$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa File: 4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa (raw, json) Hash identifier: oyeJeAFlPCucmHGGgTiDe3n+n0tTTzegXBT8c+tH3Gs= Subject key identifier: 62:AD:3E:1F:DE:08:4C:72:FF:98:D6:8E:43:1A:D6:33:BA:2F:FB:BC Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 4481B3002F79F66E80658AE0801270F97B9C0E2A Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa Signing time: Mon 17 Mar 2025 15:10:30 +0000 ROA not before: Mon 17 Mar 2025 15:10:30 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2606:f40:fffc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:81:b3:00:2f:79:f6:6e:80:65:8a:e0:80:12:70:f9:7b:9c:0e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Mar 17 15:10:30 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:83:58:fc:11:46:8f:77:95:a6:5e:5e:83: 13:28:0b:5c:98:03:04:62:71:4d:50:f0:14:a0:15: fa:5d:9e:ef:4f:ec:77:e5:ed:9b:d9:d6:21:83:12: 41:d9:d5:c7:d4:06:5f:c8:46:42:77:a9:bf:4b:e0: 86:81:1a:42:ce:ba:65:f8:43:6c:2a:61:2f:d3:88: 02:db:5d:dd:47:d7:10:9d:d8:39:92:fd:90:85:7e: ce:af:4c:45:40:0b:25:08:4f:00:ee:1a:aa:96:8d: 1b:4e:8d:5f:b2:3c:15:eb:9a:cc:0d:f0:bf:03:a3: c5:a5:40:0d:15:cb:b2:b9:f0:64:13:d3:a2:8e:8a: 2d:d8:ca:f1:ea:4b:03:8e:80:d1:b2:dd:4e:ce:b0: 72:28:c4:40:88:e7:4c:70:88:b9:35:b0:77:8f:d6: aa:31:26:a5:b4:24:45:f0:99:df:4c:0c:ad:c9:cf: 88:22:53:a7:61:d0:45:19:6d:6e:7f:44:7f:6e:11: d5:3b:69:98:91:37:5c:20:3c:2f:71:47:3a:d5:de: 4b:e8:82:93:1b:b7:4a:7b:81:55:cd:19:25:6e:e6: 88:97:55:60:0d:15:ed:b8:e8:e8:00:45:94:47:37: 2d:71:5a:a2:19:57:9f:d1:2a:a3:46:1f:67:09:51: 34:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AD:3E:1F:DE:08:4C:72:FF:98:D6:8E:43:1A:D6:33:BA:2F:FB:BC X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:f40:fffc::/48 Signature Algorithm: sha256WithRSAEncryption c1:4a:b7:43:28:a2:85:35:0e:5c:bf:e5:eb:28:80:f8:30:ae: 6d:a5:e8:bf:1d:87:25:79:33:cb:c2:5a:0f:2e:3a:d5:da:2e: d4:46:14:ac:ed:93:01:8d:6f:6e:f3:40:3f:07:d5:b1:50:b6: ad:ba:2a:05:96:8d:6e:43:d6:5b:12:a9:fa:20:4a:fa:0d:3f: b2:7f:b4:08:c6:19:8a:b6:2b:a0:cb:e5:e3:ac:f9:b6:c7:97: 9e:cd:54:d3:f2:9a:3a:6e:dd:fd:89:db:3d:5b:1b:b7:f2:68: 42:4e:33:88:d4:62:24:65:e1:01:d2:81:c9:cd:6f:70:6f:f8: e5:32:8d:11:32:53:c9:f3:d3:dd:71:dd:93:b5:c6:7f:a4:6a: af:a6:7d:c3:ce:66:a4:a5:c7:1c:f7:da:66:f7:5c:9e:c7:a9: 36:f5:4d:02:19:30:6c:42:fd:6c:eb:b7:b1:ad:2c:0c:7f:3a: 2e:9b:18:cf:48:bd:8e:17:30:3e:0c:8b:48:fc:b0:02:7c:58: 94:8e:ec:d0:27:5a:e6:27:83:ec:04:a1:1a:e5:55:33:49:78: 70:e1:9f:4f:f1:a5:2d:96:3d:4c:40:00:e5:d6:e9:bd:d5:3b: 92:fa:3e:cf:8b:82:36:28:fe:c1:f4:12:4e:84:48:fb:b9:51: cf:7f:fc:aa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURIGzAC959m6AZYrggBJw+XucDiowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjUwMzE3MTUxMDMwWhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZGIxYzVjMzRjMTE2MGM4OGJkZDUwNzZjMzBkMTE3MzM2 NDM0MmIxMjlmODY4NmI4MGQxODUzZTAxZWQ1MDA5MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgToNY/BFGj3eVpl5egxMoC1yYAwRicU1Q8BSgFfpdnu9P 7Hfl7ZvZ1iGDEkHZ1cfUBl/IRkJ3qb9L4IaBGkLOumX4Q2wqYS/TiALbXd1H1xCd 2DmS/ZCFfs6vTEVACyUITwDuGqqWjRtOjV+yPBXrmswN8L8Do8WlQA0Vy7K58GQT 06KOii3YyvHqSwOOgNGy3U7OsHIoxECI50xwiLk1sHeP1qoxJqW0JEXwmd9MDK3J z4giU6dh0EUZbW5/RH9uEdU7aZiRN1wgPC9xRzrV3kvogpMbt0p7gVXNGSVu5oiX VWANFe246OgARZRHNy1xWqIZV5/RKqNGH2cJUTTxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYq0+H94ITHL/mNaOQxrWM7ov+7wwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjLzRhZWY3NWY0LTg3ZWYtNDZkMy05NmQ3LWRjNTNiZTE3OGViZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBg9A//wwDQYJKoZIhvcNAQELBQADggEBAMFKt0MoooU1Dly/5esogPgw rm2l6L8dhyV5M8vCWg8uOtXaLtRGFKztkwGNb27zQD8H1bFQtq26KgWWjW5D1lsS qfogSvoNP7J/tAjGGYq2K6DL5eOs+bbHl57NVNPymjpu3f2J2z1bG7fyaEJOM4jU YiRl4QHSgcnNb3Bv+OUyjREyU8nz091x3ZO1xn+kaq+mfcPOZqSlxxz32mb3XJ7H qTb1TQIZMGxC/Wzrt7GtLAx/Oi6bGM9IvY4XMD4Mi0j8sAJ8WJSO7NAnWuYng+wE oRrlVTNJeHDhn0/xpS2WPUxAAOXW6b3VO5L6Ps+LgjYo/sH0Ek6ESPu5Uc9//Ko= -----END CERTIFICATE-----Generated at Sat Apr 5 11:14:05 2025 by rpki-client