$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba06761-3f21-4949-897c-ce569d7f3027.roa File: 1ba06761-3f21-4949-897c-ce569d7f3027.roa (raw, json) Hash identifier: z96ETRjexOU/Z+LWvVJz1D5beG/cqUShDD4wbsi37TU= Subject key identifier: CF:9C:5B:45:6C:B2:21:C5:02:90:4C:AC:3E:B4:78:EB:69:8C:48:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5B72C0EF2E2166A69DAFE87BB8B7791F8D5431FC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba06761-3f21-4949-897c-ce569d7f3027.roa Signing time: Mon 19 May 2025 16:00:26 +0000 ROA not before: Mon 19 May 2025 16:00:26 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:e080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:72:c0:ef:2e:21:66:a6:9d:af:e8:7b:b8:b7:79:1f:8d:54:31:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:00:26 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=35ec08291ab081d4add2b0d04f60c60909c6f65836bee42d9f70ef5a50e4eaee, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:02:b0:55:86:b5:8b:9d:2d:cb:04:d8:17: ad:39:3f:60:1c:ae:cf:16:30:cd:31:a5:45:86:8d: bf:4f:0d:87:d2:f5:44:05:ca:84:57:87:6b:18:f7: 07:85:fa:c0:fe:0f:69:e8:a5:36:64:43:26:62:5a: 10:3a:3c:3a:e1:c1:eb:ec:7c:3e:da:fd:c3:33:ec: 27:c2:e0:4f:9a:57:72:f2:12:1e:bb:ad:18:3a:9f: 8a:96:fe:81:ae:e1:b6:42:88:75:5f:66:0c:ba:b4: 88:79:55:20:a5:c1:80:f4:4a:42:a3:60:c5:5c:46: 9b:2d:08:0e:25:8f:42:5a:79:6b:79:f5:9d:42:1f: 82:e8:8f:f3:57:6b:60:91:10:59:7f:9f:6d:48:94: 58:84:31:a6:16:68:12:24:e9:14:ee:aa:86:02:0c: 7b:6c:5c:08:52:e1:a5:20:00:23:37:cd:eb:0c:b3: 79:63:88:ee:75:5a:f2:61:7c:d3:56:bc:b2:68:3a: 9b:4e:7d:c0:3f:dd:a1:1d:a8:78:f0:a6:70:c1:26: 03:bd:97:39:9b:ca:af:57:02:1e:36:2b:74:bc:ef: 09:5a:24:43:0e:8a:f3:d3:ae:16:c4:a6:18:2e:45: f9:0b:e1:bf:1e:d4:5a:66:2b:63:04:21:a5:0f:f6: 42:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9C:5B:45:6C:B2:21:C5:02:90:4C:AC:3E:B4:78:EB:69:8C:48:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba06761-3f21-4949-897c-ce569d7f3027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:e080::/46 Signature Algorithm: sha256WithRSAEncryption c7:34:47:ba:f1:0e:f1:dd:f6:cf:48:f7:35:5e:f5:29:14:65: c1:e5:00:b2:45:60:1e:c7:15:e6:50:d7:d4:b2:48:8a:45:fe: 0a:ee:ba:1b:71:4b:48:8f:16:d8:71:2a:a2:75:d9:8a:f2:b8: b9:c8:50:85:2e:b9:a3:28:93:26:e1:74:49:9e:47:b0:56:0f: 26:d5:27:bb:ee:93:bc:1c:d2:54:1a:71:ca:d1:97:bc:7d:29: 35:9c:0b:bc:a6:bb:7f:be:d2:1d:74:cf:6f:e8:5b:86:ee:6a: 1d:42:78:d8:f7:65:cc:0a:ff:6a:d4:7f:d8:e7:7f:f5:f2:97: 5f:1a:40:1c:a9:db:2b:0f:c5:c0:b7:f5:41:d7:8e:eb:5b:9c: 0c:05:bd:f1:a1:7a:03:69:2e:dd:0f:9d:fd:f0:4a:1a:24:3e: d2:f0:d3:7e:c3:d2:87:22:77:04:55:72:c7:49:4e:20:d1:04: c1:aa:a9:b0:8b:d7:16:b8:95:bd:38:87:75:dd:6d:58:9c:c0: 79:fc:5a:12:ea:2c:10:7e:db:d1:4c:3f:4e:40:c1:ec:f7:45: 14:76:d1:e1:ff:f9:82:f1:d7:a1:43:5c:b5:db:87:09:d5:68: 62:49:64:8c:50:68:c9:2e:77:45:f3:ff:c6:94:a8:e1:e7:4b: 0a:29:01:d3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUW3LA7y4hZqadr+h7uLd5H41UMfwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTYwMDI2WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNWVjMDgyOTFhYjA4MWQ0YWRkMmIwZDA0ZjYwYzYwOTA5 YzZmNjU4MzZiZWU0MmQ5ZjcwZWY1YTUwZTRlYWVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEXAKwVYa1i50tywTYF605P2Acrs8WMM0xpUWGjb9PDYfS 9UQFyoRXh2sY9weF+sD+D2nopTZkQyZiWhA6PDrhwevsfD7a/cMz7CfC4E+aV3Ly Eh67rRg6n4qW/oGu4bZCiHVfZgy6tIh5VSClwYD0SkKjYMVcRpstCA4lj0JaeWt5 9Z1CH4Loj/NXa2CREFl/n21IlFiEMaYWaBIk6RTuqoYCDHtsXAhS4aUgACM3zesM s3ljiO51WvJhfNNWvLJoOptOfcA/3aEdqHjwpnDBJgO9lzmbyq9XAh42K3S87wla JEMOivPTrhbEphguRfkL4b8e1FpmK2MEIaUP9kLdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUz5xbRWyyIcUCkEysPrR462mMSAwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFiYTA2NzYxLTNmMjEtNDk0OS04OTdjLWNlNTY5ZDdmMzAyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/74IAwDQYJKoZIhvcNAQELBQADggEBAMc0R7rxDvHd9s9I9zVe9SkU ZcHlALJFYB7HFeZQ19SySIpF/gruuhtxS0iPFthxKqJ12YryuLnIUIUuuaMokybh dEmeR7BWDybVJ7vuk7wc0lQaccrRl7x9KTWcC7ymu3++0h10z2/oW4buah1CeNj3 ZcwK/2rUf9jnf/Xyl18aQByp2ysPxcC39UHXjutbnAwFvfGhegNpLt0Pnf3wShok PtLw037D0ocidwRVcsdJTiDRBMGqqbCL1xa4lb04h3XdbVicwHn8WhLqLBB+29FM P05Awez3RRR20eH/+YLx16FDXLXbhwnVaGJJZIxQaMkud0Xz/8aUqOHnSwopAdM= -----END CERTIFICATE-----Generated at Sun Jun 8 13:47:17 2025 by rpki-client