$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d2ebcd-72cf-4cc4-9d4f-c70b70da6d70.roa File: f0d2ebcd-72cf-4cc4-9d4f-c70b70da6d70.roa (raw, json) Hash identifier: VwulaVyOxucj1Kw/em/LsY7bF0jxKhXucUVhhgZpwiM= Subject key identifier: 98:74:C5:28:28:F9:23:54:0E:97:41:A8:1B:F3:43:FD:9F:30:98:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4A5EA6AECB23D737CBFE09AB6AEAF4EE4CC020F7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d2ebcd-72cf-4cc4-9d4f-c70b70da6d70.roa Signing time: Fri 28 Mar 2025 16:11:02 +0000 ROA not before: Fri 28 Mar 2025 16:11:02 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:7400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5e:a6:ae:cb:23:d7:37:cb:fe:09:ab:6a:ea:f4:ee:4c:c0:20:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 16:11:02 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d3:14:17:67:1e:96:cd:d0:8f:fb:d4:fa:84: ce:68:c7:44:cb:e3:f1:cb:4b:fe:e4:7e:57:be:79: b1:60:0b:d2:c5:d5:80:7d:47:fc:ef:d1:c6:23:1a: ea:7a:0f:06:2a:d0:28:68:d5:70:6e:e3:f0:52:90: 80:11:2b:b5:77:eb:5e:8e:a6:ba:7d:b8:38:9f:c3: 74:99:1e:35:da:c2:be:ba:4b:07:7d:db:16:c9:f5: 94:20:5b:72:6b:15:62:26:f7:c5:f2:9c:53:e3:e0: dc:f4:f0:d2:bf:7e:58:49:72:b0:83:c3:72:dd:56: 61:2b:d1:8a:14:a7:45:d7:ff:17:f2:f5:f5:1d:a5: e0:aa:93:0c:1b:25:9f:51:43:68:36:dc:6a:e0:49: f5:15:fa:5c:ae:ab:76:f0:7a:1f:9f:a3:c3:8e:8d: 43:3e:f0:77:4b:1a:cf:df:67:ca:07:1e:b3:38:50: 24:5e:2a:2c:8e:25:07:c3:be:48:6e:55:f5:da:eb: da:ae:18:1e:11:13:30:0a:aa:04:14:bf:9b:45:db: da:ee:2b:0b:7d:73:7d:30:31:9c:70:7a:72:66:28: ad:be:a7:79:ff:00:ed:41:a5:62:3f:e2:16:3f:1a: 76:c0:fc:45:92:a8:9a:82:10:2f:d8:5b:ea:89:66: 67:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:74:C5:28:28:F9:23:54:0E:97:41:A8:1B:F3:43:FD:9F:30:98:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d2ebcd-72cf-4cc4-9d4f-c70b70da6d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:7400::/40 Signature Algorithm: sha256WithRSAEncryption 85:4a:44:48:29:23:1e:75:ee:1d:29:9f:22:42:0d:67:cc:2e: 8a:2a:81:7c:e4:10:9b:a8:a7:9d:d4:5f:db:17:4d:b4:8a:1a: 3f:11:ce:ca:20:dd:4e:b6:87:a3:ec:3f:95:c6:18:1b:79:31: 3a:4c:7a:0f:7e:a6:db:ca:49:8a:9b:a8:9a:7c:af:45:8c:a1: 66:33:42:c1:fb:d2:10:b0:24:12:15:db:93:e2:9c:40:79:a7: e4:c6:80:00:52:31:63:d8:41:21:e3:31:39:fd:c7:60:05:07: 68:6c:a6:7b:26:04:57:79:43:53:14:5d:92:84:51:ec:dd:40: 69:43:b0:3c:d8:9a:79:4a:da:f0:09:55:37:4a:26:b7:f0:d2: ec:46:8c:a5:65:e5:63:fc:1c:98:26:c0:c5:7f:bd:82:c5:e5: cf:ca:1b:15:8c:ea:78:cf:52:b4:5b:ba:96:a0:0c:09:d0:db: 6e:6b:39:66:58:ce:1d:e4:7f:94:4d:60:05:a0:48:17:b5:85: b7:4c:67:4f:41:0c:d4:d5:1a:38:7d:9b:9e:5e:1f:ec:aa:19: 45:96:ce:a0:80:4a:2c:db:e3:f0:35:d0:08:15:dc:c8:2d:91: 4d:cd:20:2a:55:b4:0b:ad:65:27:4e:ab:94:2f:27:4a:51:1d: 2b:57:d4:9d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSl6mrssj1zfL/gmraur07kzAIPcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTYxMTAyWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTQ4MTkyODNkMTI2MmJkMWRkNGE2M2Y2OWFhZjc1NzFi MmIwNzRhYTEyZTg1ZGIxMTQwMjc3ZjIxMTRlZmFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCM0xQXZx6WzdCP+9T6hM5ox0TL4/HLS/7kfle+ebFgC9LF 1YB9R/zv0cYjGup6DwYq0Cho1XBu4/BSkIARK7V3616Oprp9uDifw3SZHjXawr66 Swd92xbJ9ZQgW3JrFWIm98XynFPj4Nz08NK/flhJcrCDw3LdVmEr0YoUp0XX/xfy 9fUdpeCqkwwbJZ9RQ2g23GrgSfUV+lyuq3bweh+fo8OOjUM+8HdLGs/fZ8oHHrM4 UCReKiyOJQfDvkhuVfXa69quGB4REzAKqgQUv5tF29ruKwt9c30wMZxwenJmKK2+ p3n/AO1BpWI/4hY/GnbA/EWSqJqCEC/YW+qJZmf9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUmHTFKCj5I1QOl0GoG/ND/Z8wmKcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwZDJlYmNkLTcyY2YtNGNjNC05ZDRmLWM3MGI3MGRhNmQ3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+4dDANBgkqhkiG9w0BAQsFAAOCAQEAhUpESCkjHnXuHSmfIkINZ8wu iiqBfOQQm6inndRf2xdNtIoaPxHOyiDdTraHo+w/lcYYG3kxOkx6D36m28pJipuo mnyvRYyhZjNCwfvSELAkEhXbk+KcQHmn5MaAAFIxY9hBIeMxOf3HYAUHaGymeyYE V3lDUxRdkoRR7N1AaUOwPNiaeUra8AlVN0omt/DS7EaMpWXlY/wcmCbAxX+9gsXl z8obFYzqeM9StFu6lqAMCdDbbms5ZljOHeR/lE1gBaBIF7WFt0xnT0EM1NUaOH2b nl4f7KoZRZbOoIBKLNvj8DXQCBXcyC2RTc0gKlW0C61lJ06rlC8nSlEdK1fUnQ== -----END CERTIFICATE-----Generated at Sat Apr 5 12:32:10 2025 by rpki-client