$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cb9a48f-17e2-4fa1-8ff6-b5f80c8a8908.roa File: 5cb9a48f-17e2-4fa1-8ff6-b5f80c8a8908.roa (raw, json) Hash identifier: d6+kFLl+3CdfO2A3A7SA6iGwkJw6p/4Rz93mX8G1498= Subject key identifier: 33:66:71:45:89:DC:83:4A:15:70:CD:15:81:3A:F4:51:52:B4:B4:5D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F66A12F460A4D6D233900B7C65D2CB31708B9FC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cb9a48f-17e2-4fa1-8ff6-b5f80c8a8908.roa Signing time: Wed 02 Apr 2025 00:12:12 +0000 ROA not before: Wed 02 Apr 2025 00:12:12 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fef:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:66:a1:2f:46:0a:4d:6d:23:39:00:b7:c6:5d:2c:b3:17:08:b9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 2 00:12:12 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:25:0e:98:ad:b4:7f:f0:63:01:e0:5c:2e:de: e4:32:a2:c6:cb:68:95:f2:3b:bb:d7:5d:1f:43:ae: c8:eb:db:6e:28:ad:0e:6f:54:fa:d9:3d:a3:c7:68: 4a:25:9a:16:8d:b2:10:c2:3c:5d:c2:82:0b:b9:d0: fb:01:7f:52:49:ef:8c:fe:08:b1:19:e2:84:9b:95: 22:3f:d5:90:8b:c5:d3:7c:9e:96:55:65:20:0e:0c: 78:0d:5b:9a:90:dc:dc:6b:4e:4d:c7:92:6d:7e:e4: 11:ea:11:1c:b3:a0:a6:33:45:4a:3e:36:b4:e1:97: ef:65:f0:a1:f4:32:ca:be:6c:51:4a:da:fa:6b:3b: 02:df:f7:4e:9c:44:57:7e:9f:83:2f:04:2a:28:5b: 2d:d0:9d:2d:50:7f:00:32:5d:65:b6:18:e3:ba:50: a7:85:37:f3:c1:8e:09:9c:c4:27:d3:8b:8f:fd:f5: cb:e1:14:e7:09:29:5e:31:84:2d:f5:21:b8:0a:1c: 4f:59:13:98:6a:02:11:c6:f4:8b:78:36:78:60:09: 02:76:71:9d:ed:76:85:ad:dd:3e:f5:24:2c:31:dd: f1:a0:0d:87:bf:b2:7a:0c:01:b1:c3:79:f8:92:cd: 9e:d6:67:25:e4:b0:15:6b:96:93:a4:50:8c:ea:20: 81:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:66:71:45:89:DC:83:4A:15:70:CD:15:81:3A:F4:51:52:B4:B4:5D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5cb9a48f-17e2-4fa1-8ff6-b5f80c8a8908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:c000::/40 Signature Algorithm: sha256WithRSAEncryption 51:98:82:06:aa:ca:c7:ae:f5:39:33:55:74:62:2d:09:d4:8a: 75:40:0d:00:ad:c4:47:a0:f1:de:d4:79:8b:f7:fa:81:a4:46: 4d:7e:d1:e2:5b:7d:42:81:1c:40:0c:38:f5:c3:8b:9e:d7:b1: 5a:e4:b7:fa:4c:6d:85:35:ee:1f:a8:d3:ce:0b:a7:5a:4b:22: ef:5e:3c:b2:1a:ec:fb:71:f2:a3:17:3a:e0:c1:06:4f:d8:ef: 25:37:ea:1f:03:49:28:37:3d:27:ac:9a:25:94:9e:a4:be:aa: 02:77:ff:ee:e8:62:10:74:bc:b2:f8:a4:88:86:ff:12:f1:09: 8e:f4:f2:17:b5:f9:17:0b:d3:7e:61:f7:8e:85:a2:99:93:29: 63:ec:76:bb:7e:a1:1c:dc:11:43:d6:99:74:7e:19:60:99:67: 2a:5d:7d:3f:78:8c:1e:8e:c7:79:b5:df:c7:84:e6:a2:a0:f8: 99:6c:22:d9:44:f4:7e:59:3e:00:1b:3b:f1:ac:ee:82:d2:02: ae:24:20:94:37:75:0d:a7:ae:94:40:d6:ca:e1:00:94:8c:37: de:6c:5e:a7:28:5a:d6:ff:ee:87:74:36:48:2b:0b:45:aa:57: fb:5f:a2:dc:7a:ea:0f:27:87:18:c2:bc:0e:84:a9:3a:ac:8d: ec:9d:20:78 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUf2ahL0YKTW0jOQC3xl0ssxcIufwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDAyMDAxMjEyWhcNMjUwNTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDQzMTRkMmYyOWNlOWZjNWFiYmFjYWNmYzE1Y2FkYzQ4 MzM0YzNkMGIwOWM2NjhjNjExNWVhOTBjNGE2Mjk0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlJQ6YrbR/8GMB4Fwu3uQyosbLaJXyO7vXXR9Drsjr224o rQ5vVPrZPaPHaEolmhaNshDCPF3Cggu50PsBf1JJ74z+CLEZ4oSblSI/1ZCLxdN8 npZVZSAODHgNW5qQ3NxrTk3Hkm1+5BHqERyzoKYzRUo+NrThl+9l8KH0Msq+bFFK 2vprOwLf906cRFd+n4MvBCooWy3QnS1QfwAyXWW2GOO6UKeFN/PBjgmcxCfTi4/9 9cvhFOcJKV4xhC31IbgKHE9ZE5hqAhHG9It4NnhgCQJ2cZ3tdoWt3T71JCwx3fGg DYe/snoMAbHDefiSzZ7WZyXksBVrlpOkUIzqIIEvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUM2ZxRYncg0oVcM0VgTr0UVK0tF0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjYjlhNDhmLTE3ZTItNGZhMS04ZmY2LWI1ZjgwYzhhODkwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vwDANBgkqhkiG9w0BAQsFAAOCAQEAUZiCBqrKx671OTNVdGItCdSK dUANAK3ER6Dx3tR5i/f6gaRGTX7R4lt9QoEcQAw49cOLntexWuS3+kxthTXuH6jT zgunWksi7148shrs+3Hyoxc64MEGT9jvJTfqHwNJKDc9J6yaJZSepL6qAnf/7uhi EHS8svikiIb/EvEJjvTyF7X5FwvTfmH3joWimZMpY+x2u36hHNwRQ9aZdH4ZYJln Kl19P3iMHo7HebXfx4TmoqD4mWwi2UT0flk+ABs78azugtICriQglDd1DaeulEDW yuEAlIw33mxepyha1v/uh3Q2SCsLRapX+1+i3HrqDyeHGMK8DoSpOqyN7J0geA== -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:56 2025 by rpki-client