$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aa5de4e-bc91-43cc-bc8d-f1770cb3b7ac.roa File: 5aa5de4e-bc91-43cc-bc8d-f1770cb3b7ac.roa (raw, json) Hash identifier: Fruh+yVy44A1KLi6vSvlTN2+OtHP61B0YE5Jm6eyiXU= Subject key identifier: A4:BB:89:2E:AA:38:59:C6:9F:1F:A1:F8:D8:9C:B7:90:B2:6A:69:70 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F236BC3514C547422943A7BBF7DE8DE90250DC6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aa5de4e-bc91-43cc-bc8d-f1770cb3b7ac.roa Signing time: Wed 21 May 2025 00:10:25 +0000 ROA not before: Wed 21 May 2025 00:10:25 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffc:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:23:6b:c3:51:4c:54:74:22:94:3a:7b:bf:7d:e8:de:90:25:0d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 21 00:10:25 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=2a76194cdc81166d4932be7ad9d4e80640f82f5d981c8b5cdbb56adc74d475d4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:89:d7:d5:f9:c2:00:05:9d:c6:f2:6e:af: 21:50:34:3f:a2:4f:d7:06:6e:e9:08:14:f4:ac:de: 27:8d:c2:63:a7:51:30:95:60:35:7d:6d:4d:20:cb: 99:2f:9a:66:da:9c:c2:32:8b:bf:d0:c0:a1:0b:50: 28:f6:33:41:d0:d8:93:65:c8:e5:25:67:07:cf:b2: 6c:8c:a2:fe:54:0d:83:ed:9b:4b:bb:57:f2:b9:82: 5d:0e:07:8b:90:e7:23:ce:4a:a2:0b:8f:4b:62:2a: 9e:70:9b:e4:ca:c9:d4:de:cb:be:04:6e:08:ba:23: 09:6f:d4:7e:88:49:60:9b:0c:77:6e:1b:99:e7:b6: 8d:be:99:e4:79:c9:73:33:14:f6:e8:ad:37:70:29: 45:1f:a6:78:cc:91:63:32:99:6f:c7:64:37:63:f6: 8e:20:13:95:85:5f:7c:a4:ab:9d:68:cc:f4:58:56: c0:3f:aa:5e:83:3b:80:72:38:e5:38:ad:2d:ed:8c: 2b:e3:88:db:7d:7f:60:e5:9d:03:c9:82:5e:cb:c2: b3:47:0e:76:eb:1f:3b:b2:61:06:7c:2d:59:ac:00: e0:7d:7e:53:dc:44:82:ad:a9:e0:80:8b:7f:f6:fb: 67:ae:d9:f7:f3:84:30:55:47:97:5a:b5:e2:92:22: 4a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BB:89:2E:AA:38:59:C6:9F:1F:A1:F8:D8:9C:B7:90:B2:6A:69:70 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5aa5de4e-bc91-43cc-bc8d-f1770cb3b7ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffc:8000::/39 Signature Algorithm: sha256WithRSAEncryption b9:0d:e6:d1:eb:1a:41:e6:82:b5:81:b3:97:a1:df:21:c8:b2: fc:36:60:f0:8e:f3:85:aa:74:29:cc:43:ac:b7:03:2d:4b:d6: e9:4f:4e:a8:70:0b:0d:1e:6a:0e:0e:24:e7:98:6a:c5:2b:f7: 13:84:bd:f4:4e:b4:7d:7c:c6:78:d1:41:e4:d9:fd:28:7d:c9: 12:3f:5f:55:9f:fe:ba:14:ec:72:38:90:3f:3e:11:c8:58:f7: cd:bc:9e:cb:4f:2e:79:3d:09:36:d7:ea:f2:2d:2d:50:c6:cf: ca:df:34:ce:21:56:07:b0:36:ce:02:2b:d0:9c:65:34:24:7d: b3:46:bc:20:50:50:8c:df:a9:a4:75:4b:71:6f:ba:cd:91:8b: 3d:f6:cd:2f:75:ae:56:7c:ba:89:df:b1:4b:3f:53:72:5b:25: d2:0a:a2:13:a9:c3:0a:c1:e3:43:b0:4e:03:f8:36:43:a1:c8: db:56:b5:47:31:dc:f3:78:b2:db:ad:50:70:fe:f5:e6:fe:1d: a0:2e:45:f1:a4:38:8b:7e:67:54:d6:83:a9:12:4a:1d:06:94: 8c:a6:0d:80:69:a7:6f:67:fc:f3:01:38:03:b2:06:45:2c:ff: 81:3e:a2:bc:45:c6:11:71:c7:60:69:47:b7:70:0c:db:5c:d2: 0d:e5:c4:83 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfyNrw1FMVHQilDp7v33o3pAlDcYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIxMDAxMDI1WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTc2MTk0Y2RjODExNjZkNDkzMmJlN2FkOWQ0ZTgwNjQw ZjgyZjVkOTgxYzhiNWNkYmI1NmFkYzc0ZDQ3NWQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2oonX1fnCAAWdxvJuryFQND+iT9cGbukIFPSs3ieNwmOn UTCVYDV9bU0gy5kvmmbanMIyi7/QwKELUCj2M0HQ2JNlyOUlZwfPsmyMov5UDYPt m0u7V/K5gl0OB4uQ5yPOSqILj0tiKp5wm+TKydTey74Ebgi6Iwlv1H6ISWCbDHdu G5nnto2+meR5yXMzFPborTdwKUUfpnjMkWMymW/HZDdj9o4gE5WFX3ykq51ozPRY VsA/ql6DO4ByOOU4rS3tjCvjiNt9f2DlnQPJgl7LwrNHDnbrHzuyYQZ8LVmsAOB9 flPcRIKtqeCAi3/2+2eu2ffzhDBVR5dateKSIkp9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUpLuJLqo4WcafH6H42Jy3kLJqaXAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhYTVkZTRlLWJjOTEtNDNjYy1iYzhkLWYxNzcwY2IzYjdhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/8gDANBgkqhkiG9w0BAQsFAAOCAQEAuQ3m0esaQeaCtYGzl6HfIciy /DZg8I7zhap0KcxDrLcDLUvW6U9OqHALDR5qDg4k55hqxSv3E4S99E60fXzGeNFB 5Nn9KH3JEj9fVZ/+uhTscjiQPz4RyFj3zbyey08ueT0JNtfq8i0tUMbPyt80ziFW B7A2zgIr0JxlNCR9s0a8IFBQjN+ppHVLcW+6zZGLPfbNL3WuVny6id+xSz9Tclsl 0gqiE6nDCsHjQ7BOA/g2Q6HI21a1RzHc83iy261QcP715v4doC5F8aQ4i35nVNaD qRJKHQaUjKYNgGmnb2f88wE4A7IGRSz/gT6ivEXGEXHHYGlHt3AM21zSDeXEgw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:41:49 2025 by rpki-client