$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c14dd31-a30f-47b4-9f87-f554bd7c779c.roa File: 0c14dd31-a30f-47b4-9f87-f554bd7c779c.roa (raw, json) Hash identifier: /FajULIbY3t9aYNKD1+uftjZYjCU54XjKMDepFKboq0= Subject key identifier: 9A:F4:73:D2:FD:D2:F4:4C:59:E7:C4:F4:90:BD:FC:FA:FD:5F:06:CD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3C45EE561A32411B2E442358A7BAE5424E12CAF1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c14dd31-a30f-47b4-9f87-f554bd7c779c.roa Signing time: Fri 28 Mar 2025 17:01:54 +0000 ROA not before: Fri 28 Mar 2025 17:01:54 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2b:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:45:ee:56:1a:32:41:1b:2e:44:23:58:a7:ba:e5:42:4e:12:ca:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 17:01:54 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:24:bb:53:61:5a:4b:dd:8d:cc:2f:8e:72:ce: 1e:e5:fe:cc:8f:74:66:20:fd:c7:92:de:c5:6a:50: 26:65:6f:97:ae:f0:2a:a7:63:5d:9a:58:e4:d8:ac: 86:b9:82:94:5e:9f:da:a5:72:10:a5:0d:70:3a:74: 0b:22:40:07:4b:4f:ce:89:69:f0:93:9f:c6:0c:e3: 51:2d:c1:c5:a1:0f:5b:e2:44:ab:de:ed:21:7a:ab: f1:2f:64:15:be:22:b6:0f:db:d7:92:96:63:e7:29: 2f:c7:0e:08:36:d8:1c:a0:1b:bc:57:72:ef:32:4a: 12:55:6e:c4:73:d3:aa:b3:fe:e9:99:3b:38:69:10: 12:27:66:7b:f9:0c:69:b2:49:bb:e9:f2:a8:d9:64: 1e:dc:d2:a6:7c:08:76:d6:3b:90:fa:a1:fe:8c:ff: be:47:96:ba:4d:40:21:5a:ca:f7:ef:26:ca:65:0b: 6c:1e:cb:dd:21:26:b1:c4:49:47:f5:6c:bb:99:8b: 8a:a7:d8:a2:c8:3a:42:3a:ce:c5:be:69:26:cf:ed: 69:43:19:6f:b2:5e:97:1a:0f:9b:c3:af:34:b0:95: f2:5f:c4:24:81:e5:70:a3:80:f3:08:a8:7f:bd:01: d1:2c:9e:89:da:ea:87:0e:58:b8:bb:ae:11:e3:fb: 59:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F4:73:D2:FD:D2:F4:4C:59:E7:C4:F4:90:BD:FC:FA:FD:5F:06:CD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c14dd31-a30f-47b4-9f87-f554bd7c779c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2b:4000::/36 Signature Algorithm: sha256WithRSAEncryption b2:62:00:b3:81:ee:ea:cd:a9:23:1c:ab:b6:6b:1e:8a:29:a8: 22:0b:01:18:19:96:a0:a7:db:d9:cb:0a:fc:38:9e:0d:71:5f: c3:52:97:5f:64:0a:b8:4a:f6:f7:8b:08:48:cc:13:2f:eb:45: de:16:50:e9:84:39:68:60:62:5e:f4:cb:8f:37:bf:f5:f0:d5: 65:de:46:34:2b:c2:5f:6e:12:e6:3b:82:f5:6f:ca:c8:5e:a3: 0b:35:d6:47:b1:40:22:30:4c:e5:da:de:85:31:d6:62:70:35: ca:72:47:8b:7f:20:ad:52:aa:67:9e:61:b2:5d:86:8c:9b:e6: 26:df:d3:a0:f9:5d:1f:33:f1:ba:bb:70:0f:51:ca:98:38:18: 70:d6:5f:2a:d9:2e:c0:b8:23:c1:be:ac:02:de:fe:6c:4b:5b: ba:8d:60:49:23:a3:0f:d6:af:d7:4f:b3:d9:c7:73:84:ff:58: 4e:f7:00:ba:e5:0c:f1:35:19:fa:e7:5a:4b:2e:8b:1c:c1:1a: 31:a9:b7:cd:54:dc:62:b2:1e:f6:7a:77:fc:45:34:56:dc:e7: ab:a1:ec:52:d4:44:d3:4c:6c:25:71:1b:82:bc:92:5a:bd:90: 19:9b:aa:2a:54:b2:ff:74:24:87:12:7d:e8:75:84:0f:e5:31: 10:b3:9a:2a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPEXuVhoyQRsuRCNYp7rlQk4SyvEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTcwMTU0WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjJlYzI3YjRmNTgyNjMxZjRkOTJlY2FjMjMwOTk2ZTQ5 NjBiNzZlYjU0ZWIzZjRiYWVmYzBkNDY3OGZjNWU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtJLtTYVpL3Y3ML45yzh7l/syPdGYg/ceS3sVqUCZlb5eu 8CqnY12aWOTYrIa5gpRen9qlchClDXA6dAsiQAdLT86JafCTn8YM41EtwcWhD1vi RKve7SF6q/EvZBW+IrYP29eSlmPnKS/HDgg22BygG7xXcu8yShJVbsRz06qz/umZ OzhpEBInZnv5DGmySbvp8qjZZB7c0qZ8CHbWO5D6of6M/75HlrpNQCFayvfvJspl C2wey90hJrHESUf1bLuZi4qn2KLIOkI6zsW+aSbP7WlDGW+yXpcaD5vDrzSwlfJf xCSB5XCjgPMIqH+9AdEsnona6ocOWLi7rhHj+1lRAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUmvRz0v3S9ExZ58T0kL38+v1fBs0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBjMTRkZDMxLWEzMGYtNDdiNC05Zjg3LWY1NTRiZDdjNzc5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8rQDANBgkqhkiG9w0BAQsFAAOCAQEAsmIAs4Hu6s2pIxyrtmseiimo IgsBGBmWoKfb2csK/DieDXFfw1KXX2QKuEr294sISMwTL+tF3hZQ6YQ5aGBiXvTL jze/9fDVZd5GNCvCX24S5juC9W/KyF6jCzXWR7FAIjBM5drehTHWYnA1ynJHi38g rVKqZ55hsl2GjJvmJt/ToPldHzPxurtwD1HKmDgYcNZfKtkuwLgjwb6sAt7+bEtb uo1gSSOjD9av10+z2cdzhP9YTvcAuuUM8TUZ+udaSy6LHMEaMam3zVTcYrIe9np3 /EU0Vtznq6HsUtRE00xsJXEbgrySWr2QGZuqKlSy/3QkhxJ96HWED+UxELOaKg== -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:33 2025 by rpki-client