:FA:1C:42:B1:2D:DA:E3:6C:CA:A6:8E:35 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2E2469B40EBB6F77F801CEE044D236220572EEA2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc79b728-6509-4ac0-bcf7-f83bbe125322.roa Signing time: Fri 28 Mar 2025 17:30:28 +0000 ROA not before: Fri 28 Mar 2025 17:30:28 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1a:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:24:69:b4:0e:bb:6f:77:f8:01:ce:e0:44:d2:36:22:05:72:ee:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 17:30:28 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: serialNumber=ddeba9427b5a109354031bf537617dc7b20a6c6311f94d77c62644e69c9729d0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:05:d2:99:1a:96:fe:de:67:5e:95:ab:ec:40: 15:50:53:dc:2c:7c:69:b5:11:ff:27:f5:8c:e0:30: 29:65:81:eb:4b:f3:36:9a:eb:48:f1:68:d4:a7:41: 6b:2f:87:84:e5:ca:91:34:2c:ce:29:0b:14:07:71: f1:d8:f5:7c:0e:4a:02:93:c0:2d:87:73:4d:43:f5: 0d:7f:d6:95:35:d5:34:24:1b:5c:00:e2:5a:a7:66: 83:d0:28:38:a1:16:c1:bb:3c:34:18:82:87:05:6f: 52:5d:17:7b:c8:4a:78:8f:69:1c:be:a4:d8:b4:e9: d6:4f:53:86:ce:00:59:f5:bd:72:f3:cd:ab:b2:63: eb:76:a4:1b:6e:4d:b4:a2:f0:af:71:30:e3:30:26: 55:3b:11:77:0d:a7:23:56:bc:d2:29:41:a3:99:9a: 38:ce:ed:4d:cc:1d:b4:ce:94:54:ea:8c:dc:e1:bc: 3b:1c:52:4c:ab:e8:76:8e:07:46:23:0e:c3:64:82: 67:f7:d5:58:bb:49:84:3b:37:44:35:9e:0f:a2:d4: 1d:cb:07:2f:91:ad:4b:0e:80:5f:7b:a6:1c:f9:be: b0:39:18:cf:16:17:5e:e8:06:97:4a:d4:02:6a:a4: 6c:5e:04:aa:4d:ea:06:d7:ab:91:2e:32:72:86:a0: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:76:F6:D5:F6:30:97:F6:FA:1C:42:B1:2D:DA:E3:6C:CA:A6:8E:35 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc79b728-6509-4ac0-bcf7-f83bbe125322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1a:8000::/36 Signature Algorithm: sha256WithRSAEncryption 3c:e0:3f:fe:4c:c6:86:af:35:ba:08:8e:59:50:14:8d:f1:8a: ea:54:86:e2:36:d3:fe:77:f3:c1:5a:cf:4b:35:5b:be:a2:a0: d7:97:16:e3:d5:4e:b2:6d:73:66:65:4f:12:a7:17:33:74:12: cb:4b:30:23:25:04:c0:8c:30:3b:c4:91:9b:17:9d:1a:60:36: a0:4f:a0:58:e1:00:4c:62:52:0b:e3:01:31:c7:f1:45:f6:e3: 14:f3:cf:3f:9c:84:db:98:98:c1:76:5b:b2:f0:59:03:f0:71: d0:74:0f:9e:7f:c9:56:b1:d8:e7:72:90:e9:b5:91:a9:00:df: 30:01:44:59:f6:a0:23:51:b2:a9:a7:13:d0:9a:bc:61:57:ef: 30:c8:79:02:2f:0c:f8:c6:e1:a3:60:4e:7f:fa:33:32:d2:9a: c7:bb:b9:dd:46:bc:de:64:0d:df:1d:4a:28:6b:de:ec:32:3c: af:65:78:af:ad:dd:08:98:50:73:49:80:14:81:13:2b:06:49: ec:22:12:9c:e2:07:1c:dd:12:ed:7d:f7:a4:df:07:41:45:be: 96:78:1d:96:67:3c:54:fe:84:46:17:4e:29:d2:74:7d:4a:84: e3:80:3d:ed:b1:c5:e5:cf:ab:bb:cc:6b:76:c0:2d:4d:94:c0: c7:51:92:35 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULiRptA67b3f4Ac7gRNI2IgVy7qIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTczMDI4WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGViYTk0MjdiNWExMDkzNTQwMzFiZjUzNzYxN2RjN2Iy MGE2YzYzMTFmOTRkNzdjNjI2NDRlNjljOTcyOWQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZBdKZGpb+3mdelavsQBVQU9wsfGm1Ef8n9YzgMCllgetL 8zaa60jxaNSnQWsvh4TlypE0LM4pCxQHcfHY9XwOSgKTwC2Hc01D9Q1/1pU11TQk G1wA4lqnZoPQKDihFsG7PDQYgocFb1JdF3vISniPaRy+pNi06dZPU4bOAFn1vXLz zauyY+t2pBtuTbSi8K9xMOMwJlU7EXcNpyNWvNIpQaOZmjjO7U3MHbTOlFTqjNzh vDscUkyr6HaOB0YjDsNkgmf31Vi7SYQ7N0Q1ng+i1B3LBy+RrUsOgF97phz5vrA5 GM8WF17oBpdK1AJqpGxeBKpN6gbXq5EuMnKGoKn5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQULHb21fYwl/b6HEKxLdrjbMqmjjUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NjNzliNzI4LTY1MDktNGFjMC1iY2Y3LWY4M2JiZTEyNTMyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8agDANBgkqhkiG9w0BAQsFAAOCAQEAPOA//kzGhq81ugiOWVAUjfGK 6lSG4jbT/nfzwVrPSzVbvqKg15cW49VOsm1zZmVPEqcXM3QSy0swIyUEwIwwO8SR mxedGmA2oE+gWOEATGJSC+MBMcfxRfbjFPPPP5yE25iYwXZbsvBZA/Bx0HQPnn/J VrHY53KQ6bWRqQDfMAFEWfagI1GyqacT0Jq8YVfvMMh5Ai8M+Mbho2BOf/ozMtKa x7u53Ua83mQN3x1KKGve7DI8r2V4r63dCJhQc0mAFIETKwZJ7CISnOIHHN0S7X33 pN8HQUW+lngdlmc8VP6ERhdOKdJ0fUqE44A97bHF5c+ru8xrdsAtTZTAx1GSNQ== -----END CERTIFICATE-----Generated at Wed Apr 16 22:07:00 2025 by rpki-client