$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c191bee-9c14-4626-9b5b-5bd69befe93f.roa File: 5c191bee-9c14-4626-9b5b-5bd69befe93f.roa (raw, json) Hash identifier: pYwu6HIFdgUbe4jEr7HJ+IlCf0JUV5gHB2Bxct/CERM= Subject key identifier: 93:72:73:77:81:3A:33:FD:AE:CA:EC:A6:A5:97:57:3D:93:78:5E:AA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 24B1FF420338514BDF15A4E8BF90962DC4F009E4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c191bee-9c14-4626-9b5b-5bd69befe93f.roa Signing time: Fri 30 May 2025 00:21:36 +0000 ROA not before: Fri 30 May 2025 00:21:36 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f20::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b1:ff:42:03:38:51:4b:df:15:a4:e8:bf:90:96:2d:c4:f0:09:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 30 00:21:36 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=04f0fd4b00ae007813eeb4bed97b358bf77cb0508c93693d92d89f847351ff0f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c3:16:b4:df:e4:c2:17:d4:20:41:06:5a:80: 00:40:b5:8e:b2:2d:fc:b7:e3:8c:7e:79:b5:57:53: ca:07:47:85:0a:ff:9b:6e:61:35:a9:52:4a:d8:1d: 56:fc:fc:8b:9c:1f:c4:7b:00:ee:45:cc:c6:47:44: 2d:f5:b0:b8:f5:ad:21:5f:67:14:b7:c5:7b:82:da: 22:4e:52:2a:86:2c:e1:1b:9e:9d:de:1c:f6:f0:fb: 76:a0:89:0d:f2:69:2b:79:67:ac:1d:ef:2e:98:e0: b3:dc:e2:f6:19:ec:fd:96:19:46:b1:52:fd:ef:8c: aa:6c:78:12:4d:52:6a:11:d5:18:af:56:94:77:06: 0f:2f:5d:de:87:ce:7a:1a:b8:b1:ca:09:11:4d:d7: d7:8b:4d:ba:de:74:ac:8d:04:94:9e:3b:79:fb:96: 71:02:0c:50:f4:1f:54:95:31:0e:d5:a0:8e:0c:a2: 4d:a2:f1:50:4e:27:1f:6b:3e:e0:0a:d7:e6:75:f3: e9:82:56:a8:d6:ee:cd:04:1f:a8:77:f7:d2:7e:cf: f8:ec:b7:44:85:55:2e:81:b9:c6:85:35:11:b9:59: a2:14:4d:12:db:65:04:44:d1:af:00:5a:40:1d:cf: 1e:b6:0f:36:04:de:35:e8:62:a6:3e:0d:f8:64:8d: ae:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:72:73:77:81:3A:33:FD:AE:CA:EC:A6:A5:97:57:3D:93:78:5E:AA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c191bee-9c14-4626-9b5b-5bd69befe93f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f20::/28 Signature Algorithm: sha256WithRSAEncryption b8:19:08:a3:b1:66:dc:ef:3c:2f:7e:b9:5d:09:73:d0:5b:21: 89:38:8a:60:b9:77:fa:d4:7a:89:87:9b:f4:09:0a:7c:3d:05: 1d:5d:cc:71:4b:aa:7e:1f:5a:7d:bf:56:ea:33:d0:13:1e:68: 8d:b4:06:51:f2:29:da:ce:cf:1f:85:ee:fc:92:92:be:3a:ca: 57:81:5b:32:28:ad:37:44:c8:73:00:55:b9:f2:4b:d3:55:a4: 34:95:43:66:6b:79:10:fe:a6:ee:d2:51:58:b1:c2:65:c9:9d: a9:26:3b:2a:7e:a8:8d:fc:21:d1:fb:59:ae:11:e6:8e:41:ac: ad:7c:1e:2c:e4:c8:23:70:e0:52:54:de:ce:30:88:be:54:44: 49:e3:f9:2b:47:5a:01:a8:9e:d8:51:5b:80:49:48:3d:ab:0a: 28:57:3d:71:2e:f1:2d:d1:98:a0:b5:47:4a:9e:67:eb:7a:2c: 97:6f:68:1a:09:dd:23:ea:3a:ee:4d:4c:c4:65:f3:e6:d5:06: 55:c8:96:23:05:76:34:5c:2d:86:6c:15:63:fc:ba:14:b4:80: f2:f4:2f:71:71:bb:2b:4b:7f:9a:27:48:8c:b2:7a:d4:20:1f: 52:15:fa:1f:42:b5:21:f2:07:9b:d9:52:36:5d:db:d3:a1:bd: c7:6b:40:17 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUJLH/QgM4UUvfFaTov5CWLcTwCeQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDAyMTM2WhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNGYwZmQ0YjAwYWUwMDc4MTNlZWI0YmVkOTdiMzU4YmY3 N2NiMDUwOGM5MzY5M2Q5MmQ4OWY4NDczNTFmZjBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUwxa03+TCF9QgQQZagABAtY6yLfy344x+ebVXU8oHR4UK /5tuYTWpUkrYHVb8/IucH8R7AO5FzMZHRC31sLj1rSFfZxS3xXuC2iJOUiqGLOEb np3eHPbw+3agiQ3yaSt5Z6wd7y6Y4LPc4vYZ7P2WGUaxUv3vjKpseBJNUmoR1Riv VpR3Bg8vXd6HznoauLHKCRFN19eLTbredKyNBJSeO3n7lnECDFD0H1SVMQ7VoI4M ok2i8VBOJx9rPuAK1+Z18+mCVqjW7s0EH6h399J+z/jst0SFVS6BucaFNRG5WaIU TRLbZQRE0a8AWkAdzx62DzYE3jXoYqY+Dfhkja5RAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUk3Jzd4E6M/2uyuympZdXPZN4XqowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVjMTkxYmVlLTljMTQtNDYyNi05YjViLTViZDY5YmVmZTkzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQQmAB8gMA0GCSqGSIb3DQEBCwUAA4IBAQC4GQijsWbc7zwvfrldCXPQWyGJ OIpguXf61HqJh5v0CQp8PQUdXcxxS6p+H1p9v1bqM9ATHmiNtAZR8inazs8fhe78 kpK+OspXgVsyKK03RMhzAFW58kvTVaQ0lUNma3kQ/qbu0lFYscJlyZ2pJjsqfqiN /CHR+1muEeaOQaytfB4s5MgjcOBSVN7OMIi+VERJ4/krR1oBqJ7YUVuASUg9qwoo Vz1xLvEt0ZigtUdKnmfreiyXb2gaCd0j6jruTUzEZfPm1QZVyJYjBXY0XC2GbBVj /LoUtIDy9C9xcbsrS3+aJ0iMsnrUIB9SFfofQrUh8geb2VI2XdvTob3Ha0AX -----END CERTIFICATE-----Generated at Sun Jun 1 05:03:04 2025 by rpki-client