$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee2f6e4c-9ada-44f9-8601-b528dce85cc3.roa File: ee2f6e4c-9ada-44f9-8601-b528dce85cc3.roa (raw, json) Hash identifier: ePjI4V91y7YI3Iez0AiiZhrpgQpxsAd8ruYrP7sA1us= Subject key identifier: A3:72:01:0A:2F:77:3C:3E:4A:B1:7E:99:D0:F1:0A:37:C5:0F:D7:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F9936F15FF5C51770F3BFE3F8F288AF28D828C0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee2f6e4c-9ada-44f9-8601-b528dce85cc3.roa Signing time: Tue 18 Mar 2025 18:37:06 +0000 ROA not before: Tue 18 Mar 2025 18:37:06 +0000 ROA not after: Tue 22 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f22:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:99:36:f1:5f:f5:c5:17:70:f3:bf:e3:f8:f2:88:af:28:d8:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 18 18:37:06 2025 GMT Not After : Apr 22 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:ce:ba:9b:e4:48:34:df:b6:0d:3f:95:92: 1c:60:29:16:e5:71:01:25:00:85:e6:af:9b:96:5f: 27:13:75:d6:ee:30:96:12:b7:b5:46:25:d4:6a:19: 8e:36:06:56:47:0b:7b:5b:17:43:02:07:ee:2c:a4: 10:c0:d4:f0:c7:56:54:ae:e7:e8:e6:7a:73:76:8b: 01:81:82:62:de:fa:bd:ab:5e:9f:20:ec:59:93:a6: 93:7f:b4:26:2c:d4:32:96:d4:9e:65:2f:61:79:9b: 1d:7e:93:fd:61:29:56:c5:eb:c8:61:0f:23:d0:49: 0c:f7:4d:22:db:d2:49:28:4c:3e:dc:fe:9b:ab:48: 6c:1d:56:7c:33:53:5d:70:f0:88:d5:9a:a4:f0:bf: 36:bf:d4:f1:6c:e4:ce:8d:ae:b4:91:4a:7f:bc:3b: 01:36:53:28:97:7e:b6:c3:a8:7f:3c:db:c4:11:65: 1e:c4:c5:14:ca:ed:a9:58:dc:15:2b:73:26:19:07: 04:78:54:8d:48:08:7b:b8:06:43:f4:bb:d9:9d:44: e5:59:f5:74:75:9f:9f:20:f1:37:1a:be:39:c0:9a: f0:e3:71:c1:79:53:72:5c:dd:b2:e3:fa:0d:c4:27: ed:23:a2:b3:7e:80:ad:40:dd:c7:c7:1d:f9:c2:4b: 4e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:72:01:0A:2F:77:3C:3E:4A:B1:7E:99:D0:F1:0A:37:C5:0F:D7:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee2f6e4c-9ada-44f9-8601-b528dce85cc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f22:c000::/36 Signature Algorithm: sha256WithRSAEncryption 77:eb:96:69:79:1d:b1:eb:ed:a5:bb:66:82:e7:3e:49:f3:f9: 28:c7:91:dd:6a:c0:29:5d:bc:cd:9b:47:f2:ae:a6:81:c6:c5: ad:b9:5d:d6:e2:d6:76:69:e4:cf:d3:e6:47:3e:e6:60:07:f1: eb:e4:51:b0:b9:36:1e:e5:4f:51:fd:1b:03:7e:db:ff:a4:98: cc:11:a9:b5:f6:d3:d0:d2:6d:38:d6:31:a7:54:3c:ce:4c:e4: 04:90:67:10:63:59:1c:d2:4a:8a:62:6f:d5:17:ea:e7:c0:b7: c4:50:d4:cd:f4:93:52:6c:22:b4:a8:8d:56:f9:9d:1c:b9:c4: cf:13:10:56:5b:22:2b:ef:41:2b:91:43:69:a4:74:d7:b2:95: 6a:e6:cf:b1:bb:1e:13:ff:48:67:6c:ba:ad:6c:fe:1d:9f:02: a2:be:e2:a6:62:a9:e0:ea:21:f7:4d:2e:be:4f:39:21:87:29: ee:39:ca:ca:46:05:db:2f:79:69:9b:ee:33:8b:2f:29:11:b7: 52:98:0f:61:ae:50:15:d9:e9:f4:d4:ac:fe:29:71:e6:e2:3d: c6:b6:ce:18:d0:64:1f:03:45:6e:d6:8f:0a:94:a1:97:b7:53: 8b:96:fb:77:3e:9c:a5:41:93:03:da:d8:c0:a6:1b:3a:ce:54: 16:d0:c6:5c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUH5k28V/1xRdw87/j+PKIryjYKMAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE4MTgzNzA2WhcNMjUwNDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjhhYTdmZDAzMzRkYTZmMWIxNTczMTc2MThkNWNiM2Jh ZDAzZjE4YjJkNDEzZmM0NDBjNmQzYWY5YWRhMDJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJXs66m+RINN+2DT+VkhxgKRblcQElAIXmr5uWXycTddbu MJYSt7VGJdRqGY42BlZHC3tbF0MCB+4spBDA1PDHVlSu5+jmenN2iwGBgmLe+r2r Xp8g7FmTppN/tCYs1DKW1J5lL2F5mx1+k/1hKVbF68hhDyPQSQz3TSLb0kkoTD7c /purSGwdVnwzU11w8IjVmqTwvza/1PFs5M6NrrSRSn+8OwE2UyiXfrbDqH8828QR ZR7ExRTK7alY3BUrcyYZBwR4VI1ICHu4BkP0u9mdROVZ9XR1n58g8TcavjnAmvDj ccF5U3Jc3bLj+g3EJ+0jorN+gK1A3cfHHfnCS049AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUo3IBCi93PD5KsX6Z0PEKN8UP1xcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VlMmY2ZTRjLTlhZGEtNDRmOS04NjAxLWI1MjhkY2U4NWNjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8iwDANBgkqhkiG9w0BAQsFAAOCAQEAd+uWaXkdsevtpbtmguc+SfP5 KMeR3WrAKV28zZtH8q6mgcbFrbld1uLWdmnkz9PmRz7mYAfx6+RRsLk2HuVPUf0b A37b/6SYzBGptfbT0NJtONYxp1Q8zkzkBJBnEGNZHNJKimJv1Rfq58C3xFDUzfST UmwitKiNVvmdHLnEzxMQVlsiK+9BK5FDaaR017KVaubPsbseE/9IZ2y6rWz+HZ8C or7ipmKp4Ooh900uvk85IYcp7jnKykYF2y95aZvuM4svKRG3UpgPYa5QFdnp9NSs /ilx5uI9xrbOGNBkHwNFbtaPCpShl7dTi5b7dz6cpUGTA9rYwKYbOs5UFtDGXA== -----END CERTIFICATE-----Generated at Fri Apr 4 23:40:03 2025 by rpki-client