$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334b74da-25a5-4155-8dcf-838c529ccfcf.roa File: 334b74da-25a5-4155-8dcf-838c529ccfcf.roa (raw, json) Hash identifier: DGimcd5/V0HuKTx455nx1ZBHm8Tfkdsn8k/2Kla9Qx4= Subject key identifier: D3:41:26:CE:8A:5E:61:EF:5E:58:F0:50:B1:F8:BD:BF:C8:9E:8C:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 41FBA0E2E3006EF6B4788A6DAFE134938AB2EABF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334b74da-25a5-4155-8dcf-838c529ccfcf.roa Signing time: Sat 17 May 2025 00:30:23 +0000 ROA not before: Sat 17 May 2025 00:30:23 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:fb:a0:e2:e3:00:6e:f6:b4:78:8a:6d:af:e1:34:93:8a:b2:ea:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:30:23 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=abdbbbe49ef7ecf82c61e175454290084e21c962ba2854c6b3dac6e19e6d69fe, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f4:bb:5a:2b:c8:3a:42:e9:e2:b8:e1:fa:33: 49:f7:bb:6b:0e:e8:36:07:79:df:57:38:8b:00:2b: fc:80:21:f5:8d:dc:96:03:99:b6:11:a6:16:56:c4: e5:67:d9:8a:22:c0:2e:d4:e4:5d:a5:5f:ef:f7:79: da:92:8b:3e:15:ae:6e:c3:27:bb:bc:75:d3:74:1f: 1e:9d:de:5f:12:9f:e3:b9:d5:7a:c6:b8:8b:86:c3: fa:22:0d:13:0c:c7:7f:c0:3e:1b:e6:86:d2:cb:4c: 36:fd:3e:89:6e:c7:e1:96:cc:99:a5:00:3c:62:f5: 05:e5:7d:4d:78:ac:5b:60:20:c3:25:69:d4:1a:6b: 18:b7:74:61:36:a5:d9:ad:47:9b:3c:c9:2b:a4:b1: fc:63:de:93:6e:31:72:5a:4b:65:38:ae:d0:5f:c2: f8:de:5d:f8:54:c5:34:26:8f:2e:3c:af:26:63:e3: be:89:9a:b3:ec:64:2f:11:73:bf:06:a1:ed:03:e2: 5d:f5:f7:e0:54:ad:46:c5:19:89:58:ba:7b:40:99: 76:0b:f4:d6:3f:88:a7:e8:f5:ed:41:7e:da:49:57: f6:64:06:a2:93:81:79:25:71:21:59:79:bb:8c:4b: 8e:20:54:3b:9d:13:00:d2:59:68:1b:d2:ef:0c:65: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:41:26:CE:8A:5E:61:EF:5E:58:F0:50:B1:F8:BD:BF:C8:9E:8C:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/334b74da-25a5-4155-8dcf-838c529ccfcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:4040::/48 Signature Algorithm: sha256WithRSAEncryption ac:5a:28:08:f6:c5:a4:74:b2:18:c8:c0:31:ef:5e:c5:31:f6: cc:a4:24:ce:03:ab:b4:e1:b0:81:2b:c1:05:d6:4f:ef:61:9d: f2:75:fb:08:56:3f:e2:6d:45:d7:ca:5a:e7:da:19:ea:9f:04: 62:15:cb:4c:3a:dc:57:99:5f:f4:b3:1d:44:1c:ab:5a:0f:96: 98:ce:07:1c:d6:de:26:b3:5c:94:43:b3:e6:a8:a7:5a:ed:ac: f1:ec:5e:77:30:c3:99:db:18:27:ca:0a:be:8d:b5:5c:d1:56: 0d:6f:24:0a:d2:f4:19:52:1b:1d:e4:f8:7a:32:12:6a:ea:48: 74:af:3c:9c:90:fe:6d:f2:c5:1c:54:7f:4d:9a:6d:ac:7f:b7: e3:f5:41:99:cd:45:9c:9d:16:8a:a9:58:6d:be:a5:c8:b6:15: 5a:85:51:de:06:c9:7f:52:91:ad:c7:f2:7b:a7:95:9a:16:cd: 74:46:8a:33:c6:82:b1:ed:e8:1b:47:6c:e8:ce:9b:5f:ef:5a: 97:0b:eb:a7:ca:e3:06:e4:c8:8f:be:f2:e8:60:3f:1e:50:7c: e1:c6:89:b2:c0:ac:c0:74:8d:eb:b0:5f:97:78:1e:78:1a:51: b4:87:b2:90:58:36:4e:be:62:11:61:c8:c6:77:b6:6b:c7:f5: 7a:ef:41:9c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQfug4uMAbva0eIptr+E0k4qy6r8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDAzMDIzWhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmRiYmJlNDllZjdlY2Y4MmM2MWUxNzU0NTQyOTAwODRl MjFjOTYyYmEyODU0YzZiM2RhYzZlMTllNmQ2OWZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV9LtaK8g6QuniuOH6M0n3u2sO6DYHed9XOIsAK/yAIfWN 3JYDmbYRphZWxOVn2YoiwC7U5F2lX+/3edqSiz4Vrm7DJ7u8ddN0Hx6d3l8Sn+O5 1XrGuIuGw/oiDRMMx3/APhvmhtLLTDb9Polux+GWzJmlADxi9QXlfU14rFtgIMMl adQaaxi3dGE2pdmtR5s8ySuksfxj3pNuMXJaS2U4rtBfwvjeXfhUxTQmjy48ryZj 476JmrPsZC8Rc78Goe0D4l319+BUrUbFGYlYuntAmXYL9NY/iKfo9e1BftpJV/Zk BqKTgXklcSFZebuMS44gVDudEwDSWWgb0u8MZZkXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU00EmzopeYe9eWPBQsfi9v8iejIAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzMzNGI3NGRhLTI1YTUtNDE1NS04ZGNmLTgzOGM1MjljY2ZjZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hQEAwDQYJKoZIhvcNAQELBQADggEBAKxaKAj2xaR0shjIwDHvXsUx 9sykJM4Dq7ThsIErwQXWT+9hnfJ1+whWP+JtRdfKWufaGeqfBGIVy0w63FeZX/Sz HUQcq1oPlpjOBxzW3iazXJRDs+aop1rtrPHsXncww5nbGCfKCr6NtVzRVg1vJArS 9BlSGx3k+HoyEmrqSHSvPJyQ/m3yxRxUf02abax/t+P1QZnNRZydFoqpWG2+pci2 FVqFUd4GyX9Ska3H8nunlZoWzXRGijPGgrHt6BtHbOjOm1/vWpcL66fK4wbkyI++ 8uhgPx5QfOHGibLArMB0jeuwX5d4HngaUbSHspBYNk6+YhFhyMZ3tmvH9XrvQZw= -----END CERTIFICATE-----Generated at Sun Jun 1 05:22:43 2025 by rpki-client