$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ca84d3-e109-44f3-9b04-1b7cebf35595.roa File: 36ca84d3-e109-44f3-9b04-1b7cebf35595.roa (raw, json) Hash identifier: ULBuYkKVJypY0DHuU1f7lS8bydq5wx33WLhKKGjsHs4= Subject key identifier: 9B:82:02:B4:DB:FD:27:60:B0:03:08:0D:AE:32:F1:1D:E1:94:54:BF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17DEEAEF7A7F31D2151AF4564A48974D1B302912 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ca84d3-e109-44f3-9b04-1b7cebf35595.roa Signing time: Mon 19 May 2025 18:11:50 +0000 ROA not before: Mon 19 May 2025 18:11:50 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2e:4800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:de:ea:ef:7a:7f:31:d2:15:1a:f4:56:4a:48:97:4d:1b:30:29:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:11:50 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=ff27e1de1b75fc76615860703bd15ec577fe8feb3ab6363b6e3d8fbef1e4b005, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:41:fa:9e:8c:13:63:5e:55:cf:98:0e:e3: 73:94:58:b0:ab:a3:7a:0d:8a:ca:43:a0:bd:1a:ee: c9:11:15:b3:88:4c:b0:62:dd:e4:dc:43:c3:28:42: 77:b4:f0:2f:4f:06:1c:bd:ea:a4:ea:13:92:a0:c0: 1e:5f:37:63:b7:4b:07:de:ea:4c:23:ac:88:1b:d5: e6:79:f1:de:53:9b:88:87:97:b2:83:ba:ac:31:9a: a7:f5:b3:67:45:86:96:5a:e2:88:5b:b7:36:82:a9: 22:de:7e:36:6f:5f:3b:30:4d:7e:ca:ba:6e:0d:7d: 76:26:e8:df:8e:da:b6:08:48:09:c9:a2:f5:a2:d4: 33:7b:ae:f3:2b:3d:1c:b8:bf:f6:62:4f:f6:e2:43: 0b:23:5e:67:a5:50:f2:4a:28:0a:5d:7d:ae:e5:c9: db:c8:5d:94:07:e8:30:bf:57:c9:bd:8e:44:8c:60: 45:86:f4:ae:8b:89:fb:61:79:3b:21:cf:12:0b:56: bc:e9:43:5a:3a:c2:e7:99:ce:85:54:82:44:0d:af: 17:83:48:12:cd:ee:ce:4f:f3:e3:61:a4:b5:53:9b: 25:bf:54:f2:60:3b:0f:76:91:73:4c:c8:1a:ea:f0: ec:7a:35:0b:97:91:13:d5:2c:ca:75:ca:cd:6c:b0: db:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:82:02:B4:DB:FD:27:60:B0:03:08:0D:AE:32:F1:1D:E1:94:54:BF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ca84d3-e109-44f3-9b04-1b7cebf35595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2e:4800::/37 Signature Algorithm: sha256WithRSAEncryption d7:52:65:c9:9c:bd:92:ea:5a:15:99:01:6f:0d:d4:31:df:9f: af:c4:6a:ee:2c:67:00:69:c1:58:17:d0:03:b8:5e:fc:a7:f9: da:62:07:c8:82:fd:56:bb:44:6f:04:f6:ba:74:de:e8:ac:80: b1:e8:4c:40:5c:16:4b:0a:69:ec:de:64:2d:55:f6:b5:30:05: 4a:22:8c:ef:cb:31:e6:cd:3a:9b:d3:47:1b:95:4a:bc:53:25: 9e:d4:93:fa:25:4c:1d:d0:1e:1d:a8:f3:4f:09:2c:a5:a0:51: 9e:24:46:ec:58:7c:f1:05:5b:19:0f:7d:fe:64:27:54:ba:3f: 1f:5c:14:d2:80:66:e3:2c:0c:e8:44:c1:28:40:bf:e1:6a:5b: 0e:5f:f3:3a:e1:e3:f1:91:20:3e:93:c4:0c:22:d1:dc:d3:e1: cb:d2:8e:f3:f7:0d:83:05:95:a3:e1:fe:82:c6:40:d6:2f:27: db:08:16:c1:d1:50:ac:b2:70:93:a7:35:cd:ea:f8:a1:08:0c: 5b:14:b7:65:eb:88:0e:73:62:77:e1:aa:90:2a:55:e3:81:63: 4e:5e:f7:15:3b:ba:e3:75:77:7d:e2:06:f0:11:c4:c6:3e:67: a4:be:aa:cf:25:c4:53:32:0d:b1:8f:a8:45:3a:eb:7e:ab:75: 99:d2:cf:34 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUF97q73p/MdIVGvRWSkiXTRswKRIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgxMTUwWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjI3ZTFkZTFiNzVmYzc2NjE1ODYwNzAzYmQxNWVjNTc3 ZmU4ZmViM2FiNjM2M2I2ZTNkOGZiZWYxZTRiMDA1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv4EH6nowTY15Vz5gO43OUWLCro3oNispDoL0a7skRFbOI TLBi3eTcQ8MoQne08C9PBhy96qTqE5KgwB5fN2O3Swfe6kwjrIgb1eZ58d5Tm4iH l7KDuqwxmqf1s2dFhpZa4ohbtzaCqSLefjZvXzswTX7Kum4NfXYm6N+O2rYISAnJ ovWi1DN7rvMrPRy4v/ZiT/biQwsjXmelUPJKKApdfa7lydvIXZQH6DC/V8m9jkSM YEWG9K6LiftheTshzxILVrzpQ1o6wueZzoVUgkQNrxeDSBLN7s5P8+NhpLVTmyW/ VPJgOw92kXNMyBrq8Ox6NQuXkRPVLMp1ys1ssNtDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUm4ICtNv9J2CwAwgNrjLxHeGUVL8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzM2Y2E4NGQzLWUxMDktNDRmMy05YjA0LTFiN2NlYmYzNTU5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8uSDANBgkqhkiG9w0BAQsFAAOCAQEA11JlyZy9kupaFZkBbw3UMd+f r8Rq7ixnAGnBWBfQA7he/Kf52mIHyIL9VrtEbwT2unTe6KyAsehMQFwWSwpp7N5k LVX2tTAFSiKM78sx5s06m9NHG5VKvFMlntST+iVMHdAeHajzTwkspaBRniRG7Fh8 8QVbGQ99/mQnVLo/H1wU0oBm4ywM6ETBKEC/4WpbDl/zOuHj8ZEgPpPEDCLR3NPh y9KO8/cNgwWVo+H+gsZA1i8n2wgWwdFQrLJwk6c1zer4oQgMWxS3ZeuIDnNid+Gq kCpV44FjTl73FTu643V3feIG8BHExj5npL6qzyXEUzINsY+oRTrrfqt1mdLPNA== -----END CERTIFICATE-----Generated at Sun Jun 1 04:31:56 2025 by rpki-client