$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa File: dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa (raw, json) Hash identifier: wW49TwWHqMVPdHCI089/q3gD6uCru8zx/dWYDiQIzQU= Subject key identifier: E1:DA:65:02:69:02:50:E1:EA:A4:A4:DC:1C:DF:BD:48:06:62:BD:51 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2A004C6E86FBBC5B29B3006F30594BEE1C033B68 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa Signing time: Fri 14 Mar 2025 00:21:07 +0000 ROA not before: Fri 14 Mar 2025 00:21:07 +0000 ROA not after: Fri 18 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:00:4c:6e:86:fb:bc:5b:29:b3:00:6f:30:59:4b:ee:1c:03:3b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 14 00:21:07 2025 GMT Not After : Apr 18 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5b:70:25:28:7f:38:e1:e3:e3:a5:7e:52:9f: 2a:6c:90:98:33:80:ad:1b:a3:e9:a3:c1:db:95:50: 13:5c:11:fe:30:39:72:a7:64:de:22:29:9f:d9:1d: 68:cd:d1:36:14:5b:93:65:85:02:08:1c:3f:13:3b: c6:11:66:58:a6:8a:48:d5:03:ff:f5:db:f4:a1:d6: 13:fb:80:48:21:f3:fc:1c:55:93:7a:36:7f:8e:cf: eb:97:e0:ef:9d:3a:a5:20:bf:21:43:13:91:5b:9e: 6d:36:00:72:5a:30:f1:8b:30:da:e0:9f:6c:86:e5: 3c:cb:56:24:0e:4a:99:3a:3d:b6:ea:eb:b2:ab:ff: a1:62:c7:91:85:a4:5c:58:44:aa:9d:c6:cf:86:bb: e4:fc:ef:e4:61:50:20:50:42:c6:45:67:bf:d9:03: 3e:b3:ad:72:c7:68:b8:d2:15:8a:a6:17:0a:40:bc: eb:27:90:1b:98:56:a6:a4:59:bc:f3:86:99:bf:34: 80:63:b1:34:8b:75:91:1d:b3:09:69:89:99:77:6e: 42:02:f9:28:6f:d5:08:1a:2e:ef:b3:b1:a1:fa:81: b7:bf:59:92:e8:5b:dd:85:bd:1d:3d:fa:c2:83:d5: fe:82:96:1f:2c:69:5f:1b:31:0e:b9:6c:ea:24:b1: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DA:65:02:69:02:50:E1:EA:A4:A4:DC:1C:DF:BD:48:06:62:BD:51 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dffe7c41-91f1-4ad3-a375-4c43d7b3ade4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:a400::/40 Signature Algorithm: sha256WithRSAEncryption 15:b4:c8:ce:51:59:67:b1:6f:68:4f:e5:e6:d8:8b:af:35:0a: 9e:91:f9:f1:7d:9f:b6:21:75:fd:72:b0:6c:27:b9:36:90:8f: 50:a4:8f:a6:fc:86:4a:c7:ad:a9:51:3e:3d:1c:62:ec:20:b7: 23:61:34:95:e0:fe:d6:6c:df:37:d7:bd:92:e2:8f:65:30:ff: 3f:6d:b9:e2:9a:73:0d:fb:e1:00:d8:f5:ab:8f:3d:06:5f:a7: 24:64:e8:d1:1a:8b:30:b5:e8:c0:db:89:39:74:b1:9e:ba:33: 78:e5:f5:6c:fd:12:c6:c2:7a:d0:1a:44:94:2c:26:c7:74:4d: 6b:9e:c7:83:4e:31:45:72:08:ea:d9:e3:2a:fe:4a:3e:ec:d8: e8:ea:b7:03:2b:cb:4a:cc:04:ab:b9:f9:87:f9:fa:5d:66:41: eb:9c:59:e9:f0:f0:16:68:b6:06:7a:b5:6d:33:2e:86:bf:ca: 2e:ea:dc:6f:43:1d:74:70:02:91:ee:4c:76:e4:ea:b8:8e:cc: 2c:15:a1:a3:df:17:49:4a:5b:85:68:32:ce:20:47:97:7d:cd: 13:67:d4:6f:07:af:d9:77:8a:5a:ee:52:0c:7c:5e:67:17:48: f3:16:86:ae:9a:b1:ff:87:fb:79:d6:cf:bc:6d:52:be:f7:da: 6d:5d:cb:1a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKgBMbob7vFspswBvMFlL7hwDO2gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzE0MDAyMTA3WhcNMjUwNDE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZjBiMGE3NzQ4YmJjNzI4MTlkZGVlOGZmMWJmZjI5NGRk ZGFmMTNmZDE5ZDY1N2ZiNWU0MDczMDM2N2ZkZTI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXW3AlKH844ePjpX5SnypskJgzgK0bo+mjwduVUBNcEf4w OXKnZN4iKZ/ZHWjN0TYUW5NlhQIIHD8TO8YRZlimikjVA//12/Sh1hP7gEgh8/wc VZN6Nn+Oz+uX4O+dOqUgvyFDE5Fbnm02AHJaMPGLMNrgn2yG5TzLViQOSpk6Pbbq 67Kr/6Fix5GFpFxYRKqdxs+Gu+T87+RhUCBQQsZFZ7/ZAz6zrXLHaLjSFYqmFwpA vOsnkBuYVqakWbzzhpm/NIBjsTSLdZEdswlpiZl3bkIC+Shv1QgaLu+zsaH6gbe/ WZLoW92FvR09+sKD1f6Clh8saV8bMQ65bOoksYOtAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4dplAmkCUOHqpKTcHN+9SAZivVEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmZmU3YzQxLTkxZjEtNGFkMy1hMzc1LTRjNDNkN2IzYWRlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gpDANBgkqhkiG9w0BAQsFAAOCAQEAFbTIzlFZZ7FvaE/l5tiLrzUK npH58X2ftiF1/XKwbCe5NpCPUKSPpvyGSsetqVE+PRxi7CC3I2E0leD+1mzfN9e9 kuKPZTD/P2254ppzDfvhANj1q489Bl+nJGTo0RqLMLXowNuJOXSxnrozeOX1bP0S xsJ60BpElCwmx3RNa57Hg04xRXII6tnjKv5KPuzY6Oq3AyvLSswEq7n5h/n6XWZB 65xZ6fDwFmi2Bnq1bTMuhr/KLurcb0MddHACke5MduTquI7MLBWho98XSUpbhWgy ziBHl33NE2fUbwev2XeKWu5SDHxeZxdI8xaGrpqx/4f7edbPvG1SvvfabV3LGg== -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:44 2025 by rpki-client