$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aa5de4e-bc91-43cc-bc8d-f1770cb3b7ac.roa File: 5aa5de4e-bc91-43cc-bc8d-f1770cb3b7ac.roa (raw, json) Hash identifier: JNmz6i205fy2uMtlhJO0YnN9oRBgSk7sDetTdVf0/AI= Subject key identifier: 33:B9:C6:12:B3:A5:47:16:E2:8D:FE:8E:EE:21:40:2F:0E:7A:02:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 745F1DEEFFA053B2A4696B3A815CAB004C0330B3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aa5de4e-bc91-43cc-bc8d-f1770cb3b7ac.roa Signing time: Fri 07 Mar 2025 00:10:47 +0000 ROA not before: Fri 07 Mar 2025 00:10:47 +0000 ROA not after: Fri 11 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffc:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5f:1d:ee:ff:a0:53:b2:a4:69:6b:3a:81:5c:ab:00:4c:03:30:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 7 00:10:47 2025 GMT Not After : Apr 11 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:38:11:c6:44:35:9c:25:ca:17:d1:a6:ff:29: ef:b2:05:5b:87:28:6a:a9:a9:49:46:8c:8e:a6:0e: 3a:bb:fd:9d:ee:25:7f:21:4e:92:d3:58:f9:ff:93: ef:7e:54:cb:76:7d:c6:5f:e7:8f:c9:0f:bc:86:e8: b8:29:d5:a8:fb:10:fb:9b:5f:ac:a6:af:83:68:ba: 0a:ee:0a:0f:a2:88:5d:e1:b3:05:39:b1:1e:b7:5c: 3b:71:0d:68:b3:1f:1e:cb:80:09:4c:ae:9a:80:f8: 6b:d2:74:78:e6:ba:40:82:db:d2:ca:ca:c0:1f:57: 21:b1:e4:0d:4b:fe:e8:8a:5a:6a:5d:a1:20:ea:b5: a9:bd:25:22:fb:db:55:5f:93:32:4e:89:b3:97:c2: eb:10:a8:a8:34:93:57:f4:15:26:5a:4a:d6:6b:95: 44:36:81:6b:c1:ab:d7:08:9a:f0:d9:7f:bf:2a:a2: 9d:1f:36:ad:8e:55:98:de:1b:73:d4:19:89:dd:93: c1:c3:97:10:5d:f4:22:d0:a2:07:d4:91:89:11:06: 9a:fd:76:2c:bb:50:ab:72:13:70:a8:38:d8:9e:e7: ed:94:f6:ce:a5:96:6d:f9:de:da:b9:f4:c3:e0:84: e5:48:06:31:db:10:4a:f1:62:b1:d9:19:7f:32:32: e0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B9:C6:12:B3:A5:47:16:E2:8D:FE:8E:EE:21:40:2F:0E:7A:02:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aa5de4e-bc91-43cc-bc8d-f1770cb3b7ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffc:8000::/39 Signature Algorithm: sha256WithRSAEncryption 2b:1c:32:22:d7:c4:d3:87:57:81:09:b4:bd:b4:a6:17:f9:c6: 97:28:5a:4e:d1:19:2b:37:8a:39:05:5b:7f:5c:0f:11:8e:50: e5:7d:16:2a:4c:7d:a1:c4:eb:ee:11:b1:1f:04:28:aa:d7:49: f7:0e:ac:2a:52:f7:51:59:26:fc:af:16:c1:59:5d:e3:2d:c1: f7:cb:e4:e2:58:99:dc:b9:1c:ca:4a:c4:3f:4d:2d:69:cd:40: 4d:59:48:39:f5:63:db:db:9a:72:92:e0:19:bc:25:20:53:42: 86:7d:19:e6:92:c1:19:28:51:12:b9:08:6b:fe:94:c0:9a:3c: 24:ad:af:e1:66:5e:10:4c:2f:48:e4:b1:7e:48:84:30:70:83: 12:06:0d:21:d4:2d:af:1b:f0:fa:ec:fa:8b:89:85:eb:dd:29: 44:b3:a8:3b:69:a3:58:da:35:6a:97:79:2f:ba:39:a1:9a:56: 0a:07:bb:e5:fa:9f:bf:96:b9:e9:8c:f7:f9:14:28:1e:93:49: 18:6a:14:5e:34:d2:3b:db:23:c8:37:da:b7:45:31:12:7f:30: 20:75:de:c7:19:fa:e5:df:18:3e:80:81:46:37:bd:67:ee:a5: 3e:91:f0:ff:5d:74:9f:b2:a7:74:bb:95:4d:62:a0:a4:c6:bb: 86:d7:e3:df -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUdF8d7v+gU7KkaWs6gVyrAEwDMLMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzA3MDAxMDQ3WhcNMjUwNDExMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTRiOWQwNjEzMThlZmU2ZjI4MjFjNzczYzM2YjE1NmEx MTFmYzYyNDQwMDU0Mzg5Yjk1NWFmOTlhOThhZDU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcOBHGRDWcJcoX0ab/Ke+yBVuHKGqpqUlGjI6mDjq7/Z3u JX8hTpLTWPn/k+9+VMt2fcZf54/JD7yG6Lgp1aj7EPubX6ymr4NougruCg+iiF3h swU5sR63XDtxDWizHx7LgAlMrpqA+GvSdHjmukCC29LKysAfVyGx5A1L/uiKWmpd oSDqtam9JSL721VfkzJOibOXwusQqKg0k1f0FSZaStZrlUQ2gWvBq9cImvDZf78q op0fNq2OVZjeG3PUGYndk8HDlxBd9CLQogfUkYkRBpr9diy7UKtyE3CoONie5+2U 9s6llm353tq59MPghOVIBjHbEErxYrHZGX8yMuBjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUM7nGErOlRxbijf6O7iFALw56AgwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhYTVkZTRlLWJjOTEtNDNjYy1iYzhkLWYxNzcwY2IzYjdhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/8gDANBgkqhkiG9w0BAQsFAAOCAQEAKxwyItfE04dXgQm0vbSmF/nG lyhaTtEZKzeKOQVbf1wPEY5Q5X0WKkx9ocTr7hGxHwQoqtdJ9w6sKlL3UVkm/K8W wVld4y3B98vk4liZ3LkcykrEP00tac1ATVlIOfVj29uacpLgGbwlIFNChn0Z5pLB GShRErkIa/6UwJo8JK2v4WZeEEwvSOSxfkiEMHCDEgYNIdQtrxvw+uz6i4mF690p RLOoO2mjWNo1apd5L7o5oZpWCge75fqfv5a56Yz3+RQoHpNJGGoUXjTSO9sjyDfa t0UxEn8wIHXexxn65d8YPoCBRje9Z+6lPpHw/110n7KndLuVTWKgpMa7htfj3w== -----END CERTIFICATE-----Generated at Thu Mar 13 23:42:38 2025 by rpki-client