$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e0898eb-8b46-464e-b7fa-c282ae4d211a.roa File: 1e0898eb-8b46-464e-b7fa-c282ae4d211a.roa (raw, json) Hash identifier: 4rAGBAMs31DAW40K59bwlRzRE1hF6dLSSiO8Gme1jPE= Subject key identifier: B3:75:24:BF:3E:7B:46:28:96:81:CC:9C:4B:E8:01:9C:A1:21:9C:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 730B6ED486254A7AFC1162065B57E1030CA229D2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e0898eb-8b46-464e-b7fa-c282ae4d211a.roa Signing time: Mon 19 May 2025 16:30:26 +0000 ROA not before: Mon 19 May 2025 16:30:26 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:6080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0b:6e:d4:86:25:4a:7a:fc:11:62:06:5b:57:e1:03:0c:a2:29:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:30:26 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=89200adf71468abaae0cc1ba60a47408a63968c814f7abdcc709c294f1bd3ca8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:46:c2:ed:c2:b8:04:54:26:7d:47:6a:67:77: 52:c9:56:f3:6a:26:77:93:1c:fd:d7:bf:63:c8:d7: e7:a8:37:56:77:0f:4f:17:ef:39:77:12:b1:16:44: 62:f8:a7:25:9e:e1:f1:40:f5:5f:e4:dc:c0:8f:12: 21:c6:cb:16:15:cc:f2:72:5a:35:91:40:00:37:fb: 50:37:73:54:2a:69:7d:d9:c1:f7:dc:e2:8e:af:56: 0b:d7:ee:64:0d:71:76:8f:89:71:39:89:e5:66:0d: a0:81:f8:17:ac:7b:7e:a2:8e:23:98:2f:07:00:61: 22:41:36:1a:66:05:1f:8e:ab:e2:b8:a9:9f:c6:58: 39:df:c5:01:ef:be:11:65:e6:07:52:72:2b:26:0d: d0:42:20:12:38:8e:c6:6a:97:1e:46:e1:6a:5b:67: 96:e2:74:10:a5:c4:72:3f:04:e1:e6:ab:3d:4f:fe: b7:2d:eb:c4:81:93:b4:ff:69:18:ca:79:55:1f:ea: 3e:ce:05:02:25:91:80:46:f7:2c:2e:0a:ae:59:34: 69:1f:4e:e7:2d:d3:84:08:b3:08:46:39:85:19:4f: d7:d0:67:62:48:be:96:73:b5:9a:c5:f4:1e:f6:05: 9e:68:92:60:22:69:a2:74:74:cc:66:6b:92:b5:8b: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:75:24:BF:3E:7B:46:28:96:81:CC:9C:4B:E8:01:9C:A1:21:9C:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e0898eb-8b46-464e-b7fa-c282ae4d211a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:6080::/46 Signature Algorithm: sha256WithRSAEncryption 33:c6:f0:04:5b:d5:98:1b:91:da:ed:ef:b5:7b:1c:b9:66:2e: 03:29:45:bf:9f:aa:f2:1e:5d:d5:29:85:ff:de:f4:33:31:c1: 0e:4f:eb:1d:53:ae:36:c7:6e:3d:4e:4a:08:70:a7:35:8b:3d: 72:63:d9:ae:8d:4a:51:68:8d:b0:93:6b:cb:f9:3d:9b:60:3e: 9c:42:a0:e3:51:41:dc:09:b9:03:22:a7:aa:cd:8a:81:50:db: a9:39:4a:5a:fe:62:f0:76:8d:e7:0d:8f:5d:51:f0:39:71:68: e2:fe:5b:10:86:c5:73:de:d5:03:ef:74:8d:d8:7b:10:99:2b: f1:c9:d0:a9:87:fa:4b:54:ec:76:0f:d9:7a:03:51:38:8f:bb: 99:aa:82:6f:60:e7:4c:30:4a:2a:b6:a3:b3:5c:fe:15:fd:07: 31:d0:fd:43:29:cf:a9:b6:eb:10:2d:bc:cb:fb:f1:eb:35:9d: 17:45:82:28:06:15:a5:5f:00:af:15:e7:8b:bc:69:2b:e1:a4: 0c:1d:8c:c1:9c:1e:8e:1a:63:b2:a0:bc:50:24:95:b9:f1:ce: 51:67:73:45:ba:e4:aa:22:53:70:1c:55:43:78:32:a8:f4:2a: cd:26:c7:5a:f3:ce:b9:c6:a1:ff:19:5f:39:5d:8b:dd:ea:e0: a4:25:2f:d6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcwtu1IYlSnr8EWIGW1fhAwyiKdIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTYzMDI2WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTIwMGFkZjcxNDY4YWJhYWUwY2MxYmE2MGE0NzQwOGE2 Mzk2OGM4MTRmN2FiZGNjNzA5YzI5NGYxYmQzY2E4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTRsLtwrgEVCZ9R2pnd1LJVvNqJneTHP3Xv2PI1+eoN1Z3 D08X7zl3ErEWRGL4pyWe4fFA9V/k3MCPEiHGyxYVzPJyWjWRQAA3+1A3c1QqaX3Z wffc4o6vVgvX7mQNcXaPiXE5ieVmDaCB+Bese36ijiOYLwcAYSJBNhpmBR+Oq+K4 qZ/GWDnfxQHvvhFl5gdScismDdBCIBI4jsZqlx5G4WpbZ5bidBClxHI/BOHmqz1P /rct68SBk7T/aRjKeVUf6j7OBQIlkYBG9ywuCq5ZNGkfTuct04QIswhGOYUZT9fQ Z2JIvpZztZrF9B72BZ5okmAiaaJ0dMxma5K1i62lAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUs3Ukvz57RiiWgcycS+gBnKEhnCYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFlMDg5OGViLThiNDYtNDY0ZS1iN2ZhLWMyODJhZTRkMjExYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pYIAwDQYJKoZIhvcNAQELBQADggEBADPG8ARb1Zgbkdrt77V7HLlm LgMpRb+fqvIeXdUphf/e9DMxwQ5P6x1TrjbHbj1OSghwpzWLPXJj2a6NSlFojbCT a8v5PZtgPpxCoONRQdwJuQMip6rNioFQ26k5Slr+YvB2jecNj11R8DlxaOL+WxCG xXPe1QPvdI3YexCZK/HJ0KmH+ktU7HYP2XoDUTiPu5mqgm9g50wwSiq2o7Nc/hX9 BzHQ/UMpz6m26xAtvMv78es1nRdFgigGFaVfAK8V54u8aSvhpAwdjMGcHo4aY7Kg vFAklbnxzlFnc0W65KoiU3AcVUN4Mqj0Ks0mx1rzzrnGof8ZXzldi93q4KQlL9Y= -----END CERTIFICATE-----Generated at Sun Jun 1 04:36:35 2025 by rpki-client