$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/66edf542-bd09-43ab-8640-a67a7cbe5a17.roa File: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (raw, json) Hash identifier: mSB3EHCk2gRmwGVnNHJLmuOkYsySLNuDbcXAfjsBNz4= Subject key identifier: 08:50:AD:37:F8:B5:65:9A:71:1C:4A:D1:EE:C6:81:47:AB:DE:CA:AB Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 5461097BC361D8634BBEF62ACB50172CDCAC5279 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/66edf542-bd09-43ab-8640-a67a7cbe5a17.roa Signing time: Sat 22 Mar 2025 00:10:33 +0000 ROA not before: Sat 22 Mar 2025 00:10:33 +0000 ROA not after: Sat 26 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:b140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:61:09:7b:c3:61:d8:63:4b:be:f6:2a:cb:50:17:2c:dc:ac:52:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Mar 22 00:10:33 2025 GMT Not After : Apr 26 23:59:59 2025 GMT Subject: CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5a:f1:8a:11:a4:50:a3:91:82:ab:e2:f5:c8: 22:bb:fd:56:40:83:28:be:2b:e1:ea:49:65:a8:0b: 32:37:44:78:26:91:7b:37:d4:0e:6b:2e:5b:97:ff: c5:63:61:fb:d2:cb:f6:f2:b2:5e:4e:4c:54:87:5a: 78:ab:e6:df:7a:3c:29:e2:d6:cb:31:d3:1d:b6:c0: 3a:b0:db:48:17:5d:49:ff:ee:71:82:d4:e9:87:ca: 01:94:d8:3f:34:dd:d7:da:43:77:7b:95:35:72:ea: 87:2d:83:14:d1:1d:5c:ec:0d:3b:5d:e8:73:c5:8d: c9:fa:ab:60:f2:45:58:1b:c1:9e:51:03:f2:bd:77: 81:b3:70:57:f9:4d:82:d2:20:20:41:a7:9d:b4:b8: f9:48:02:a5:c9:a5:1a:84:cb:61:a1:97:2d:15:3f: 84:ee:8a:5a:43:ed:55:2c:fb:24:1f:24:35:98:fc: 85:bb:00:88:13:55:9e:d7:42:b8:40:55:91:38:a9: eb:aa:46:9a:70:f7:a0:99:ec:15:78:03:33:6f:93: 94:1c:27:bd:b3:65:94:77:2d:8f:b2:ff:a6:03:16: f9:35:e5:6e:f2:c7:84:48:5f:b3:4e:01:49:79:8c: a5:9a:73:1a:65:de:08:38:0c:80:b6:c1:16:0f:f1: 60:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:50:AD:37:F8:B5:65:9A:71:1C:4A:D1:EE:C6:81:47:AB:DE:CA:AB X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/66edf542-bd09-43ab-8640-a67a7cbe5a17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:b140::/32 Signature Algorithm: sha256WithRSAEncryption b0:e0:4d:86:f9:ba:23:0d:93:66:d7:11:5a:b2:5c:a2:61:5e: 30:70:2f:8f:41:c0:3b:fb:0c:b3:26:13:7c:1a:e2:76:ee:53: a8:8d:a8:b2:f2:28:44:30:0b:7c:ce:ef:10:3b:5d:f8:a0:22: 05:a2:69:6a:4b:2a:ba:82:65:26:d3:cd:a9:92:61:c5:97:4d: b1:2c:a7:0a:d7:48:ca:1c:18:41:89:fd:3a:5b:6b:4a:51:f2: 84:57:ac:86:47:cd:85:a9:fa:54:21:c6:0c:38:88:2e:15:53: e0:6b:7e:35:9a:6c:38:2a:d4:8f:85:d4:78:21:96:7f:68:06: ce:a1:68:28:fe:c6:84:a9:2e:1d:95:fc:8d:7a:59:a0:8c:57: 29:e3:05:50:91:b7:40:5e:72:b2:3d:a1:d7:d9:22:97:73:47: e2:15:f8:43:c2:e8:c9:0c:a6:b6:c1:d3:8b:bd:b8:46:0f:38: 9d:38:d9:6a:80:a6:0e:d6:1a:eb:d1:3c:44:94:85:ad:53:22: 6a:03:d2:4a:3c:13:64:b6:74:9e:81:95:32:d6:73:fc:ba:65: 40:ae:21:7a:8b:ed:c9:7e:4d:3d:37:98:d3:15:18:5f:69:1c: 1f:09:7b:87:b4:77:10:f5:1f:10:83:2f:f5:96:93:a2:08:d9: d8:9a:51:27 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUVGEJe8Nh2GNLvvYqy1AXLNysUnkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUwMzIyMDAxMDMzWhcNMjUwNDI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMWNiMDgxOTNiYTBiN2YxNTcyOWYxZWFkMzAwNjEzN2Uz NTVkMDYwYmY1NjA4ZjRlNjQyN2MzOWI3YjhkZWYyMS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUWvGKEaRQo5GCq+L1yCK7/VZAgyi+K+HqSWWoCzI3RHgm kXs31A5rLluX/8VjYfvSy/bysl5OTFSHWnir5t96PCni1ssx0x22wDqw20gXXUn/ 7nGC1OmHygGU2D803dfaQ3d7lTVy6octgxTRHVzsDTtd6HPFjcn6q2DyRVgbwZ5R A/K9d4GzcFf5TYLSICBBp520uPlIAqXJpRqEy2Ghly0VP4TuilpD7VUs+yQfJDWY /IW7AIgTVZ7XQrhAVZE4qeuqRppw96CZ7BV4AzNvk5QcJ72zZZR3LY+y/6YDFvk1 5W7yx4RIX7NOAUl5jKWacxpl3gg4DIC2wRYP8WC/AgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUCFCtN/i1ZZpxHErR7saBR6veyqswHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzY2ZWRmNTQyLWJkMDktNDNhYi04NjQwLWE2N2E3Y2JlNWExNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3 LWQwNTJjNTM1Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBbFAMA0GCSqGSIb3DQEBCwUAA4IBAQCw4E2G+bojDZNm1xFaslyiYV4w cC+PQcA7+wyzJhN8GuJ27lOojaiy8ihEMAt8zu8QO134oCIFomlqSyq6gmUm082p kmHFl02xLKcK10jKHBhBif06W2tKUfKEV6yGR82FqfpUIcYMOIguFVPga341mmw4 KtSPhdR4IZZ/aAbOoWgo/saEqS4dlfyNelmgjFcp4wVQkbdAXnKyPaHX2SKXc0fi FfhDwujJDKa2wdOLvbhGDzidONlqgKYO1hrr0TxElIWtUyJqA9JKPBNktnSegZUy 1nP8umVAriF6i+3Jfk09N5jTFRhfaRwfCXuHtHcQ9R8Qgy/1lpOiCNnYmlEn -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:58 2025 by rpki-client