$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef7be8e0-62e6-4871-94e0-6104edf9cbfc.roa File: ef7be8e0-62e6-4871-94e0-6104edf9cbfc.roa (raw, json) Hash identifier: FhtkmMeVbu6ilGoj3pKOA+blOoYIgL2fRK8H8PrRDhE= Subject key identifier: D3:31:E9:6C:46:75:45:60:41:2D:7B:1B:44:2B:10:B9:A9:50:2A:AB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 152D61C31EA5E978D30BDE57D11C1880BBB32BC1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef7be8e0-62e6-4871-94e0-6104edf9cbfc.roa Signing time: Fri 28 Mar 2025 16:20:40 +0000 ROA not before: Fri 28 Mar 2025 16:20:40 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f36:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:2d:61:c3:1e:a5:e9:78:d3:0b:de:57:d1:1c:18:80:bb:b3:2b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 16:20:40 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: serialNumber=f2e4aeb6175152088704f80f5fb9c07773c54afa9dda04a94d05d3a44e494af1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:37:ba:4f:1e:95:d7:26:4e:14:a3:e1:83:59: 4f:99:c6:58:8e:19:d6:c0:9a:b6:65:11:e9:f3:fa: 9a:bd:ce:ff:0f:b1:91:db:99:04:20:81:13:b3:62: 8e:fc:07:34:4a:c4:5a:33:53:5e:17:64:cd:9b:1d: 87:64:fc:7a:e9:52:79:a2:50:8a:2b:ce:2f:e4:9c: 91:7b:67:f1:07:fb:1b:16:7c:43:96:bb:e3:bf:26: 45:9b:eb:d6:6d:fa:b3:03:f0:09:d9:31:4f:97:f7: 76:cd:49:46:51:cd:1b:3c:94:40:fe:df:96:d6:03: d3:f0:80:03:c4:ab:4d:cc:08:d0:68:13:d5:91:d7: 40:ed:3a:89:7e:4e:3f:1e:d3:77:16:d1:24:a3:78: 41:cb:00:cd:f5:34:2d:a0:d8:f0:7f:11:84:9f:16: 4a:17:b2:60:88:f8:de:08:68:3b:67:b0:d9:fc:b3: ba:15:0f:f3:01:65:f5:90:e1:db:8b:82:10:f8:c8: 7d:ff:35:6e:5c:3f:3d:a6:90:29:c0:2b:9d:e6:e9: 36:1d:94:1b:f9:97:03:31:a9:2e:1d:26:70:5e:29: fc:39:de:44:70:2b:c6:ef:46:fd:52:53:44:68:78: 53:f3:ef:18:f5:69:6d:6e:ad:46:36:41:ab:7f:be: 7d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:31:E9:6C:46:75:45:60:41:2D:7B:1B:44:2B:10:B9:A9:50:2A:AB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef7be8e0-62e6-4871-94e0-6104edf9cbfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f36:2000::/40 Signature Algorithm: sha256WithRSAEncryption 16:4f:1d:53:d1:2e:b5:d7:ac:e6:20:63:c4:12:9b:25:a9:82: f9:22:a9:2b:67:4a:13:c0:9e:ca:6a:57:9b:56:71:8b:d1:49: 72:d2:eb:99:66:68:dc:89:17:1d:e3:a6:e1:d7:50:eb:22:bd: 90:3d:03:bd:e3:aa:a3:27:e1:b8:fb:ef:79:2e:14:66:53:f8: 71:49:32:1d:ba:12:ab:ad:a7:c6:33:72:99:20:e5:05:9d:23: 48:06:1a:0a:9a:76:09:96:c2:c5:a0:a7:1e:e9:ed:ae:5a:1f: 5e:31:a2:aa:60:37:c9:0e:95:e6:7a:60:bf:93:31:86:03:88: d0:bf:2d:38:0a:64:13:a4:39:a6:90:98:c0:15:2a:b4:27:d9: 91:55:bc:fb:78:d0:e0:79:a8:e6:6d:00:3c:0b:f3:e3:86:8b: ac:95:0b:9f:8c:b4:8a:8c:12:21:d6:94:06:dd:80:05:34:f9: e9:6e:36:cc:d8:22:d7:7f:0e:03:d7:14:2b:ee:76:10:7c:2c: bb:74:b0:51:20:b6:99:4b:15:68:74:a0:a2:9a:b9:c1:de:f2: 48:aa:1e:54:16:9b:9f:f9:67:2d:98:ca:bd:2c:13:86:82:a1: 67:61:17:fc:3a:8b:34:78:92:01:d6:4c:5f:d9:30:3d:25:ca: f7:95:16:32 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFS1hwx6l6XjTC95X0RwYgLuzK8EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTYyMDQwWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmU0YWViNjE3NTE1MjA4ODcwNGY4MGY1ZmI5YzA3Nzcz YzU0YWZhOWRkYTA0YTk0ZDA1ZDNhNDRlNDk0YWYxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVN7pPHpXXJk4Uo+GDWU+ZxliOGdbAmrZlEenz+pq9zv8P sZHbmQQggROzYo78BzRKxFozU14XZM2bHYdk/HrpUnmiUIorzi/knJF7Z/EH+xsW fEOWu+O/JkWb69Zt+rMD8AnZMU+X93bNSUZRzRs8lED+35bWA9PwgAPEq03MCNBo E9WR10DtOol+Tj8e03cW0SSjeEHLAM31NC2g2PB/EYSfFkoXsmCI+N4IaDtnsNn8 s7oVD/MBZfWQ4duLghD4yH3/NW5cPz2mkCnAK53m6TYdlBv5lwMxqS4dJnBeKfw5 3kRwK8bvRv1SU0RoeFPz7xj1aW1urUY2Qat/vn1/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU0zHpbEZ1RWBBLXsbRCsQualQKqswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmN2JlOGUwLTYyZTYtNDg3MS05NGUwLTYxMDRlZGY5Y2JmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB82IDANBgkqhkiG9w0BAQsFAAOCAQEAFk8dU9Eutdes5iBjxBKbJamC +SKpK2dKE8CeympXm1Zxi9FJctLrmWZo3IkXHeOm4ddQ6yK9kD0DveOqoyfhuPvv eS4UZlP4cUkyHboSq62nxjNymSDlBZ0jSAYaCpp2CZbCxaCnHuntrlofXjGiqmA3 yQ6V5npgv5MxhgOI0L8tOApkE6Q5ppCYwBUqtCfZkVW8+3jQ4Hmo5m0APAvz44aL rJULn4y0iowSIdaUBt2ABTT56W42zNgi138OA9cUK+52EHwsu3SwUSC2mUsVaHSg opq5wd7ySKoeVBabn/lnLZjKvSwThoKhZ2EX/DqLNHiSAdZMX9kwPSXK95UWMg== -----END CERTIFICATE-----Generated at Wed Apr 16 17:08:54 2025 by rpki-client