$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511727d3-c9b5-4a0f-a0e9-617dc62a1cf1.roa File: 511727d3-c9b5-4a0f-a0e9-617dc62a1cf1.roa (raw, json) Hash identifier: ZJyvST+YZXoA/0PYJQQFpiLxQGzMgMbuPxWf4EJHpVU= Subject key identifier: 67:25:BF:81:F3:5D:90:EB:88:59:5E:AA:5A:C0:39:C5:55:32:65:B5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17F82E25A2280068EAB679FF36C910A66D826CF2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511727d3-c9b5-4a0f-a0e9-617dc62a1cf1.roa Signing time: Tue 22 Apr 2025 15:02:26 +0000 ROA not before: Tue 22 Apr 2025 15:02:26 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:8100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f8:2e:25:a2:28:00:68:ea:b6:79:ff:36:c9:10:a6:6d:82:6c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:02:26 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=a73a2a6461074da144b968135c359c5303829eb2c01e34bcdd62655c1010f8a3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:41:f0:43:0f:71:23:29:e4:f2:41:3b:27: 0f:ab:6d:2d:92:9c:a4:97:7c:5f:f8:55:1f:26:24: e7:7f:67:de:07:bb:9e:40:97:44:38:3a:b9:56:60: 2e:98:2d:53:a2:02:3b:f9:65:eb:3a:1c:2f:e3:72: 26:ef:72:25:28:2e:d5:62:78:a4:3d:45:58:4d:02: 87:aa:fc:80:a6:94:e1:53:94:2c:81:a1:d8:06:92: a1:a8:f0:1c:75:95:9b:98:ab:d9:29:3a:40:46:15: 1f:e4:0a:3e:f8:65:57:38:c7:73:39:45:8b:76:1a: 5d:99:98:d9:70:25:27:67:db:76:51:86:07:6d:75: 7a:8f:0e:36:33:66:f4:87:ac:d1:65:50:8f:40:ea: e4:7e:3e:40:71:9a:33:5c:b5:88:14:36:e5:ba:f8: 14:6e:8c:4d:86:2f:71:b7:a0:80:9f:92:bb:6c:a0: 15:48:e7:9d:15:6b:e4:3c:0f:db:d1:d4:33:ac:e8: 0a:d1:da:aa:f6:6e:23:c2:86:11:2a:6d:45:bd:de: d9:8e:e2:06:fe:ba:9b:0b:a1:29:9c:60:fa:61:16: 31:2b:76:7e:4e:0d:09:d4:61:c0:4f:9a:b9:3e:91: 33:e9:aa:d1:4b:1e:1c:f6:2f:c1:a0:42:5e:b3:6f: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:25:BF:81:F3:5D:90:EB:88:59:5E:AA:5A:C0:39:C5:55:32:65:B5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511727d3-c9b5-4a0f-a0e9-617dc62a1cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8100::/48 Signature Algorithm: sha256WithRSAEncryption 3c:22:80:71:71:89:f3:cf:a2:e3:94:6c:a8:7e:d9:36:ea:d9: 6a:27:24:64:25:86:f8:14:8d:3c:39:05:54:d8:3e:10:e4:2e: 1c:66:47:9b:97:5a:ae:1b:e2:c3:9d:19:8a:71:f3:9b:4d:ba: bc:ad:b0:c7:c7:f2:03:20:9c:97:03:2f:4c:57:b0:ee:33:f2: 6e:6b:30:6c:b4:cf:64:14:9f:99:61:31:ff:e3:2c:59:a2:70: b6:c9:cb:fb:57:09:33:6c:bd:01:5f:63:62:73:e2:59:aa:f6: 5f:57:27:9c:fe:61:eb:fe:9b:c8:71:ca:3e:da:c0:13:8c:72: 16:ce:9b:9f:9b:85:ed:87:7f:9d:ed:cb:b6:05:c6:47:03:e3: 05:72:2a:18:00:8b:e4:1f:ed:e7:e6:5f:d9:87:fe:49:b5:74: 59:a0:7e:e6:2f:b0:86:e6:32:92:e5:d4:00:66:e1:a8:89:4d: de:68:37:2e:42:11:82:1c:9b:24:76:63:eb:a1:d7:91:e9:d2: 84:c9:1f:df:11:ea:0b:57:b1:48:e0:86:37:88:e2:38:04:76: 55:58:b7:39:d0:30:b2:19:e8:fe:23:47:39:6b:aa:34:72:96: c0:2c:ea:32:83:f7:68:f8:90:56:ae:e0:0c:87:3c:cc:5a:6c: 9e:e8:71:1a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF/guJaIoAGjqtnn/NskQpm2CbPIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUwMjI2WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzNhMmE2NDYxMDc0ZGExNDRiOTY4MTM1YzM1OWM1MzAz ODI5ZWIyYzAxZTM0YmNkZDYyNjU1YzEwMTBmOGEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAVUHwQw9xIynk8kE7Jw+rbS2SnKSXfF/4VR8mJOd/Z94H u55Al0Q4OrlWYC6YLVOiAjv5Zes6HC/jcibvciUoLtVieKQ9RVhNAoeq/ICmlOFT lCyBodgGkqGo8Bx1lZuYq9kpOkBGFR/kCj74ZVc4x3M5RYt2Gl2ZmNlwJSdn23ZR hgdtdXqPDjYzZvSHrNFlUI9A6uR+PkBxmjNctYgUNuW6+BRujE2GL3G3oICfkrts oBVI550Va+Q8D9vR1DOs6ArR2qr2biPChhEqbUW93tmO4gb+upsLoSmcYPphFjEr dn5ODQnUYcBPmrk+kTPpqtFLHhz2L8GgQl6zb0KvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZyW/gfNdkOuIWV6qWsA5xVUyZbUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUxMTcyN2QzLWM5YjUtNGEwZi1hMGU5LTYxN2RjNjJhMWNmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgQAwDQYJKoZIhvcNAQELBQADggEBADwigHFxifPPouOUbKh+2Tbq 2WonJGQlhvgUjTw5BVTYPhDkLhxmR5uXWq4b4sOdGYpx85tNurytsMfH8gMgnJcD L0xXsO4z8m5rMGy0z2QUn5lhMf/jLFmicLbJy/tXCTNsvQFfY2Jz4lmq9l9XJ5z+ Yev+m8hxyj7awBOMchbOm5+bhe2Hf53ty7YFxkcD4wVyKhgAi+Qf7efmX9mH/km1 dFmgfuYvsIbmMpLl1ABm4aiJTd5oNy5CEYIcmyR2Y+uh15Hp0oTJH98R6gtXsUjg hjeI4jgEdlVYtznQMLIZ6P4jRzlrqjRylsAs6jKD92j4kFau4AyHPMxabJ7ocRo= -----END CERTIFICATE-----Generated at Mon May 5 10:12:17 2025 by rpki-client