$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1911b766-c65e-4841-b9a2-a47621e5ac42.roa File: 1911b766-c65e-4841-b9a2-a47621e5ac42.roa (raw, json) Hash identifier: A6kW+oknWzjmNSG/gQIIJ4PH0e+H50p8qwF6/Et3ato= Subject key identifier: D4:D0:21:ED:A1:2B:44:61:1A:AC:A1:09:E7:D3:DF:82:41:29:CC:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D9CA493229EC6873440A38EF6BD862F9D51E661 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1911b766-c65e-4841-b9a2-a47621e5ac42.roa Signing time: Fri 30 May 2025 00:10:32 +0000 ROA not before: Fri 30 May 2025 00:10:32 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ffc:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9c:a4:93:22:9e:c6:87:34:40:a3:8e:f6:bd:86:2f:9d:51:e6:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 30 00:10:32 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=a365e71336839ab2cb490e81d6770f7b9a79901f96ec698f5001ab58906f4e3b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c1:a7:97:ca:f9:8c:ab:6d:1a:d8:e8:8b:5a: 20:cc:f8:4b:7a:00:0a:d7:97:ab:47:3b:8b:a0:c0: 44:cc:be:d8:5a:98:4c:45:95:ed:3b:5c:61:8a:54: 65:e4:b6:eb:10:bc:d5:18:63:e7:fb:eb:61:d1:36: c0:e3:46:2a:37:93:bf:df:53:e0:cb:5d:79:22:ae: 87:d6:d5:5f:b5:99:c8:c3:dc:73:e1:d9:6e:2a:52: 97:21:59:54:00:6a:d1:f6:a6:87:d9:b2:f8:5f:f9: 65:e5:ae:aa:e5:58:e3:5b:d4:2b:38:35:9d:84:ca: 55:29:64:d7:24:73:f8:aa:90:2e:93:8c:e3:b8:3c: 5f:0d:13:89:43:01:18:dd:b8:a2:9a:02:eb:ca:66: ed:39:b1:b7:fd:2a:d2:6a:b6:e3:b8:89:8a:2f:18: b8:4d:32:20:95:95:6e:a6:4f:94:3a:d0:d7:91:14: d7:e1:48:44:33:24:86:9d:36:2b:65:4a:90:85:70: 2d:a1:59:70:20:25:fd:01:01:6d:09:2a:b4:9f:e6: da:39:f3:87:d8:ed:69:a7:ff:2c:9b:96:f6:fa:dd: 58:5b:3e:05:bb:79:88:e9:a0:ac:36:0f:83:d7:a5: d9:4c:ff:f0:dd:05:2f:6e:10:96:3b:fd:f9:9e:ab: 67:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D0:21:ED:A1:2B:44:61:1A:AC:A1:09:E7:D3:DF:82:41:29:CC:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1911b766-c65e-4841-b9a2-a47621e5ac42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffc:2000::/40 Signature Algorithm: sha256WithRSAEncryption 15:74:b6:fe:5e:66:0f:0c:1f:fb:6a:22:cc:6d:3d:3e:56:42: ae:74:69:69:3f:7f:34:74:b2:8d:30:ae:af:d3:9f:9d:3a:ec: 13:a5:8b:b0:ab:7b:bd:a3:32:b4:84:96:16:76:9e:bd:b6:c1: 66:6e:ea:db:d9:a9:3b:7b:25:d0:40:02:c4:87:35:c0:f7:42: ca:e1:33:42:ec:43:0f:36:97:28:8c:84:09:4b:a6:92:09:cd: 17:1f:6a:40:c8:a0:9b:be:39:00:aa:a5:83:2a:25:2c:80:41: db:e8:c2:05:7d:fd:e7:af:23:1c:1e:40:46:e8:99:bc:b0:0c: 57:28:e2:17:b8:d6:a1:98:18:3a:cd:48:ac:bf:67:91:bc:91: e5:c6:f5:c9:8d:f0:e2:8b:1d:9e:7f:09:69:90:69:16:65:9e: 8a:69:cd:c6:7a:c6:33:95:23:52:5f:c6:2a:5e:50:f9:91:7c: d8:24:d5:d8:76:26:a4:e7:76:65:c3:2b:57:51:71:21:9d:0d: 16:3e:1a:a2:b3:e4:9f:48:63:ab:74:d6:2e:d7:1b:7c:88:18: 4b:a8:49:80:f1:7d:27:6d:7a:f7:20:c1:4a:1a:e0:e4:58:36: 3b:98:76:bb:90:08:e1:09:a9:07:6e:e0:c4:15:d6:91:f1:a4: 5c:72:85:54 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXZykkyKexoc0QKOO9r2GL51R5mEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDAxMDMyWhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzY1ZTcxMzM2ODM5YWIyY2I0OTBlODFkNjc3MGY3Yjlh Nzk5MDFmOTZlYzY5OGY1MDAxYWI1ODkwNmY0ZTNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCEwaeXyvmMq20a2OiLWiDM+Et6AArXl6tHO4ugwETMvtha mExFle07XGGKVGXktusQvNUYY+f762HRNsDjRio3k7/fU+DLXXkirofW1V+1mcjD 3HPh2W4qUpchWVQAatH2pofZsvhf+WXlrqrlWONb1Cs4NZ2EylUpZNckc/iqkC6T jOO4PF8NE4lDARjduKKaAuvKZu05sbf9KtJqtuO4iYovGLhNMiCVlW6mT5Q60NeR FNfhSEQzJIadNitlSpCFcC2hWXAgJf0BAW0JKrSf5to584fY7Wmn/yyblvb63Vhb PgW7eYjpoKw2D4PXpdlM//DdBS9uEJY7/fmeq2enAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU1NAh7aErRGEarKEJ59PfgkEpzKMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5MTFiNzY2LWM2NWUtNDg0MS1iOWEyLWE0NzYyMWU1YWM0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/8IDANBgkqhkiG9w0BAQsFAAOCAQEAFXS2/l5mDwwf+2oizG09PlZC rnRpaT9/NHSyjTCur9OfnTrsE6WLsKt7vaMytISWFnaevbbBZm7q29mpO3sl0EAC xIc1wPdCyuEzQuxDDzaXKIyECUumkgnNFx9qQMigm745AKqlgyolLIBB2+jCBX39 568jHB5ARuiZvLAMVyjiF7jWoZgYOs1IrL9nkbyR5cb1yY3w4osdnn8JaZBpFmWe imnNxnrGM5UjUl/GKl5Q+ZF82CTV2HYmpOd2ZcMrV1FxIZ0NFj4aorPkn0hjq3TW LtcbfIgYS6hJgPF9J2169yDBShrg5Fg2O5h2u5AI4QmpB27gxBXWkfGkXHKFVA== -----END CERTIFICATE-----Generated at Sun Jun 1 04:34:35 2025 by rpki-client