$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/780bf320-4503-4ef2-a0f5-fd3456ea9ec6.roa File: 780bf320-4503-4ef2-a0f5-fd3456ea9ec6.roa (raw, json) Hash identifier: mzlCDJ08ej8zKdyWWNkVICPqmS+b3N7+Eht8WNMGQ6I= Subject key identifier: 22:B1:24:80:7A:20:55:89:25:F1:32:02:2B:BD:83:93:98:B8:2F:00 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0CE910ED6A0A551BC26B51800950DE2EC73ACC05 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/780bf320-4503-4ef2-a0f5-fd3456ea9ec6.roa Signing time: Wed 26 Mar 2025 00:21:38 +0000 ROA not before: Wed 26 Mar 2025 00:21:38 +0000 ROA not after: Wed 30 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:8030::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e9:10:ed:6a:0a:55:1b:c2:6b:51:80:09:50:de:2e:c7:3a:cc:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 26 00:21:38 2025 GMT Not After : Apr 30 23:59:59 2025 GMT Subject: serialNumber=190bc93b2c90338205595c570c55b2e13c622db60f3585afa37b0c6475dfd112, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:64:c0:4b:ab:d6:8f:a7:60:29:f4:b6:98: c9:22:93:ab:8f:32:60:f1:42:f7:14:28:f5:54:76: f7:48:8a:22:26:36:47:73:a5:93:f7:85:8c:6a:74: d9:ca:75:23:6e:6d:cf:69:7e:0a:ac:fc:54:a3:8d: 3f:bd:24:89:ca:49:0b:f5:f5:53:20:54:b0:e2:04: 87:ad:87:5b:86:ae:cb:46:0c:ff:11:b0:7c:e2:6e: 19:7d:04:fc:4e:9e:cc:1f:bc:8c:3a:b9:30:e7:95: 23:39:09:a0:fa:14:37:bd:9e:c4:41:a4:f8:88:7b: bb:7d:5a:c6:54:ea:0e:2d:c4:79:cc:27:d4:a6:3a: 57:f4:a5:59:2a:50:32:80:08:e6:9f:30:e9:46:cc: cf:ff:87:77:f2:2a:06:ba:2d:06:38:dd:b8:77:6f: 65:d7:2b:ec:3e:db:2f:00:dc:f8:94:cc:37:bc:15: 7d:44:62:2b:63:61:60:ca:05:f8:b6:a5:6e:55:4f: 6a:d4:38:73:e5:15:fb:70:52:41:a5:94:5f:8d:b7: 3d:2b:d7:ea:50:63:7a:dc:67:e9:50:72:1d:e9:11: c8:49:ad:6f:5b:01:6b:c8:5f:e0:d9:11:e8:c5:ab: 98:39:29:4c:0e:5c:4b:2b:ac:fb:fe:a5:58:cc:f7: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B1:24:80:7A:20:55:89:25:F1:32:02:2B:BD:83:93:98:B8:2F:00 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/780bf320-4503-4ef2-a0f5-fd3456ea9ec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8030::/48 Signature Algorithm: sha256WithRSAEncryption 66:3d:ef:64:3b:5b:4e:16:00:8a:ad:7c:af:e2:8f:8d:ad:0a: e0:38:9c:d3:52:2d:d7:63:bd:6d:ea:40:72:98:08:a9:5e:6c: 36:5c:8c:7a:04:e7:c9:4b:61:ec:3b:8f:65:3b:80:9e:16:6d: 5f:23:3d:7f:8f:79:30:7b:51:40:72:39:af:6f:46:85:97:00: 07:3f:01:09:ba:63:8d:8d:b3:a0:16:48:7d:99:ed:b0:5e:21: d5:0e:c7:65:1c:b8:5c:76:2c:2c:9a:75:a1:54:22:51:6c:93: 6c:f9:0f:90:00:72:6b:3f:55:08:d5:15:06:73:2a:db:ec:58: 24:24:2d:c5:0b:9f:8b:c4:6d:db:48:bf:35:de:93:ef:c1:02: 5b:1b:11:fc:9f:0a:9f:e9:3a:49:57:61:a7:f4:5f:d4:ad:2f: d0:4b:d3:2f:fc:be:73:25:ea:ae:97:48:c0:46:77:f8:a1:42: 42:be:90:4c:48:6a:83:9c:cc:39:db:c0:74:e7:32:33:19:2d: 5d:c5:c7:bb:91:5e:c8:89:1a:54:1f:1b:c2:b2:6e:94:af:76: 4a:b1:3e:dc:7b:94:2d:8a:2b:14:36:a6:1d:2f:ae:2b:80:25: cd:6b:3f:c4:60:11:25:45:ce:30:98:04:f2:95:8a:a2:37:ee: 21:d5:60:34 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDOkQ7WoKVRvCa1GACVDeLsc6zAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI2MDAyMTM4WhcNMjUwNDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTBiYzkzYjJjOTAzMzgyMDU1OTVjNTcwYzU1YjJlMTNj NjIyZGI2MGYzNTg1YWZhMzdiMGM2NDc1ZGZkMTEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR8WTAS6vWj6dgKfS2mMkik6uPMmDxQvcUKPVUdvdIiiIm NkdzpZP3hYxqdNnKdSNubc9pfgqs/FSjjT+9JInKSQv19VMgVLDiBIeth1uGrstG DP8RsHzibhl9BPxOnswfvIw6uTDnlSM5CaD6FDe9nsRBpPiIe7t9WsZU6g4txHnM J9SmOlf0pVkqUDKACOafMOlGzM//h3fyKga6LQY43bh3b2XXK+w+2y8A3PiUzDe8 FX1EYitjYWDKBfi2pW5VT2rUOHPlFftwUkGllF+Ntz0r1+pQY3rcZ+lQch3pEchJ rW9bAWvIX+DZEejFq5g5KUwOXEsrrPv+pVjM90xfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIrEkgHogVYkl8TICK72Dk5i4LwAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc4MGJmMzIwLTQ1MDMtNGVmMi1hMGY1LWZkMzQ1NmVhOWVjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgDAwDQYJKoZIhvcNAQELBQADggEBAGY972Q7W04WAIqtfK/ij42t CuA4nNNSLddjvW3qQHKYCKlebDZcjHoE58lLYew7j2U7gJ4WbV8jPX+PeTB7UUBy Oa9vRoWXAAc/AQm6Y42Ns6AWSH2Z7bBeIdUOx2UcuFx2LCyadaFUIlFsk2z5D5AA cms/VQjVFQZzKtvsWCQkLcULn4vEbdtIvzXek+/BAlsbEfyfCp/pOklXYaf0X9St L9BL0y/8vnMl6q6XSMBGd/ihQkK+kExIaoOczDnbwHTnMjMZLV3Fx7uRXsiJGlQf G8KybpSvdkqxPtx7lC2KKxQ2ph0vriuAJc1rP8RgESVFzjCYBPKViqI37iHVYDQ= -----END CERTIFICATE-----Generated at Wed Apr 16 16:48:52 2025 by rpki-client