$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d8b8e0-8b5e-4f54-933c-eff053d0f3a8.roa File: 35d8b8e0-8b5e-4f54-933c-eff053d0f3a8.roa (raw, json) Hash identifier: hzBHlbeZgqB5LL4Wu66jBS3Seufd4X055SHpprFs8wY= Subject key identifier: 71:FD:52:48:B3:A1:3D:50:8B:6A:79:6D:B7:B6:CF:61:95:DD:8F:62 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E9AAC4C9A5C1F013336D96A36B2AF0AA14B3544 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d8b8e0-8b5e-4f54-933c-eff053d0f3a8.roa Signing time: Fri 16 May 2025 16:51:52 +0000 ROA not before: Fri 16 May 2025 16:51:52 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:8060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:9a:ac:4c:9a:5c:1f:01:33:36:d9:6a:36:b2:af:0a:a1:4b:35:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 16:51:52 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=54526d552a1248128b4f5a4ba946b935b2eee6a36b06cfc6f57a4fa2e1d5bc03, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:2e:37:88:73:5f:0a:49:b5:a8:8f:88:ba: 0b:7b:41:55:61:13:3f:9c:80:80:9d:a7:97:2b:72: 05:a0:28:4f:db:8a:9e:f1:d9:52:a4:63:38:fe:58: f5:e0:36:ff:94:14:f9:07:f7:4f:34:2c:f0:bf:df: 32:75:b3:f9:a6:e1:5b:77:41:eb:ef:75:31:76:a7: 29:5f:c4:68:be:25:da:d2:6b:19:be:bb:1c:66:b2: 6e:e1:05:d9:ce:f9:db:e9:5f:f7:8c:f0:30:f6:2a: f5:6a:12:64:a1:d5:98:7d:a7:cf:53:20:fa:4f:62: 50:a1:7c:06:5b:bd:95:35:27:82:52:c0:87:6f:e6: 3e:d5:9b:94:c5:7c:3c:b3:f7:04:35:57:da:9f:4f: 76:ec:66:d7:d0:f2:3e:54:6d:e4:8c:95:3c:f0:00: b3:43:d0:f5:ea:47:44:1b:98:8a:c9:1d:dd:e5:52: 82:d7:8c:6a:db:ab:a0:26:72:85:4a:c9:26:fb:79: a4:9c:7b:05:ac:79:b2:22:3c:96:bb:52:d7:5a:6f: 80:15:fa:f0:29:64:4c:9a:2b:f2:47:b9:85:e5:38: a0:05:c2:89:94:35:0d:08:95:e2:d1:39:1e:78:dc: 50:8c:45:1d:4b:eb:4c:5d:54:ea:c9:aa:dc:81:87: 87:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FD:52:48:B3:A1:3D:50:8B:6A:79:6D:B7:B6:CF:61:95:DD:8F:62 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d8b8e0-8b5e-4f54-933c-eff053d0f3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:8060::/48 Signature Algorithm: sha256WithRSAEncryption 63:59:b3:c8:61:29:d5:d4:89:06:be:89:47:69:56:90:2d:bf: 4e:c9:d0:16:79:cd:1e:c1:a0:a0:10:cc:77:16:b2:c4:8a:f3: a9:46:a6:c2:80:8a:7e:a9:4f:97:04:02:67:af:6f:0f:92:59: e5:f1:af:42:be:29:31:ec:bb:64:4a:c3:77:5c:18:26:59:f4: 00:a6:bb:b6:ac:18:b8:f5:16:69:31:be:b8:b8:92:a1:94:85: 29:ee:f4:fa:a7:41:fc:65:1f:c7:bc:58:a2:3a:52:5b:1e:52: ab:8a:25:2f:df:1b:df:ae:ed:8b:be:26:d7:5e:16:29:ba:7b: 22:7a:d9:c4:7a:57:5c:19:8b:3e:0b:4c:37:14:3f:87:17:9e: 9f:1f:53:42:96:2a:8c:43:d0:58:9a:28:91:d5:3a:cb:00:86: 58:0e:3b:a8:bd:79:0b:b2:ca:a2:35:8d:da:a6:d5:7e:84:db: 4f:f5:27:e0:b3:13:23:85:94:a8:4f:85:aa:5c:86:50:55:0f: d0:d6:f7:f9:f5:e8:24:d4:06:dd:64:27:ec:9f:6e:d5:06:52: 34:c9:0c:7b:ed:73:4b:29:2a:3e:d6:31:18:01:f0:f7:39:16: 24:9b:ec:db:52:cf:c8:6a:e2:0a:ca:8f:65:2f:e4:30:bc:9d: 34:4e:ed:3c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXpqsTJpcHwEzNtlqNrKvCqFLNUQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTY1MTUyWhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDUyNmQ1NTJhMTI0ODEyOGI0ZjVhNGJhOTQ2YjkzNWIy ZWVlNmEzNmIwNmNmYzZmNTdhNGZhMmUxZDViYzAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy/S43iHNfCkm1qI+Iugt7QVVhEz+cgICdp5crcgWgKE/b ip7x2VKkYzj+WPXgNv+UFPkH9080LPC/3zJ1s/mm4Vt3QevvdTF2pylfxGi+JdrS axm+uxxmsm7hBdnO+dvpX/eM8DD2KvVqEmSh1Zh9p89TIPpPYlChfAZbvZU1J4JS wIdv5j7Vm5TFfDyz9wQ1V9qfT3bsZtfQ8j5UbeSMlTzwALND0PXqR0QbmIrJHd3l UoLXjGrbq6AmcoVKySb7eaScewWsebIiPJa7Utdab4AV+vApZEyaK/JHuYXlOKAF womUNQ0IleLROR543FCMRR1L60xdVOrJqtyBh4cHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcf1SSLOhPVCLanltt7bPYZXdj2IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM1ZDhiOGUwLThiNWUtNGY1NC05MzNjLWVmZjA1M2QwZjNhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ygGAwDQYJKoZIhvcNAQELBQADggEBAGNZs8hhKdXUiQa+iUdpVpAt v07J0BZ5zR7BoKAQzHcWssSK86lGpsKAin6pT5cEAmevbw+SWeXxr0K+KTHsu2RK w3dcGCZZ9ACmu7asGLj1Fmkxvri4kqGUhSnu9PqnQfxlH8e8WKI6UlseUquKJS/f G9+u7Yu+JtdeFim6eyJ62cR6V1wZiz4LTDcUP4cXnp8fU0KWKoxD0FiaKJHVOssA hlgOO6i9eQuyyqI1jdqm1X6E20/1J+CzEyOFlKhPhapchlBVD9DW9/n16CTUBt1k J+yfbtUGUjTJDHvtc0spKj7WMRgB8Pc5FiSb7NtSz8hq4grKj2Uv5DC8nTRO7Tw= -----END CERTIFICATE-----Generated at Sun Jun 1 04:31:04 2025 by rpki-client