$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3179ea53-c6f4-43ee-ab46-9a09b3dcb2a2.roa File: 3179ea53-c6f4-43ee-ab46-9a09b3dcb2a2.roa (raw, json) Hash identifier: CVz68+NnjME7zvj8AfY2LgobpdugQkP1B5wVxY/x1i0= Subject key identifier: 86:16:B3:5C:2C:30:97:55:2D:48:58:59:E9:78:FE:AC:B0:74:2A:DE Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 021BD3C43E92F303AAADA58CE63276C49C64AE89 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3179ea53-c6f4-43ee-ab46-9a09b3dcb2a2.roa Signing time: Fri 28 Mar 2025 00:41:08 +0000 ROA not before: Fri 28 Mar 2025 00:41:08 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:4000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:1b:d3:c4:3e:92:f3:03:aa:ad:a5:8c:e6:32:76:c4:9c:64:ae:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 00:41:08 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d5:b9:5b:44:54:09:16:76:ff:72:21:37:6d: b3:96:b3:1e:d0:9e:f6:a8:ce:e6:72:6f:55:84:31: 36:b8:a2:fe:8b:d5:60:4a:3c:f5:92:69:a6:cf:93: 97:69:e7:9b:c0:9f:a2:51:b6:d1:96:9b:1c:bd:e1: 17:64:7f:47:7d:fd:68:88:75:66:1f:5c:6b:9b:0a: c9:75:d3:9b:c6:d6:06:51:ea:b1:f3:99:2e:65:0d: 2e:c9:eb:bf:59:a1:18:c3:ee:8a:64:8a:22:2b:20: 85:b7:98:c9:5f:9c:63:d6:89:08:ba:90:d8:73:54: 64:fc:42:5b:6f:6d:44:d2:df:a2:d6:2f:e4:3c:71: 70:a9:44:cf:8a:fa:95:99:cd:8f:14:ae:cf:ae:87: 8f:1d:4f:84:b9:16:fe:64:68:af:20:a0:d3:fb:06: 89:8c:16:07:6f:e8:ea:89:c8:1c:9b:90:82:c9:25: b1:f5:47:09:55:f3:d1:2e:65:ae:e7:db:83:0e:d3: 49:99:2b:05:6c:3c:fb:71:c7:32:33:6e:78:18:a5: 87:de:a6:6a:2d:42:f8:b9:8b:82:21:96:a3:b4:87: 56:8d:2e:19:6b:6b:53:33:a8:1c:23:4d:df:5e:ef: b8:c6:da:e6:a2:49:67:cf:f2:95:77:ca:8a:ae:8a: ec:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:16:B3:5C:2C:30:97:55:2D:48:58:59:E9:78:FE:AC:B0:74:2A:DE X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3179ea53-c6f4-43ee-ab46-9a09b3dcb2a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:4000::/39 Signature Algorithm: sha256WithRSAEncryption c5:84:6a:5b:d7:e1:25:28:5e:a3:f3:d4:8d:78:2d:42:83:1b: 89:da:e3:34:b2:9b:6b:e7:c5:5e:9a:c9:a6:25:76:f6:f0:b7: 8a:8c:66:7b:3d:01:57:4d:af:5a:96:52:e4:1e:2f:f1:ab:61: c4:7b:97:8f:d9:0d:0c:50:ae:2d:9b:b3:6e:9d:fa:bf:23:d2: a2:63:78:35:99:d9:58:bf:18:24:17:62:a8:f4:ec:bb:03:8c: 72:73:83:03:fe:2c:3d:1b:a8:72:39:62:6f:d8:16:e7:3b:fc: 48:58:3c:6a:9c:3e:ad:c8:b0:22:a2:cb:60:14:44:27:47:bb: ef:ce:b2:dd:9a:55:0b:89:f6:26:9b:17:3c:d4:3f:69:df:2a: 35:f7:25:df:8f:63:fb:83:19:5a:45:39:fe:aa:fa:0b:d1:5f: 2e:7b:9b:d1:59:21:5e:f7:b2:89:0e:5a:fa:3b:e7:82:7f:db: c7:62:1a:78:78:08:65:0b:63:b3:05:08:97:7e:2a:f0:08:95: c9:68:c7:75:bd:b4:13:95:e8:39:e0:8b:f2:ac:bb:69:c0:41: 02:2f:68:f8:2f:38:d4:32:40:15:a8:51:e7:92:1e:53:48:1e: 0e:df:71:36:ee:15:7f:b7:3c:7f:1a:6e:16:99:c0:2f:bb:c2: 19:f4:4b:2b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUAhvTxD6S8wOqraWM5jJ2xJxkrokwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDA0MTA4WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOGFmOTVjMDBiMGMwYTIwYmY2YjU3MjRjNzFhMWM5MTgy YjI3YTNjNDFiMmVmODZlZTIxOTc4Mzk2ZGRlY2YwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt1blbRFQJFnb/ciE3bbOWsx7QnvaozuZyb1WEMTa4ov6L 1WBKPPWSaabPk5dp55vAn6JRttGWmxy94Rdkf0d9/WiIdWYfXGubCsl105vG1gZR 6rHzmS5lDS7J679ZoRjD7opkiiIrIIW3mMlfnGPWiQi6kNhzVGT8QltvbUTS36LW L+Q8cXCpRM+K+pWZzY8Urs+uh48dT4S5Fv5kaK8goNP7BomMFgdv6OqJyBybkILJ JbH1RwlV89EuZa7n24MO00mZKwVsPPtxxzIzbngYpYfepmotQvi5i4IhlqO0h1aN Lhlra1MzqBwjTd9e77jG2uaiSWfP8pV3yoquiuwZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUhhazXCwwl1UtSFhZ6Xj+rLB0Kt4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMxNzllYTUzLWM2ZjQtNDNlZS1hYjQ2LTlhMDliM2RjYjJhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB9hQDANBgkqhkiG9w0BAQsFAAOCAQEAxYRqW9fhJSheo/PUjXgtQoMb idrjNLKba+fFXprJpiV29vC3ioxmez0BV02vWpZS5B4v8athxHuXj9kNDFCuLZuz bp36vyPSomN4NZnZWL8YJBdiqPTsuwOMcnODA/4sPRuocjlib9gW5zv8SFg8apw+ rciwIqLLYBREJ0e7786y3ZpVC4n2JpsXPNQ/ad8qNfcl349j+4MZWkU5/qr6C9Ff Lnub0VkhXveyiQ5a+jvngn/bx2IaeHgIZQtjswUIl34q8AiVyWjHdb20E5XoOeCL 8qy7acBBAi9o+C841DJAFahR55IeU0geDt9xNu4Vf7c8fxpuFpnAL7vCGfRLKw== -----END CERTIFICATE-----Generated at Sat Apr 5 11:18:05 2025 by rpki-client