$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92e21a64-42a0-45d1-9eb7-d8ef7b03bbcb.roa File: 92e21a64-42a0-45d1-9eb7-d8ef7b03bbcb.roa (raw, json) Hash identifier: MZSM93rgXqSZF+ikNipaVyVhw+TO2f4nrj2Z6hqbRBg= Subject key identifier: E3:D5:FB:53:1F:34:61:BA:8A:1C:FA:CD:B0:3F:02:1C:3E:D0:E7:7C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 101FEC238CDB6877F04086D7877017BD8345CEC8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92e21a64-42a0-45d1-9eb7-d8ef7b03bbcb.roa Signing time: Fri 28 Mar 2025 17:11:13 +0000 ROA not before: Fri 28 Mar 2025 17:11:13 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1c:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1f:ec:23:8c:db:68:77:f0:40:86:d7:87:70:17:bd:83:45:ce:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 17:11:13 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:a8:22:a6:c9:1a:8c:3c:5e:f1:7c:bd:d2: 9c:a3:b5:97:8d:1a:ef:ee:98:05:0d:e5:16:26:fd: bd:76:b2:a7:e3:e2:05:4f:0a:30:c2:1f:a9:81:b4: be:af:c1:84:8d:1d:a7:23:32:20:34:2e:8c:6e:68: de:70:53:fb:13:3e:4b:63:f7:15:46:2c:0b:e9:4c: 99:9c:76:11:8e:0c:4c:98:9d:99:58:ed:10:4f:72: bb:48:ab:5a:e4:17:09:78:40:59:63:5c:79:bd:97: 50:98:61:4a:ad:0c:e3:02:3d:86:d1:ad:3c:75:43: cc:4f:a4:81:cc:27:0a:65:21:83:44:02:84:48:a5: 77:43:75:66:50:8e:e2:64:aa:f8:f0:40:4a:96:80: fa:c8:c4:94:d6:f7:41:0c:93:3f:17:7a:c9:f0:56: 52:f6:e8:16:ff:21:22:da:c8:7e:8f:30:00:59:3e: 72:19:30:4c:97:6a:d4:da:77:f9:bf:37:b5:30:d1: 67:49:cc:6c:f4:bd:14:ce:52:e0:5f:ce:fb:d0:10: e5:e7:7f:24:ab:73:3d:4e:d7:dd:b4:9c:69:6b:e7: fb:3d:4f:aa:8b:c1:04:21:4b:4e:f0:55:7c:18:4f: c0:93:c0:82:49:97:70:61:00:5d:c0:ec:f4:ec:2a: 5e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D5:FB:53:1F:34:61:BA:8A:1C:FA:CD:B0:3F:02:1C:3E:D0:E7:7C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92e21a64-42a0-45d1-9eb7-d8ef7b03bbcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1c:c000::/36 Signature Algorithm: sha256WithRSAEncryption 01:c7:5d:8d:19:3e:0c:50:8d:90:ff:a5:19:ae:c9:ea:cf:d6: 1f:30:71:6d:56:fd:f1:24:3a:31:5b:c4:9e:3e:d6:c2:95:4f: 79:62:1b:f3:da:9c:60:88:b0:42:93:2e:93:59:28:0a:76:e6: 78:05:2a:5b:8a:e4:65:b2:f5:1d:bf:4a:3e:14:7e:09:15:5d: a9:aa:00:83:0e:19:0e:78:48:09:66:4f:ce:a6:4f:33:b3:cb: 12:7d:e8:41:12:f4:91:d7:87:f4:88:5a:dc:c1:ed:c8:ae:a4: 9b:90:0d:3c:db:68:44:53:96:b0:0e:67:88:8b:85:4a:a5:e9: d2:6b:53:82:db:ea:d5:38:5e:55:dc:23:6a:e9:95:9a:de:cf: af:cb:f5:f7:ac:72:5f:3f:6e:ee:ab:13:c4:24:7a:ac:85:f9: 82:d8:d9:08:e8:f2:1d:64:cb:19:42:9d:36:bb:81:58:97:2f: 3c:0a:ec:cf:1e:55:00:49:4a:41:ea:03:a0:76:98:59:67:36: d8:d5:b8:08:2b:f6:5e:91:32:58:bc:6b:6d:7a:3c:7d:8d:c7: 64:ff:39:ff:4e:d4:63:e5:1f:9e:c6:af:3a:b1:78:a4:16:d1: 1f:e3:7b:fe:b2:46:6d:a4:3c:4b:85:02:58:4b:6f:00:2e:33: 78:0e:7a:c5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEB/sI4zbaHfwQIbXh3AXvYNFzsgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTcxMTEzWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzRhODJmMmVjNzAzNTZhODYzNTZlM2Y4YmU1ZTc2NTdk MmQ2OTVjZTViMGM3MzFiMWYzMzdlMDU5MzI0Mzc4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX3agipskajDxe8Xy90pyjtZeNGu/umAUN5RYm/b12sqfj 4gVPCjDCH6mBtL6vwYSNHacjMiA0LoxuaN5wU/sTPktj9xVGLAvpTJmcdhGODEyY nZlY7RBPcrtIq1rkFwl4QFljXHm9l1CYYUqtDOMCPYbRrTx1Q8xPpIHMJwplIYNE AoRIpXdDdWZQjuJkqvjwQEqWgPrIxJTW90EMkz8XesnwVlL26Bb/ISLayH6PMABZ PnIZMEyXatTad/m/N7Uw0WdJzGz0vRTOUuBfzvvQEOXnfySrcz1O1920nGlr5/s9 T6qLwQQhS07wVXwYT8CTwIJJl3BhAF3A7PTsKl7pAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU49X7Ux80YbqKHPrNsD8CHD7Q53wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyZTIxYTY0LTQyYTAtNDVkMS05ZWI3LWQ4ZWY3YjAzYmJjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8cwDANBgkqhkiG9w0BAQsFAAOCAQEAAcddjRk+DFCNkP+lGa7J6s/W HzBxbVb98SQ6MVvEnj7WwpVPeWIb89qcYIiwQpMuk1koCnbmeAUqW4rkZbL1Hb9K PhR+CRVdqaoAgw4ZDnhICWZPzqZPM7PLEn3oQRL0kdeH9Iha3MHtyK6km5ANPNto RFOWsA5niIuFSqXp0mtTgtvq1TheVdwjaumVmt7Pr8v196xyXz9u7qsTxCR6rIX5 gtjZCOjyHWTLGUKdNruBWJcvPArszx5VAElKQeoDoHaYWWc22NW4CCv2XpEyWLxr bXo8fY3HZP85/07UY+UfnsavOrF4pBbRH+N7/rJGbaQ8S4UCWEtvAC4zeA56xQ== -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:16 2025 by rpki-client