$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22abba3-2ca3-4ffc-9fdd-cc29483faec7.roa File: a22abba3-2ca3-4ffc-9fdd-cc29483faec7.roa (raw, json) Hash identifier: CB3R1G6rh+EsVgLf/dd8O6i2sLhU5T96JlTUYrm0X00= Subject key identifier: FB:9E:9E:15:35:BF:09:6B:D2:3E:6F:15:20:BF:68:15:45:9E:62:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 64301D969D409E64E030ED13E60DDDA88751656F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22abba3-2ca3-4ffc-9fdd-cc29483faec7.roa Signing time: Wed 26 Mar 2025 00:10:24 +0000 ROA not before: Wed 26 Mar 2025 00:10:24 +0000 ROA not after: Wed 30 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f38:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:30:1d:96:9d:40:9e:64:e0:30:ed:13:e6:0d:dd:a8:87:51:65:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 26 00:10:24 2025 GMT Not After : Apr 30 23:59:59 2025 GMT Subject: serialNumber=196b2af80ce5296d084563fe1255e896d81fd57446cdb2db0621b468d29d2573, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dc:95:78:7a:fc:ae:d0:ff:74:39:b5:80:79: 5a:16:4d:f0:9c:d4:07:92:3e:cb:4f:89:dd:49:29: 3a:68:ea:5b:ed:5c:ea:15:d6:0c:9b:e1:f3:1b:f3: 86:da:fb:11:b1:19:e4:57:17:6e:ed:2e:17:cc:19: d4:38:92:ff:f1:82:d7:13:8d:fe:97:bc:9f:e9:e3: 0b:1a:cd:49:1a:d5:f3:94:39:fa:38:e2:85:ac:a9: d3:d5:e0:dc:26:82:54:66:77:0a:46:fe:15:e9:28: 63:38:6d:ba:6b:5e:19:ad:14:32:7c:ab:85:e1:c3: a4:38:37:c6:51:c1:b2:9c:7a:62:2f:e4:5c:5c:f7: b7:8d:e0:0f:2c:35:30:51:b3:6f:b6:bb:13:7a:d0: 99:53:93:b2:5b:0c:5c:8e:7f:19:d4:f0:f2:47:1a: 44:94:2a:55:b2:8b:79:37:cd:29:84:6b:bc:ab:99: 96:da:e5:d1:ca:ef:aa:55:96:f4:a7:c3:48:36:cc: c4:8c:0d:2c:80:89:99:4c:6f:f1:70:ba:a2:c4:ba: 4f:04:62:0b:9f:ec:08:e5:ad:8b:65:b8:fa:d9:d0: a6:42:8a:24:d7:38:7d:f3:65:82:b6:09:08:3e:4b: 82:9a:71:14:a4:95:07:71:a3:e3:be:fe:7a:aa:a0: 72:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9E:9E:15:35:BF:09:6B:D2:3E:6F:15:20:BF:68:15:45:9E:62:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a22abba3-2ca3-4ffc-9fdd-cc29483faec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:8040::/48 Signature Algorithm: sha256WithRSAEncryption 6f:dc:5a:6e:99:1d:10:e1:5f:a6:18:6f:ab:f0:b2:c7:0d:cc: 24:34:5c:ef:19:04:84:7b:7c:39:fb:02:32:94:dd:5b:f4:dc: 42:e1:9b:4f:df:f4:ee:29:e6:13:70:99:66:76:eb:cf:42:55: 5b:14:96:c5:06:65:bc:fa:da:da:e1:cd:cb:05:22:01:4b:75: de:7d:f2:aa:a6:46:01:ce:97:5a:02:ab:b7:f5:8d:e4:26:1b: e8:f9:86:89:8d:e0:23:7f:02:d3:b9:db:da:2e:de:8a:4e:3a: af:11:99:81:e1:ba:ca:e8:03:02:fa:3e:dc:b9:8e:4f:49:31: 1f:65:f3:b3:04:3b:a5:54:df:97:3e:be:0a:c4:bf:56:21:dd: fa:64:c1:b3:bb:51:0f:a7:ca:fd:b0:10:98:7f:5d:ef:39:db: 16:8f:ed:09:37:73:70:95:69:63:02:9d:63:6b:d6:a9:27:39: cc:02:ce:a0:9e:41:09:5c:60:05:ff:7d:41:61:70:b9:c3:4a: 2a:1c:5f:f6:a0:5c:5d:6b:01:5c:01:4c:d4:a7:9a:71:62:cf: d2:fa:f6:79:ae:d3:a9:cf:2c:31:27:5b:28:8b:64:2d:0b:b2: b2:8a:3a:05:87:95:d0:a2:78:b9:8c:0b:58:7a:d1:6b:54:f5: dc:a2:ba:88 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZDAdlp1AnmTgMO0T5g3dqIdRZW8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI2MDAxMDI0WhcNMjUwNDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTZiMmFmODBjZTUyOTZkMDg0NTYzZmUxMjU1ZTg5NmQ4 MWZkNTc0NDZjZGIyZGIwNjIxYjQ2OGQyOWQyNTczMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDT3JV4evyu0P90ObWAeVoWTfCc1AeSPstPid1JKTpo6lvt XOoV1gyb4fMb84ba+xGxGeRXF27tLhfMGdQ4kv/xgtcTjf6XvJ/p4wsazUka1fOU Ofo44oWsqdPV4NwmglRmdwpG/hXpKGM4bbprXhmtFDJ8q4Xhw6Q4N8ZRwbKcemIv 5Fxc97eN4A8sNTBRs2+2uxN60JlTk7JbDFyOfxnU8PJHGkSUKlWyi3k3zSmEa7yr mZba5dHK76pVlvSnw0g2zMSMDSyAiZlMb/FwuqLEuk8EYguf7AjlrYtluPrZ0KZC iiTXOH3zZYK2CQg+S4KacRSklQdxo+O+/nqqoHKFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+56eFTW/CWvSPm8VIL9oFUWeYkIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyMmFiYmEzLTJjYTMtNGZmYy05ZmRkLWNjMjk0ODNmYWVjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84gEAwDQYJKoZIhvcNAQELBQADggEBAG/cWm6ZHRDhX6YYb6vwsscN zCQ0XO8ZBIR7fDn7AjKU3Vv03ELhm0/f9O4p5hNwmWZ2689CVVsUlsUGZbz62trh zcsFIgFLdd598qqmRgHOl1oCq7f1jeQmG+j5homN4CN/AtO529ou3opOOq8RmYHh usroAwL6Pty5jk9JMR9l87MEO6VU35c+vgrEv1Yh3fpkwbO7UQ+nyv2wEJh/Xe85 2xaP7Qk3c3CVaWMCnWNr1qknOcwCzqCeQQlcYAX/fUFhcLnDSiocX/agXF1rAVwB TNSnmnFiz9L69nmu06nPLDEnWyiLZC0LsrKKOgWHldCieLmMC1h60WtU9dyiuog= -----END CERTIFICATE-----Generated at Wed Apr 16 16:49:50 2025 by rpki-client