$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94209e4d-7b05-4729-b164-804591eea8be.roa File: 94209e4d-7b05-4729-b164-804591eea8be.roa (raw, json) Hash identifier: zzrjmRTQpoyoOzRMRg6KymMjpfD3/VJn70DORyUrD8Q= Subject key identifier: 48:A6:DA:E4:FA:89:25:47:A3:E3:24:C9:C5:E2:17:27:09:B5:C4:19 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6253DBF5E6CA5AC9C1D3DFD3EEDC7FCCBBA88313 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94209e4d-7b05-4729-b164-804591eea8be.roa Signing time: Tue 22 Apr 2025 16:21:49 +0000 ROA not before: Tue 22 Apr 2025 16:21:49 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:53:db:f5:e6:ca:5a:c9:c1:d3:df:d3:ee:dc:7f:cc:bb:a8:83:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:21:49 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=d3027985108aef65c4d31b23c2d9192c042344e367bff514538eb4f0e3885d34, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:55:24:b9:8f:13:75:9e:45:7e:55:29:95: ca:23:6e:d9:76:b7:27:db:81:da:1e:d3:01:02:ce: e0:0b:2b:65:a9:89:91:d8:6d:a5:0e:c2:d9:ac:7b: 94:60:06:1e:52:20:d0:93:0e:80:bf:99:51:fe:fc: 05:f7:18:89:b6:cf:e3:c5:35:ee:f5:ee:63:32:b7: ad:af:85:4f:40:67:85:b4:bd:30:1c:14:53:35:b5: 96:ed:86:32:0b:72:ce:98:ef:49:38:58:20:0e:83: 60:35:85:70:ca:02:28:83:e1:67:96:9e:2c:3e:54: 41:5a:c9:da:07:97:9d:64:58:7f:1c:53:7d:32:94: f6:dd:c4:b0:ff:3f:9a:80:34:8f:fc:b7:dd:98:e5: 62:00:e8:57:b5:6f:60:90:71:0e:ed:0d:cb:5e:d9: d5:01:e7:b8:e6:9e:c9:d9:76:f6:2a:45:a2:14:b0: 82:cd:e0:d5:aa:18:88:fb:a5:c0:f0:cf:0f:e3:06: 1a:97:31:b3:45:29:96:18:2a:c8:5c:2e:e7:6d:ab: 70:61:5b:4c:7f:bf:bb:b8:62:3e:2d:ab:fd:ca:6a: f9:3b:e9:9b:b7:cf:c4:e4:17:cc:51:9b:73:3a:d9: 82:61:6b:c4:30:99:2c:76:41:92:cc:95:34:14:93: 7f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A6:DA:E4:FA:89:25:47:A3:E3:24:C9:C5:E2:17:27:09:B5:C4:19 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94209e4d-7b05-4729-b164-804591eea8be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:3400::/40 Signature Algorithm: sha256WithRSAEncryption 6d:b9:30:f0:06:89:13:09:97:7b:c6:50:dd:cd:73:19:4b:7b: 19:51:c6:3b:77:b9:57:5e:58:2e:9f:20:80:a6:86:51:e6:0c: 9a:1f:40:9f:ae:78:fc:01:ef:fb:4b:0c:7c:e1:ec:e1:a0:7f: 6b:5e:ba:5f:30:28:9b:6f:32:99:77:52:59:16:d6:d2:f7:a4: 3a:38:d4:ad:a6:de:08:bf:5c:38:e6:18:da:85:ca:42:f7:be: 38:e8:e8:f7:e8:62:c5:8b:18:d7:6c:e4:46:d2:c2:3d:a4:02: ae:ec:f7:ca:62:6a:47:10:d5:4d:7b:58:02:eb:a2:f7:c4:8b: f6:84:0b:43:69:92:84:7d:74:e9:25:cd:78:cb:94:58:df:9e: 7c:f3:7c:a6:af:23:7d:02:47:81:62:a5:06:94:d4:23:e0:e9: 1d:5f:7c:d5:35:02:11:15:68:88:ee:b6:26:cc:1e:0e:59:89: 88:a2:a2:fa:4d:5d:41:32:3e:f8:25:36:ea:98:02:c5:9d:87: ff:56:34:69:ca:93:e4:ef:9f:86:05:a0:87:d9:d7:23:1f:c8: 61:ab:88:5e:1e:de:21:7d:92:4e:81:82:d9:b4:dc:3f:80:fa: b5:8b:ac:da:9a:e0:cb:38:9d:93:b3:d5:f1:1a:1a:f7:2b:67: ec:87:b9:62 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYlPb9ebKWsnB09/T7tx/zLuogxMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYyMTQ5WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzAyNzk4NTEwOGFlZjY1YzRkMzFiMjNjMmQ5MTkyYzA0 MjM0NGUzNjdiZmY1MTQ1MzhlYjRmMGUzODg1ZDM0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrzVUkuY8TdZ5FflUplcojbtl2tyfbgdoe0wECzuALK2Wp iZHYbaUOwtmse5RgBh5SINCTDoC/mVH+/AX3GIm2z+PFNe717mMyt62vhU9AZ4W0 vTAcFFM1tZbthjILcs6Y70k4WCAOg2A1hXDKAiiD4WeWniw+VEFaydoHl51kWH8c U30ylPbdxLD/P5qANI/8t92Y5WIA6Fe1b2CQcQ7tDcte2dUB57jmnsnZdvYqRaIU sILN4NWqGIj7pcDwzw/jBhqXMbNFKZYYKshcLudtq3BhW0x/v7u4Yj4tq/3Kavk7 6Zu3z8TkF8xRm3M62YJha8QwmSx2QZLMlTQUk38pAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSKba5PqJJUej4yTJxeIXJwm1xBkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzk0MjA5ZTRkLTdiMDUtNDcyOS1iMTY0LTgwNDU5MWVlYThiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4NDANBgkqhkiG9w0BAQsFAAOCAQEAbbkw8AaJEwmXe8ZQ3c1zGUt7 GVHGO3e5V15YLp8ggKaGUeYMmh9An654/AHv+0sMfOHs4aB/a166XzAom28ymXdS WRbW0vekOjjUrabeCL9cOOYY2oXKQve+OOjo9+hixYsY12zkRtLCPaQCruz3ymJq RxDVTXtYAuui98SL9oQLQ2mShH106SXNeMuUWN+efPN8pq8jfQJHgWKlBpTUI+Dp HV981TUCERVoiO62JsweDlmJiKKi+k1dQTI++CU26pgCxZ2H/1Y0acqT5O+fhgWg h9nXIx/IYauIXh7eIX2SToGC2bTcP4D6tYus2prgyzidk7PV8Roa9ytn7Ie5Yg== -----END CERTIFICATE-----Generated at Sat May 10 09:47:23 2025 by rpki-client