$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff6a3224-997f-47ea-bd39-71765a1fb276.roa File: ff6a3224-997f-47ea-bd39-71765a1fb276.roa (raw, json) Hash identifier: pVDsvwelH6zeLhbqn8QAykDX+HHzOhn/wcOeD/fd9d8= Subject key identifier: 06:DA:1B:82:82:2F:1E:3D:BD:1D:02:9C:40:E3:FA:19:D8:19:04:EA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 31657CA2B3641E2125CCEAF251CF379F2E7145B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff6a3224-997f-47ea-bd39-71765a1fb276.roa Signing time: Fri 28 Mar 2025 17:20:14 +0000 ROA not before: Fri 28 Mar 2025 17:20:14 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f24:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:65:7c:a2:b3:64:1e:21:25:cc:ea:f2:51:cf:37:9f:2e:71:45:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 17:20:14 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:57:50:a7:75:39:9a:1f:9c:6b:ef:1b:b4:84: eb:fd:9f:36:1c:bc:59:69:9a:f0:c2:fc:ac:5e:31: 4b:51:bc:91:40:a8:cc:0d:71:b5:b6:7e:d1:1e:e5: e9:7d:1e:85:0f:25:0d:ee:38:a0:d7:13:a2:72:1b: 5e:89:7c:b3:a3:28:30:95:fa:bd:50:a1:fd:c4:d4: ad:d5:2e:2c:7f:3e:72:6e:26:c5:33:11:27:e7:fd: 6f:31:ef:e2:3c:66:85:73:38:6c:d5:f0:0e:a4:ad: 9e:ed:d9:d8:4c:74:4f:9a:06:75:50:ab:85:f9:64: fe:6d:55:2f:8c:29:53:6a:f4:9d:03:cd:b7:d4:c1: 16:6d:58:71:bf:8f:27:c0:86:7c:54:f0:a3:1c:a7: 8a:aa:1a:22:35:65:1f:5c:a8:82:90:a2:59:20:c1: 69:bf:1d:6c:64:5d:23:a6:97:28:38:71:19:9a:db: 23:8e:b7:72:bd:0d:8d:82:c1:64:d0:05:e1:50:6f: 33:21:16:1a:19:3b:38:98:8c:ff:49:3e:ed:9d:33: 04:30:0e:e2:c4:f5:8b:52:f3:e6:1e:ca:69:cb:e0: 77:35:73:fb:d9:1a:9e:72:1d:fe:ba:10:28:25:56: 1d:0e:e0:f1:74:e0:9e:aa:db:be:04:69:e7:7a:16: 6e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DA:1B:82:82:2F:1E:3D:BD:1D:02:9C:40:E3:FA:19:D8:19:04:EA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff6a3224-997f-47ea-bd39-71765a1fb276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f24:c800::/37 Signature Algorithm: sha256WithRSAEncryption 48:ab:bd:d6:0d:2b:79:b9:bf:3d:e6:1c:42:68:59:43:c0:46: 62:7b:b3:15:95:50:2c:72:c2:48:f8:ef:41:4b:cd:31:64:e3: 65:22:b9:25:33:21:07:16:75:2e:45:cd:5b:61:af:e1:16:d5: 1b:ed:a4:5d:cb:6f:23:a9:12:ef:0a:e4:ea:1b:f9:cb:de:63: fb:04:5b:75:b3:1f:e4:07:d5:29:54:7f:24:f4:2e:4c:de:5e: d6:6c:a4:87:d9:d1:b6:1c:29:52:01:f4:d0:98:b3:92:ac:35: 1a:5f:c0:47:69:30:e9:66:fe:27:80:b3:a5:3a:61:33:56:e4: 30:2b:a3:30:35:9d:56:1a:40:9d:82:9b:c7:fc:23:bd:50:09: 85:7a:63:a6:d5:ba:39:5b:c0:23:61:48:44:26:79:3d:c6:ac: ff:06:cb:ef:0c:1e:2c:1f:15:d4:ee:6e:17:5c:65:4e:92:bf: 7d:44:0d:30:7d:41:c5:b4:df:e4:76:90:42:1a:d8:0e:70:95: 0f:11:78:55:9a:f1:12:a6:6a:48:87:f6:5a:6f:58:f7:7c:83: 45:e1:07:98:d2:94:d6:cf:b9:c2:ea:fd:07:a4:3c:d6:c1:11: 03:dd:c4:0a:5f:cd:77:59:d9:95:b4:9a:fc:36:81:f7:1b:fd: 4d:ce:62:8f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMWV8orNkHiElzOryUc83ny5xRbIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTcyMDE0WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjRmYTc2NmM5MWRhYmVhODc0MjFlMDVjNmY3MzU3NTQ4 MzM2YTRkMGI3N2EzMmVhMzkxZjU2NmVjZWU5YjdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD8V1CndTmaH5xr7xu0hOv9nzYcvFlpmvDC/KxeMUtRvJFA qMwNcbW2ftEe5el9HoUPJQ3uOKDXE6JyG16JfLOjKDCV+r1Qof3E1K3VLix/PnJu JsUzESfn/W8x7+I8ZoVzOGzV8A6krZ7t2dhMdE+aBnVQq4X5ZP5tVS+MKVNq9J0D zbfUwRZtWHG/jyfAhnxU8KMcp4qqGiI1ZR9cqIKQolkgwWm/HWxkXSOmlyg4cRma 2yOOt3K9DY2CwWTQBeFQbzMhFhoZOziYjP9JPu2dMwQwDuLE9YtS8+YeymnL4Hc1 c/vZGp5yHf66ECglVh0O4PF04J6q274Eaed6Fm7HAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUBtobgoIvHj29HQKcQOP6GdgZBOowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZmNmEzMjI0LTk5N2YtNDdlYS1iZDM5LTcxNzY1YTFmYjI3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8kyDANBgkqhkiG9w0BAQsFAAOCAQEASKu91g0rebm/PeYcQmhZQ8BG YnuzFZVQLHLCSPjvQUvNMWTjZSK5JTMhBxZ1LkXNW2Gv4RbVG+2kXctvI6kS7wrk 6hv5y95j+wRbdbMf5AfVKVR/JPQuTN5e1mykh9nRthwpUgH00Jizkqw1Gl/AR2kw 6Wb+J4CzpTphM1bkMCujMDWdVhpAnYKbx/wjvVAJhXpjptW6OVvAI2FIRCZ5Pcas /wbL7wweLB8V1O5uF1xlTpK/fUQNMH1BxbTf5HaQQhrYDnCVDxF4VZrxEqZqSIf2 Wm9Y93yDReEHmNKU1s+5wur9B6Q81sERA93ECl/Nd1nZlbSa/DaB9xv9Tc5ijw== -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:58 2025 by rpki-client