$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e204a0b-8cbe-4a1f-81f6-d8a388364e64.roa File: 3e204a0b-8cbe-4a1f-81f6-d8a388364e64.roa (raw, json) Hash identifier: GUTYf7DU80dxC8RLG8ls7y1Wo8md8zUa53XGtuWHBX0= Subject key identifier: 5A:D7:71:B4:30:05:33:CF:B5:5B:70:2B:19:B0:5F:26:7A:FE:BB:2A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6496155E86BDCB7AD3CB72D72D789359A13B0F76 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e204a0b-8cbe-4a1f-81f6-d8a388364e64.roa Signing time: Mon 19 May 2025 18:30:30 +0000 ROA not before: Mon 19 May 2025 18:30:30 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f2a:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:96:15:5e:86:bd:cb:7a:d3:cb:72:d7:2d:78:93:59:a1:3b:0f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:30:30 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=dceb26723d8f2f7f7da5afed64f3f4935880426ffbddcbba5247585a11f8744e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a7:0b:43:d4:1b:0b:62:0a:0a:eb:1e:05:78: d6:e0:b5:5a:cc:85:66:29:03:7e:ef:12:67:ff:ee: a7:ca:28:8b:de:07:ca:dd:30:62:3c:47:99:55:5f: 51:68:1f:43:39:e8:e2:23:cc:19:39:49:f8:b5:4c: 83:17:a8:bc:e6:0b:e3:50:0b:f1:40:0c:58:e1:4c: df:46:8d:74:b0:81:f3:d8:48:db:d0:e9:76:c8:eb: 36:45:e8:0c:29:f6:4d:36:e3:97:59:3d:6f:0a:01: c2:e1:6b:d3:82:c2:cd:c8:a5:c1:85:18:62:64:ee: 89:db:97:c5:89:e4:fe:c7:4e:03:0f:6f:20:ae:db: 99:1b:ca:56:fe:9a:43:02:11:54:b4:7b:5e:12:60: 93:aa:9f:0e:ac:f8:71:1b:bf:4c:82:07:ff:0a:84: 02:2c:8b:44:66:ff:ec:55:3e:1a:ee:47:6a:93:fc: 5f:cd:56:89:c2:e7:71:e2:d3:96:07:43:a3:e0:4e: e9:f0:ae:65:fe:3e:e2:4f:ce:c3:e5:d7:6e:dd:c3: eb:c1:69:cc:56:f1:f5:12:e2:1c:f6:25:92:79:d0: 55:ac:98:6b:3a:6c:7b:08:d6:24:55:d8:c3:22:5f: fc:64:93:6d:50:94:ed:85:a7:2c:89:48:22:2f:57: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D7:71:B4:30:05:33:CF:B5:5B:70:2B:19:B0:5F:26:7A:FE:BB:2A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e204a0b-8cbe-4a1f-81f6-d8a388364e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f2a:8000::/36 Signature Algorithm: sha256WithRSAEncryption 99:58:48:65:21:71:93:4e:2c:4a:06:7c:1b:1b:ce:ba:17:4b: 2a:7d:7f:93:11:90:e8:df:5f:c8:f9:46:f2:b5:fa:58:52:d9: 73:f2:21:c5:e2:be:82:fd:69:34:8e:c9:95:13:3b:14:10:78: 8d:aa:cf:1d:a7:a8:2b:b5:17:92:ec:21:c5:9a:c5:75:0a:ce: be:93:9e:3d:66:f2:3f:16:b2:8e:79:14:08:2c:3f:1b:b0:6d: 2f:23:e0:62:59:b4:50:f8:19:b2:f0:a0:32:20:de:63:c2:ae: 50:3e:73:12:59:cc:fa:15:8c:f9:35:e1:bb:9c:69:60:8b:18: d7:30:41:41:7a:7a:a9:52:7a:33:b3:24:d1:2d:0f:65:b0:40: 1a:6f:9f:8d:e5:53:46:da:99:9c:45:eb:17:4f:c8:67:30:54: 5b:d0:34:03:f4:e0:25:f7:39:44:68:31:78:b0:67:84:6a:8c: b2:55:76:94:02:62:33:48:cb:ee:ce:5e:d4:a4:a0:c3:78:17: d9:d1:da:a1:39:2d:95:94:45:7d:3d:1c:97:28:51:cf:a7:81: b6:4b:a3:c5:f8:01:a6:2f:88:c0:08:73:c2:36:0e:41:40:6b: 03:9f:a9:c6:98:b8:e5:28:a2:de:6f:b8:ed:b2:9d:a0:16:fc: b3:d3:13:53 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZJYVXoa9y3rTy3LXLXiTWaE7D3YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgzMDMwWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2ViMjY3MjNkOGYyZjdmN2RhNWFmZWQ2NGYzZjQ5MzU4 ODA0MjZmZmJkZGNiYmE1MjQ3NTg1YTExZjg3NDRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXpwtD1BsLYgoK6x4FeNbgtVrMhWYpA37vEmf/7qfKKIve B8rdMGI8R5lVX1FoH0M56OIjzBk5Sfi1TIMXqLzmC+NQC/FADFjhTN9GjXSwgfPY SNvQ6XbI6zZF6Awp9k0245dZPW8KAcLha9OCws3IpcGFGGJk7onbl8WJ5P7HTgMP byCu25kbylb+mkMCEVS0e14SYJOqnw6s+HEbv0yCB/8KhAIsi0Rm/+xVPhruR2qT /F/NVonC53Hi05YHQ6PgTunwrmX+PuJPzsPl127dw+vBacxW8fUS4hz2JZJ50FWs mGs6bHsI1iRV2MMiX/xkk21QlO2FpyyJSCIvV9JjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUWtdxtDAFM8+1W3ArGbBfJnr+uyowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNlMjA0YTBiLThjYmUtNGExZi04MWY2LWQ4YTM4ODM2NGU2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8qgDANBgkqhkiG9w0BAQsFAAOCAQEAmVhIZSFxk04sSgZ8GxvOuhdL Kn1/kxGQ6N9fyPlG8rX6WFLZc/IhxeK+gv1pNI7JlRM7FBB4jarPHaeoK7UXkuwh xZrFdQrOvpOePWbyPxayjnkUCCw/G7BtLyPgYlm0UPgZsvCgMiDeY8KuUD5zElnM +hWM+TXhu5xpYIsY1zBBQXp6qVJ6M7Mk0S0PZbBAGm+fjeVTRtqZnEXrF0/IZzBU W9A0A/TgJfc5RGgxeLBnhGqMslV2lAJiM0jL7s5e1KSgw3gX2dHaoTktlZRFfT0c lyhRz6eBtkujxfgBpi+IwAhzwjYOQUBrA5+pxpi45Sii3m+47bKdoBb8s9MTUw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:21:46 2025 by rpki-client