$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80b06f3f-3db1-466f-ba01-27d83e9a58fd.roa File: 80b06f3f-3db1-466f-ba01-27d83e9a58fd.roa (raw, json) Hash identifier: XW66pr2HrIv+9QyulVEdX+kvqv0iPCxyFYPUIr30+jI= Subject key identifier: F7:C6:95:E3:4A:75:14:2C:0E:5C:88:C4:C5:74:D8:D6:D1:A6:E7:A1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0C9050B76E56B4DDE33FB7ED9F01D7243DD2BAB4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80b06f3f-3db1-466f-ba01-27d83e9a58fd.roa Signing time: Fri 28 Mar 2025 17:01:08 +0000 ROA not before: Fri 28 Mar 2025 17:01:08 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1f:800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:90:50:b7:6e:56:b4:dd:e3:3f:b7:ed:9f:01:d7:24:3d:d2:ba:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 17:01:08 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:23:b7:4d:45:78:ab:03:31:a7:14:98:c1: 24:b4:12:71:8e:a4:26:31:fe:df:c1:9e:1c:e7:11: d1:19:1a:65:e3:fe:a9:6a:2d:5b:d8:77:0c:21:6c: 17:87:28:94:4d:06:b1:71:15:cb:75:b7:ba:57:60: aa:67:f2:fc:82:31:a9:72:bd:35:70:63:25:4d:a9: e7:76:ff:60:96:cd:54:36:73:d6:ee:3e:ad:2c:24: 7d:35:de:fb:e2:2b:26:cb:7f:2e:47:60:48:99:e4: 9f:90:eb:51:9c:ae:1a:5a:2f:42:7c:58:71:7e:1d: 48:ae:2b:41:a9:0f:29:de:ca:f7:70:7f:01:22:ad: 50:68:5d:92:a0:3e:b0:53:89:d2:f0:ab:4f:a2:04: 5f:a8:0f:04:82:e8:47:12:59:f7:58:9a:a1:b2:11: e7:c1:51:34:ea:cf:84:54:ed:85:b3:76:60:81:e8: b8:d4:1e:54:6d:dc:2f:50:c6:0b:22:16:92:e8:33: 32:1c:88:5e:3d:26:6e:38:3b:d6:1d:dc:1a:0b:f5: e5:4d:d2:d0:35:b3:3a:af:b8:2f:0c:cf:e0:32:89: 20:3a:c3:45:22:cf:6e:25:03:77:8a:75:29:e1:4f: 75:f5:83:af:0a:79:6f:0c:d4:c5:40:e2:b5:42:d3: 40:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C6:95:E3:4A:75:14:2C:0E:5C:88:C4:C5:74:D8:D6:D1:A6:E7:A1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80b06f3f-3db1-466f-ba01-27d83e9a58fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1f:800::/37 Signature Algorithm: sha256WithRSAEncryption af:d1:47:1c:3a:cd:a1:69:ea:86:77:68:01:1b:d4:6e:06:26: ab:4f:95:85:7a:5e:37:20:7e:c8:c3:14:e6:25:4e:4a:65:c6: f1:b3:bd:6f:44:1c:7c:d7:28:33:85:0b:91:c5:9c:74:40:c3: ac:b0:76:be:c0:c4:92:aa:12:39:2b:67:65:18:ea:0a:7c:d5: 31:e6:4e:92:bf:66:e3:42:17:1b:9f:a2:9d:06:da:60:da:5d: 1e:91:32:d1:4a:5c:41:d6:c0:47:af:53:d1:d0:5a:d0:d5:47: ab:ee:c1:ac:5d:82:76:33:7a:97:1a:8a:b5:1d:c2:71:e5:c6: 81:be:25:14:18:99:ed:b6:6a:3c:f8:3d:39:6c:ec:91:5e:5f: d0:37:87:4d:12:6c:0a:fa:4a:a6:20:3e:0d:5c:84:37:99:a8: fa:78:19:0a:39:b1:f5:0a:a9:c2:31:6c:93:02:54:a3:ff:78: 65:3a:9a:29:f2:9d:e8:9a:3f:15:00:9e:15:0c:f0:91:06:73: f9:4f:a2:f9:97:c7:28:d0:42:99:8e:c6:83:77:eb:13:b9:01: fc:a9:46:2e:fa:47:16:4d:12:e2:1b:13:00:99:0a:cf:ac:03: 62:ac:59:37:fe:50:e8:85:49:e1:25:b8:9f:90:d7:be:bf:36: ca:e1:06:5c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDJBQt25WtN3jP7ftnwHXJD3SurQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTcwMTA4WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNGFlYjIyOTc5Nzk2ODBkZDIxYzRiMTcyMTQzYmMxZjNm YmU4NTE4YTc1MTM5MDY1Y2ZlNDE0NmQ0YzY3NGNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDO1yO3TUV4qwMxpxSYwSS0EnGOpCYx/t/BnhznEdEZGmXj /qlqLVvYdwwhbBeHKJRNBrFxFct1t7pXYKpn8vyCMalyvTVwYyVNqed2/2CWzVQ2 c9buPq0sJH013vviKybLfy5HYEiZ5J+Q61GcrhpaL0J8WHF+HUiuK0GpDyneyvdw fwEirVBoXZKgPrBTidLwq0+iBF+oDwSC6EcSWfdYmqGyEefBUTTqz4RU7YWzdmCB 6LjUHlRt3C9QxgsiFpLoMzIciF49Jm44O9Yd3BoL9eVN0tA1szqvuC8Mz+AyiSA6 w0Uiz24lA3eKdSnhT3X1g68KeW8M1MVA4rVC00DhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU98aV40p1FCwOXIjExXTY1tGm56EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgwYjA2ZjNmLTNkYjEtNDY2Zi1iYTAxLTI3ZDgzZTlhNThmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8fCDANBgkqhkiG9w0BAQsFAAOCAQEAr9FHHDrNoWnqhndoARvUbgYm q0+VhXpeNyB+yMMU5iVOSmXG8bO9b0QcfNcoM4ULkcWcdEDDrLB2vsDEkqoSOStn ZRjqCnzVMeZOkr9m40IXG5+inQbaYNpdHpEy0UpcQdbAR69T0dBa0NVHq+7BrF2C djN6lxqKtR3CceXGgb4lFBiZ7bZqPPg9OWzskV5f0DeHTRJsCvpKpiA+DVyEN5mo +ngZCjmx9QqpwjFskwJUo/94ZTqaKfKd6Jo/FQCeFQzwkQZz+U+i+ZfHKNBCmY7G g3frE7kB/KlGLvpHFk0S4hsTAJkKz6wDYqxZN/5Q6IVJ4SW4n5DXvr82yuEGXA== -----END CERTIFICATE-----Generated at Sat Apr 5 11:22:01 2025 by rpki-client