$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78055da-d21e-4985-bee2-fe5b70f3c493.roa File: f78055da-d21e-4985-bee2-fe5b70f3c493.roa (raw, json) Hash identifier: 3AF+jC8CWefL1RMwl9KNVQVYhHEM1MFwkNy+h9C1P68= Subject key identifier: F9:8B:29:26:38:07:E3:44:DD:C6:0D:30:BF:2A:03:61:FB:FB:B6:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2EAF219CFD1E4041ACFFBBB321FD2994F0F92023 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78055da-d21e-4985-bee2-fe5b70f3c493.roa Signing time: Tue 22 Apr 2025 17:20:19 +0000 ROA not before: Tue 22 Apr 2025 17:20:19 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f14:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:af:21:9c:fd:1e:40:41:ac:ff:bb:b3:21:fd:29:94:f0:f9:20:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 17:20:19 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=8e38664e5658302c0e5d7a11444a3d76a56390f0a9be18ed38b14a6457ac5557, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:7b:ec:e8:22:65:98:f8:88:31:39:44:d9: 09:79:e8:e9:08:21:0e:da:f6:d6:99:8e:98:84:db: d7:42:e7:ca:1d:d8:22:8f:09:ae:a4:fd:99:91:ed: 74:fe:70:0e:93:e3:4b:fd:27:60:37:e5:f2:0e:46: dc:44:46:09:b9:84:98:8f:b4:7d:af:99:fd:b6:ff: ce:13:b5:e8:66:5b:fc:89:ac:fe:93:c3:3e:f3:74: 19:6e:d7:71:b8:25:05:7b:8c:cc:61:85:26:cd:58: 5f:be:2e:c2:88:6e:46:82:a7:51:c9:f4:6c:f7:c9: 03:9f:33:cd:c7:d9:24:6d:04:d7:43:e0:c9:a1:71: 79:d4:d0:c1:3d:a6:fa:96:0f:c3:cb:11:33:bd:5d: 6b:0a:b6:1f:b1:b1:63:78:57:b4:28:ca:c3:e7:5c: 18:34:b0:4c:d5:8b:fb:c5:49:9d:49:13:b1:e2:3c: f2:db:da:1a:14:b9:1d:25:af:4c:95:bc:c2:5f:9a: 85:d9:4e:59:fe:66:3d:af:da:85:47:24:08:5d:af: 7a:04:5a:23:31:0c:ca:b7:4e:6a:bf:05:9b:87:b0: b9:88:70:0e:14:0a:17:7c:b6:08:9a:13:38:cc:5d: a4:12:4c:d3:24:8b:f2:47:e7:af:3f:5e:cc:07:af: 3c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8B:29:26:38:07:E3:44:DD:C6:0D:30:BF:2A:03:61:FB:FB:B6:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78055da-d21e-4985-bee2-fe5b70f3c493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14:4000::/37 Signature Algorithm: sha256WithRSAEncryption 0d:ef:8d:f1:64:65:b0:4c:a7:5d:36:5e:ad:14:1f:92:bf:5a: 0c:ef:5d:31:c4:b6:b0:4b:bc:7f:72:94:70:46:4b:87:d0:22: f8:e8:da:dd:03:78:5b:a3:ce:de:dd:cf:74:8b:0e:ee:b2:7b: 2e:db:82:d7:6b:f5:2b:93:a8:8d:a7:d5:c8:9d:b4:76:38:3f: 6f:81:da:da:d3:4f:75:75:d6:03:26:d0:77:98:68:65:2f:a9: b7:84:96:0b:d4:70:bc:58:cd:57:a9:52:01:cb:1f:0b:a9:53: f9:83:4f:61:6d:47:1d:91:e0:fe:39:14:b3:5a:63:5d:24:d9: ea:3b:39:9d:a6:f0:29:a6:2c:86:bb:9d:f1:82:3a:ce:26:8e: 0d:d0:02:38:61:d7:01:c0:fe:0b:1a:6e:37:0e:cd:54:ee:35: b5:d5:df:13:fd:9a:08:50:9c:43:70:f8:b5:3b:a5:0c:7e:95: 41:46:bf:5b:7c:fe:1d:03:6c:cf:7f:32:8c:2e:c2:c2:5a:6e: 67:7d:30:d2:d4:3b:16:e7:20:21:b5:72:f5:44:c8:41:4f:70: 8e:cd:65:72:a2:d6:08:ea:a0:5d:5a:ef:4c:9b:99:c7:37:fa: fc:28:99:e2:51:fc:1d:61:2a:e0:fa:f5:e3:3c:e1:9c:c8:b0: 9b:a7:aa:77 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULq8hnP0eQEGs/7uzIf0plPD5ICMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTcyMDE5WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTM4NjY0ZTU2NTgzMDJjMGU1ZDdhMTE0NDRhM2Q3NmE1 NjM5MGYwYTliZTE4ZWQzOGIxNGE2NDU3YWM1NTU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjTHvs6CJlmPiIMTlE2Ql56OkIIQ7a9taZjpiE29dC58od 2CKPCa6k/ZmR7XT+cA6T40v9J2A35fIORtxERgm5hJiPtH2vmf22/84TtehmW/yJ rP6Twz7zdBlu13G4JQV7jMxhhSbNWF++LsKIbkaCp1HJ9Gz3yQOfM83H2SRtBNdD 4MmhcXnU0ME9pvqWD8PLETO9XWsKth+xsWN4V7QoysPnXBg0sEzVi/vFSZ1JE7Hi PPLb2hoUuR0lr0yVvMJfmoXZTln+Zj2v2oVHJAhdr3oEWiMxDMq3Tmq/BZuHsLmI cA4UChd8tgiaEzjMXaQSTNMki/JH568/XswHrzxrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+YspJjgH40Tdxg0wvyoDYfv7tgAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3ODA1NWRhLWQyMWUtNDk4NS1iZWUyLWZlNWI3MGYzYzQ5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8UQDANBgkqhkiG9w0BAQsFAAOCAQEADe+N8WRlsEynXTZerRQfkr9a DO9dMcS2sEu8f3KUcEZLh9Ai+Oja3QN4W6PO3t3PdIsO7rJ7LtuC12v1K5OojafV yJ20djg/b4Ha2tNPdXXWAybQd5hoZS+pt4SWC9RwvFjNV6lSAcsfC6lT+YNPYW1H HZHg/jkUs1pjXSTZ6js5nabwKaYshrud8YI6ziaODdACOGHXAcD+CxpuNw7NVO41 tdXfE/2aCFCcQ3D4tTulDH6VQUa/W3z+HQNsz38yjC7CwlpuZ30w0tQ7FucgIbVy 9UTIQU9wjs1lcqLWCOqgXVrvTJuZxzf6/CiZ4lH8HWEq4Pr14zzhnMiwm6eqdw== -----END CERTIFICATE-----Generated at Tue May 13 14:15:05 2025 by rpki-client