$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bf2eb5c-3d93-4d18-9398-ec764559ec6d.roa File: 2bf2eb5c-3d93-4d18-9398-ec764559ec6d.roa (raw, json) Hash identifier: 3APUvjlsrjsO+KWq0HqeUENG7kUcXpl1yK99phQmIYc= Subject key identifier: 7A:CE:8A:DE:BE:04:2E:12:CD:C9:1F:9E:48:F1:66:DC:A3:E3:14:55 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5EDB9A0F58DF47A44DD5016817CB29F1CBB92F2C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bf2eb5c-3d93-4d18-9398-ec764559ec6d.roa Signing time: Thu 22 May 2025 00:53:28 +0000 ROA not before: Thu 22 May 2025 00:53:28 +0000 ROA not after: Thu 26 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb9:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:db:9a:0f:58:df:47:a4:4d:d5:01:68:17:cb:29:f1:cb:b9:2f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 00:53:28 2025 GMT Not After : Jun 26 23:59:59 2025 GMT Subject: serialNumber=2748db94eb2e295f3ed247ac449d2b49501bba82d6c814ca87bef81b1e2eabe6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b7:0f:a8:67:c4:e1:ef:92:84:9e:e9:64:0b: 0b:eb:e3:60:fc:e4:50:c7:e0:9d:61:74:6e:70:90: b1:12:3a:83:10:3a:f6:df:20:95:13:06:ae:a5:3d: 90:97:70:1c:f3:52:a8:ec:c8:e4:ca:c0:58:ea:e9: 56:cb:75:02:ec:84:78:11:80:39:28:6a:39:fd:b0: 56:4f:83:ca:89:43:2f:c9:6b:f6:90:1e:d2:8d:1c: 35:96:03:58:34:fb:93:a7:b1:e8:3f:c1:36:7f:ff: bc:97:55:03:92:70:18:5c:73:5d:a3:c1:4f:41:00: 7b:5c:64:6d:52:ff:fa:cd:28:8f:d4:83:2b:1b:7c: cf:70:e5:3e:75:32:08:86:8a:13:6d:f2:c2:eb:59: dc:2f:07:1c:04:15:1a:d1:05:cf:af:e4:a1:9f:c9: cd:bc:2d:20:fd:54:d3:9a:fa:70:61:f4:df:ee:ba: 71:89:ca:68:47:60:0b:59:68:48:2c:e6:0c:23:8a: b0:57:ca:dc:91:99:30:02:96:f3:e1:3e:39:cc:5f: 42:b6:3e:61:73:4a:1c:69:3e:bf:5b:78:c1:cd:71: 58:0a:3a:93:1d:32:b4:42:e6:d8:4b:5c:32:cf:4b: 04:ff:20:ef:11:26:bd:70:fe:71:66:07:be:e5:e4: d0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CE:8A:DE:BE:04:2E:12:CD:C9:1F:9E:48:F1:66:DC:A3:E3:14:55 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bf2eb5c-3d93-4d18-9398-ec764559ec6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb9:3440::/48 Signature Algorithm: sha256WithRSAEncryption 73:15:dd:3f:0c:55:99:25:8c:52:ca:1b:0c:d6:b8:78:82:3e: 31:b3:fd:ad:a8:33:7b:fa:7b:f0:26:40:e6:29:81:f2:80:8f: 8c:8e:d7:38:1b:60:d4:29:55:23:c2:0b:9c:ac:53:df:69:4c: bb:92:ac:c3:ac:3c:02:d5:dc:a1:b7:0c:2f:41:cf:71:3e:3a: 3c:5c:bd:57:20:9f:ba:26:31:64:5c:df:da:01:c1:0f:cd:39: 12:ae:2e:91:63:1e:6f:09:ac:3e:e6:e7:84:6c:44:34:19:2f: ad:0a:a5:18:d0:6c:48:82:72:28:fa:2c:57:fe:89:9b:4a:f6: b6:06:e1:2d:ff:47:52:77:76:01:c0:73:ae:2f:d7:a6:d3:96: 3e:a5:37:95:be:b9:97:83:4a:72:35:61:97:9c:06:5a:0f:3f: d2:af:8b:b3:de:db:da:d4:1f:da:4b:e6:a6:0d:ed:e9:cd:4a: 34:28:f9:a9:23:59:56:05:16:d0:4a:11:e0:bf:5f:0c:bf:99: b0:ab:93:0a:ca:64:2c:a9:b3:44:11:7d:e6:69:27:c8:fd:af: 23:98:db:7e:47:aa:34:18:1f:50:df:3a:c2:a2:05:6b:7b:8f: 2f:b0:cb:86:8d:64:f6:1e:71:f1:57:d5:89:4d:42:47:dc:88: ec:77:3f:ee -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXtuaD1jfR6RN1QFoF8sp8cu5LywwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIyMDA1MzI4WhcNMjUwNjI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzQ4ZGI5NGViMmUyOTVmM2VkMjQ3YWM0NDlkMmI0OTUw MWJiYTgyZDZjODE0Y2E4N2JlZjgxYjFlMmVhYmU2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvtw+oZ8Th75KEnulkCwvr42D85FDH4J1hdG5wkLESOoMQ OvbfIJUTBq6lPZCXcBzzUqjsyOTKwFjq6VbLdQLshHgRgDkoajn9sFZPg8qJQy/J a/aQHtKNHDWWA1g0+5Onseg/wTZ//7yXVQOScBhcc12jwU9BAHtcZG1S//rNKI/U gysbfM9w5T51MgiGihNt8sLrWdwvBxwEFRrRBc+v5KGfyc28LSD9VNOa+nBh9N/u unGJymhHYAtZaEgs5gwjirBXytyRmTAClvPhPjnMX0K2PmFzShxpPr9beMHNcVgK OpMdMrRC5thLXDLPSwT/IO8RJr1w/nFmB77l5NANAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUes6K3r4ELhLNyR+eSPFm3KPjFFUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJiZjJlYjVjLTNkOTMtNGQxOC05Mzk4LWVjNzY0NTU5ZWM2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+5NEAwDQYJKoZIhvcNAQELBQADggEBAHMV3T8MVZkljFLKGwzWuHiC PjGz/a2oM3v6e/AmQOYpgfKAj4yO1zgbYNQpVSPCC5ysU99pTLuSrMOsPALV3KG3 DC9Bz3E+OjxcvVcgn7omMWRc39oBwQ/NORKuLpFjHm8JrD7m54RsRDQZL60KpRjQ bEiCcij6LFf+iZtK9rYG4S3/R1J3dgHAc64v16bTlj6lN5W+uZeDSnI1YZecBloP P9Kvi7Pe29rUH9pL5qYN7enNSjQo+akjWVYFFtBKEeC/Xwy/mbCrkwrKZCyps0QR feZpJ8j9ryOY235HqjQYH1DfOsKiBWt7jy+wy4aNZPYecfFX1YlNQkfciOx3P+4= -----END CERTIFICATE-----Generated at Sun Jun 1 04:55:31 2025 by rpki-client