$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e2f76c-d8dd-4c98-b6ff-c5e918c6e294.roa File: b0e2f76c-d8dd-4c98-b6ff-c5e918c6e294.roa (raw, json) Hash identifier: OfexWAotTSOQ9TpvYySKtm9tElPemdIfT5iAK1P50gg= Subject key identifier: B5:59:F5:79:F5:02:B3:32:0D:74:35:F2:A7:C5:3F:35:FF:39:92:07 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 25A9961CBF3CDF2A9A196BAF0615E0FE207F06AA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e2f76c-d8dd-4c98-b6ff-c5e918c6e294.roa Signing time: Fri 28 Mar 2025 00:22:01 +0000 ROA not before: Fri 28 Mar 2025 00:22:01 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:c020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a9:96:1c:bf:3c:df:2a:9a:19:6b:af:06:15:e0:fe:20:7f:06:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 00:22:01 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:58:2b:09:d0:d3:f8:bb:96:c9:f9:17:6f:a7: 56:e9:63:86:d6:ef:fb:ec:d2:a5:57:0b:f7:6e:ed: c7:a2:f8:82:31:44:75:a6:21:0e:a2:21:74:35:8a: c5:39:de:c2:b1:12:db:2e:04:c7:c9:eb:2f:09:28: 85:9f:3e:9f:34:fd:4d:2a:19:c0:99:0d:61:82:46: 30:37:ca:4b:cb:bd:06:64:4a:f4:89:30:05:90:74: b5:65:98:ab:d3:6f:11:a0:e6:2c:d4:2a:d3:19:4a: 6a:c5:d1:1d:de:f7:fc:d2:b5:03:5c:ef:e3:1f:15: e0:b6:31:94:9b:38:43:71:e4:96:f1:b4:7d:47:aa: ad:84:02:1f:b4:e9:57:1d:bc:70:18:c9:2d:4a:7b: 48:10:45:9d:85:d9:46:94:43:c2:7e:7b:94:18:a6: dc:77:30:71:fb:dc:ee:d7:cc:56:b8:37:33:1d:98: 58:35:48:d4:a8:cc:31:ba:cd:27:f8:27:47:6c:96: a8:30:f0:9c:f1:66:dc:a2:c2:5f:3b:dd:ef:84:f8: 1c:82:f5:eb:db:40:49:7e:e9:bb:3d:fb:f4:94:45: a9:5b:a1:d7:ef:76:b3:8c:ed:e5:a8:36:ce:9b:b4: 47:e6:aa:99:7c:1e:9c:52:ab:70:da:6b:86:7c:65: 72:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:59:F5:79:F5:02:B3:32:0D:74:35:F2:A7:C5:3F:35:FF:39:92:07 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e2f76c-d8dd-4c98-b6ff-c5e918c6e294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:c020::/48 Signature Algorithm: sha256WithRSAEncryption 54:18:4d:aa:19:cf:20:80:37:b0:12:8d:e3:9b:da:8a:a3:22: d3:ab:73:d8:30:cc:da:93:02:1c:16:46:ed:07:07:9a:e2:e1: 6d:df:31:d6:5b:e3:1a:86:a5:fd:18:17:0d:d0:97:04:6c:5c: 6b:14:0a:83:ec:02:e0:03:41:57:8d:a7:5f:07:8a:2a:7d:f0: ff:09:43:6d:ef:d6:05:f9:fe:4c:c2:b9:9d:17:c8:cb:32:03: 1b:43:60:ef:4a:a1:c1:0c:17:b3:f5:cb:f2:b6:9f:6a:07:f5: 92:d2:5f:96:e0:4c:83:44:a0:b5:55:86:f4:e2:b7:11:96:41: bc:3a:71:cf:60:31:8f:7f:a3:66:c8:d3:d1:5a:9f:d4:44:35: 2a:94:6e:d6:33:6f:47:e3:0a:55:c7:70:2b:73:d3:7c:3d:90: 7e:7a:04:63:7f:20:24:40:0c:78:26:96:9d:3a:3a:55:88:b0: 29:d4:a2:d8:7f:27:e3:5e:da:d2:ab:26:5a:e8:0b:38:4c:00: 97:1e:27:e3:21:63:b3:67:f0:8b:72:b6:2a:88:09:9f:a1:a0: 36:ce:4e:55:fe:58:41:37:e9:74:50:23:8f:02:f9:cb:22:a0: d5:6e:e9:c4:19:4b:7d:f3:b6:92:b0:8b:39:2e:c7:8c:27:81: 92:67:84:06 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJamWHL883yqaGWuvBhXg/iB/BqowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDAyMjAxWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzdiMDU2MWQxOGQzYWJjMTg5ZmE3NmJkODNhMDY3ZGQ3 MDY4NDQzMmE5YmEwZDI4NjdjMmU5NDllYmY3NDA0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRWCsJ0NP4u5bJ+Rdvp1bpY4bW7/vs0qVXC/du7cei+IIx RHWmIQ6iIXQ1isU53sKxEtsuBMfJ6y8JKIWfPp80/U0qGcCZDWGCRjA3ykvLvQZk SvSJMAWQdLVlmKvTbxGg5izUKtMZSmrF0R3e9/zStQNc7+MfFeC2MZSbOENx5Jbx tH1Hqq2EAh+06VcdvHAYyS1Ke0gQRZ2F2UaUQ8J+e5QYptx3MHH73O7XzFa4NzMd mFg1SNSozDG6zSf4J0dslqgw8JzxZtyiwl873e+E+ByC9evbQEl+6bs9+/SURalb odfvdrOM7eWoNs6btEfmqpl8HpxSq3Daa4Z8ZXKRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtVn1efUCszINdDXyp8U/Nf85kgcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwZTJmNzZjLWQ4ZGQtNGM5OC1iNmZmLWM1ZTkxOGM2ZTI5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AwCAwDQYJKoZIhvcNAQELBQADggEBAFQYTaoZzyCAN7ASjeOb2oqj ItOrc9gwzNqTAhwWRu0HB5ri4W3fMdZb4xqGpf0YFw3QlwRsXGsUCoPsAuADQVeN p18Hiip98P8JQ23v1gX5/kzCuZ0XyMsyAxtDYO9KocEMF7P1y/K2n2oH9ZLSX5bg TINEoLVVhvTitxGWQbw6cc9gMY9/o2bI09Fan9RENSqUbtYzb0fjClXHcCtz03w9 kH56BGN/ICRADHgmlp06OlWIsCnUoth/J+Ne2tKrJlroCzhMAJceJ+MhY7Nn8Ity tiqICZ+hoDbOTlX+WEE36XRQI48C+csioNVu6cQZS33ztpKwizkux4wngZJnhAY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:17:40 2025 by rpki-client