$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa File: a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa (raw, json) Hash identifier: 5wNUAR82MvI2YmJX/7V77kYW/OrN1axgL36lCbtQ0JE= Subject key identifier: 1D:F1:3B:F8:09:2B:83:DF:DE:05:17:1F:F4:C2:A5:6D:E7:0A:78:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51BC8B34D085146F97F4E7118DF865C902D6ABF1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa Signing time: Fri 28 Mar 2025 15:51:22 +0000 ROA not before: Fri 28 Mar 2025 15:51:22 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:bc:8b:34:d0:85:14:6f:97:f4:e7:11:8d:f8:65:c9:02:d6:ab:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 15:51:22 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:c0:82:0e:31:31:20:a5:bc:56:e1:e4:70: dc:ab:6b:8c:eb:5a:c2:8d:38:47:42:d2:bf:fa:05: 12:ef:ea:0f:5e:c8:8b:f8:c9:f8:2e:e9:96:c9:0d: d0:e7:cb:0e:8a:04:ee:f2:96:78:91:b9:51:0a:08: e9:9c:02:56:48:26:64:b4:d7:c5:aa:1e:cb:eb:94: c1:a7:38:5c:7f:64:96:06:75:9c:eb:85:f3:c4:6f: b4:2b:23:f2:3b:fd:b0:f4:22:56:96:f5:18:0c:7b: d3:46:a6:60:13:9f:6d:c3:f5:d8:a7:53:c8:cc:d5: 87:ca:0f:5b:c6:86:9c:0b:cc:bb:1d:d1:76:53:f3: 39:bd:d1:85:a0:1f:d6:7a:8e:97:f7:46:e0:41:cd: ae:35:8c:1d:34:e4:12:38:d3:93:95:32:e6:86:fe: eb:0e:d3:30:62:e0:ca:59:28:6a:f9:c8:83:e3:ff: 6f:8f:de:16:d1:ad:6e:6f:eb:16:56:9d:16:6b:c6: 38:69:ad:03:55:e2:ed:4d:86:ab:00:3d:e4:e8:0b: 18:1c:44:f2:6e:a1:55:59:5e:f2:d6:a2:2a:81:dd: 38:4e:71:97:5c:22:88:0a:a8:18:b5:1e:7e:84:40: 8d:d0:fd:92:4a:78:ca:1d:74:8a:b7:9b:00:c7:cc: f9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F1:3B:F8:09:2B:83:DF:DE:05:17:1F:F4:C2:A5:6D:E7:0A:78:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:c000::/40 Signature Algorithm: sha256WithRSAEncryption 26:e0:f8:78:1d:b5:fd:47:ad:76:63:0f:a9:50:c6:2e:c9:34: 5f:d5:7d:5e:65:71:ff:65:9b:fe:39:1c:0f:4c:01:f7:2f:d3: 9b:1c:52:38:c4:76:02:bd:5e:25:c5:83:47:b1:c0:af:01:59: 3d:de:d9:36:76:a8:b6:79:4e:a1:1c:b3:d9:07:16:d7:c5:75: 6b:e3:c3:15:7a:8d:4c:7e:7e:03:aa:60:14:5e:ee:1b:d1:20: 2a:ab:4c:70:ae:7d:88:ba:2f:e5:85:9e:6b:3d:68:4d:6d:60: d2:3a:a8:14:1b:65:2c:65:7d:48:b6:1d:80:b8:03:8e:83:a1: a6:90:6a:d9:a5:de:68:1e:81:84:17:50:6e:78:48:d5:1d:51: c8:26:f1:97:75:35:53:43:f8:d8:f0:36:20:4a:33:08:f7:cf: 5d:65:b8:fd:10:07:5d:6b:dc:4a:cf:aa:d8:c4:5a:74:aa:d8: cb:e1:f4:45:fc:2e:68:76:3b:29:b7:c9:e3:19:e7:20:13:90: 8a:39:f2:35:40:5a:56:5a:ce:ec:c5:48:ec:3a:91:da:4b:01: 32:b4:5b:0b:20:f9:b7:87:7a:27:28:8d:db:03:ee:6e:3d:0b: 99:48:34:56:04:7d:5b:f9:13:8a:2a:85:bd:14:a9:7b:55:39: eb:be:d5:b6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUbyLNNCFFG+X9OcRjfhlyQLWq/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTU1MTIyWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTVlZjc0OWQzMjczNGY0YzQyNzA5NTg4M2EzM2I0NGMz MTZkNTI2YzMxZGI1ZGMxYzdkZjQ2YzU2Mzg0NTIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiIMCCDjExIKW8VuHkcNyra4zrWsKNOEdC0r/6BRLv6g9e yIv4yfgu6ZbJDdDnyw6KBO7ylniRuVEKCOmcAlZIJmS018WqHsvrlMGnOFx/ZJYG dZzrhfPEb7QrI/I7/bD0IlaW9RgMe9NGpmATn23D9dinU8jM1YfKD1vGhpwLzLsd 0XZT8zm90YWgH9Z6jpf3RuBBza41jB005BI405OVMuaG/usO0zBi4MpZKGr5yIPj /2+P3hbRrW5v6xZWnRZrxjhprQNV4u1NhqsAPeToCxgcRPJuoVVZXvLWoiqB3ThO cZdcIogKqBi1Hn6EQI3Q/ZJKeModdIq3mwDHzPnxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHfE7+Akrg9/eBRcf9MKlbecKeLkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyZGVkMGYxLTNlNTgtNGJmMy1iNWJjLWJlOGExMDVlNWI0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/ywDANBgkqhkiG9w0BAQsFAAOCAQEAJuD4eB21/UetdmMPqVDGLsk0 X9V9XmVx/2Wb/jkcD0wB9y/TmxxSOMR2Ar1eJcWDR7HArwFZPd7ZNnaotnlOoRyz 2QcW18V1a+PDFXqNTH5+A6pgFF7uG9EgKqtMcK59iLov5YWeaz1oTW1g0jqoFBtl LGV9SLYdgLgDjoOhppBq2aXeaB6BhBdQbnhI1R1RyCbxl3U1U0P42PA2IEozCPfP XWW4/RAHXWvcSs+q2MRadKrYy+H0RfwuaHY7KbfJ4xnnIBOQijnyNUBaVlrO7MVI 7DqR2ksBMrRbCyD5t4d6JyiN2wPubj0LmUg0VgR9W/kTiiqFvRSpe1U5677Vtg== -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:52 2025 by rpki-client