$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5da3c1c2-2ef0-4ade-8296-ffac8f2e088b.roa File: 5da3c1c2-2ef0-4ade-8296-ffac8f2e088b.roa (raw, json) Hash identifier: Zjx76AaV9h9PWTQw19hZxVVzHlJqf337nFlOjXVsRxY= Subject key identifier: 1B:1D:33:C0:80:0C:66:EB:92:82:84:1D:73:05:03:CA:2D:35:06:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 01BB3325F55C0F0736FF9D5EEE1EF4A4DC6AB460 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5da3c1c2-2ef0-4ade-8296-ffac8f2e088b.roa Signing time: Sat 03 May 2025 00:11:44 +0000 ROA not before: Sat 03 May 2025 00:11:44 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffd:831b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bb:33:25:f5:5c:0f:07:36:ff:9d:5e:ee:1e:f4:a4:dc:6a:b4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:11:44 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=2cb56a38a70e66777a53ce23d44e26769f4b6a15b78c6c1d01d75e88b5ed965c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d3:5f:2a:d9:30:9d:05:ba:4e:80:32:1b:72: 3b:96:df:c8:4e:c0:cd:53:88:ee:5e:1b:f3:4f:7a: 0f:15:61:8e:68:dd:3f:e0:53:92:ff:4a:aa:1d:5d: bd:f3:f0:52:4d:1f:cd:dd:3f:77:6b:0e:c5:90:d2: 84:ca:b3:b0:07:4b:fe:c8:bc:2d:c8:24:52:45:2f: 90:4e:e6:20:66:dc:d7:be:5d:7e:9f:c0:96:20:31: c3:14:9c:64:94:72:59:12:05:00:7c:de:80:7e:ba: 69:92:27:7b:c5:6c:73:02:69:a6:fd:04:09:ab:da: 06:f8:09:7d:08:e3:77:4f:a4:4c:92:38:20:b6:0b: 23:0d:8d:5a:23:1f:c1:e5:ed:c0:60:a7:97:f8:1b: 0a:f2:41:17:c5:34:ac:f2:74:25:cf:ab:e0:60:a5: 7c:ab:58:06:36:4d:b2:fa:6d:ab:f8:ff:9a:5f:66: 56:c9:9f:00:8b:25:91:91:72:7e:be:24:58:fe:5f: 41:fb:c5:66:e3:6a:ad:f4:c3:f7:68:5e:4a:d6:ab: db:f1:57:b4:98:43:00:30:11:db:01:de:ca:a2:bc: c6:eb:ad:cd:d6:c3:7e:92:c9:2b:1f:da:c8:ca:cf: 42:db:97:98:d0:e3:23:aa:2b:8e:6b:dc:9c:2f:02: b4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1D:33:C0:80:0C:66:EB:92:82:84:1D:73:05:03:CA:2D:35:06:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5da3c1c2-2ef0-4ade-8296-ffac8f2e088b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:831b::/48 Signature Algorithm: sha256WithRSAEncryption a1:28:3a:e7:73:f8:88:bb:29:c6:16:74:09:65:18:5e:24:4d: 0c:f9:36:b8:34:b1:d3:2a:22:9b:8c:02:8b:56:2e:c7:6a:cc: d4:76:93:e2:01:4b:84:fb:8b:26:61:a2:98:b9:7c:89:89:1a: 47:ad:03:65:b8:76:96:34:ac:d5:79:08:06:a3:60:7c:48:c8: bd:ca:61:a5:72:b3:b3:b9:bb:09:d7:41:4b:4f:cc:da:97:65: c6:b1:68:e1:86:73:5a:30:ae:ad:fc:4d:68:fa:0b:58:e4:25: 2d:23:87:ae:c3:86:aa:5d:4c:d7:60:e8:cb:7a:c6:1a:f0:47: 7c:b3:38:c3:cd:0e:20:8d:ac:7d:90:a5:79:62:06:69:b8:6a: 4f:35:d5:3a:27:dd:1d:af:77:70:36:bd:c9:c1:27:4a:ca:1c: 69:08:27:27:25:52:48:b0:35:c4:68:50:ab:01:9c:51:a4:27: ab:ac:a5:fd:9a:2e:30:bc:e7:e0:9a:d9:c7:e2:75:8b:6d:88: 70:55:c9:8d:a6:77:79:5b:6f:31:6f:b7:c1:c9:82:2f:c2:33: 50:ad:88:c6:b2:7c:cb:3d:19:30:d8:46:ea:18:43:56:d2:e1: 7e:00:c4:7a:af:51:43:2c:69:22:d8:06:e6:72:2b:f6:fb:40: 5b:63:38:81 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAbszJfVcDwc2/51e7h70pNxqtGAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAxMTQ0WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2I1NmEzOGE3MGU2Njc3N2E1M2NlMjNkNDRlMjY3Njlm NGI2YTE1Yjc4YzZjMWQwMWQ3NWU4OGI1ZWQ5NjVjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZ018q2TCdBbpOgDIbcjuW38hOwM1TiO5eG/NPeg8VYY5o 3T/gU5L/SqodXb3z8FJNH83dP3drDsWQ0oTKs7AHS/7IvC3IJFJFL5BO5iBm3Ne+ XX6fwJYgMcMUnGSUclkSBQB83oB+ummSJ3vFbHMCaab9BAmr2gb4CX0I43dPpEyS OCC2CyMNjVojH8Hl7cBgp5f4GwryQRfFNKzydCXPq+BgpXyrWAY2TbL6bav4/5pf ZlbJnwCLJZGRcn6+JFj+X0H7xWbjaq30w/doXkrWq9vxV7SYQwAwEdsB3sqivMbr rc3Ww36SySsf2sjKz0Lbl5jQ4yOqK45r3JwvArTtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGx0zwIAMZuuSgoQdcwUDyi01BlgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVkYTNjMWMyLTJlZjAtNGFkZS04Mjk2LWZmYWM4ZjJlMDg4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9gxswDQYJKoZIhvcNAQELBQADggEBAKEoOudz+Ii7KcYWdAllGF4k TQz5Nrg0sdMqIpuMAotWLsdqzNR2k+IBS4T7iyZhopi5fImJGketA2W4dpY0rNV5 CAajYHxIyL3KYaVys7O5uwnXQUtPzNqXZcaxaOGGc1owrq38TWj6C1jkJS0jh67D hqpdTNdg6Mt6xhrwR3yzOMPNDiCNrH2QpXliBmm4ak811Ton3R2vd3A2vcnBJ0rK HGkIJyclUkiwNcRoUKsBnFGkJ6uspf2aLjC85+Ca2cfidYttiHBVyY2md3lbbzFv t8HJgi/CM1CtiMayfMs9GTDYRuoYQ1bS4X4AxHqvUUMsaSLYBuZyK/b7QFtjOIE= -----END CERTIFICATE-----Generated at Sun May 11 13:35:32 2025 by rpki-client