$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0992f6b6-f981-4d5b-a3e8-8984c1898507.roa File: 0992f6b6-f981-4d5b-a3e8-8984c1898507.roa (raw, json) Hash identifier: Ew8x1DDq9nwp0N5rdBRD7iVoKAPCWJ3WzoyHaYU7aVs= Subject key identifier: 2B:95:BA:3D:24:C8:18:ED:6B:C3:7A:9F:93:C5:D5:D1:60:2A:55:A4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 29CB76B5B308AB4E2E9068AF29D5E6A52AEDCCB9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0992f6b6-f981-4d5b-a3e8-8984c1898507.roa Signing time: Mon 19 May 2025 16:21:54 +0000 ROA not before: Mon 19 May 2025 16:21:54 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ffb:80c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cb:76:b5:b3:08:ab:4e:2e:90:68:af:29:d5:e6:a5:2a:ed:cc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:21:54 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=e60814adc9f594c4b8ccdec0a9693e44dc7ebdf1f0433c48e67e0c0e6209e081, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7a:90:ba:ad:ff:fd:c1:89:9d:03:3e:dd:ce: 6c:70:3b:23:20:6f:23:9d:f1:07:6b:67:25:5e:2a: 60:f7:d3:23:7c:64:af:5b:91:c1:dd:7e:6b:95:5e: 5e:7a:7c:66:da:11:57:7f:96:a0:83:61:29:29:81: 0d:28:0f:a4:9e:b6:a0:c8:1a:c4:af:90:ee:2b:31: 97:2f:c3:85:9a:7d:b6:5f:b6:14:a9:41:1d:6e:55: 25:80:92:19:78:3b:54:6d:ae:74:9d:de:8f:50:ee: dc:52:b5:e1:c6:dd:7c:43:22:3e:0b:43:7b:fc:8c: 25:02:d1:65:21:11:ec:29:57:4f:72:88:76:87:c5: 36:1c:2e:2c:a1:71:43:e7:da:e2:0b:d9:f1:cd:f4: f9:e2:3f:6f:ee:39:85:c9:c9:44:45:5a:30:66:37: a1:46:6c:07:20:31:44:e6:aa:dd:14:bf:fc:28:db: 71:d5:d0:d7:07:ad:55:48:06:6d:42:30:05:c7:f7: c8:01:33:97:27:61:f5:fd:47:4d:8d:b2:df:84:91: 68:1f:8e:13:12:16:32:c8:e8:81:9c:07:f2:f7:e2: 6f:00:34:ca:6d:9d:d7:bb:d4:21:ee:8a:24:ce:6b: df:5a:aa:51:9e:ca:f2:6f:6c:61:9d:84:cd:5a:cc: 25:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:95:BA:3D:24:C8:18:ED:6B:C3:7A:9F:93:C5:D5:D1:60:2A:55:A4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0992f6b6-f981-4d5b-a3e8-8984c1898507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:80c0::/46 Signature Algorithm: sha256WithRSAEncryption a5:d2:3f:38:bd:96:79:1e:f6:1c:17:df:8f:58:72:af:64:da: c3:6a:c7:4b:03:06:07:d6:98:e2:65:99:07:cd:5c:c0:2c:fd: 5c:f0:c3:83:e5:c7:e7:d4:f5:98:6e:b8:70:6f:cc:d1:35:d6: b7:2b:15:d4:0a:e2:89:b8:75:8f:54:c6:42:d1:d7:1e:ea:d9: 66:a2:77:5b:97:b6:7a:64:58:71:bb:c6:1a:97:34:33:d1:91: 5a:43:7b:77:ed:da:e4:76:35:df:3d:7b:8c:2c:6d:10:bc:9f: 30:f5:e1:5c:68:d4:6b:14:b4:f6:c3:55:d1:21:6c:0b:63:2d: a9:81:e5:ad:70:97:87:9b:e3:ff:80:08:66:32:30:1c:ee:bd: 6a:3d:ac:aa:e4:1b:d2:04:89:99:c6:30:12:0b:0d:21:2f:c3: 9e:13:dc:04:4e:4e:a2:7e:dd:6b:14:61:c7:72:9c:08:34:ad: bc:a8:c7:40:72:89:8b:48:8b:b6:22:d3:8c:79:57:db:20:0e: 7c:00:81:dc:40:3c:69:db:90:fb:7d:34:35:28:ea:17:15:f8: 8a:33:e4:73:ab:11:fb:7f:46:06:8f:d2:80:50:5c:d6:31:52: f8:b8:04:b4:79:15:43:79:6c:c7:db:8d:2a:6f:e8:37:e5:06: 27:f8:ae:9e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKct2tbMIq04ukGivKdXmpSrtzLkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTYyMTU0WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjA4MTRhZGM5ZjU5NGM0YjhjY2RlYzBhOTY5M2U0NGRj N2ViZGYxZjA0MzNjNDhlNjdlMGMwZTYyMDllMDgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNepC6rf/9wYmdAz7dzmxwOyMgbyOd8QdrZyVeKmD30yN8 ZK9bkcHdfmuVXl56fGbaEVd/lqCDYSkpgQ0oD6SetqDIGsSvkO4rMZcvw4WafbZf thSpQR1uVSWAkhl4O1RtrnSd3o9Q7txSteHG3XxDIj4LQ3v8jCUC0WUhEewpV09y iHaHxTYcLiyhcUPn2uIL2fHN9PniP2/uOYXJyURFWjBmN6FGbAcgMUTmqt0Uv/wo 23HV0NcHrVVIBm1CMAXH98gBM5cnYfX9R02Nst+EkWgfjhMSFjLI6IGcB/L34m8A NMptnde71CHuiiTOa99aqlGeyvJvbGGdhM1azCVTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUK5W6PSTIGO1rw3qfk8XV0WAqVaQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA5OTJmNmI2LWY5ODEtNGQ1Yi1hM2U4LTg5ODRjMTg5ODUwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/7gMAwDQYJKoZIhvcNAQELBQADggEBAKXSPzi9lnke9hwX349Ycq9k 2sNqx0sDBgfWmOJlmQfNXMAs/Vzww4Plx+fU9ZhuuHBvzNE11rcrFdQK4om4dY9U xkLR1x7q2Waid1uXtnpkWHG7xhqXNDPRkVpDe3ft2uR2Nd89e4wsbRC8nzD14Vxo 1GsUtPbDVdEhbAtjLamB5a1wl4eb4/+ACGYyMBzuvWo9rKrkG9IEiZnGMBILDSEv w54T3AROTqJ+3WsUYcdynAg0rbyox0ByiYtIi7Yi04x5V9sgDnwAgdxAPGnbkPt9 NDUo6hcV+Ioz5HOrEft/RgaP0oBQXNYxUvi4BLR5FUN5bMfbjSpv6DflBif4rp4= -----END CERTIFICATE-----Generated at Sun Jun 1 04:57:11 2025 by rpki-client