$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee948ef5-5b65-46c2-b45c-31ac0d8892e8.roa File: ee948ef5-5b65-46c2-b45c-31ac0d8892e8.roa (raw, json) Hash identifier: S5++aORMMY8RWDNeYc6bzRb7cJ+L6KG7d7jwUB1iHZk= Subject key identifier: E3:E2:47:23:F5:16:2B:62:28:71:49:71:BE:E5:CD:77:D7:CF:91:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7093AA1CFF06A6A5FD8252B6BC1C66626040ED4E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee948ef5-5b65-46c2-b45c-31ac0d8892e8.roa Signing time: Tue 22 Apr 2025 16:32:02 +0000 ROA not before: Tue 22 Apr 2025 16:32:02 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f32:7400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:93:aa:1c:ff:06:a6:a5:fd:82:52:b6:bc:1c:66:62:60:40:ed:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:32:02 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=a2cd5049a1699bef8b13472460217b9bc311a0c16d1adaefe5b62172bd9b4306, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:27:41:d9:3f:9d:da:e3:f6:74:cd:f0:52: 59:f9:b8:af:93:dc:2d:cb:ef:8f:a6:23:94:3b:fe: 87:0f:bc:57:7f:6d:4e:df:8e:10:f7:17:f6:d0:43: 27:58:0a:d4:3e:5a:a7:0e:66:d9:8b:1a:d0:27:85: 2f:ef:e0:77:1b:7d:8a:74:cb:94:1b:0d:5b:ae:bd: d5:c3:10:39:6f:29:af:87:07:83:ec:55:49:de:42: ee:a0:d1:8e:98:7d:f5:26:b4:c8:ab:e9:44:26:04: cc:45:0a:1a:f5:f9:34:90:5d:a2:24:67:c4:31:77: da:8a:7c:98:b2:d8:5d:5b:b8:c8:19:c4:61:51:e3: 50:d1:15:0b:25:49:7f:91:a2:0f:39:b9:dd:e3:18: 38:b3:be:08:07:f4:fd:f0:4b:b0:e1:32:37:60:ee: 20:ef:d9:74:89:e3:02:71:66:e3:f3:b6:2f:38:cb: 8c:c8:01:c0:8b:b5:f9:36:5c:29:76:11:ff:b6:37: a1:47:57:e8:c6:85:e5:ae:85:55:b0:e0:42:63:3f: 51:be:b5:be:6e:12:65:29:b7:fc:70:f4:9c:21:58: 4e:f3:39:70:38:1f:f0:d4:dd:f0:55:a9:2b:5d:fe: c0:ab:0f:3d:bf:8d:62:ed:0b:5f:11:0c:31:fc:39: 2e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E2:47:23:F5:16:2B:62:28:71:49:71:BE:E5:CD:77:D7:CF:91:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee948ef5-5b65-46c2-b45c-31ac0d8892e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32:7400::/40 Signature Algorithm: sha256WithRSAEncryption 7b:66:d8:73:97:bf:a0:58:56:4f:a8:d7:86:3d:58:6f:21:8a: 05:c5:4f:38:77:bf:31:b8:9f:5d:1e:95:de:3a:9c:75:1d:a6: ac:31:21:e3:54:38:12:15:ae:af:ee:5e:d4:9d:ed:d6:2a:20: e8:2f:dc:99:df:b9:93:02:ed:02:a6:52:b8:9f:86:91:b3:9d: f4:cb:5b:e4:38:f8:44:89:ab:0a:d6:5d:f7:63:6a:59:5b:3e: 0b:cf:f2:2c:17:22:c4:c0:84:3d:40:1a:ef:2e:22:ae:c3:63: 6f:b2:f2:a7:04:30:b6:4c:6a:39:c1:1a:bc:fe:4b:57:bd:3a: c4:ff:90:a7:1e:a4:21:9f:14:fb:d4:71:81:a1:63:0a:b9:43: de:d8:dd:bb:13:7e:54:a1:24:0e:c9:ba:17:76:14:af:9c:40: 7c:89:00:02:ab:d2:08:e3:00:9a:b5:68:65:98:19:c7:57:a4: d0:7e:8a:1d:57:34:eb:f4:bf:83:2e:99:96:9b:2f:bb:6c:8f: 31:7d:c6:b7:8e:a2:ce:44:43:05:34:af:c1:94:39:e3:68:2d: fc:63:76:3a:31:91:42:dc:7e:ba:0a:16:92:21:55:0c:9d:85: e6:8d:a3:59:83:11:62:37:78:ae:22:33:c5:6a:99:ba:a1:fa: d2:ce:a7:f0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcJOqHP8GpqX9glK2vBxmYmBA7U4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYzMjAyWhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmNkNTA0OWExNjk5YmVmOGIxMzQ3MjQ2MDIxN2I5YmMz MTFhMGMxNmQxYWRhZWZlNWI2MjE3MmJkOWI0MzA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwHSdB2T+d2uP2dM3wUln5uK+T3C3L74+mI5Q7/ocPvFd/ bU7fjhD3F/bQQydYCtQ+WqcOZtmLGtAnhS/v4HcbfYp0y5QbDVuuvdXDEDlvKa+H B4PsVUneQu6g0Y6YffUmtMir6UQmBMxFChr1+TSQXaIkZ8Qxd9qKfJiy2F1buMgZ xGFR41DRFQslSX+Rog85ud3jGDizvggH9P3wS7DhMjdg7iDv2XSJ4wJxZuPzti84 y4zIAcCLtfk2XCl2Ef+2N6FHV+jGheWuhVWw4EJjP1G+tb5uEmUpt/xw9JwhWE7z OXA4H/DU3fBVqStd/sCrDz2/jWLtC18RDDH8OS4pAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4+JHI/UWK2IocUlxvuXNd9fPkZcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VlOTQ4ZWY1LTViNjUtNDZjMi1iNDVjLTMxYWMwZDg4OTJlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8ydDANBgkqhkiG9w0BAQsFAAOCAQEAe2bYc5e/oFhWT6jXhj1YbyGK BcVPOHe/MbifXR6V3jqcdR2mrDEh41Q4EhWur+5e1J3t1iog6C/cmd+5kwLtAqZS uJ+GkbOd9Mtb5Dj4RImrCtZd92NqWVs+C8/yLBcixMCEPUAa7y4irsNjb7LypwQw tkxqOcEavP5LV706xP+Qpx6kIZ8U+9RxgaFjCrlD3tjduxN+VKEkDsm6F3YUr5xA fIkAAqvSCOMAmrVoZZgZx1ek0H6KHVc06/S/gy6Zlpsvu2yPMX3Gt46izkRDBTSv wZQ542gt/GN2OjGRQtx+ugoWkiFVDJ2F5o2jWYMRYjd4riIzxWqZuqH60s6n8A== -----END CERTIFICATE-----Generated at Mon May 5 15:44:44 2025 by rpki-client