$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60be19fe-5979-4151-b9b1-6650248a42f7.roa File: 60be19fe-5979-4151-b9b1-6650248a42f7.roa (raw, json) Hash identifier: 2JGL/iaGT7Ua9EBTi158OIavxDkmVrJ22PTgo9fmfRc= Subject key identifier: C8:0A:3D:75:C2:93:CC:70:2A:9C:39:9D:2D:94:7D:71:59:A0:0C:0D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33E30E4C2CC2599954656815C64DBCA0EC46CF3C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60be19fe-5979-4151-b9b1-6650248a42f7.roa Signing time: Tue 22 Apr 2025 15:21:31 +0000 ROA not before: Tue 22 Apr 2025 15:21:31 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:2080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e3:0e:4c:2c:c2:59:99:54:65:68:15:c6:4d:bc:a0:ec:46:cf:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:21:31 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=4027c281a32c379ab854fdaa05653fdab3e0fee2f4aaaa49731205b82d136d39, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:05:87:94:44:31:32:8d:e0:0c:ec:fc:1f: 2f:f6:8f:65:c7:be:37:ba:99:9c:cb:0d:45:7b:cf: ec:5f:55:53:65:96:45:d6:53:3e:c0:35:05:bb:99: c8:d8:c8:ff:61:64:b1:a4:56:f4:6b:55:27:41:a6: 60:be:48:ce:2d:71:99:2c:8d:69:d1:b1:48:c4:b7: 08:53:e8:24:fb:59:ab:a6:2a:ed:53:a1:10:ca:69: 22:38:c7:c0:81:19:4f:b2:7c:5b:a0:ab:40:35:25: 23:9d:ed:31:a6:21:9a:8a:5f:fe:cd:f0:43:a0:fa: f0:be:12:5d:37:14:06:b8:a3:e9:13:aa:6f:cd:2f: 2f:5b:a4:9e:db:d1:60:d8:9a:65:d3:b2:33:7c:be: 11:aa:3c:46:d0:9d:80:4e:f9:1c:ae:0b:e7:2b:a3: 3a:32:38:09:d7:9e:e0:a2:65:c0:63:83:41:48:aa: 57:ce:0e:57:f3:7d:2b:8f:da:85:e6:99:5f:44:57: 2f:ef:ce:88:33:72:57:5e:e0:95:22:23:ee:a2:76: 15:2c:9c:7d:39:7b:25:9a:85:e7:52:ce:99:59:74: 12:66:34:2f:99:22:b1:4b:0e:82:a2:2c:d4:e3:8a: 55:32:ee:72:ac:2d:f3:a8:be:90:93:72:26:e6:d6: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0A:3D:75:C2:93:CC:70:2A:9C:39:9D:2D:94:7D:71:59:A0:0C:0D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60be19fe-5979-4151-b9b1-6650248a42f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:2080::/46 Signature Algorithm: sha256WithRSAEncryption 60:e5:eb:41:ca:c6:97:8e:e4:17:62:f6:a3:ef:5b:41:82:0d: 95:41:49:34:f2:88:64:14:92:73:aa:cb:b9:3d:f1:7f:d5:eb: 99:a3:90:44:70:65:8a:84:e7:6d:4a:2a:03:da:25:77:15:80: 7d:c0:fe:30:cf:81:4e:c7:43:07:49:66:2e:ad:1d:c0:5e:5c: f9:ef:2b:95:33:f0:cc:d5:f8:33:1b:ce:8f:37:cb:19:83:60: 9d:fe:b2:d5:cf:87:e7:32:59:f3:e5:90:0d:cd:c4:0d:d7:84: 3e:07:b6:7b:6c:1b:42:1f:7b:3d:bc:d0:56:4b:8f:a5:f6:9d: 9f:5a:bc:76:05:15:9d:92:fb:aa:cc:f5:a2:f2:21:45:93:a3: d6:13:51:e1:e3:c6:25:c0:e7:09:10:ce:ba:46:eb:2d:e0:bc: 97:8e:bf:e5:54:64:8c:4e:bd:bb:51:5a:5d:6c:bf:81:68:6b: fa:b0:cb:39:a8:56:8f:c2:16:3b:0d:00:0b:c6:d7:2b:c9:41: bf:30:2f:aa:97:ff:22:59:13:2e:2f:a4:2c:49:57:75:c9:e2: 2a:31:58:ff:0f:90:71:66:f0:ff:62:73:9c:de:7c:e5:89:fc: de:a8:e9:6e:70:ad:bb:cf:ca:10:81:f2:51:69:92:8f:49:1c: 22:0d:72:3b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM+MOTCzCWZlUZWgVxk28oOxGzzwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTUyMTMxWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDI3YzI4MWEzMmMzNzlhYjg1NGZkYWEwNTY1M2ZkYWIz ZTBmZWUyZjRhYWFhNDk3MzEyMDViODJkMTM2ZDM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0nQWHlEQxMo3gDOz8Hy/2j2XHvje6mZzLDUV7z+xfVVNl lkXWUz7ANQW7mcjYyP9hZLGkVvRrVSdBpmC+SM4tcZksjWnRsUjEtwhT6CT7Waum Ku1ToRDKaSI4x8CBGU+yfFugq0A1JSOd7TGmIZqKX/7N8EOg+vC+El03FAa4o+kT qm/NLy9bpJ7b0WDYmmXTsjN8vhGqPEbQnYBO+RyuC+crozoyOAnXnuCiZcBjg0FI qlfODlfzfSuP2oXmmV9EVy/vzogzclde4JUiI+6idhUsnH05eyWahedSzplZdBJm NC+ZIrFLDoKiLNTjilUy7nKsLfOovpCTcibm1uX5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyAo9dcKTzHAqnDmdLZR9cVmgDA0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYwYmUxOWZlLTU5NzktNDE1MS1iOWIxLTY2NTAyNDhhNDJmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pIIAwDQYJKoZIhvcNAQELBQADggEBAGDl60HKxpeO5Bdi9qPvW0GC DZVBSTTyiGQUknOqy7k98X/V65mjkERwZYqE521KKgPaJXcVgH3A/jDPgU7HQwdJ Zi6tHcBeXPnvK5Uz8MzV+DMbzo83yxmDYJ3+stXPh+cyWfPlkA3NxA3XhD4Htnts G0Ifez280FZLj6X2nZ9avHYFFZ2S+6rM9aLyIUWTo9YTUeHjxiXA5wkQzrpG6y3g vJeOv+VUZIxOvbtRWl1sv4Foa/qwyzmoVo/CFjsNAAvG1yvJQb8wL6qX/yJZEy4v pCxJV3XJ4ioxWP8PkHFm8P9ic5zefOWJ/N6o6W5wrbvPyhCB8lFpko9JHCINcjs= -----END CERTIFICATE-----Generated at Sat May 10 13:28:15 2025 by rpki-client