$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa File: 5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa (raw, json) Hash identifier: uMBTUnf6Aprq8pFYvLEr+EG0/d7j4SwkRAQb9/VxzxE= Subject key identifier: 7C:69:F9:F5:F7:23:99:72:F2:67:32:1B:E2:C5:95:75:B2:DB:38:E7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4767EF82145D60E7CEC3E3F4C6D3392DBD999B5F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa Signing time: Tue 29 Apr 2025 00:11:08 +0000 ROA not before: Tue 29 Apr 2025 00:11:08 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:84af::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:67:ef:82:14:5d:60:e7:ce:c3:e3:f4:c6:d3:39:2d:bd:99:9b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 29 00:11:08 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=c31ab529bc67730e7c97426445a373291bdf7045fd049fbc41dc9efccee36865, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:f6:db:63:fd:46:97:df:51:11:35:e2:ad: 20:6c:0d:2d:a4:a2:d4:c1:d5:df:33:2d:39:d1:44: 51:e0:10:f6:9a:e4:de:cc:24:4a:4b:2c:d6:8b:a8: 4a:64:02:32:f6:fd:0f:a9:58:f4:59:5a:c5:9d:de: a0:bf:0a:f7:26:ac:16:42:4f:43:a2:d6:88:46:b4: ee:2c:e0:f9:29:41:26:57:d6:61:f2:98:8d:40:ea: 3e:1a:74:b8:5b:f0:23:ae:2a:b1:d5:96:23:a6:87: 4b:98:9f:43:ef:f0:51:ef:8b:81:b5:6c:fa:a8:a0: 15:5d:0b:88:cb:7e:59:68:2b:c4:39:40:ae:f8:4d: 2f:57:10:ed:21:8e:26:44:08:f8:8e:75:22:50:8d: f3:2a:47:f3:26:41:48:85:cb:ad:3c:63:61:57:1e: 51:c4:f7:9e:02:09:97:57:84:3b:fa:f2:5d:9a:26: 17:c8:3a:7d:4b:03:2a:98:32:85:5f:52:ac:2c:63: f7:bc:ed:4e:af:79:01:4f:65:85:86:84:4a:56:24: 99:a0:7b:14:23:fb:14:b3:07:2b:03:99:a2:25:d2: db:c7:c8:5d:31:bd:3a:04:29:56:aa:9f:10:19:e3: 2d:df:07:6a:af:fe:4c:b8:71:f6:43:dd:fb:33:a3: ce:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:69:F9:F5:F7:23:99:72:F2:67:32:1B:E2:C5:95:75:B2:DB:38:E7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d72dbbe-2b88-48a1-81f5-b55082aa8945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:84af::/48 Signature Algorithm: sha256WithRSAEncryption 70:fe:bd:bc:7c:b1:42:52:e7:d8:fc:6d:e7:87:4c:92:d9:13: 96:ed:4b:67:f8:42:62:ca:c2:51:61:1f:19:b0:86:be:03:d5: 95:27:84:38:3f:f9:3c:6e:95:24:33:e8:26:b4:6c:2d:ad:70: b4:24:c5:1b:bd:e0:04:03:15:fc:24:6a:04:e4:6e:32:b6:95: 3c:f4:00:d2:bc:d9:42:0b:ea:36:4c:66:fc:3f:66:a8:87:13: 71:bc:dc:02:57:4e:97:59:85:f4:8c:55:87:bd:0e:04:30:e0: b9:d9:f1:c0:e1:07:af:75:67:9e:39:14:17:d8:3f:80:4d:d4: 67:ba:a6:6d:99:93:43:8b:e1:6f:a2:6c:14:05:1a:72:03:39: 87:c3:73:3e:3b:be:cd:cf:5b:00:f1:73:ac:09:d9:c7:4b:41: 20:51:6a:84:19:f5:1a:0b:44:e9:d8:82:1d:bb:14:5a:a9:6d: d0:a5:06:18:78:9c:fd:4e:67:9e:03:1b:23:63:04:1c:81:97: 7b:b4:f0:5d:3e:9f:d6:a7:3d:81:15:5c:29:3c:5b:77:64:5c: d8:bd:98:88:5e:fd:0c:4c:6e:d7:8b:bb:7e:ac:d5:8f:a9:84: 42:6a:44:1f:81:a3:c5:30:82:0d:fb:3f:17:4d:af:26:76:49: 7c:3c:99:0b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUR2fvghRdYOfOw+P0xtM5Lb2Zm18wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDI5MDAxMTA4WhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzFhYjUyOWJjNjc3MzBlN2M5NzQyNjQ0NWEzNzMyOTFi ZGY3MDQ1ZmQwNDlmYmM0MWRjOWVmY2NlZTM2ODY1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEsfbbY/1Gl99RETXirSBsDS2kotTB1d8zLTnRRFHgEPaa 5N7MJEpLLNaLqEpkAjL2/Q+pWPRZWsWd3qC/CvcmrBZCT0Oi1ohGtO4s4PkpQSZX 1mHymI1A6j4adLhb8COuKrHVliOmh0uYn0Pv8FHvi4G1bPqooBVdC4jLflloK8Q5 QK74TS9XEO0hjiZECPiOdSJQjfMqR/MmQUiFy608Y2FXHlHE954CCZdXhDv68l2a JhfIOn1LAyqYMoVfUqwsY/e87U6veQFPZYWGhEpWJJmgexQj+xSzBysDmaIl0tvH yF0xvToEKVaqnxAZ4y3fB2qv/ky4cfZD3fszo86bAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfGn59fcjmXLyZzIb4sWVdbLbOOcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkNzJkYmJlLTJiODgtNDhhMS04MWY1LWI1NTA4MmFhODk0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9hK8wDQYJKoZIhvcNAQELBQADggEBAHD+vbx8sUJS59j8beeHTJLZ E5btS2f4QmLKwlFhHxmwhr4D1ZUnhDg/+TxulSQz6Ca0bC2tcLQkxRu94AQDFfwk agTkbjK2lTz0ANK82UIL6jZMZvw/ZqiHE3G83AJXTpdZhfSMVYe9DgQw4LnZ8cDh B691Z545FBfYP4BN1Ge6pm2Zk0OL4W+ibBQFGnIDOYfDcz47vs3PWwDxc6wJ2cdL QSBRaoQZ9RoLROnYgh27FFqpbdClBhh4nP1OZ54DGyNjBByBl3u08F0+n9anPYEV XCk8W3dkXNi9mIhe/QxMbteLu36s1Y+phEJqRB+Bo8Uwgg37PxdNryZ2SXw8mQs= -----END CERTIFICATE-----Generated at Mon May 12 12:48:23 2025 by rpki-client