$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/390a9ddd-ca1d-4e54-a3ea-f0be32b32d11.roa File: 390a9ddd-ca1d-4e54-a3ea-f0be32b32d11.roa (raw, json) Hash identifier: XgU7SqlvkHl7noW50Znf47vLU2v4N29+tFmuKjBnkRU= Subject key identifier: 60:B8:27:89:D6:3C:BB:51:6B:5D:F7:2B:20:F9:DA:1E:11:E5:9E:93 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A5D52E5DC99DDB6B2D58BC26FF29B4B04991AF9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/390a9ddd-ca1d-4e54-a3ea-f0be32b32d11.roa Signing time: Fri 28 Mar 2025 00:51:49 +0000 ROA not before: Fri 28 Mar 2025 00:51:49 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:8120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5d:52:e5:dc:99:dd:b6:b2:d5:8b:c2:6f:f2:9b:4b:04:99:1a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 00:51:49 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:65:b9:e6:30:5f:d6:87:3b:9b:46:d1:e6:9a: 5b:9f:43:fc:be:3b:d3:da:ba:99:c8:7f:2a:76:7b: 39:04:9a:85:8e:e0:37:bd:b5:aa:38:57:71:c0:63: 34:08:ac:ed:0d:34:31:04:8f:90:e4:a7:42:9d:5c: 24:e4:8c:33:49:99:98:30:c4:77:0d:97:41:25:2a: 25:6b:72:a8:fa:15:23:f5:49:1e:70:51:ef:89:f7: 81:21:d7:bf:29:f7:f1:77:21:1d:f4:e0:91:6f:48: 7d:30:fe:83:83:3f:8b:31:30:88:3c:80:21:37:6f: 71:c5:96:43:23:35:fd:7e:4b:2f:52:b7:c7:b5:4a: 0b:a2:75:e3:0d:d9:7d:86:3e:09:b0:06:aa:be:2e: db:d2:4d:82:7b:1c:9a:63:1d:ef:87:2c:b1:89:f3: ee:65:f1:72:5d:43:3c:10:3a:6e:01:47:bf:7a:c4: ac:f1:6b:4a:d8:7b:eb:a4:87:66:95:67:0c:81:9f: 8c:4d:a5:4c:89:8b:d6:9b:e6:3c:3a:59:1f:40:ee: 94:06:82:2d:62:8e:06:e0:06:68:4e:10:d0:7a:2f: fa:28:79:b5:ba:9a:93:b2:c0:5c:c5:64:39:eb:69: 8b:48:3f:8f:f7:70:16:8b:f2:98:78:50:5f:e2:c6: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B8:27:89:D6:3C:BB:51:6B:5D:F7:2B:20:F9:DA:1E:11:E5:9E:93 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/390a9ddd-ca1d-4e54-a3ea-f0be32b32d11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8120::/48 Signature Algorithm: sha256WithRSAEncryption 1f:7c:d0:b6:9e:2e:0c:03:8d:15:b7:0b:df:6b:cb:99:68:c9: 58:4a:08:e7:a5:64:17:ad:06:bc:49:90:6b:59:09:f2:ae:67: 83:cd:f2:ea:f2:8d:b1:0f:a5:f3:37:c8:00:b2:26:35:25:95: 09:7b:ec:4d:6b:ce:9e:fd:8f:57:20:6f:87:4f:04:7d:12:75: 9b:84:cc:0e:98:9e:cd:50:b2:bc:7c:05:9c:9a:a9:d8:0c:c4: d0:91:0b:3a:80:f5:50:a5:1d:01:48:ce:46:34:ba:a6:b5:3a: a5:34:53:18:1d:dc:6c:89:db:79:b4:17:ff:a5:bd:e5:b3:10: 7f:64:89:7f:f1:49:27:d3:32:07:c4:da:29:ec:a5:b6:d3:a3: 7a:5a:e2:64:ba:23:d5:5a:bb:65:12:14:c8:4b:3e:13:a4:6a: c8:aa:82:a4:ee:8c:e1:8a:78:94:c9:14:b6:95:70:10:31:42: 49:f8:b5:ef:b1:60:76:b2:05:ec:58:be:ee:f8:40:3d:ed:e0: 16:de:6a:22:c7:0d:93:64:6c:55:6a:10:c7:85:b4:d6:f1:22: d1:d3:0e:8c:71:f6:00:bf:04:fa:9d:99:62:df:df:97:71:13: c7:4c:46:b5:4a:40:97:e2:48:c7:96:dd:50:6a:f4:b5:a5:8d: c0:2b:00:5b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKl1S5dyZ3bay1YvCb/KbSwSZGvkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDA1MTQ5WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDk3Y2QyN2EyNjZhNTBkZmYwNmY5YjkwNGI1NjUyZTI5 N2MyMDdkMjMwYWM3MDFkNTVhYWNlOWFkOWU4MDU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOZbnmMF/WhzubRtHmmlufQ/y+O9PaupnIfyp2ezkEmoWO 4De9tao4V3HAYzQIrO0NNDEEj5Dkp0KdXCTkjDNJmZgwxHcNl0ElKiVrcqj6FSP1 SR5wUe+J94Eh178p9/F3IR304JFvSH0w/oODP4sxMIg8gCE3b3HFlkMjNf1+Sy9S t8e1SguideMN2X2GPgmwBqq+LtvSTYJ7HJpjHe+HLLGJ8+5l8XJdQzwQOm4BR796 xKzxa0rYe+ukh2aVZwyBn4xNpUyJi9ab5jw6WR9A7pQGgi1ijgbgBmhOENB6L/oo ebW6mpOywFzFZDnraYtIP4/3cBaL8ph4UF/ixqzbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYLgnidY8u1FrXfcrIPnaHhHlnpMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM5MGE5ZGRkLWNhMWQtNGU1NC1hM2VhLWYwYmUzMmIzMmQxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgSAwDQYJKoZIhvcNAQELBQADggEBAB980LaeLgwDjRW3C99ry5lo yVhKCOelZBetBrxJkGtZCfKuZ4PN8uryjbEPpfM3yACyJjUllQl77E1rzp79j1cg b4dPBH0SdZuEzA6Yns1Qsrx8BZyaqdgMxNCRCzqA9VClHQFIzkY0uqa1OqU0Uxgd 3GyJ23m0F/+lveWzEH9kiX/xSSfTMgfE2inspbbTo3pa4mS6I9Vau2USFMhLPhOk asiqgqTujOGKeJTJFLaVcBAxQkn4te+xYHayBexYvu74QD3t4BbeaiLHDZNkbFVq EMeFtNbxItHTDoxx9gC/BPqdmWLf35dxE8dMRrVKQJfiSMeW3VBq9LWljcArAFs= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:28 2025 by rpki-client