$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa File: 5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa (raw, json) Hash identifier: PbT/xL1HrlFB7y8KFYT+ElddhMU/DQMhRmD38FAue/8= Subject key identifier: DE:CF:E4:C5:55:88:1A:F6:05:89:4A:AD:6D:FD:F5:42:19:B1:9E:17 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6B4A075331AD9DF654C033D76D0112887837A2C8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa Signing time: Tue 22 Apr 2025 17:31:53 +0000 ROA not before: Tue 22 Apr 2025 17:31:53 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f13:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4a:07:53:31:ad:9d:f6:54:c0:33:d7:6d:01:12:88:78:37:a2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:31:53 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=d312fa2be0323fa1335a3e69092c267527793cc9d0439cee79deb1b57b154f84, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:1b:ca:21:aa:e4:8f:19:df:a5:f4:22:5b: 14:4b:73:9a:9a:75:f3:40:33:25:96:49:c8:7c:50: f7:37:46:e6:f5:18:7f:71:bc:8f:e7:d6:87:19:26: 61:40:d0:cc:fd:84:8e:5e:93:4f:67:f9:0e:61:61: 70:74:7f:f4:e2:12:05:7f:ff:ed:3e:95:b0:10:c7: ce:f9:fa:19:9b:25:20:80:98:e7:96:85:07:2b:d8: 94:f2:ac:85:10:3f:aa:66:4f:2a:b9:5f:3e:de:0c: df:a3:12:17:73:c3:fc:df:20:48:ea:61:a8:0e:3b: 35:6d:20:b8:5d:5e:05:0d:3f:28:e7:3d:9c:79:76: a2:c5:69:1a:7e:5c:38:10:82:53:ee:fd:be:3f:b2: 22:3a:3f:69:9f:ac:d9:c9:27:44:52:6b:32:16:be: 87:4a:13:66:b6:8d:e0:30:09:79:47:ab:9b:d3:46: 05:8b:ac:ff:7c:04:b5:b9:4b:46:cb:dd:ef:10:dc: 46:dc:86:02:1c:06:7c:ae:37:8c:bd:57:d7:92:64: 74:4c:85:aa:c8:16:f6:96:7a:3d:3b:8a:0b:91:62: 67:05:99:aa:60:b9:2b:35:4b:a8:3f:a3:45:12:cf: 0e:80:f6:f0:b3:75:3b:97:0f:a2:46:9a:c6:cf:99: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CF:E4:C5:55:88:1A:F6:05:89:4A:AD:6D:FD:F5:42:19:B1:9E:17 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c0fa006-4f28-4bdd-acd1-957f7dd216ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f13:8000::/36 Signature Algorithm: sha256WithRSAEncryption 0c:44:fe:72:32:1d:ed:3a:3a:4d:08:d6:00:74:66:ec:b0:5c: 90:cc:35:99:22:a1:6d:21:e7:44:e2:a9:cf:f0:0f:3b:73:7f: f2:58:a6:4b:47:b0:3b:a3:c9:7d:04:7e:7a:3e:84:76:7d:55: 8e:e4:68:ec:0f:03:6e:37:28:1e:f0:b6:5c:e9:d4:f2:21:6e: 1c:37:07:af:0d:9c:1b:b3:43:7a:c7:9a:07:3d:0f:88:02:5b: 97:54:4f:44:34:6e:04:67:53:fd:18:1f:ec:d5:35:f0:47:c8: 88:63:87:9b:38:fb:c7:c3:4e:e2:89:f5:bb:bd:a9:ed:af:fb: fb:44:2a:3f:01:85:af:e2:f1:9a:8f:50:30:55:c0:fa:b1:aa: 9d:ea:e4:e9:19:da:bc:c8:5f:96:97:3d:e5:a2:d5:0e:18:ca: 16:9e:1a:b8:d6:f2:96:5b:1b:f8:24:f9:5d:8a:e4:8f:d3:94: a0:23:7a:6f:98:5f:11:33:ba:9d:22:7b:8b:13:f7:51:df:79: 85:c4:a3:d2:cf:82:b5:18:fd:44:dd:57:71:4d:1f:11:f7:32: 44:5e:cb:b2:15:63:e0:54:d2:f8:9e:4f:d2:70:d0:42:e2:49: 5e:87:48:02:26:4b:6d:de:ba:06:bf:6d:1f:c0:98:8f:b4:37: 0e:51:d0:89 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUa0oHUzGtnfZUwDPXbQESiHg3osgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTczMTUzWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzEyZmEyYmUwMzIzZmExMzM1YTNlNjkwOTJjMjY3NTI3 NzkzY2M5ZDA0MzljZWU3OWRlYjFiNTdiMTU0Zjg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxNRvKIarkjxnfpfQiWxRLc5qadfNAMyWWSch8UPc3Rub1 GH9xvI/n1ocZJmFA0Mz9hI5ek09n+Q5hYXB0f/TiEgV//+0+lbAQx875+hmbJSCA mOeWhQcr2JTyrIUQP6pmTyq5Xz7eDN+jEhdzw/zfIEjqYagOOzVtILhdXgUNPyjn PZx5dqLFaRp+XDgQglPu/b4/siI6P2mfrNnJJ0RSazIWvodKE2a2jeAwCXlHq5vT RgWLrP98BLW5S0bL3e8Q3EbchgIcBnyuN4y9V9eSZHRMharIFvaWej07iguRYmcF mapguSs1S6g/o0USzw6A9vCzdTuXD6JGmsbPmb/nAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU3s/kxVWIGvYFiUqtbf31QhmxnhcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjMGZhMDA2LTRmMjgtNGJkZC1hY2QxLTk1N2Y3ZGQyMTZmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8TgDANBgkqhkiG9w0BAQsFAAOCAQEADET+cjId7To6TQjWAHRm7LBc kMw1mSKhbSHnROKpz/APO3N/8limS0ewO6PJfQR+ej6Edn1VjuRo7A8DbjcoHvC2 XOnU8iFuHDcHrw2cG7NDeseaBz0PiAJbl1RPRDRuBGdT/Rgf7NU18EfIiGOHmzj7 x8NO4on1u72p7a/7+0QqPwGFr+Lxmo9QMFXA+rGqnerk6RnavMhflpc95aLVDhjK Fp4auNbyllsb+CT5XYrkj9OUoCN6b5hfETO6nSJ7ixP3Ud95hcSj0s+CtRj9RN1X cU0fEfcyRF7LshVj4FTS+J5P0nDQQuJJXodIAiZLbd66Br9tH8CYj7Q3DlHQiQ== -----END CERTIFICATE-----Generated at Thu May 8 12:42:46 2025 by rpki-client