$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d07779e-2b8c-4173-b3f8-1cd5de2e437c.roa File: 7d07779e-2b8c-4173-b3f8-1cd5de2e437c.roa (raw, json) Hash identifier: pCVyPkF5n7vnhpH2THnr81btntxDyE24KXzgFDXDCKE= Subject key identifier: 28:DD:E4:F2:34:A6:7C:FC:8D:65:58:CC:1A:02:20:F5:23:89:2B:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1EDDF51FA1373162C6AE7916DF030CE38FF51931 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d07779e-2b8c-4173-b3f8-1cd5de2e437c.roa Signing time: Fri 28 Mar 2025 17:10:20 +0000 ROA not before: Fri 28 Mar 2025 17:10:20 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f29:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:dd:f5:1f:a1:37:31:62:c6:ae:79:16:df:03:0c:e3:8f:f5:19:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 17:10:20 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:bf:03:58:4f:ef:a6:1c:57:be:ed:34:36: 11:f4:1b:2a:25:50:07:c9:2d:13:03:cf:63:1a:17: b2:5e:5d:9a:c8:2f:c8:17:1b:b6:07:70:d3:1a:2e: c6:e3:32:50:ec:8a:a5:92:25:9a:76:d3:cc:83:11: 4c:6d:36:8b:5c:91:84:db:08:f9:cf:dd:13:b9:4a: 58:c9:34:90:bd:14:5c:09:c8:9d:d4:b8:3e:3a:0e: 7e:ae:c9:4f:50:46:7b:8c:67:d2:ad:f7:1c:06:31: ef:af:6f:e0:98:40:d0:23:55:a3:d6:54:b3:bc:2a: 0f:5e:b5:a7:d8:d0:70:05:b8:a6:6e:d6:9a:37:97: ab:e3:14:d3:ca:4a:f1:ec:85:c9:f0:22:53:54:63: 48:62:4c:2d:a3:cb:5d:38:00:4a:f4:19:01:57:df: fb:1f:94:c7:50:80:7b:1d:18:3f:d0:f0:6e:ae:97: 75:5c:a8:03:7c:d5:b4:37:94:2c:1a:03:60:fd:dd: 04:38:6a:ac:e9:37:e6:c4:c1:3c:44:4a:4e:97:42: ee:03:68:d3:76:3d:5f:58:50:6d:42:44:68:88:58: 74:11:cc:6f:ae:35:4b:d5:d4:66:74:16:a2:f6:53: 2b:cf:a5:9d:be:a3:e5:16:87:6c:74:07:38:90:14: ca:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DD:E4:F2:34:A6:7C:FC:8D:65:58:CC:1A:02:20:F5:23:89:2B:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d07779e-2b8c-4173-b3f8-1cd5de2e437c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f29:4000::/36 Signature Algorithm: sha256WithRSAEncryption 1f:c3:9a:41:a0:75:e5:81:e5:a6:84:df:4f:63:29:d4:15:90: da:32:fd:25:44:c8:07:82:86:f9:32:f5:e7:b9:d4:55:55:fd: aa:0a:3f:ed:25:f7:67:e2:8a:ed:f4:e2:4a:92:45:a9:0c:36: f0:87:0c:d3:58:cf:7d:0d:89:c5:57:56:a5:05:25:c2:b7:be: 23:71:f2:42:8d:d5:de:1d:41:f3:44:9e:67:b2:9d:ca:cc:52: 20:d9:bf:4c:e5:70:a2:ad:fa:a7:39:1f:16:7d:db:e7:3d:2a: bf:67:ec:d8:00:1e:f2:5e:5b:8c:8a:b1:78:eb:44:c7:9b:05: 60:3f:1b:4e:40:aa:da:f1:f6:6b:26:bc:81:db:b0:7a:74:e9: 1b:ed:e0:4a:e1:a3:9d:5b:d4:ad:c8:c7:f6:d3:51:c4:41:09: 53:0e:da:41:af:1e:17:fa:e4:ef:55:f1:13:1a:45:ee:4d:a0: 81:61:7e:fc:6b:36:fa:82:a3:c9:c6:39:3f:f7:9e:63:e8:c8: 9c:10:83:eb:22:aa:b8:39:4f:0d:b0:be:67:7b:d5:9c:22:a1: 26:55:73:4d:75:09:e9:c7:73:32:4a:eb:53:9c:b5:28:76:a2: 0f:b2:d9:6a:f6:fa:f8:f9:d2:d5:96:7c:71:32:83:5a:ff:a6: 0c:af:be:17 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHt31H6E3MWLGrnkW3wMM44/1GTEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTcxMDIwWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMmIzZDk5ZmJkMmRmN2UzMjhlZGJkMTQ1ZDRkOGI3OWE2 ZmU1MWJlNGZlM2Y4OGNiNTZjNTM0MmI4YmNiMWEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2QL8DWE/vphxXvu00NhH0GyolUAfJLRMDz2MaF7JeXZrI L8gXG7YHcNMaLsbjMlDsiqWSJZp208yDEUxtNotckYTbCPnP3RO5SljJNJC9FFwJ yJ3UuD46Dn6uyU9QRnuMZ9Kt9xwGMe+vb+CYQNAjVaPWVLO8Kg9etafY0HAFuKZu 1po3l6vjFNPKSvHshcnwIlNUY0hiTC2jy104AEr0GQFX3/sflMdQgHsdGD/Q8G6u l3VcqAN81bQ3lCwaA2D93QQ4aqzpN+bEwTxESk6XQu4DaNN2PV9YUG1CRGiIWHQR zG+uNUvV1GZ0FqL2UyvPpZ2+o+UWh2x0BziQFMrHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUKN3k8jSmfPyNZVjMGgIg9SOJK7MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkMDc3NzllLTJiOGMtNDE3My1iM2Y4LTFjZDVkZTJlNDM3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8pQDANBgkqhkiG9w0BAQsFAAOCAQEAH8OaQaB15YHlpoTfT2Mp1BWQ 2jL9JUTIB4KG+TL157nUVVX9qgo/7SX3Z+KK7fTiSpJFqQw28IcM01jPfQ2JxVdW pQUlwre+I3HyQo3V3h1B80SeZ7KdysxSINm/TOVwoq36pzkfFn3b5z0qv2fs2AAe 8l5bjIqxeOtEx5sFYD8bTkCq2vH2aya8gduwenTpG+3gSuGjnVvUrcjH9tNRxEEJ Uw7aQa8eF/rk71XxExpF7k2ggWF+/Gs2+oKjycY5P/eeY+jInBCD6yKquDlPDbC+ Z3vVnCKhJlVzTXUJ6cdzMkrrU5y1KHaiD7LZavb6+PnS1ZZ8cTKDWv+mDK++Fw== -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:16 2025 by rpki-client