$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30cbe1b6-baaa-49f5-a6dd-5e4a1e626cb5.roa File: 30cbe1b6-baaa-49f5-a6dd-5e4a1e626cb5.roa (raw, json) Hash identifier: WRVA2kI+MtS0CJrrue+6Fjb+CgWFwUr/k+Dw7CoVOQI= Subject key identifier: 5E:66:73:82:1D:1B:34:E1:2D:77:E5:3A:6C:A3:90:A5:D7:86:15:5A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3691BA242476D80D2EDFA8659A7113B1C9826C9F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30cbe1b6-baaa-49f5-a6dd-5e4a1e626cb5.roa Signing time: Sat 15 Mar 2025 00:11:36 +0000 ROA not before: Sat 15 Mar 2025 00:11:36 +0000 ROA not after: Sat 19 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:91:ba:24:24:76:d8:0d:2e:df:a8:65:9a:71:13:b1:c9:82:6c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 15 00:11:36 2025 GMT Not After : Apr 19 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:55:06:dc:d2:c0:ad:b2:71:27:83:a4:9b:1d: 06:82:5e:fd:77:59:cb:cd:64:f9:af:08:1a:f4:4d: d7:32:93:43:d1:75:e2:de:47:2d:ec:e9:03:1d:a9: 89:dd:59:67:ac:2e:57:83:24:98:1d:dc:53:54:dd: 5f:5d:09:8e:b9:c4:3b:d9:81:90:fb:a2:fd:7a:ca: 65:27:78:e9:a3:75:30:46:8b:9c:fb:77:81:2f:4f: 0f:df:9f:98:66:9d:99:ab:c8:ea:fe:cf:e8:dc:e8: 14:3e:6d:cc:3d:c3:11:60:35:15:27:ab:ad:fb:8d: 83:20:6a:b2:f7:75:0e:1c:cb:6c:88:06:4e:cf:50: b1:0c:c3:4c:2a:8e:1b:de:e8:a6:24:7a:e9:99:eb: a5:12:56:ba:09:e5:74:b6:8e:3f:1c:f8:b7:38:a9: 2a:23:6f:7f:35:bc:58:bf:bb:0a:49:8e:e6:7e:fb: 95:b8:b1:64:44:d8:27:23:87:96:a9:c4:1a:17:20: 9e:c4:a0:ee:ea:3f:01:66:fd:ee:f5:cc:cf:2c:c0: 1f:4c:78:92:e1:89:c8:7e:a3:e0:9f:63:4b:bc:c0: 5a:38:fd:5c:31:5d:38:e1:61:a1:ef:18:3b:39:0a: 21:5a:6d:1f:25:e4:59:8f:da:ff:21:91:c3:4d:d0: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:66:73:82:1D:1B:34:E1:2D:77:E5:3A:6C:A3:90:A5:D7:86:15:5A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30cbe1b6-baaa-49f5-a6dd-5e4a1e626cb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01::/32 Signature Algorithm: sha256WithRSAEncryption 30:be:00:04:29:5f:9e:80:94:7a:d7:ec:50:3b:6b:c7:bc:bf: 30:68:5e:87:c3:5e:63:59:6d:99:83:44:a0:83:b7:2d:e0:e9: 41:9f:2f:4a:18:4c:b5:fc:5d:ec:e3:e3:12:2c:ff:21:b7:f1: 3c:c5:47:c9:8d:89:2f:d0:b9:10:0e:50:cf:a8:7a:cc:e6:52: 09:2d:ae:1a:36:27:ce:4b:16:6f:3a:ae:16:99:7f:f6:f7:53: ca:d1:0d:9c:15:ec:7c:0e:a4:35:f1:b2:73:79:61:45:ac:76: 9c:41:f8:8e:d9:b1:66:30:60:2e:8c:72:81:f2:63:fb:4d:aa: 87:23:6f:0c:09:2b:ca:ce:68:b8:cb:80:9c:b1:d7:1e:c0:67: 5d:43:f2:d4:e9:b7:fe:ae:5a:35:ca:78:d3:93:dc:35:38:1f: c5:5f:c0:8e:db:da:54:5c:02:50:f2:76:85:e5:ff:4a:f3:d4: 31:b4:d8:bd:2b:55:d8:40:54:d2:2f:88:e1:6b:f9:a7:81:03: 3b:51:7b:e5:b3:bc:17:bf:d7:df:19:16:21:8e:b1:26:40:82: b5:2f:69:a7:4c:46:31:1f:a0:b0:e9:11:2d:11:42:d8:7f:45: 0e:e9:74:de:d9:dd:69:08:b9:d4:58:a9:fa:b9:e0:e5:49:ae: 8d:9b:9b:30 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUNpG6JCR22A0u36hlmnETscmCbJ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE1MDAxMTM2WhcNMjUwNDE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTFkZDcyOWZiMGJhOGNkZGQxY2E3ZDgyNmI4NTQ1Mjc4 NmJhM2VlZGY2MDRjODNjOGYyYTY2ODkzYTRkMTA3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcVQbc0sCtsnEng6SbHQaCXv13WcvNZPmvCBr0Tdcyk0PR deLeRy3s6QMdqYndWWesLleDJJgd3FNU3V9dCY65xDvZgZD7ov16ymUneOmjdTBG i5z7d4EvTw/fn5hmnZmryOr+z+jc6BQ+bcw9wxFgNRUnq637jYMgarL3dQ4cy2yI Bk7PULEMw0wqjhve6KYkeumZ66USVroJ5XS2jj8c+Lc4qSojb381vFi/uwpJjuZ+ +5W4sWRE2Ccjh5apxBoXIJ7EoO7qPwFm/e71zM8swB9MeJLhich+o+CfY0u8wFo4 /VwxXTjhYaHvGDs5CiFabR8l5FmP2v8hkcNN0DFfAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUXmZzgh0bNOEtd+U6bKOQpdeGFVowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMwY2JlMWI2LWJhYWEtNDlmNS1hNmRkLTVlNGExZTYyNmNiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmAB8BMA0GCSqGSIb3DQEBCwUAA4IBAQAwvgAEKV+egJR61+xQO2vHvL8w aF6Hw15jWW2Zg0Sgg7ct4OlBny9KGEy1/F3s4+MSLP8ht/E8xUfJjYkv0LkQDlDP qHrM5lIJLa4aNifOSxZvOq4WmX/291PK0Q2cFex8DqQ18bJzeWFFrHacQfiO2bFm MGAujHKB8mP7TaqHI28MCSvKzmi4y4CcsdcewGddQ/LU6bf+rlo1ynjTk9w1OB/F X8CO29pUXAJQ8naF5f9K89QxtNi9K1XYQFTSL4jha/mngQM7UXvls7wXv9ffGRYh jrEmQIK1L2mnTEYxH6Cw6REtEULYf0UO6XTe2d1pCLnUWKn6ueDlSa6Nm5sw -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:38 2025 by rpki-client