$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d9b6ff-3f01-4607-84ed-49405cb324e7.roa File: a3d9b6ff-3f01-4607-84ed-49405cb324e7.roa (raw, json) Hash identifier: 49vduTrj6I5Zn05eh6/xdd7+JXSGui/xFEvA98SsDNY= Subject key identifier: B8:D2:A2:C8:63:10:F9:54:8A:94:BE:86:50:1C:05:3C:F9:FE:B6:9F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2FF6C20D02FA18DFD5353985A03174EE58BFA9DA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d9b6ff-3f01-4607-84ed-49405cb324e7.roa Signing time: Tue 22 Apr 2025 16:21:45 +0000 ROA not before: Tue 22 Apr 2025 16:21:45 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f70:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f6:c2:0d:02:fa:18:df:d5:35:39:85:a0:31:74:ee:58:bf:a9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 16:21:45 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=4227ab29bae1ee13aa3ad37bccde9755c03ce39218cb2f5ac14cfdceb5fc8147, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:67:ca:92:8a:5d:ac:dd:2d:9e:dd:54:51: 99:e8:b9:47:67:04:da:83:7b:c9:14:7e:d5:32:0d: 47:fb:30:94:4b:13:76:4d:1c:41:d2:54:8b:72:a4: 50:d2:44:b6:14:aa:57:88:6f:65:ff:09:05:14:0b: 7b:a1:c8:bb:62:3a:53:be:5e:a6:d3:14:82:85:9e: e9:88:fc:60:e6:2d:07:58:96:5a:dc:39:bf:7f:3c: d5:e2:3c:79:af:e6:b9:80:de:be:73:15:9b:e5:28: 7b:cc:c4:98:00:71:6a:55:33:d0:7a:75:ee:ad:97: 5c:a6:f7:e1:63:3f:b5:e2:81:0f:8b:bb:e0:2e:94: 25:4f:18:8b:f1:a5:18:53:d6:ee:c4:33:78:bc:c7: 38:6a:5a:89:94:dc:c7:24:07:80:f8:56:12:ea:18: 5e:25:b3:4d:20:c8:44:5a:be:ae:25:36:18:7a:f4: e1:09:88:c4:80:e4:31:5e:83:44:59:36:ac:db:ae: ff:73:09:b3:2a:92:00:db:70:9c:d7:15:57:18:07: 8a:9a:61:9a:9d:27:86:70:ec:8c:70:70:4c:52:a6: f1:9d:ac:ff:57:30:50:79:5e:1d:7f:2f:51:7f:3f: 15:2b:fa:48:8d:cc:1a:fc:aa:d9:6e:4f:85:27:5a: ea:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D2:A2:C8:63:10:F9:54:8A:94:BE:86:50:1C:05:3C:F9:FE:B6:9F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3d9b6ff-3f01-4607-84ed-49405cb324e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f70:4000::/40 Signature Algorithm: sha256WithRSAEncryption 33:b3:5a:03:ca:8c:da:0d:6a:58:8a:53:97:2e:9e:7b:44:7e: 80:58:5e:5b:90:05:db:95:b4:a1:ce:d2:78:12:e9:67:ea:12: 83:00:b7:99:b6:20:db:9a:5d:43:12:91:d2:46:57:bf:0b:f3: c5:a9:cc:f3:7b:ec:0a:9c:72:88:8c:29:7a:99:5f:71:f5:c5: 90:e3:2f:4d:73:31:24:f1:f0:db:93:2c:87:c8:76:95:9e:e2: 18:85:15:d0:34:d7:ae:f9:af:ad:08:80:c4:df:a7:8c:64:ad: 67:ae:58:38:2f:d8:cd:5c:09:54:63:4b:73:fd:4b:ec:9b:77: 12:a1:fb:25:30:d5:58:26:cf:a0:88:c2:a2:65:f4:03:e9:61: 21:a2:3a:f9:bd:31:b1:bc:32:b6:f9:5e:81:06:45:07:41:3d: 2a:08:4b:d5:36:dd:85:83:42:07:5e:b4:d1:a5:56:fa:fe:af: ae:18:18:71:14:42:6e:31:4b:e0:83:8f:03:52:04:5e:1f:4e: 56:93:a1:fd:9a:46:0c:1f:6a:71:40:ca:07:aa:2d:b4:04:50: e2:7c:f2:54:80:12:6b:1b:09:b4:5a:58:fa:93:e0:ad:81:81: 4b:45:cc:86:1c:11:c8:e1:66:b5:9e:ed:ee:ce:52:37:06:16: 07:83:d6:af -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUL/bCDQL6GN/VNTmFoDF07li/qdowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTYyMTQ1WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjI3YWIyOWJhZTFlZTEzYWEzYWQzN2JjY2RlOTc1NWMw M2NlMzkyMThjYjJmNWFjMTRjZmRjZWI1ZmM4MTQ3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCwGfKkopdrN0tnt1UUZnouUdnBNqDe8kUftUyDUf7MJRL E3ZNHEHSVItypFDSRLYUqleIb2X/CQUUC3uhyLtiOlO+XqbTFIKFnumI/GDmLQdY llrcOb9/PNXiPHmv5rmA3r5zFZvlKHvMxJgAcWpVM9B6de6tl1ym9+FjP7XigQ+L u+AulCVPGIvxpRhT1u7EM3i8xzhqWomU3MckB4D4VhLqGF4ls00gyERavq4lNhh6 9OEJiMSA5DFeg0RZNqzbrv9zCbMqkgDbcJzXFVcYB4qaYZqdJ4Zw7IxwcExSpvGd rP9XMFB5Xh1/L1F/PxUr+kiNzBr8qtluT4UnWuqdAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUuNKiyGMQ+VSKlL6GUBwFPPn+tp8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EzZDliNmZmLTNmMDEtNDYwNy04NGVkLTQ5NDA1Y2IzMjRlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9wQDANBgkqhkiG9w0BAQsFAAOCAQEAM7NaA8qM2g1qWIpTly6ee0R+ gFheW5AF25W0oc7SeBLpZ+oSgwC3mbYg25pdQxKR0kZXvwvzxanM83vsCpxyiIwp eplfcfXFkOMvTXMxJPHw25Msh8h2lZ7iGIUV0DTXrvmvrQiAxN+njGStZ65YOC/Y zVwJVGNLc/1L7Jt3EqH7JTDVWCbPoIjComX0A+lhIaI6+b0xsbwytvlegQZFB0E9 KghL1TbdhYNCB1600aVW+v6vrhgYcRRCbjFL4IOPA1IEXh9OVpOh/ZpGDB9qcUDK B6ottARQ4nzyVIASaxsJtFpY+pPgrYGBS0XMhhwRyOFmtZ7t7s5SNwYWB4PWrw== -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:27 2025 by rpki-client