$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f9f8cfc-af6f-4762-be5b-b751fbd145fb.roa File: 0f9f8cfc-af6f-4762-be5b-b751fbd145fb.roa (raw, json) Hash identifier: WZmUDkPr5HID0uavgtFZx/yZBqrlJIjKS2vRsG7c8Xw= Subject key identifier: 63:AE:17:26:25:CA:39:EB:2B:30:4B:2B:42:0E:D6:B7:0B:3F:FB:90 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 56D24011FE76E73C9F71361CB7C72DC39BA43182 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f9f8cfc-af6f-4762-be5b-b751fbd145fb.roa Signing time: Mon 12 May 2025 15:20:19 +0000 ROA not before: Mon 12 May 2025 15:20:19 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fbb:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d2:40:11:fe:76:e7:3c:9f:71:36:1c:b7:c7:2d:c3:9b:a4:31:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 15:20:19 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=d7d719d8b31dd79a5034441962818b746b4c714f564e8550ae613571af1917f9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:51:77:e3:61:fe:bc:ae:92:b2:88:a4:cd:ef: 2f:a8:c7:50:65:67:4c:2e:3e:e7:11:6c:d2:10:6e: 27:f2:f9:26:7e:70:d1:92:31:b1:a6:2e:2a:ef:02: e9:6c:84:53:4f:cf:76:ab:a7:85:b7:71:83:a5:1a: 33:9e:b0:ea:fc:54:e1:77:ad:e8:21:f2:e9:6e:cc: c4:77:47:77:39:6a:d9:a8:93:4d:58:70:8e:06:c0: ed:62:80:dd:26:31:1e:83:24:78:76:19:76:80:48: 9f:21:0f:e1:14:be:9a:2b:00:34:a3:92:3c:68:36: 99:cc:c0:4a:08:d8:52:d2:b8:5b:55:d0:dc:fe:e9: df:bc:f9:0b:02:8a:ba:87:74:a1:42:3a:9a:43:31: 82:f3:2b:a0:f9:0a:84:21:bc:4a:35:71:47:02:98: 3e:23:be:5e:04:c7:ab:ec:6d:79:dc:2b:15:02:16: b9:f2:48:0d:bb:b7:45:51:ed:3b:97:77:27:86:44: 60:88:eb:46:9f:d5:90:f6:ca:c4:76:e6:21:d3:b8: 0b:ba:5e:97:55:91:7b:59:65:b4:19:bb:ce:71:7e: 7d:05:12:df:61:30:76:e2:08:82:f2:67:5c:c3:9d: cb:1b:7a:38:f7:65:7a:87:19:35:76:75:e0:3b:91: 4d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AE:17:26:25:CA:39:EB:2B:30:4B:2B:42:0E:D6:B7:0B:3F:FB:90 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f9f8cfc-af6f-4762-be5b-b751fbd145fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fbb:5000::/40 Signature Algorithm: sha256WithRSAEncryption 59:f4:01:74:ea:f6:3d:73:b7:5a:90:81:93:43:cf:9b:3b:ee: 85:a6:14:09:d8:32:ff:3e:a9:9b:1c:50:69:81:69:eb:6b:7d: 1e:2c:11:aa:f9:2e:2a:b9:09:cc:60:1c:ec:30:c5:32:22:93: c8:58:cc:18:de:c7:75:7c:9d:b9:b3:a6:4d:7f:1e:b4:20:cf: e0:02:1b:09:fa:1f:9e:af:a9:c7:a6:92:cb:10:da:35:1a:9f: f2:67:48:68:c8:1a:aa:a2:83:49:0a:f3:94:27:d2:00:fb:a7: 75:8b:7b:36:7c:f4:96:8c:35:e0:e2:79:d8:77:ce:1e:00:c3: 5d:14:52:f5:a2:bd:c3:d7:5f:41:28:bc:93:89:cd:87:1b:9e: 43:76:28:ba:1c:7c:42:ec:6d:d9:bd:14:10:23:d2:47:40:8a: bf:bb:fb:de:c7:38:12:57:c9:2d:7a:4f:35:48:43:13:05:3d: 7d:96:bf:b8:31:25:4f:81:ce:01:81:0e:d4:15:c6:f3:7e:e7: 35:6a:ff:9c:59:8a:13:80:e9:87:fb:6a:c5:be:c8:a0:59:58: ef:bc:e6:fd:13:74:0b:25:29:bb:fb:ea:f8:f5:2b:78:37:82: 97:e6:ac:b6:83:55:4c:6b:cd:ca:21:6d:e1:f7:ad:c3:90:5a: 54:db:77:13 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVtJAEf525zyfcTYct8ctw5ukMYIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEyMTUyMDE5WhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkN2Q3MTlkOGIzMWRkNzlhNTAzNDQ0MTk2MjgxOGI3NDZi NGM3MTRmNTY0ZTg1NTBhZTYxMzU3MWFmMTkxN2Y5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjUXfjYf68rpKyiKTN7y+ox1BlZ0wuPucRbNIQbify+SZ+ cNGSMbGmLirvAulshFNPz3arp4W3cYOlGjOesOr8VOF3regh8uluzMR3R3c5atmo k01YcI4GwO1igN0mMR6DJHh2GXaASJ8hD+EUvporADSjkjxoNpnMwEoI2FLSuFtV 0Nz+6d+8+QsCirqHdKFCOppDMYLzK6D5CoQhvEo1cUcCmD4jvl4Ex6vsbXncKxUC FrnySA27t0VR7TuXdyeGRGCI60af1ZD2ysR25iHTuAu6XpdVkXtZZbQZu85xfn0F Et9hMHbiCILyZ1zDncsbejj3ZXqHGTV2deA7kU1hAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUY64XJiXKOesrMEsrQg7Wtws/+5AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBmOWY4Y2ZjLWFmNmYtNDc2Mi1iZTViLWI3NTFmYmQxNDVmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+7UDANBgkqhkiG9w0BAQsFAAOCAQEAWfQBdOr2PXO3WpCBk0PPmzvu haYUCdgy/z6pmxxQaYFp62t9HiwRqvkuKrkJzGAc7DDFMiKTyFjMGN7HdXydubOm TX8etCDP4AIbCfofnq+px6aSyxDaNRqf8mdIaMgaqqKDSQrzlCfSAPundYt7Nnz0 low14OJ52HfOHgDDXRRS9aK9w9dfQSi8k4nNhxueQ3Youhx8Quxt2b0UECPSR0CK v7v73sc4ElfJLXpPNUhDEwU9fZa/uDElT4HOAYEO1BXG837nNWr/nFmKE4Dph/tq xb7IoFlY77zm/RN0CyUpu/vq+PUreDeCl+astoNVTGvNyiFt4fetw5BaVNt3Ew== -----END CERTIFICATE-----Generated at Sun Jun 1 04:34:39 2025 by rpki-client