$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ec1981e-e77c-4d54-99ad-9b3e3daed73c.roa File: 1ec1981e-e77c-4d54-99ad-9b3e3daed73c.roa (raw, json) Hash identifier: GfDDNZLgHmLq4+FPj29wD8EWmMC2xzqTQOyxcSJC6YY= Subject key identifier: FD:96:6F:56:BF:AF:51:35:2B:8B:0A:67:1F:C8:0B:9E:37:7D:5B:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D35F441650EF3E94150E7537FC4E6DB3D2F8125 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ec1981e-e77c-4d54-99ad-9b3e3daed73c.roa Signing time: Mon 28 Apr 2025 15:22:01 +0000 ROA not before: Mon 28 Apr 2025 15:22:01 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f60:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:35:f4:41:65:0e:f3:e9:41:50:e7:53:7f:c4:e6:db:3d:2f:81:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 28 15:22:01 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=2b9ea207eaa95a5146a3f885f5593fb5046aafc7cca048dea089b62d90528c7b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:b0:e1:b9:40:3a:68:c2:c9:58:f8:3e:77: 16:bf:a4:8e:ef:ba:7b:fb:ae:7c:c7:51:83:68:5d: 96:e7:aa:d6:c8:8d:b6:5b:79:bb:1a:1e:1b:ba:8e: 98:99:96:be:ee:9b:0f:2a:1f:2c:ca:49:e1:b1:4e: c0:46:1d:9a:4e:8b:45:ee:1f:7e:3d:52:e2:03:0d: 06:d1:cc:6b:63:6f:81:da:03:3d:f1:b6:8c:39:8a: cc:e3:f6:bc:39:b0:70:b5:32:f6:9d:e3:aa:87:e0: b9:1a:b0:80:4f:4a:5b:9f:d0:62:08:6b:b3:8a:e3: 40:71:16:80:d0:a3:cb:1b:44:c7:6e:84:c7:e8:20: 8b:e9:b0:0b:74:8b:33:3a:bf:3f:70:d4:8d:2c:87: ae:46:69:7c:92:07:9b:9f:09:d9:3e:e4:32:48:8e: a5:a6:4a:09:08:bc:82:1d:49:f0:11:58:59:37:7f: 45:b8:ac:9c:a6:bc:bf:d3:bd:74:37:be:06:49:7e: 6d:46:75:3c:de:5f:66:b8:78:61:b9:36:02:77:40: 0b:eb:c4:34:11:cd:5b:97:0b:c2:b6:7c:48:6e:bd: 04:83:49:ea:29:3f:e7:43:d1:f8:0b:9e:41:18:67: a5:ea:aa:3b:5b:ab:18:56:20:eb:b2:6b:e7:14:b4: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:96:6F:56:BF:AF:51:35:2B:8B:0A:67:1F:C8:0B:9E:37:7D:5B:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ec1981e-e77c-4d54-99ad-9b3e3daed73c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f60:2000::/40 Signature Algorithm: sha256WithRSAEncryption d2:2d:ad:d6:8e:4d:32:7a:54:6c:78:05:25:7e:9c:17:7f:21: 47:ce:b2:0c:5c:cf:95:c2:ae:70:90:1e:45:28:7f:e5:bb:4e: ae:18:55:72:e7:6b:f8:d6:a7:59:af:05:49:b9:39:fd:99:9f: 36:53:6e:bd:22:47:2c:4b:51:68:b4:42:52:da:1b:1d:45:9c: cd:c1:c4:0d:9a:67:a7:1e:db:c3:46:80:84:ea:a3:a6:93:40: 30:ad:68:65:4e:94:2e:a0:a5:81:e1:42:10:fb:45:36:65:17: ef:40:52:76:8e:b3:a1:97:0e:da:87:87:b0:3f:59:e4:79:9f: 33:ab:81:e0:2e:e6:5f:26:6e:e3:8a:d5:3e:22:24:c6:6c:b6: 75:6b:5a:4e:40:59:1d:35:7b:f8:82:03:6f:27:78:18:2b:da: 62:05:c5:8f:8a:10:85:4f:d1:6a:96:f5:fc:bc:b6:ed:73:bd: b9:53:e8:79:43:07:24:96:15:d7:9c:56:cb:6a:ae:1c:14:f5: bb:0f:5a:eb:f1:81:d9:d7:22:82:2a:c9:c8:ff:0b:d4:6b:a5: 40:f5:5f:64:10:c0:58:8d:7c:03:5e:2c:ec:f3:d3:d5:a4:a4: d7:90:c9:84:94:40:b9:fc:c6:23:50:cd:6e:e6:be:84:fa:81: 44:00:59:4b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHTX0QWUO8+lBUOdTf8Tm2z0vgSUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI4MTUyMjAxWhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjllYTIwN2VhYTk1YTUxNDZhM2Y4ODVmNTU5M2ZiNTA0 NmFhZmM3Y2NhMDQ4ZGVhMDg5YjYyZDkwNTI4YzdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvULDhuUA6aMLJWPg+dxa/pI7vunv7rnzHUYNoXZbnqtbI jbZbebsaHhu6jpiZlr7umw8qHyzKSeGxTsBGHZpOi0XuH349UuIDDQbRzGtjb4Ha Az3xtow5iszj9rw5sHC1Mvad46qH4LkasIBPSluf0GIIa7OK40BxFoDQo8sbRMdu hMfoIIvpsAt0izM6vz9w1I0sh65GaXySB5ufCdk+5DJIjqWmSgkIvIIdSfARWFk3 f0W4rJymvL/TvXQ3vgZJfm1GdTzeX2a4eGG5NgJ3QAvrxDQRzVuXC8K2fEhuvQSD SeopP+dD0fgLnkEYZ6XqqjtbqxhWIOuya+cUtAb1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU/ZZvVr+vUTUriwpnH8gLnjd9W7gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFlYzE5ODFlLWU3N2MtNGQ1NC05OWFkLTliM2UzZGFlZDczYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9gIDANBgkqhkiG9w0BAQsFAAOCAQEA0i2t1o5NMnpUbHgFJX6cF38h R86yDFzPlcKucJAeRSh/5btOrhhVcudr+NanWa8FSbk5/ZmfNlNuvSJHLEtRaLRC UtobHUWczcHEDZpnpx7bw0aAhOqjppNAMK1oZU6ULqClgeFCEPtFNmUX70BSdo6z oZcO2oeHsD9Z5HmfM6uB4C7mXyZu44rVPiIkxmy2dWtaTkBZHTV7+IIDbyd4GCva YgXFj4oQhU/Rapb1/Ly27XO9uVPoeUMHJJYV15xWy2quHBT1uw9a6/GB2dcigirJ yP8L1GulQPVfZBDAWI18A14s7PPT1aSk15DJhJRAufzGI1DNbua+hPqBRABZSw== -----END CERTIFICATE-----Generated at Tue May 6 23:24:46 2025 by rpki-client