$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f1d9458-2428-43f4-8951-9061986bfe05.roa File: 1f1d9458-2428-43f4-8951-9061986bfe05.roa (raw, json) Hash identifier: r6NoB9zTG8s9GGr9TkYE/ZsVbTKRjVTdSSg8L1x+OB8= Subject key identifier: 30:EE:DE:1E:AF:52:36:B3:92:39:91:D7:A2:70:1B:D6:1A:1A:10:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1D79D91B0C05174C3920215CBCFDF1D1A8567FF2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f1d9458-2428-43f4-8951-9061986bfe05.roa Signing time: Mon 19 May 2025 17:51:33 +0000 ROA not before: Mon 19 May 2025 17:51:33 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f15:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:79:d9:1b:0c:05:17:4c:39:20:21:5c:bc:fd:f1:d1:a8:56:7f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 17:51:33 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=3f7bd7571464f885898dcfeef5ea292bafdf2ff5917ae66311ac03c586b7e639, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:aa:fd:7b:2d:33:a6:28:98:3c:4e:18:ad: 3f:f2:c0:cf:33:bf:1c:86:09:60:68:75:66:b0:0a: 44:1b:73:09:8b:40:2b:d0:36:3a:f3:4e:47:a8:7b: 49:b8:39:18:a6:c6:5d:f4:f2:61:ab:ff:c8:0e:94: e3:53:00:91:f4:6b:0b:c7:b1:35:b4:37:81:16:67: 9c:fc:4a:f0:2e:2e:e7:dc:a7:9b:7e:40:c8:b8:09: d2:61:04:ee:4a:8a:12:f7:a8:cb:50:77:1d:e3:73: 42:e8:3b:cb:be:08:0a:99:7a:c6:05:ca:ba:c2:37: 73:39:7c:c7:79:ca:53:85:aa:c4:67:4c:5f:0a:ba: f6:e4:20:db:a7:70:b0:b3:c3:61:02:68:8b:35:e6: 6a:ab:46:72:34:da:27:98:7b:9e:e9:eb:b1:4f:29: 81:47:5f:ef:00:f2:5e:f9:e0:c3:f4:c8:d7:0f:77: 78:95:1e:e1:65:23:4b:bd:bb:4a:b9:1c:87:7e:2e: 4e:c4:9a:37:70:ad:b1:9d:2b:1a:8a:30:80:b8:61: 15:5b:8a:79:70:b8:d9:17:69:d2:ed:a3:b5:4b:1c: 4d:73:5c:a1:c5:ec:68:03:6b:b8:5e:ed:93:14:ea: d1:36:88:32:a7:b9:2c:87:5a:e2:61:06:c0:c6:3b: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EE:DE:1E:AF:52:36:B3:92:39:91:D7:A2:70:1B:D6:1A:1A:10:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f1d9458-2428-43f4-8951-9061986bfe05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f15:800::/38 Signature Algorithm: sha256WithRSAEncryption 02:1e:bf:61:9b:b2:f6:aa:b4:ad:0c:84:e5:a9:b8:57:47:e6: 3c:f5:63:78:73:6c:42:6b:51:17:c0:0a:7c:eb:62:96:32:7d: 3e:17:18:32:ed:95:1c:06:d2:1b:de:a7:fc:3f:f9:74:1f:2e: a8:0a:01:5e:33:1c:c0:7e:97:25:0c:67:e8:70:2b:3b:eb:39: 60:3d:99:08:27:38:1a:eb:90:58:b9:50:8e:99:ce:0f:8c:49: d7:9a:47:b1:7a:df:4a:57:bd:28:d9:2f:d3:5a:0a:c1:e7:ef: 2c:33:a6:52:3d:a7:bd:61:a0:d5:cf:35:d2:52:d8:3c:a8:a7: 27:de:15:65:4f:3e:fb:91:91:38:8a:be:d8:3a:2f:99:c2:82: 0c:a7:8f:5b:3b:c6:f2:4b:ea:4a:78:c0:da:d5:9a:79:e3:81: eb:8a:bf:2b:ce:b1:2e:5b:3c:9c:09:16:46:ad:ab:b0:31:4c: 33:79:11:6d:f2:1d:bc:c5:c2:45:b5:52:c2:8c:4a:9d:13:d0: 46:f6:88:a3:bf:bb:32:fb:1f:69:63:d8:ca:f2:07:15:0b:2c: 6a:64:cc:90:54:b8:dc:11:eb:25:e0:e9:d8:dc:e6:62:07:9b: 40:c7:42:54:dc:68:45:5e:3b:b3:0a:ee:0d:dd:54:23:ae:e1: 51:65:64:99 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHXnZGwwFF0w5ICFcvP3x0ahWf/IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTc1MTMzWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjdiZDc1NzE0NjRmODg1ODk4ZGNmZWVmNWVhMjkyYmFm ZGYyZmY1OTE3YWU2NjMxMWFjMDNjNTg2YjdlNjM5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5eKr9ey0zpiiYPE4YrT/ywM8zvxyGCWBodWawCkQbcwmL QCvQNjrzTkeoe0m4ORimxl308mGr/8gOlONTAJH0awvHsTW0N4EWZ5z8SvAuLufc p5t+QMi4CdJhBO5KihL3qMtQdx3jc0LoO8u+CAqZesYFyrrCN3M5fMd5ylOFqsRn TF8KuvbkINuncLCzw2ECaIs15mqrRnI02ieYe57p67FPKYFHX+8A8l754MP0yNcP d3iVHuFlI0u9u0q5HId+Lk7EmjdwrbGdKxqKMIC4YRVbinlwuNkXadLto7VLHE1z XKHF7GgDa7he7ZMU6tE2iDKnuSyHWuJhBsDGO3LrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMO7eHq9SNrOSOZHXonAb1hoaECMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmMWQ5NDU4LTI0MjgtNDNmNC04OTUxLTkwNjE5ODZiZmUwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAB8VCDANBgkqhkiG9w0BAQsFAAOCAQEAAh6/YZuy9qq0rQyE5am4V0fm PPVjeHNsQmtRF8AKfOtiljJ9PhcYMu2VHAbSG96n/D/5dB8uqAoBXjMcwH6XJQxn 6HArO+s5YD2ZCCc4GuuQWLlQjpnOD4xJ15pHsXrfSle9KNkv01oKwefvLDOmUj2n vWGg1c810lLYPKinJ94VZU8++5GROIq+2DovmcKCDKePWzvG8kvqSnjA2tWaeeOB 64q/K86xLls8nAkWRq2rsDFMM3kRbfIdvMXCRbVSwoxKnRPQRvaIo7+7MvsfaWPY yvIHFQssamTMkFS43BHrJeDp2NzmYgebQMdCVNxoRV47swruDd1UI67hUWVkmQ== -----END CERTIFICATE-----Generated at Sun Jun 1 05:13:47 2025 by rpki-client