$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1faf8aa-bf56-47ca-9357-0491aaee42d6.roa File: a1faf8aa-bf56-47ca-9357-0491aaee42d6.roa (raw, json) Hash identifier: 79sWmw/ALNo3RUOIodDdASZLDmZPtk2KDrgXdy7y0nY= Subject key identifier: FA:0A:E9:BF:F5:08:21:FE:4E:CD:F7:1C:C7:BB:F8:B8:6F:78:BB:1F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3D3A2156438A835DFFB36F65ABDF708694DA7EB3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1faf8aa-bf56-47ca-9357-0491aaee42d6.roa Signing time: Fri 28 Mar 2025 00:40:24 +0000 ROA not before: Fri 28 Mar 2025 00:40:24 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:80e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3a:21:56:43:8a:83:5d:ff:b3:6f:65:ab:df:70:86:94:da:7e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 00:40:24 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: serialNumber=270d0cdf309cf7fb405e3bb8f95eadc6a2a59ef09b3057a63a3a6e4061818aa0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a3:d7:01:a2:8e:3b:6f:0d:97:65:7d:08:7c: 28:2a:07:fd:45:53:bf:f6:bd:67:6a:c5:b7:50:98: 2f:3a:a5:39:bb:05:ab:ff:7e:e2:de:4c:21:33:14: 56:79:f1:e6:a1:ca:84:14:d5:c2:3c:62:c4:88:e7: 09:a2:b9:c6:cf:7b:17:e9:42:1e:09:e3:d0:af:29: 5a:55:89:2a:ab:bb:40:96:4d:62:49:24:3a:6c:75: fa:05:8d:35:cd:10:00:70:ac:ee:8e:da:09:21:7d: 85:15:08:8b:1b:72:8b:7e:07:cf:13:28:63:01:95: 55:62:da:b5:b4:e2:30:83:6c:e4:7b:79:31:01:71: fb:63:93:a2:07:93:50:e1:56:52:f0:0f:88:22:10: e5:a8:60:78:7e:39:0c:42:1a:98:50:e7:8f:72:ea: 45:01:8e:e4:70:e4:16:7f:aa:26:8b:48:88:a5:76: 33:b3:49:84:0d:4b:d5:9e:cc:57:ad:83:fb:bf:d0: 97:f0:09:d6:82:db:37:a8:58:bf:44:dd:88:3a:11: 90:34:bc:75:a6:fd:0a:4d:6b:e3:3c:53:e3:73:7f: 7c:40:10:8e:40:9b:14:82:b0:86:2e:d4:bd:78:b5: b5:5d:32:4f:2e:e2:e7:25:76:bc:c0:4c:47:53:4e: 1b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0A:E9:BF:F5:08:21:FE:4E:CD:F7:1C:C7:BB:F8:B8:6F:78:BB:1F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a1faf8aa-bf56-47ca-9357-0491aaee42d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:80e0::/48 Signature Algorithm: sha256WithRSAEncryption 40:c0:f5:89:4a:53:40:93:4a:48:a7:b9:dc:12:48:7b:8f:89: 56:78:98:1b:6f:51:3f:00:f8:9d:03:2a:55:3a:fe:0a:56:da: 14:2a:73:6d:f9:40:b1:c7:4d:4e:b2:45:82:f0:7a:06:8c:0f: 64:e6:3a:11:a0:dd:4c:ac:da:48:21:f9:7f:2b:e5:a8:be:c1: 07:59:af:f9:83:d8:25:d0:76:08:89:90:5f:6b:01:cf:15:4d: d3:90:35:8f:22:99:45:13:06:84:f6:61:04:92:82:aa:c2:00: 26:26:70:d7:fa:60:82:4d:e3:5a:63:8d:5b:67:6f:75:21:21: bf:5c:b4:71:e3:f6:c0:01:e4:c6:79:df:5a:b3:2b:4b:74:9b: 57:fc:19:08:2d:29:a4:d4:57:61:f1:e1:b3:92:f5:62:b2:36: 68:d0:75:a9:61:5e:93:cb:f0:ec:7c:66:2a:ce:80:ac:1d:51: 61:47:36:a1:f6:71:d0:45:ed:46:74:ab:d2:7a:90:53:32:77: 6f:4b:7c:a1:55:f5:2b:b0:d9:8a:58:5e:81:e8:10:25:c7:bb: fe:b7:f4:e9:4d:66:02:e9:3d:bf:ae:1c:96:5c:bd:bb:6b:b4: 68:02:8c:bc:f8:74:16:8d:dc:8d:ab:05:f6:a8:db:22:97:a9: db:21:04:ff -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPTohVkOKg13/s29lq99whpTafrMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MDA0MDI0WhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzBkMGNkZjMwOWNmN2ZiNDA1ZTNiYjhmOTVlYWRjNmEy YTU5ZWYwOWIzMDU3YTYzYTNhNmU0MDYxODE4YWEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRo9cBoo47bw2XZX0IfCgqB/1FU7/2vWdqxbdQmC86pTm7 Bav/fuLeTCEzFFZ58eahyoQU1cI8YsSI5wmiucbPexfpQh4J49CvKVpViSqru0CW TWJJJDpsdfoFjTXNEABwrO6O2gkhfYUVCIsbcot+B88TKGMBlVVi2rW04jCDbOR7 eTEBcftjk6IHk1DhVlLwD4giEOWoYHh+OQxCGphQ549y6kUBjuRw5BZ/qiaLSIil djOzSYQNS9WezFetg/u/0JfwCdaC2zeoWL9E3Yg6EZA0vHWm/QpNa+M8U+Nzf3xA EI5AmxSCsIYu1L14tbVdMk8u4ucldrzATEdTThvjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+grpv/UIIf5Ozfccx7v4uG94ux8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ExZmFmOGFhLWJmNTYtNDdjYS05MzU3LTA0OTFhYWVlNDJkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gOAwDQYJKoZIhvcNAQELBQADggEBAEDA9YlKU0CTSkinudwSSHuP iVZ4mBtvUT8A+J0DKlU6/gpW2hQqc235QLHHTU6yRYLwegaMD2TmOhGg3Uys2kgh +X8r5ai+wQdZr/mD2CXQdgiJkF9rAc8VTdOQNY8imUUTBoT2YQSSgqrCACYmcNf6 YIJN41pjjVtnb3UhIb9ctHHj9sAB5MZ531qzK0t0m1f8GQgtKaTUV2Hx4bOS9WKy NmjQdalhXpPL8Ox8ZirOgKwdUWFHNqH2cdBF7UZ0q9J6kFMyd29LfKFV9Suw2YpY XoHoECXHu/639OlNZgLpPb+uHJZcvbtrtGgCjLz4dBaN3I2rBfao2yKXqdshBP8= -----END CERTIFICATE-----Generated at Wed Apr 16 17:15:47 2025 by rpki-client