$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f89be87-45c1-410c-99ee-05d9e524cb54.roa File: 0f89be87-45c1-410c-99ee-05d9e524cb54.roa (raw, json) Hash identifier: jvKAJNlibF5ZF8mVqExlAMWv8x4mkmXkVf1bqXHVn9o= Subject key identifier: FE:99:51:C8:3E:D2:5E:F6:88:E0:F0:63:49:EC:AE:41:27:6B:5E:A5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F331FAB7B14A4C201F130931CE98B710DC5CC5B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f89be87-45c1-410c-99ee-05d9e524cb54.roa Signing time: Mon 12 May 2025 15:10:29 +0000 ROA not before: Mon 12 May 2025 15:10:29 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff6:a400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:33:1f:ab:7b:14:a4:c2:01:f1:30:93:1c:e9:8b:71:0d:c5:cc:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 15:10:29 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=fd0a7a46955cd19faba7eabcbea0322d7bd8d8bb53e2e6c7e1e1c110be1a4107, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6b:16:5c:77:ec:b9:11:c2:4f:6d:4c:12:ca: c7:5b:12:2b:7e:05:55:b4:38:18:ea:bf:a4:8e:45: a0:6f:a0:88:b5:36:ac:0b:61:2c:8e:35:c5:e3:13: 23:a5:f9:17:c3:93:81:2a:ef:10:04:ae:35:f2:7e: 65:83:ce:5a:c9:c2:78:b8:a2:b4:10:8f:65:f8:2a: 99:cc:b2:df:66:49:14:f4:9e:ae:51:05:51:0c:f8: 16:76:25:d1:26:1a:87:64:8c:ad:32:5d:d5:bf:91: c6:52:e7:57:e1:74:37:1b:ce:b3:c9:45:0e:43:3f: 41:d7:e4:b7:ab:48:c6:25:4c:8b:23:a4:bb:6e:9c: 6e:46:9a:2a:0c:34:9d:a0:03:c0:0a:d3:77:02:a4: 43:a7:f7:73:2a:8a:b3:46:aa:c1:a3:ec:1f:ce:ab: ad:7a:c3:12:a7:ee:f5:e8:29:d1:9a:25:7a:d0:95: d2:f5:7c:1d:cb:38:30:48:12:1a:e3:05:7f:c4:c6: 13:5c:6b:a7:13:10:d0:2d:1b:c8:7e:0a:c4:af:c9: f9:f6:23:73:40:e2:21:6b:6b:82:9f:68:38:c0:ee: 23:9d:9e:09:72:13:54:56:c3:cc:74:03:32:87:1d: 12:2a:82:4e:29:b9:81:6a:00:7f:c9:6e:ff:c8:53: 06:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:99:51:C8:3E:D2:5E:F6:88:E0:F0:63:49:EC:AE:41:27:6B:5E:A5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f89be87-45c1-410c-99ee-05d9e524cb54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:a400::/40 Signature Algorithm: sha256WithRSAEncryption ae:50:d8:9b:ba:9e:64:32:6b:a3:99:e3:4c:1e:24:9f:5b:91: 61:5c:6e:05:28:24:35:93:c4:89:01:17:43:8a:2e:59:66:11: d6:23:fe:d6:b9:d9:8d:2f:b7:b3:8a:70:96:f2:96:7a:dd:96: b9:11:47:19:05:96:b9:71:1a:a1:a8:95:ec:16:09:ed:66:48: 4e:5e:16:a2:be:eb:98:a9:16:80:3e:b5:ab:67:5b:ef:48:af: c8:97:4c:03:c5:6d:01:05:e1:1f:19:d5:ba:8c:6e:98:9b:57: b5:4d:c3:8c:c7:59:9f:72:85:2d:67:bf:36:d1:d5:63:33:d2: 72:5f:00:e2:5f:df:6b:12:31:ac:5d:52:f9:20:a8:77:2e:46: d5:8b:1a:4f:3c:53:0a:bd:21:82:35:f4:0b:b9:54:7b:aa:27: ef:26:29:e7:43:00:4d:60:df:f2:e7:0d:2e:cf:fd:86:01:f2: d8:a3:e7:c2:b6:e4:5e:85:8b:52:83:a3:e5:cf:4e:5e:0f:c0: 55:03:55:a8:1d:73:3a:4c:c4:f9:50:90:2a:de:f5:03:81:35: ed:7e:4f:b1:32:4c:2f:74:ab:68:0e:35:89:46:73:22:19:36: 94:3e:6d:96:7e:84:07:02:d3:25:e1:0b:a9:d0:94:3b:43:97: 39:bb:98:53 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDzMfq3sUpMIB8TCTHOmLcQ3FzFswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEyMTUxMDI5WhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDBhN2E0Njk1NWNkMTlmYWJhN2VhYmNiZWEwMzIyZDdi ZDhkOGJiNTNlMmU2YzdlMWUxYzExMGJlMWE0MTA3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChaxZcd+y5EcJPbUwSysdbEit+BVW0OBjqv6SORaBvoIi1 NqwLYSyONcXjEyOl+RfDk4Eq7xAErjXyfmWDzlrJwni4orQQj2X4KpnMst9mSRT0 nq5RBVEM+BZ2JdEmGodkjK0yXdW/kcZS51fhdDcbzrPJRQ5DP0HX5LerSMYlTIsj pLtunG5GmioMNJ2gA8AK03cCpEOn93MqirNGqsGj7B/Oq616wxKn7vXoKdGaJXrQ ldL1fB3LODBIEhrjBX/ExhNca6cTENAtG8h+CsSvyfn2I3NA4iFra4KfaDjA7iOd nglyE1RWw8x0AzKHHRIqgk4puYFqAH/Jbv/IUwYFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU/plRyD7SXvaI4PBjSeyuQSdrXqUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmODliZTg3LTQ1YzEtNDEwYy05OWVlLTA1ZDllNTI0Y2I1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/2pDANBgkqhkiG9w0BAQsFAAOCAQEArlDYm7qeZDJro5njTB4kn1uR YVxuBSgkNZPEiQEXQ4ouWWYR1iP+1rnZjS+3s4pwlvKWet2WuRFHGQWWuXEaoaiV 7BYJ7WZITl4Wor7rmKkWgD61q2db70ivyJdMA8VtAQXhHxnVuoxumJtXtU3DjMdZ n3KFLWe/NtHVYzPScl8A4l/faxIxrF1S+SCody5G1YsaTzxTCr0hgjX0C7lUe6on 7yYp50MATWDf8ucNLs/9hgHy2KPnwrbkXoWLUoOj5c9OXg/AVQNVqB1zOkzE+VCQ Kt71A4E17X5PsTJML3SraA41iUZzIhk2lD5tln6EBwLTJeELqdCUO0OXObuYUw== -----END CERTIFICATE-----Generated at Sun Jun 1 05:20:01 2025 by rpki-client