$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34332a52-2f06-4fbb-9604-9ae067e1534b.roa File: 34332a52-2f06-4fbb-9604-9ae067e1534b.roa (raw, json) Hash identifier: DXsmXK35fzlKxnaNRpbqVL10dVsXaIw1K2qoh/E2awo= Subject key identifier: 20:F5:EE:8C:F8:16:10:31:19:D4:E6:B2:65:B0:06:66:CA:15:24:10 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7BC845AC7C7856550C3090F425BC00EDF48D5CD0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34332a52-2f06-4fbb-9604-9ae067e1534b.roa Signing time: Mon 19 May 2025 17:31:17 +0000 ROA not before: Mon 19 May 2025 17:31:17 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f70:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c8:45:ac:7c:78:56:55:0c:30:90:f4:25:bc:00:ed:f4:8d:5c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 17:31:17 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=20604fac2ebe5d422087ff6bdbf40e91307b266b73d66d5baa09e52a2b74245e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:22:3a:cc:33:a0:c9:07:dd:43:14:02:03:1d: 7a:8c:ea:34:73:7d:db:d7:bf:fb:46:9a:a4:4b:11: fa:23:b5:1d:2f:21:70:e4:ce:8b:e9:af:92:99:45: 3e:27:48:2a:f7:26:6c:78:ec:63:0a:d8:b5:be:b7: 00:42:f5:d9:83:6b:4a:41:cd:80:50:09:1d:30:6d: f6:85:17:90:15:74:05:c5:83:c9:dc:c7:ad:8a:92: 93:ae:77:31:74:3c:41:ab:d1:40:0d:14:36:e7:8e: ef:dd:bb:b5:e2:3e:dc:4d:87:59:a3:8a:a9:d8:a0: e7:b6:4c:8e:3c:18:a7:7e:9d:ed:35:5b:6c:18:50: 23:c3:07:1d:9e:46:6a:69:fe:6b:99:02:fa:61:03: 8f:d5:d8:7e:14:f4:05:0d:8e:ee:2d:08:d3:18:f9: 18:2a:12:2e:5c:4f:dc:9f:9d:43:42:e7:d4:d0:42: 92:08:5a:41:b9:54:1f:1e:73:78:b4:27:c2:52:fa: 76:e3:f7:06:63:f3:cf:b9:65:5b:5e:17:fc:89:5e: e7:14:f1:4d:31:a7:37:ce:61:69:35:7c:de:19:f9: 51:66:19:2a:aa:b3:0e:9f:55:86:a4:5d:8e:0f:8a: a1:1a:c9:dd:fc:32:b5:37:62:40:ce:29:81:32:d1: 4d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F5:EE:8C:F8:16:10:31:19:D4:E6:B2:65:B0:06:66:CA:15:24:10 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34332a52-2f06-4fbb-9604-9ae067e1534b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f70:e000::/40 Signature Algorithm: sha256WithRSAEncryption 16:a3:00:e5:67:0b:2f:aa:99:af:a8:90:52:4a:45:6c:63:42: 11:db:d2:a5:ec:9c:50:2a:f5:ed:40:16:fe:ee:66:f9:9a:1b: 36:b1:dd:5e:bf:29:3d:80:d7:bf:f1:8d:b9:45:21:99:2f:24: 56:cf:65:11:b8:a5:28:a7:95:8b:ce:b7:2f:ab:38:70:03:0d: f1:af:af:0e:d2:d6:b8:52:62:8a:62:1b:e7:67:30:cd:f3:d2: 42:59:37:27:55:cd:9d:3e:7c:c6:33:e8:94:8b:12:a0:d8:83: cc:6f:93:19:3f:0b:24:b2:b3:cf:69:26:4c:ab:d4:49:49:95: 07:c2:40:31:cf:da:10:45:90:ee:f4:6e:c8:87:77:2e:50:07: 6a:62:a8:5d:5f:a2:14:4e:85:77:f4:9e:14:bf:c2:44:79:e7: c5:da:8c:0b:cd:a8:ec:a6:e6:4f:25:11:6d:37:fc:c4:b1:1b: 3f:f7:94:0a:06:90:2c:f8:b3:b1:ef:cd:28:2d:93:7c:c5:48: 6d:20:7e:41:15:12:fc:51:e8:bb:1a:2c:8e:2f:39:ba:d6:84: e6:68:91:c4:c0:c0:ba:5e:9b:c9:45:a6:2a:d1:fd:15:8f:a1: fb:5d:e5:bc:65:b7:7e:64:ba:0c:38:be:38:1e:0a:2f:e3:d1: e6:50:ac:15 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUe8hFrHx4VlUMMJD0JbwA7fSNXNAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTczMTE3WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDYwNGZhYzJlYmU1ZDQyMjA4N2ZmNmJkYmY0MGU5MTMw N2IyNjZiNzNkNjZkNWJhYTA5ZTUyYTJiNzQyNDVlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuIjrMM6DJB91DFAIDHXqM6jRzfdvXv/tGmqRLEfojtR0v IXDkzovpr5KZRT4nSCr3Jmx47GMK2LW+twBC9dmDa0pBzYBQCR0wbfaFF5AVdAXF g8ncx62KkpOudzF0PEGr0UANFDbnju/du7XiPtxNh1mjiqnYoOe2TI48GKd+ne01 W2wYUCPDBx2eRmpp/muZAvphA4/V2H4U9AUNju4tCNMY+RgqEi5cT9yfnUNC59TQ QpIIWkG5VB8ec3i0J8JS+nbj9wZj88+5ZVteF/yJXucU8U0xpzfOYWk1fN4Z+VFm GSqqsw6fVYakXY4PiqEayd38MrU3YkDOKYEy0U1NAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUIPXujPgWEDEZ1OayZbAGZsoVJBAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM0MzMyYTUyLTJmMDYtNGZiYi05NjA0LTlhZTA2N2UxNTM0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9w4DANBgkqhkiG9w0BAQsFAAOCAQEAFqMA5WcLL6qZr6iQUkpFbGNC EdvSpeycUCr17UAW/u5m+ZobNrHdXr8pPYDXv/GNuUUhmS8kVs9lEbilKKeVi863 L6s4cAMN8a+vDtLWuFJiimIb52cwzfPSQlk3J1XNnT58xjPolIsSoNiDzG+TGT8L JLKzz2kmTKvUSUmVB8JAMc/aEEWQ7vRuyId3LlAHamKoXV+iFE6Fd/SeFL/CRHnn xdqMC82o7KbmTyURbTf8xLEbP/eUCgaQLPizse/NKC2TfMVIbSB+QRUS/FHouxos ji85utaE5miRxMDAul6byUWmKtH9FY+h+13lvGW3fmS6DDi+OB4KL+PR5lCsFQ== -----END CERTIFICATE-----Generated at Sun Jun 1 05:29:17 2025 by rpki-client