$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa File: 451673e6-334d-4e4b-b936-5534942489c1.roa (raw, json) Hash identifier: iPE1r0yhIjFastyeERA/9OdNRCSfOSr/GlyZJAuTBsQ= Subject key identifier: 40:21:DC:F7:15:F5:17:D1:06:4B:F1:9E:3D:69:0C:4E:59:88:F6:F7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0CFAE15A585490BF10FB3EEB09678403411202B0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa Signing time: Fri 28 Mar 2025 00:41:28 +0000 ROA not before: Fri 28 Mar 2025 00:41:28 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fff:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:fa:e1:5a:58:54:90:bf:10:fb:3e:eb:09:67:84:03:41:12:02:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 00:41:28 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: serialNumber=46bc618482e930c43763bf479bdf1f3fae260799c47668ca29159b5901d99cc8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:04:cf:fe:00:eb:da:e1:08:11:12:74:84: f8:9d:d2:a5:be:cc:49:5c:58:3a:d7:72:0c:58:e5: 5f:02:90:a3:b1:1e:ae:03:c0:23:9e:81:64:ba:18: 5a:49:54:ed:14:54:77:f0:b5:cc:4f:62:73:77:cc: 1d:23:14:4f:92:3a:66:a7:52:af:3f:69:64:95:fe: 14:1b:cd:6a:e9:89:93:2c:b4:80:25:ae:eb:7f:ba: 74:f1:13:a2:db:84:76:d5:fb:b0:7c:62:1a:5b:29: a1:d2:ce:48:6a:a9:d7:8e:69:77:ee:7a:a2:ef:36: 54:80:3a:9b:fa:20:91:df:71:3c:d9:8a:25:b5:7a: a4:ca:5c:4c:1d:a9:7c:53:5e:8f:e4:a6:3f:97:41: 86:c8:33:39:a2:91:0b:a0:3c:de:c4:f5:d5:5a:54: 56:3c:92:9b:c0:07:2d:f1:9e:c3:1e:68:8b:1a:71: 57:ed:1e:59:13:ea:21:a4:f9:4e:a0:cb:ea:60:d2: 0d:98:db:fa:61:22:2a:68:6a:1d:8e:a5:f4:35:7b: 6a:2c:a3:8c:5f:81:dd:bf:02:1a:4d:b3:15:f6:ca: 21:9d:15:76:56:a1:15:4a:3a:57:a3:a2:27:cb:7b: ea:bc:42:64:87:a7:a4:2f:43:2a:f2:6c:30:91:84: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:21:DC:F7:15:F5:17:D1:06:4B:F1:9E:3D:69:0C:4E:59:88:F6:F7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/451673e6-334d-4e4b-b936-5534942489c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:5000::/40 Signature Algorithm: sha256WithRSAEncryption 3b:a0:bf:d6:cb:cf:11:db:ff:59:1c:c2:99:85:b0:ed:c9:e4: 7d:bb:31:8e:44:6c:0d:12:c5:a3:63:2c:c2:e3:17:27:8c:75: 6f:71:f5:f5:ed:e1:3a:d5:09:7f:fa:06:48:d9:c9:d8:d6:97: e8:ae:e0:b2:2e:cf:b1:5b:61:4b:b4:62:fe:cb:19:d6:c6:27: f9:8a:54:97:d6:38:ca:23:0e:e0:d7:cb:e6:57:d9:d8:c7:cb: e3:6c:80:74:a4:6c:d3:77:4e:d8:80:be:64:56:81:7d:8c:32: 60:68:2f:65:11:f2:91:a4:3c:18:9a:42:52:84:85:24:48:e2: b4:4e:71:57:92:a4:9c:a2:84:bc:23:5a:c0:cd:51:28:67:a9: fb:1d:ca:76:bd:f9:b8:c1:97:36:b2:6e:44:e2:8b:b3:72:38: d6:79:36:a0:3a:fc:9c:9c:c5:04:1e:fb:78:49:99:5c:0f:65: f5:37:b7:37:41:f7:b0:89:3f:7e:62:66:d3:41:ec:b4:85:3e: a8:6b:8d:84:ba:32:41:fd:ed:57:07:23:a9:0a:ad:1d:55:9d: ca:35:be:3a:e6:89:ef:5c:e4:3f:ff:fb:18:c1:83:82:b9:bc: dc:0a:f7:86:30:96:98:a8:30:8c:4d:61:51:1c:a2:e6:41:2e: 24:7d:ed:4d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDPrhWlhUkL8Q+z7rCWeEA0ESArAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDA0MTI4WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmJjNjE4NDgyZTkzMGM0Mzc2M2JmNDc5YmRmMWYzZmFl MjYwNzk5YzQ3NjY4Y2EyOTE1OWI1OTAxZDk5Y2M4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnZATP/gDr2uEIERJ0hPid0qW+zElcWDrXcgxY5V8CkKOx Hq4DwCOegWS6GFpJVO0UVHfwtcxPYnN3zB0jFE+SOmanUq8/aWSV/hQbzWrpiZMs tIAlrut/unTxE6LbhHbV+7B8YhpbKaHSzkhqqdeOaXfueqLvNlSAOpv6IJHfcTzZ iiW1eqTKXEwdqXxTXo/kpj+XQYbIMzmikQugPN7E9dVaVFY8kpvABy3xnsMeaIsa cVftHlkT6iGk+U6gy+pg0g2Y2/phIipoah2OpfQ1e2oso4xfgd2/AhpNsxX2yiGd FXZWoRVKOlejoifLe+q8QmSHp6QvQyrybDCRhL41AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQCHc9xX1F9EGS/GePWkMTlmI9vcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1MTY3M2U2LTMzNGQtNGU0Yi1iOTM2LTU1MzQ5NDI0ODljMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//UDANBgkqhkiG9w0BAQsFAAOCAQEAO6C/1svPEdv/WRzCmYWw7cnk fbsxjkRsDRLFo2MswuMXJ4x1b3H19e3hOtUJf/oGSNnJ2NaX6K7gsi7PsVthS7Ri /ssZ1sYn+YpUl9Y4yiMO4NfL5lfZ2MfL42yAdKRs03dO2IC+ZFaBfYwyYGgvZRHy kaQ8GJpCUoSFJEjitE5xV5KknKKEvCNawM1RKGep+x3Kdr35uMGXNrJuROKLs3I4 1nk2oDr8nJzFBB77eEmZXA9l9Te3N0H3sIk/fmJm00HstIU+qGuNhLoyQf3tVwcj qQqtHVWdyjW+OuaJ71zkP//7GMGDgrm83Ar3hjCWmKgwjE1hURyi5kEuJH3tTQ== -----END CERTIFICATE-----Generated at Wed Apr 16 17:16:47 2025 by rpki-client