$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa File: 3b6f98f3-b828-4069-9b64-8122ea365d59.roa (raw, json) Hash identifier: BYU639dAudRFfsovii6awdAhTIjfG6BMn5GrqlXki6I= Subject key identifier: 48:83:FB:06:ED:F8:12:6D:B7:BF:7B:31:35:ED:84:10:08:04:92:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0F06F889235133FFEB798E1573F5B0C9BC2398B0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa Signing time: Wed 28 May 2025 00:21:23 +0000 ROA not before: Wed 28 May 2025 00:21:23 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fa0:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:06:f8:89:23:51:33:ff:eb:79:8e:15:73:f5:b0:c9:bc:23:98:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:21:23 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=2672d885439f38a9264ee807cc75ef1a5f156e4ca2705382de83e93397abb637, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:36:62:cd:e3:54:ab:6a:cc:54:12:00:52: 5e:1d:e0:5a:43:33:c5:ed:87:18:b8:ff:7f:ea:20: 31:32:af:f8:53:b5:8f:50:0c:16:a1:80:c1:87:a6: a1:07:63:e6:8f:fa:9d:da:73:e7:62:1c:ce:4a:66: 18:d0:6d:fd:f9:39:35:af:c7:da:4a:36:c8:9a:40: c1:54:db:67:ef:2c:90:00:8b:61:5c:6d:b3:23:f8: 26:cb:fa:44:80:dc:b9:ee:f1:5a:c3:79:93:d1:5a: d6:a5:7a:e3:c0:f8:f1:67:42:59:a0:6e:13:63:e4: f0:be:a8:b7:af:b7:25:f3:b3:58:df:1c:6f:4a:68: 2b:e5:88:a7:7b:79:3c:33:ca:f3:56:14:4f:76:36: 10:0d:b5:22:30:c7:7d:fa:7c:43:ed:0b:3c:05:6d: d6:2f:06:4c:65:6d:66:a9:ff:fe:39:e5:03:4e:f8: 2c:9e:e5:73:59:ca:4f:65:dd:8a:6c:36:93:c0:5a: a1:3c:68:dd:1d:01:9b:48:a2:cb:90:30:95:ac:72: a9:32:77:ab:11:70:45:db:cd:41:e2:cb:99:ca:84: 55:e1:1d:2e:34:1e:58:d3:7b:de:77:df:1f:1c:73: da:09:51:c9:d8:a5:63:7f:8f:44:33:7e:50:05:05: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:83:FB:06:ED:F8:12:6D:B7:BF:7B:31:35:ED:84:10:08:04:92:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:1000::/40 Signature Algorithm: sha256WithRSAEncryption a5:b0:d5:67:81:2d:fb:8d:ab:02:02:cc:61:6f:21:49:8b:09: f6:16:3a:f8:c8:7d:90:35:63:f7:db:22:1d:a6:14:a7:59:aa: fb:b2:f8:68:22:40:b4:ed:bb:8a:20:29:52:e3:06:98:63:1b: 51:b8:d6:04:f5:62:9a:c3:02:72:f3:db:75:58:8d:cc:c4:7c: cc:4a:e9:66:17:04:57:0e:46:43:0f:94:9e:0c:18:b1:8a:df: 7f:e6:61:f8:ee:72:1f:25:ad:b9:9e:79:06:30:93:e0:0a:55: e3:14:9f:c5:92:b6:8f:7e:99:0a:e2:bc:9a:f2:65:3c:86:3d: 2a:40:0d:ae:35:89:5d:32:cd:68:4b:c9:cd:31:a7:39:0a:66: fb:6d:dd:6f:ad:20:0f:00:7d:1f:d6:11:18:65:7e:ce:1b:d1: d2:87:06:21:8e:c0:81:34:78:95:83:26:2d:43:2c:97:b8:6c: bc:a2:a1:14:1e:90:48:1a:ea:e6:4f:c2:7e:d2:87:fc:8a:ee: aa:49:8b:48:d4:e6:d8:95:55:1e:70:8e:89:9b:ae:88:4a:64: 90:e5:61:6d:66:87:fd:2c:69:2d:19:75:7a:cb:8d:b0:7d:e8: 01:e5:d3:01:4a:c5:85:93:5e:27:ff:2a:ba:41:de:0b:e3:a0: 44:34:a4:ee -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUDwb4iSNRM//reY4Vc/WwybwjmLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAyMTIzWhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjcyZDg4NTQzOWYzOGE5MjY0ZWU4MDdjYzc1ZWYxYTVm MTU2ZTRjYTI3MDUzODJkZTgzZTkzMzk3YWJiNjM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWLDZizeNUq2rMVBIAUl4d4FpDM8Xthxi4/3/qIDEyr/hT tY9QDBahgMGHpqEHY+aP+p3ac+diHM5KZhjQbf35OTWvx9pKNsiaQMFU22fvLJAA i2FcbbMj+CbL+kSA3Lnu8VrDeZPRWtaleuPA+PFnQlmgbhNj5PC+qLevtyXzs1jf HG9KaCvliKd7eTwzyvNWFE92NhANtSIwx336fEPtCzwFbdYvBkxlbWap//455QNO +Cye5XNZyk9l3YpsNpPAWqE8aN0dAZtIosuQMJWscqkyd6sRcEXbzUHiy5nKhFXh HS40HljTe9533x8cc9oJUcnYpWN/j0QzflAFBeFFAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSIP7Bu34Em23v3sxNe2EEAgEkmYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNiNmY5OGYzLWI4MjgtNDA2OS05YjY0LTgxMjJlYTM2NWQ1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+gEDANBgkqhkiG9w0BAQsFAAOCAQEApbDVZ4Et+42rAgLMYW8hSYsJ 9hY6+Mh9kDVj99siHaYUp1mq+7L4aCJAtO27iiApUuMGmGMbUbjWBPVimsMCcvPb dViNzMR8zErpZhcEVw5GQw+UngwYsYrff+Zh+O5yHyWtuZ55BjCT4ApV4xSfxZK2 j36ZCuK8mvJlPIY9KkANrjWJXTLNaEvJzTGnOQpm+23db60gDwB9H9YRGGV+zhvR 0ocGIY7AgTR4lYMmLUMsl7hsvKKhFB6QSBrq5k/CftKH/IruqkmLSNTm2JVVHnCO iZuuiEpkkOVhbWaH/SxpLRl1esuNsH3oAeXTAUrFhZNeJ/8qukHeC+OgRDSk7g== -----END CERTIFICATE-----Generated at Sun Jun 1 04:30:16 2025 by rpki-client