$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b3bdeab-6b13-4a28-80ed-0fe2a5fa4dfd.roa File: 3b3bdeab-6b13-4a28-80ed-0fe2a5fa4dfd.roa (raw, json) Hash identifier: +TSfKlxBZT+3NuFkv8Z9HQgH6IfDxT3Op9LzjUnCC1Y= Subject key identifier: 1D:87:5A:F0:76:E6:8C:99:7A:72:00:C8:54:AE:08:92:AC:D6:73:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 465C60DEF818FDED30BCB60628507CBCD047D164 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b3bdeab-6b13-4a28-80ed-0fe2a5fa4dfd.roa Signing time: Fri 28 Mar 2025 16:11:41 +0000 ROA not before: Fri 28 Mar 2025 16:11:41 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:5c:60:de:f8:18:fd:ed:30:bc:b6:06:28:50:7c:bc:d0:47:d1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 16:11:41 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:93:1f:5d:81:5f:03:4d:d0:fc:fa:4c:5d: 2b:06:1a:07:97:c5:3e:1c:d7:87:ea:bc:b2:16:08: 0d:f3:bd:c7:5e:a1:97:df:d6:7e:74:f7:10:a6:9a: 67:f1:ad:de:5b:bd:9a:8c:9e:2e:3b:b1:81:30:b2: 92:08:44:5b:3a:21:1d:17:d4:72:c6:e3:8a:13:06: 59:4b:55:73:d2:0b:7c:a7:57:ae:fb:86:6e:cf:da: 87:cf:f3:cf:0b:6b:e0:12:17:1d:92:ef:ce:b1:79: 24:93:97:ec:17:80:47:09:7a:53:c4:a7:2a:25:f1: 27:cc:46:25:28:98:59:58:50:4e:1e:ea:0a:e6:2e: 1d:8e:fa:96:af:39:9d:29:29:86:b1:e1:26:b9:a0: f5:29:23:a9:be:d9:b8:72:df:05:10:95:cb:f7:fc: b7:d7:4e:88:ac:28:52:7d:07:ae:e1:4d:b0:7c:9e: 8b:fe:3a:53:3d:23:68:cf:e3:b8:bb:01:2b:38:51: 2d:0a:f8:a6:78:2a:14:e8:8e:0c:1e:59:75:87:73: 0a:83:a0:97:c9:71:b6:2d:56:d1:91:a4:ca:8a:c4: 02:45:2a:bf:95:e2:9e:bc:a9:ca:56:65:e5:a4:4e: 42:14:11:c6:21:f0:f4:85:70:85:2e:e8:9d:db:3f: 95:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:87:5A:F0:76:E6:8C:99:7A:72:00:C8:54:AE:08:92:AC:D6:73:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b3bdeab-6b13-4a28-80ed-0fe2a5fa4dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:e000::/40 Signature Algorithm: sha256WithRSAEncryption ce:91:27:57:9b:4f:8b:b1:d0:9f:2d:6c:61:88:cc:a4:2e:5d: 43:53:b8:5a:9b:a7:0e:9f:8d:1a:9d:cf:7f:67:b5:b0:40:64: 9a:0b:ba:61:6d:ec:3f:34:1c:e2:14:d4:f6:d1:b2:d1:85:1a: 77:5a:31:59:06:00:71:8b:e8:30:48:e0:50:d2:55:1c:4d:6c: 8f:e7:68:68:95:08:0f:1f:56:81:4f:6b:04:a0:15:ac:10:64: 9a:d0:f2:33:dc:35:89:d2:71:9e:dc:4e:d3:10:62:d1:cd:cf: 4d:6b:eb:90:d9:ea:71:f5:01:5c:bc:4e:74:b0:4c:e1:0f:62: 84:32:85:1f:f8:30:b1:8d:f3:51:ac:ed:17:e4:77:8f:3a:f8: 11:28:4e:d8:48:1d:45:fa:bc:f5:98:7b:6e:f4:21:ab:c9:28: 79:3e:dd:c8:7d:95:66:f6:66:ad:d3:cf:bb:9c:8c:57:df:86: 56:1c:58:6b:0e:d4:dd:91:6a:57:17:5b:a0:9a:bd:01:2a:89: 8f:2d:8f:4d:8e:d2:1e:85:5d:de:32:3f:74:45:fe:08:d9:ab: 52:1c:d1:77:9e:8d:a5:08:23:49:a2:33:c3:8b:a9:7d:47:10: de:16:bc:91:7c:ad:8b:18:d5:bc:84:4b:d3:e0:bf:bb:59:46: 68:77:67:b6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURlxg3vgY/e0wvLYGKFB8vNBH0WQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTYxMTQxWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzRlMDQ0ODM4NGYxZDFlMjc2MzVjMjQyYzYxY2E2ZjA1 MWVjMTlhNDYzMzQwMDU3NGU5M2Q4ZDJjZWRhMGI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC03ZMfXYFfA03Q/PpMXSsGGgeXxT4c14fqvLIWCA3zvcde oZff1n509xCmmmfxrd5bvZqMni47sYEwspIIRFs6IR0X1HLG44oTBllLVXPSC3yn V677hm7P2ofP888La+ASFx2S786xeSSTl+wXgEcJelPEpyol8SfMRiUomFlYUE4e 6grmLh2O+pavOZ0pKYax4Sa5oPUpI6m+2bhy3wUQlcv3/LfXToisKFJ9B67hTbB8 nov+OlM9I2jP47i7ASs4US0K+KZ4KhTojgweWXWHcwqDoJfJcbYtVtGRpMqKxAJF Kr+V4p68qcpWZeWkTkIUEcYh8PSFcIUu6J3bP5U1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHYda8HbmjJl6cgDIVK4IkqzWc8wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiM2JkZWFiLTZiMTMtNGEyOC04MGVkLTBmZTJhNWZhNGRmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//4DANBgkqhkiG9w0BAQsFAAOCAQEAzpEnV5tPi7HQny1sYYjMpC5d Q1O4WpunDp+NGp3Pf2e1sEBkmgu6YW3sPzQc4hTU9tGy0YUad1oxWQYAcYvoMEjg UNJVHE1sj+doaJUIDx9WgU9rBKAVrBBkmtDyM9w1idJxntxO0xBi0c3PTWvrkNnq cfUBXLxOdLBM4Q9ihDKFH/gwsY3zUaztF+R3jzr4EShO2EgdRfq89Zh7bvQhq8ko eT7dyH2VZvZmrdPPu5yMV9+GVhxYaw7U3ZFqVxdboJq9ASqJjy2PTY7SHoVd3jI/ dEX+CNmrUhzRd56NpQgjSaIzw4upfUcQ3ha8kXytixjVvIRL0+C/u1lGaHdntg== -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:48 2025 by rpki-client