$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/561dfaff-0d62-4d0f-8223-365a2175ed6b.roa File: 561dfaff-0d62-4d0f-8223-365a2175ed6b.roa (raw, json) Hash identifier: rMeVxmrNJPqQT2xhTQMlo8rivOLqVdR5GoocsLLXRF8= Subject key identifier: D9:9D:5D:96:4B:C3:32:9A:63:D8:B8:8E:A0:6B:BC:3A:20:76:FA:B6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 77888D61C1EF7FC857D8C8DA1C42A57D45F77D61 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/561dfaff-0d62-4d0f-8223-365a2175ed6b.roa Signing time: Fri 16 May 2025 17:11:52 +0000 ROA not before: Fri 16 May 2025 17:11:52 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:88:8d:61:c1:ef:7f:c8:57:d8:c8:da:1c:42:a5:7d:45:f7:7d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 17:11:52 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=79e58e13ecb384c3f0198231a1df9793179a0ac63beb7a6638ba76831cd3c06d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:e9:c4:39:78:21:19:56:2e:70:a5:d0:07: 7a:bc:0d:4c:39:39:e7:31:af:a6:1b:52:6b:f3:fd: 1c:a1:e1:67:22:5f:6c:d0:81:bb:68:5f:e9:b8:65: 65:ef:85:ef:04:97:15:17:b4:74:c1:53:a4:78:5f: a4:a0:18:76:88:53:d2:11:02:cf:32:1c:34:a8:ea: 1c:b8:e7:3c:6e:17:78:cd:53:aa:69:24:f1:53:c8: 19:57:14:d6:ea:6d:96:13:ac:5f:cb:11:08:b8:4c: b7:c4:cc:35:1b:da:7c:51:66:63:4b:bd:7b:01:42: 4c:1d:b6:47:5c:df:89:88:67:be:98:c3:e5:f6:6e: bd:eb:55:27:26:11:9a:8b:99:d6:40:b0:39:4b:d5: e7:ff:0a:26:f1:b2:15:c5:a3:95:c1:b1:20:84:74: d0:d5:cc:fb:2f:6e:5c:da:f9:a8:2d:5c:34:9d:82: 8c:df:49:62:c5:ca:aa:3e:df:11:ea:6f:ab:23:87: da:8d:d5:06:a3:38:88:66:16:3a:a2:4f:b8:0c:e4: de:3b:f6:cf:d0:55:df:c4:cd:2a:47:ef:30:11:56: 2c:73:50:9b:6e:a3:b4:6c:2f:9f:07:40:52:4f:5e: 3a:56:32:99:e1:5f:21:a6:2a:3d:1c:3a:18:71:a1: 65:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9D:5D:96:4B:C3:32:9A:63:D8:B8:8E:A0:6B:BC:3A:20:76:FA:B6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/561dfaff-0d62-4d0f-8223-365a2175ed6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:4080::/48 Signature Algorithm: sha256WithRSAEncryption 6e:a2:51:9e:2e:f0:92:c8:b5:6f:36:44:76:a9:9e:0e:dc:9e: 8d:38:72:03:62:81:c3:a4:77:99:17:77:8d:95:ea:08:50:81: 13:20:e0:11:5d:96:68:7f:74:a7:a4:3b:b1:8c:68:73:43:89: 7b:34:52:d8:e0:ed:aa:dd:09:8a:ef:07:81:91:2f:c9:7e:67: ea:3e:44:d5:b2:b8:24:ce:e1:9d:e4:44:1f:c8:81:e4:16:29: 79:7c:1c:83:e7:48:3e:87:7a:c8:ba:83:42:8e:35:b7:98:37: 1c:02:9c:36:de:78:5e:d8:db:01:6d:8f:54:d8:e6:f7:93:8f: 4e:4b:7a:18:ee:77:e8:40:9d:17:45:3c:3d:74:44:aa:76:0a: 5d:d6:1c:95:7b:2b:ed:59:a2:2a:4b:a4:97:ee:38:96:a9:b7: 73:04:29:a5:f2:82:f1:54:4f:7a:1d:3b:9f:de:4b:98:b4:0e: 31:b2:7a:ce:bb:b3:b7:11:25:67:db:06:38:3f:35:63:e0:09: a2:e7:c5:a6:5c:56:ef:f9:fb:9c:66:b3:c1:a4:b7:13:c5:d2: ef:55:6d:5e:93:94:9b:4a:69:11:4c:7d:c7:01:40:f7:57:97: af:e6:e0:26:b8:17:eb:0e:23:da:10:c2:af:74:f0:60:65:c6: 0e:78:3b:f1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd4iNYcHvf8hX2MjaHEKlfUX3fWEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTcxMTUyWhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWU1OGUxM2VjYjM4NGMzZjAxOTgyMzFhMWRmOTc5MzE3 OWEwYWM2M2JlYjdhNjYzOGJhNzY4MzFjZDNjMDZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCXunEOXghGVYucKXQB3q8DUw5Oecxr6YbUmvz/Ryh4Wci X2zQgbtoX+m4ZWXvhe8ElxUXtHTBU6R4X6SgGHaIU9IRAs8yHDSo6hy45zxuF3jN U6ppJPFTyBlXFNbqbZYTrF/LEQi4TLfEzDUb2nxRZmNLvXsBQkwdtkdc34mIZ76Y w+X2br3rVScmEZqLmdZAsDlL1ef/CibxshXFo5XBsSCEdNDVzPsvblza+agtXDSd gozfSWLFyqo+3xHqb6sjh9qN1QajOIhmFjqiT7gM5N479s/QVd/EzSpH7zARVixz UJtuo7RsL58HQFJPXjpWMpnhXyGmKj0cOhhxoWVVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2Z1dlkvDMppj2LiOoGu8OiB2+rYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2MWRmYWZmLTBkNjItNGQwZi04MjIzLTM2NWEyMTc1ZWQ2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84QIAwDQYJKoZIhvcNAQELBQADggEBAG6iUZ4u8JLItW82RHapng7c no04cgNigcOkd5kXd42V6ghQgRMg4BFdlmh/dKekO7GMaHNDiXs0Utjg7ardCYrv B4GRL8l+Z+o+RNWyuCTO4Z3kRB/IgeQWKXl8HIPnSD6Hesi6g0KONbeYNxwCnDbe eF7Y2wFtj1TY5veTj05Lehjud+hAnRdFPD10RKp2Cl3WHJV7K+1ZoipLpJfuOJap t3MEKaXygvFUT3odO5/eS5i0DjGyes67s7cRJWfbBjg/NWPgCaLnxaZcVu/5+5xm s8GktxPF0u9VbV6TlJtKaRFMfccBQPdXl6/m4Ca4F+sOI9oQwq908GBlxg54O/E= -----END CERTIFICATE-----Generated at Fri Jun 6 05:31:13 2025 by rpki-client