$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea9c6a85-f01c-4fe9-a868-b17c9f055ae8.roa File: ea9c6a85-f01c-4fe9-a868-b17c9f055ae8.roa (raw, json) Hash identifier: oItf4B/xYUa/DV/rcpdUcEUXNFmqarI+UhKGP3JogBA= Subject key identifier: 8A:3B:8A:88:CB:F4:03:AB:18:B2:5B:8C:D0:75:51:EB:D0:F0:84:88 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79149DDD8FF861F33929F387AED9CA648AD1DF8F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea9c6a85-f01c-4fe9-a868-b17c9f055ae8.roa Signing time: Fri 28 Mar 2025 17:31:22 +0000 ROA not before: Fri 28 Mar 2025 17:31:22 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f18:4000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:14:9d:dd:8f:f8:61:f3:39:29:f3:87:ae:d9:ca:64:8a:d1:df:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 17:31:22 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:4a:c9:ee:d8:bd:7b:b4:14:39:04:d8:89: 9d:02:5a:ae:27:da:e6:c4:fa:d0:8c:c8:1c:74:4f: 41:c6:d4:50:11:1f:3d:ff:51:ee:fa:58:94:bd:d0: ca:cc:23:50:65:ad:16:f7:1b:3e:cf:fe:a1:6a:ce: cf:f3:96:1e:9d:a8:ab:65:06:a2:8b:58:6b:4a:61: 7d:8c:dd:52:dc:04:93:01:8f:95:87:eb:31:b5:c4: 21:ca:5a:e5:aa:84:d7:48:cd:bb:43:47:9e:94:e3: 5f:e7:15:4c:0d:f0:03:fb:c6:41:c1:be:6a:fb:f1: 48:f5:cc:9d:8d:1c:ec:dd:82:65:95:62:36:cf:5d: f5:02:53:a5:8c:40:70:87:ec:1e:fd:e1:df:55:64: d2:e2:fb:0e:b4:c7:f2:0c:0b:91:d6:85:6e:28:66: 88:6b:2a:76:e0:4c:f5:21:23:8f:2c:f1:10:62:0f: 6b:90:25:a9:9b:8a:2e:4d:0b:e2:c2:0c:58:94:53: ac:c3:44:88:cd:f0:17:5e:60:d8:80:66:1b:38:94: b9:12:c0:1f:62:44:f3:d7:35:2a:f8:db:a4:49:11: 0e:4f:cc:3d:d8:76:8c:24:80:63:7f:c8:b3:5a:48: 8d:8e:69:6e:1b:ac:6f:62:47:2b:b2:b5:e6:08:7c: 19:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3B:8A:88:CB:F4:03:AB:18:B2:5B:8C:D0:75:51:EB:D0:F0:84:88 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea9c6a85-f01c-4fe9-a868-b17c9f055ae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f18:4000::/35 Signature Algorithm: sha256WithRSAEncryption bd:69:47:dd:da:95:bd:7b:d6:4a:e1:38:66:a5:62:61:db:cd: 08:c0:d3:db:d9:e1:22:5a:6a:13:bc:24:1f:3b:89:fb:8e:62: 18:7a:72:ec:6a:aa:3f:76:91:fc:d9:ad:3e:a8:a2:c8:b7:97: 19:0a:f5:5e:9c:96:0f:ae:44:63:0d:a8:2a:48:5b:fc:29:2b: d0:b6:d1:5b:be:08:9b:5e:40:21:de:a9:14:0e:c2:f7:4f:a6: ac:c8:5b:5d:21:8d:60:09:a6:c6:76:6f:4f:f6:39:55:9d:65: ff:20:86:78:f8:29:22:1f:76:a6:33:f7:a0:87:e8:83:dc:ac: 77:56:9d:b5:00:07:52:4e:9e:b1:7d:fd:f9:75:0a:e8:7a:26: 87:ea:53:f2:60:ee:fe:9f:ac:0d:c1:b9:83:2c:e3:54:de:ce: f0:10:54:29:c9:ee:ff:33:62:ba:45:91:29:80:a2:f1:ae:7b: fa:cf:09:f6:e7:45:50:60:c7:16:78:12:5e:f3:e1:47:0e:15: aa:49:a0:2d:ec:fa:41:41:37:1a:86:69:e7:16:f2:7f:45:b9: d6:3f:8a:44:c7:61:90:82:d2:80:d3:51:ed:77:d1:0d:8b:8e: cb:ba:5f:eb:35:e7:3b:f8:15:56:ca:b8:2b:f2:06:a5:4d:42: 58:e1:5c:ac -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUeRSd3Y/4YfM5KfOHrtnKZIrR348wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTczMTIyWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzAzZDQ5NGM5NzA5ZjlkZDIyMzQ2MjRhNTBiNTUwMGU3 ZWEyMGZmYzI5ZDQzMmMzMGVkZDVhZmM1YzIxOTA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCYErJ7ti9e7QUOQTYiZ0CWq4n2ubE+tCMyBx0T0HG1FAR Hz3/Ue76WJS90MrMI1BlrRb3Gz7P/qFqzs/zlh6dqKtlBqKLWGtKYX2M3VLcBJMB j5WH6zG1xCHKWuWqhNdIzbtDR56U41/nFUwN8AP7xkHBvmr78Uj1zJ2NHOzdgmWV YjbPXfUCU6WMQHCH7B794d9VZNLi+w60x/IMC5HWhW4oZohrKnbgTPUhI48s8RBi D2uQJambii5NC+LCDFiUU6zDRIjN8BdeYNiAZhs4lLkSwB9iRPPXNSr426RJEQ5P zD3YdowkgGN/yLNaSI2OaW4brG9iRyuyteYIfBm7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUijuKiMv0A6sYsluM0HVR69DwhIgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VhOWM2YTg1LWYwMWMtNGZlOS1hODY4LWIxN2M5ZjA1NWFlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgUmAB8YQDANBgkqhkiG9w0BAQsFAAOCAQEAvWlH3dqVvXvWSuE4ZqViYdvN CMDT29nhIlpqE7wkHzuJ+45iGHpy7GqqP3aR/NmtPqiiyLeXGQr1XpyWD65EYw2o Kkhb/Ckr0LbRW74Im15AId6pFA7C90+mrMhbXSGNYAmmxnZvT/Y5VZ1l/yCGePgp Ih92pjP3oIfog9ysd1adtQAHUk6esX39+XUK6Homh+pT8mDu/p+sDcG5gyzjVN7O 8BBUKcnu/zNiukWRKYCi8a57+s8J9udFUGDHFngSXvPhRw4VqkmgLez6QUE3GoZp 5xbyf0W51j+KRMdhkILSgNNR7XfRDYuOy7pf6zXnO/gVVsq4K/IGpU1CWOFcrA== -----END CERTIFICATE-----Generated at Sat Apr 5 12:21:05 2025 by rpki-client