$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fbc2657-4f39-44e6-9df2-4b8132378814.roa File: 1fbc2657-4f39-44e6-9df2-4b8132378814.roa (raw, json) Hash identifier: WG133xM1Sp6RJvFUw/m9nh+8R7Dg3ksaO2FjKlOEDn0= Subject key identifier: 2D:72:94:0B:90:9E:B7:D1:6F:97:F6:49:86:18:11:5D:A6:9C:57:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 711CA98F4FE95D0FEAF266908F74EE54A1F95E88 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fbc2657-4f39-44e6-9df2-4b8132378814.roa Signing time: Mon 19 May 2025 17:41:25 +0000 ROA not before: Mon 19 May 2025 17:41:25 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f32:a400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:1c:a9:8f:4f:e9:5d:0f:ea:f2:66:90:8f:74:ee:54:a1:f9:5e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 17:41:25 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=38928aad5f76a0f5f65ff2bce90937d78cc34267780486f1366f3bf5fd11b9a2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:33:b8:01:af:e8:dd:dc:f9:7f:50:aa:e5:89: bd:59:88:3b:fa:05:6e:16:e8:54:ff:3b:c4:37:02: ea:11:f2:78:fe:89:1d:71:1a:72:5e:fb:79:9d:5d: 79:8b:23:c6:99:c8:33:86:8f:dd:79:3c:6b:49:98: 58:35:50:6f:46:76:09:97:f5:5f:59:89:b8:12:24: d3:1f:1e:20:e2:1c:c4:96:7b:f6:17:d2:9b:a3:fb: fe:b9:a8:34:ae:bf:09:5b:c5:01:62:76:13:36:c6: 76:cc:ab:6e:0f:b3:12:bb:b8:12:4d:06:b0:a8:10: 38:5c:e6:dd:cc:bd:26:12:e3:2f:51:69:95:dc:05: 6e:c1:40:fc:7a:0a:9e:34:fd:fd:af:7f:b8:fe:16: 1a:b2:c0:b3:03:49:ad:cc:71:cf:f0:32:95:52:a7: 44:ed:39:68:52:0e:de:ed:69:83:6d:3f:90:5c:ca: 04:e3:ba:dd:aa:63:6b:3b:19:c1:6a:20:bf:45:1d: 68:d9:5d:97:a5:ec:66:29:03:b5:75:ce:03:a2:55: 39:19:7e:3a:67:ae:0e:42:32:00:11:51:22:d3:e2: fe:47:6f:dd:9f:cd:01:6a:98:cd:1a:05:b1:70:1b: bf:ea:61:2e:19:c3:45:49:0a:46:80:21:d3:f0:1f: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:72:94:0B:90:9E:B7:D1:6F:97:F6:49:86:18:11:5D:A6:9C:57:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fbc2657-4f39-44e6-9df2-4b8132378814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f32:a400::/40 Signature Algorithm: sha256WithRSAEncryption 62:3c:73:dd:dd:69:11:ec:51:c3:87:57:74:17:9a:7d:a2:39: a9:46:bf:d0:d9:a4:b1:7b:31:b6:9a:64:ce:3f:ac:c8:27:ea: 63:50:60:3a:b8:c9:bb:de:65:05:28:f4:16:af:5d:76:f6:ed: de:a1:77:0b:c9:bf:27:14:c8:c3:75:5e:39:7e:f1:d3:06:86: 7c:48:c4:81:7b:20:32:08:d9:72:5d:96:8d:4a:30:88:59:da: 0f:55:85:a0:5b:b4:18:2d:e8:75:f5:21:76:5b:41:70:a6:62: 83:58:45:b5:ec:24:c7:ca:a1:1f:12:f1:1b:eb:a4:d1:e3:58: ba:e3:20:54:c4:31:47:44:2e:41:aa:d9:b9:66:74:dd:a4:1a: 1f:ea:74:b8:55:fd:9c:14:ac:ee:ae:52:3b:f9:5e:a3:d6:e6: aa:4a:fb:7e:03:ca:13:02:5f:38:12:ae:93:0a:94:50:5a:2b: a2:a2:bf:41:92:d6:bb:cf:f5:0a:d6:1e:4d:1e:2e:76:47:e5: d4:98:60:10:7b:52:ab:a5:89:ea:6a:53:50:33:38:8c:bc:19: a9:97:d8:b7:f6:a1:79:15:f9:a2:8c:9e:db:b1:9c:0d:ea:a3: b1:3b:2e:a8:83:4e:a3:18:42:a2:38:98:f0:00:f0:86:74:b5: 1c:ba:2f:fa -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcRypj0/pXQ/q8maQj3TuVKH5XogwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTc0MTI1WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzODkyOGFhZDVmNzZhMGY1ZjY1ZmYyYmNlOTA5MzdkNzhj YzM0MjY3NzgwNDg2ZjEzNjZmM2JmNWZkMTFiOWEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSM7gBr+jd3Pl/UKrlib1ZiDv6BW4W6FT/O8Q3AuoR8nj+ iR1xGnJe+3mdXXmLI8aZyDOGj915PGtJmFg1UG9GdgmX9V9ZibgSJNMfHiDiHMSW e/YX0puj+/65qDSuvwlbxQFidhM2xnbMq24PsxK7uBJNBrCoEDhc5t3MvSYS4y9R aZXcBW7BQPx6Cp40/f2vf7j+FhqywLMDSa3Mcc/wMpVSp0TtOWhSDt7taYNtP5Bc ygTjut2qY2s7GcFqIL9FHWjZXZel7GYpA7V1zgOiVTkZfjpnrg5CMgARUSLT4v5H b92fzQFqmM0aBbFwG7/qYS4Zw0VJCkaAIdPwH62lAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQULXKUC5Cet9Fvl/ZJhhgRXaacV9YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFmYmMyNjU3LTRmMzktNDRlNi05ZGYyLTRiODEzMjM3ODgxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8ypDANBgkqhkiG9w0BAQsFAAOCAQEAYjxz3d1pEexRw4dXdBeafaI5 qUa/0NmksXsxtppkzj+syCfqY1BgOrjJu95lBSj0Fq9ddvbt3qF3C8m/JxTIw3Ve OX7x0waGfEjEgXsgMgjZcl2WjUowiFnaD1WFoFu0GC3odfUhdltBcKZig1hFtewk x8qhHxLxG+uk0eNYuuMgVMQxR0QuQarZuWZ03aQaH+p0uFX9nBSs7q5SO/leo9bm qkr7fgPKEwJfOBKukwqUUForoqK/QZLWu8/1CtYeTR4udkfl1JhgEHtSq6WJ6mpT UDM4jLwZqZfYt/aheRX5ooye27GcDeqjsTsuqINOoxhCojiY8ADwhnS1HLov+g== -----END CERTIFICATE-----Generated at Sun Jun 1 05:05:06 2025 by rpki-client