$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa File: 2507f91f-043a-4d23-8241-7fcd43474bb7.roa (raw, json) Hash identifier: bBprc1mx+l6keeMCsMa2XqlmkcE4o2DGm4ou0kz0mI0= Subject key identifier: 23:D8:8D:BA:CD:9F:57:90:A0:3E:E1:26:AD:C8:CF:8E:BB:6B:AB:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51FA925FDD7205D5994D3DD0BF6C8013F166ADA4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa Signing time: Wed 28 May 2025 00:22:19 +0000 ROA not before: Wed 28 May 2025 00:22:19 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1d:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:fa:92:5f:dd:72:05:d5:99:4d:3d:d0:bf:6c:80:13:f1:66:ad:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:22:19 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=33da2fac7f368ce5a5c622d8bfdc289e6efabf4a6abf50c2237eaa40d8083a74, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:64:a1:f5:e3:9f:12:d1:2e:77:ee:ba:2b: 47:b1:cb:92:73:a1:8d:34:0a:11:27:c6:b0:ce:97: b3:44:a3:51:7d:20:9a:d6:88:ba:77:69:b1:3e:5f: 16:57:69:d5:dc:f0:8c:f7:94:3a:8e:83:85:8b:e0: 00:fc:05:b7:56:63:f7:d1:97:fc:66:e7:e3:00:f1: fc:15:6d:ab:5e:c5:c9:09:c6:7e:df:73:d8:8a:d8: d7:b5:3e:23:61:86:0b:4f:bb:ed:09:75:7f:98:18: 77:5f:d0:b1:9a:af:a9:89:6f:c4:e5:5b:7e:49:a0: 12:a9:f7:33:f1:2c:61:2e:c8:60:56:9d:c3:c0:1e: 60:dd:83:b6:5d:83:be:64:9a:ce:26:67:d0:6b:29: 1e:e5:b8:aa:8f:e0:90:67:09:bf:9d:72:1e:2e:3c: e2:26:9b:f0:83:ad:07:17:94:21:38:36:67:3b:27: e6:ee:f6:b0:66:42:77:dd:ce:7e:03:e6:ff:cc:6c: 3b:56:34:f0:a3:61:d2:90:dc:49:7c:d2:ab:93:94: 86:a4:10:86:a0:cd:47:d0:b5:94:a8:84:e8:fa:00: 06:08:61:2e:c6:c9:bd:c1:bd:99:09:fc:3a:14:18: 7f:6b:4f:7c:cf:cb:c5:f7:dd:69:4f:bf:42:1a:1f: a2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D8:8D:BA:CD:9F:57:90:A0:3E:E1:26:AD:C8:CF:8E:BB:6B:AB:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1d:8000::/36 Signature Algorithm: sha256WithRSAEncryption 08:7c:d8:4c:8f:22:b0:83:60:33:1a:01:c0:a6:2d:38:71:e9: e8:bf:f4:63:0d:db:89:39:14:14:c1:fd:a7:fb:bb:d3:da:5d: 6a:c0:53:5c:85:ae:fa:ba:48:12:56:74:7d:77:fa:30:fe:a5: 77:db:44:d1:f5:f5:0c:db:99:cf:16:27:a8:3b:1f:fb:cc:24: 6d:d7:05:23:f2:11:ab:2e:4a:8b:12:65:07:92:d5:09:43:35: 0e:77:b4:70:b8:23:2e:0a:63:4b:82:4d:24:94:2e:68:2e:f4: d9:27:5b:3f:e5:87:45:c7:af:8b:32:98:0c:67:7b:d9:6d:76: bd:8f:49:a2:f9:3a:cb:7e:c6:03:89:1b:41:ac:fa:a4:b1:0a: 98:a6:d7:34:60:87:fd:55:49:24:95:ce:38:6d:0c:93:80:af: 83:25:7c:62:9f:13:1e:0f:1e:90:35:ef:0e:af:49:c6:df:26: 38:f1:d1:1f:ab:c1:70:83:08:ab:01:a7:98:4a:cd:32:4b:83: 3b:bc:76:2a:d7:d1:84:ca:3e:a4:0a:a2:b6:d6:89:0a:4a:c7: a6:d0:81:1a:71:d9:8c:64:d7:33:f1:60:e7:3e:6c:83:01:62: fd:c2:c0:83:8d:c0:b7:39:b6:95:d5:80:34:f9:b5:5b:2e:9e: 71:6c:01:52 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUfqSX91yBdWZTT3Qv2yAE/FmraQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAyMjE5WhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2RhMmZhYzdmMzY4Y2U1YTVjNjIyZDhiZmRjMjg5ZTZl ZmFiZjRhNmFiZjUwYzIyMzdlYWE0MGQ4MDgzYTc0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZK2Sh9eOfEtEud+66K0exy5JzoY00ChEnxrDOl7NEo1F9 IJrWiLp3abE+XxZXadXc8Iz3lDqOg4WL4AD8BbdWY/fRl/xm5+MA8fwVbatexckJ xn7fc9iK2Ne1PiNhhgtPu+0JdX+YGHdf0LGar6mJb8TlW35JoBKp9zPxLGEuyGBW ncPAHmDdg7Zdg75kms4mZ9BrKR7luKqP4JBnCb+dch4uPOImm/CDrQcXlCE4Nmc7 J+bu9rBmQnfdzn4D5v/MbDtWNPCjYdKQ3El80quTlIakEIagzUfQtZSohOj6AAYI YS7Gyb3BvZkJ/DoUGH9rT3zPy8X33WlPv0IaH6JdAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUI9iNus2fV5CgPuEmrcjPjrtrq90wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1MDdmOTFmLTA0M2EtNGQyMy04MjQxLTdmY2Q0MzQ3NGJiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8dgDANBgkqhkiG9w0BAQsFAAOCAQEACHzYTI8isINgMxoBwKYtOHHp 6L/0Yw3biTkUFMH9p/u709pdasBTXIWu+rpIElZ0fXf6MP6ld9tE0fX1DNuZzxYn qDsf+8wkbdcFI/IRqy5KixJlB5LVCUM1Dne0cLgjLgpjS4JNJJQuaC702SdbP+WH RcevizKYDGd72W12vY9Jovk6y37GA4kbQaz6pLEKmKbXNGCH/VVJJJXOOG0Mk4Cv gyV8Yp8THg8ekDXvDq9Jxt8mOPHRH6vBcIMIqwGnmErNMkuDO7x2KtfRhMo+pAqi ttaJCkrHptCBGnHZjGTXM/Fg5z5sgwFi/cLAg43Atzm2ldWANPm1Wy6ecWwBUg== -----END CERTIFICATE-----Generated at Sun Jun 1 05:03:00 2025 by rpki-client