$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bf5a1ea-38c0-4ced-acd0-3ceb6bf26faf.roa File: 2bf5a1ea-38c0-4ced-acd0-3ceb6bf26faf.roa (raw, json) Hash identifier: sTUKPWdEO08DPFB4chpx1ymNcNlEAy6vpxeCFgICVsE= Subject key identifier: 1E:8F:7E:8B:A9:49:30:AA:85:8B:0C:6F:81:11:45:F4:01:2C:51:0B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 494D077844F472162FF54E3EB74E115DB209219D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bf5a1ea-38c0-4ced-acd0-3ceb6bf26faf.roa Signing time: Tue 08 Apr 2025 00:10:31 +0000 ROA not before: Tue 08 Apr 2025 00:10:31 +0000 ROA not after: Tue 13 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01:4806::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4d:07:78:44:f4:72:16:2f:f5:4e:3e:b7:4e:11:5d:b2:09:21:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 8 00:10:31 2025 GMT Not After : May 13 23:59:59 2025 GMT Subject: serialNumber=bcb3b5037cdb79bbc373dc0e7f78301564865226b875264936b63063b7c84e92, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:49:db:f1:25:a5:09:1a:30:10:2d:45:94:af: 72:cf:e0:ed:73:93:67:6d:c2:03:96:03:34:2f:93: 3d:ab:95:b3:2a:fe:5b:93:35:d4:2f:ab:3a:ff:20: a3:02:9b:8a:e3:d4:34:51:39:5f:b5:f0:31:da:7a: 14:57:16:50:35:58:92:c2:be:14:38:2f:e3:52:df: 0c:24:de:d7:b5:0f:6c:15:00:35:3a:22:a1:6a:97: a4:cf:e5:4a:8f:75:85:95:21:69:4c:d1:3f:8e:34: 0f:f8:72:07:f9:7b:0f:48:26:bb:ac:66:e1:62:cd: e3:8e:bb:79:a4:0f:93:8c:3f:a2:bf:38:bf:71:2e: 66:12:72:f0:39:ed:52:a0:64:1d:5f:05:66:3e:08: b4:9e:7f:65:f4:c5:2b:97:6c:66:b0:7a:98:6c:8e: 23:be:fc:49:6f:72:12:59:ab:d8:1b:af:d8:82:94: bd:19:d2:27:39:f2:4d:b2:39:ca:a0:fc:b1:cc:01: b9:10:62:da:d4:5c:5a:cf:99:d3:d0:53:50:34:a3: ca:a1:e9:bf:b5:02:d6:6d:1a:c6:ae:cf:ea:e0:05: 70:02:8f:4a:58:c6:3e:80:6b:fc:da:6a:90:44:93: 91:d1:fd:e9:bd:58:5c:77:8e:8b:65:cb:d1:46:67: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8F:7E:8B:A9:49:30:AA:85:8B:0C:6F:81:11:45:F4:01:2C:51:0B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bf5a1ea-38c0-4ced-acd0-3ceb6bf26faf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4806::/47 Signature Algorithm: sha256WithRSAEncryption c9:a6:bb:ce:9f:15:d9:c6:84:f8:1d:88:ca:4b:5b:5a:25:22: a1:ca:f5:78:75:c9:1f:95:c5:19:5b:6a:79:35:ca:47:4b:2e: 95:fa:79:a5:d6:7a:10:44:2d:05:eb:67:79:15:7e:64:01:9e: 80:2a:a1:ff:ab:6f:49:08:ea:0e:72:f0:0a:e2:56:ae:4e:8d: 40:b1:0b:c7:8d:95:78:10:45:39:fb:48:11:38:1d:81:df:50: 3a:37:9a:a0:66:03:7e:95:e0:d9:33:18:94:ea:04:b4:47:8f: 58:61:80:95:b3:ef:61:ea:2e:50:cc:f0:44:f1:07:8f:0b:21: 97:5b:bd:70:66:17:78:16:b8:bf:bd:61:e4:ee:84:59:44:b6: d6:b7:59:2d:62:56:79:69:70:69:39:16:f4:99:70:23:88:b1: 50:b5:b5:9d:27:36:82:08:02:91:70:ca:62:4f:6c:32:19:45: cb:6e:c0:4b:ff:17:19:33:55:db:17:2f:a8:98:7a:17:2a:07: 6d:05:8a:70:7e:ca:8c:74:a0:a5:34:4e:6e:ce:58:e6:39:c6: 7e:fe:d1:46:9b:a7:e3:d7:be:93:72:36:d4:21:82:43:d1:c1: 04:65:eb:40:41:9a:28:df:9c:6d:0f:6f:8b:4e:96:25:74:5f: c6:af:b7:b0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSU0HeET0chYv9U4+t04RXbIJIZ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAxMDMxWhcNMjUwNTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiY2IzYjUwMzdjZGI3OWJiYzM3M2RjMGU3Zjc4MzAxNTY0 ODY1MjI2Yjg3NTI2NDkzNmI2MzA2M2I3Yzg0ZTkyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrSdvxJaUJGjAQLUWUr3LP4O1zk2dtwgOWAzQvkz2rlbMq /luTNdQvqzr/IKMCm4rj1DRROV+18DHaehRXFlA1WJLCvhQ4L+NS3wwk3te1D2wV ADU6IqFql6TP5UqPdYWVIWlM0T+ONA/4cgf5ew9IJrusZuFizeOOu3mkD5OMP6K/ OL9xLmYScvA57VKgZB1fBWY+CLSef2X0xSuXbGawephsjiO+/ElvchJZq9gbr9iC lL0Z0ic58k2yOcqg/LHMAbkQYtrUXFrPmdPQU1A0o8qh6b+1AtZtGsauz+rgBXAC j0pYxj6Aa/zaapBEk5HR/em9WFx3jotly9FGZ6x3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHo9+i6lJMKqFiwxvgRFF9AEsUQswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZjVhMWVhLTM4YzAtNGNlZC1hY2QwLTNjZWI2YmYyNmZhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSAYwDQYJKoZIhvcNAQELBQADggEBAMmmu86fFdnGhPgdiMpLW1ol IqHK9Xh1yR+VxRlbank1ykdLLpX6eaXWehBELQXrZ3kVfmQBnoAqof+rb0kI6g5y 8AriVq5OjUCxC8eNlXgQRTn7SBE4HYHfUDo3mqBmA36V4NkzGJTqBLRHj1hhgJWz 72HqLlDM8ETxB48LIZdbvXBmF3gWuL+9YeTuhFlEtta3WS1iVnlpcGk5FvSZcCOI sVC1tZ0nNoIIApFwymJPbDIZRctuwEv/FxkzVdsXL6iYehcqB20FinB+yox0oKU0 Tm7OWOY5xn7+0Uabp+PXvpNyNtQhgkPRwQRl60BBmijfnG0Pb4tOliV0X8avt7A= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:29 2025 by rpki-client