$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa File: 7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa (raw, json) Hash identifier: x4CBxTaqEVuuMxhJbabSUcPlUEaaeTdCtvuoX9ATVCg= Subject key identifier: AB:13:13:AF:0B:AE:3B:59:CB:57:83:C4:5E:31:9C:4F:58:FD:8D:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45D993C1816FE6976D4389595A4DA24A0DD3BDCC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa Signing time: Sat 03 May 2025 00:20:14 +0000 ROA not before: Sat 03 May 2025 00:20:14 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d9:93:c1:81:6f:e6:97:6d:43:89:59:5a:4d:a2:4a:0d:d3:bd:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:20:14 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=e620006ec77ad3c5bd8c0121a5875eea20943217ada99fc7779884a051571213, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:f8:77:48:ee:48:57:9e:d1:cf:72:e0:64: ac:e5:07:eb:fa:57:45:4b:4e:e0:90:e5:2a:f8:09: 8d:20:1d:34:51:1a:62:b6:b8:8b:a9:3e:84:f0:42: 2f:60:9b:f5:fc:d8:31:51:9d:b1:03:69:2d:c8:6a: 5e:b2:83:42:90:e1:22:c6:2f:13:6a:aa:85:97:90: e9:d3:79:06:40:24:b8:31:8d:35:2b:5e:ed:0e:d2: b2:db:86:ac:c7:83:97:82:ee:73:45:e2:27:15:dd: b9:f5:78:1d:ed:41:de:b1:ec:64:d3:f8:ae:d3:b0: e3:23:ac:49:79:2e:30:c1:b2:50:88:a5:5e:ad:4b: 79:1b:88:66:f7:7b:14:d2:22:08:e6:40:cc:e3:03: f5:36:1d:89:11:f0:9e:94:58:b4:ff:72:ff:77:d5: c0:cc:0f:5c:97:b8:80:74:9f:74:e1:39:31:79:cb: c5:fc:b1:d9:93:91:30:83:ca:d5:54:cc:c5:ed:8f: 05:0f:6c:20:f5:f0:47:1e:3b:3b:3e:20:ef:91:71: 28:be:90:ec:07:3c:29:58:29:0a:f2:e4:2a:c6:34: e3:1b:6c:83:bd:31:03:39:93:4f:9f:08:e3:11:06: 19:45:f7:c6:09:99:a3:24:19:22:12:d9:ea:b9:9b: b8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:13:13:AF:0B:AE:3B:59:CB:57:83:C4:5E:31:9C:4F:58:FD:8D:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:c000::/40 Signature Algorithm: sha256WithRSAEncryption cf:a9:59:5d:68:16:c8:7f:ec:6d:bd:c7:ea:10:41:3d:a0:dc: fa:c5:f5:e7:21:91:89:c0:2e:b4:ee:b7:d1:df:3e:07:27:0d: 20:01:56:e7:e6:ae:db:f9:f8:0a:3d:f4:59:c5:37:d4:48:98: c6:1a:9b:fd:bc:26:3b:7d:d0:55:05:3b:d2:97:85:d9:88:13: 1e:15:8e:af:2c:e6:8c:13:c4:b4:b2:dc:6e:5f:5f:6c:5a:ed: c9:2c:cf:ff:bc:94:67:fc:1f:e4:fd:63:8e:58:39:96:21:5a: 0f:2e:0d:3c:ea:3b:62:f0:a5:33:6f:16:26:53:79:82:42:15: 29:c7:6a:ce:fa:ad:1a:7e:80:6b:f1:18:03:d5:2e:2f:3f:88: cc:cd:87:c0:a3:51:98:70:b5:3a:1a:14:f1:6f:16:8d:bd:5c: ea:ba:1d:d0:1d:60:75:5a:86:e0:4d:8b:4d:6c:a4:2b:d9:ef: bc:ad:4c:cf:01:20:48:32:61:dd:1a:38:48:67:c0:25:0e:4b: 6f:51:68:73:13:7a:dd:fd:1e:2c:8e:87:fe:c5:98:8f:e5:d4: a6:24:9c:25:56:62:63:90:33:d1:46:f3:a7:09:06:b8:05:f3: 78:a9:fb:1f:fe:d4:79:44:66:b7:fe:58:99:46:1b:93:f7:25: 4d:e9:c8:a5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURdmTwYFv5pdtQ4lZWk2iSg3TvcwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTAzMDAyMDE0WhcNMjUwNjA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjIwMDA2ZWM3N2FkM2M1YmQ4YzAxMjFhNTg3NWVlYTIw OTQzMjE3YWRhOTlmYzc3Nzk4ODRhMDUxNTcxMjEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFU/h3SO5IV57Rz3LgZKzlB+v6V0VLTuCQ5Sr4CY0gHTRR GmK2uIupPoTwQi9gm/X82DFRnbEDaS3Ial6yg0KQ4SLGLxNqqoWXkOnTeQZAJLgx jTUrXu0O0rLbhqzHg5eC7nNF4icV3bn1eB3tQd6x7GTT+K7TsOMjrEl5LjDBslCI pV6tS3kbiGb3exTSIgjmQMzjA/U2HYkR8J6UWLT/cv931cDMD1yXuIB0n3ThOTF5 y8X8sdmTkTCDytVUzMXtjwUPbCD18EceOzs+IO+RcSi+kOwHPClYKQry5CrGNOMb bIO9MQM5k0+fCOMRBhlF98YJmaMkGSIS2eq5m7izAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUqxMTrwuuO1nLV4PEXjGcT1j9jaowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc0ODhkMzZjLTExYTEtNGI3Zi1hZDllLTcxYWY2YjFmYThiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/xwDANBgkqhkiG9w0BAQsFAAOCAQEAz6lZXWgWyH/sbb3H6hBBPaDc +sX15yGRicAutO630d8+BycNIAFW5+au2/n4Cj30WcU31EiYxhqb/bwmO33QVQU7 0peF2YgTHhWOryzmjBPEtLLcbl9fbFrtySzP/7yUZ/wf5P1jjlg5liFaDy4NPOo7 YvClM28WJlN5gkIVKcdqzvqtGn6Aa/EYA9UuLz+IzM2HwKNRmHC1OhoU8W8Wjb1c 6rod0B1gdVqG4E2LTWykK9nvvK1MzwEgSDJh3Ro4SGfAJQ5Lb1FocxN63f0eLI6H /sWYj+XUpiScJVZiY5Az0UbzpwkGuAXzeKn7H/7UeURmt/5YmUYbk/clTenIpQ== -----END CERTIFICATE-----Generated at Tue May 6 02:24:13 2025 by rpki-client