$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/606042bc-09ce-4328-8e07-400d09289731.roa File: 606042bc-09ce-4328-8e07-400d09289731.roa (raw, json) Hash identifier: rSb8Zl/rwVnIpI+fVg9g5if4aoN2bT12ZaE1oI4dNws= Subject key identifier: BE:2D:D7:8A:C4:A7:7D:D2:76:78:FF:15:7D:9C:3D:3A:3C:E5:9F:97 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45728FCA7239278B6E5BD1CD03546CF14CD56B01 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/606042bc-09ce-4328-8e07-400d09289731.roa Signing time: Sat 17 May 2025 00:21:57 +0000 ROA not before: Sat 17 May 2025 00:21:57 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:72:8f:ca:72:39:27:8b:6e:5b:d1:cd:03:54:6c:f1:4c:d5:6b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:21:57 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=2f645978d7a5f291d3ff3333e82374024447bff485617bb20266f065327c7d36, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:41:20:37:26:43:01:22:da:f5:9e:3a:4c: bc:65:00:75:46:16:d9:c5:9a:63:2e:b9:8d:f7:ab: 9d:bf:92:05:3b:b6:bd:0b:6c:1b:91:f6:84:1f:f9: 4b:8d:b2:90:c1:0a:80:b2:c7:c6:39:e3:64:15:cd: ab:0a:22:0f:cc:20:57:9c:19:e7:48:20:4a:23:96: 94:bd:66:f0:90:f7:54:b8:60:de:5d:07:00:8b:95: d2:a5:e4:c8:37:30:2e:d4:cb:11:a3:13:f3:b8:69: fe:ff:ae:e3:71:7c:3d:4a:32:06:28:79:00:05:4f: c1:ad:2c:d9:11:09:c9:7c:2e:b5:a4:1f:1f:0e:49: 16:8a:85:cd:4b:46:8e:87:a4:96:84:59:e6:f5:fb: 16:e0:66:6d:40:52:a1:ab:0a:d3:8a:2d:eb:49:a8: 3a:9a:32:78:2c:29:14:2d:35:2f:ef:c0:a6:05:38: 75:df:f6:45:17:d8:d9:f8:9f:90:d7:ed:33:6e:ae: 4b:93:fe:73:c2:4a:25:61:bb:5c:22:ba:1a:9c:ab: 69:a0:2d:0e:93:f8:3b:ec:75:ea:1a:7a:60:df:cf: a7:39:b4:04:59:21:43:93:29:5e:af:31:73:7d:9a: c8:65:64:87:b7:fa:5f:65:7e:72:fa:2b:93:25:af: d8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2D:D7:8A:C4:A7:7D:D2:76:78:FF:15:7D:9C:3D:3A:3C:E5:9F:97 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/606042bc-09ce-4328-8e07-400d09289731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption 67:1e:24:e4:de:bf:97:9f:43:d3:c4:d6:c2:ca:07:44:d5:6e: fd:31:b2:08:67:ea:f6:41:fe:49:95:d8:7a:a2:aa:59:34:01: ce:ac:21:4b:c9:48:e3:48:c7:5f:a6:71:57:66:18:19:0b:c7: 87:bf:67:75:b0:bf:2e:8a:15:25:81:af:44:8a:a8:41:19:e6: 92:9f:e1:0e:51:94:67:2d:9a:82:25:5a:d3:86:44:aa:7e:2c: 9c:bb:8e:9f:fa:92:41:8b:24:d5:d8:32:96:56:08:c6:ac:4b: 27:2d:32:b3:e0:33:7b:1e:94:65:ad:2d:62:29:3b:d6:1e:6a: 5c:fe:4f:6b:55:3d:e6:56:0a:79:92:4c:21:82:f1:28:b9:1f: ca:f5:2f:98:b3:74:0b:5f:14:9b:e1:bb:2f:b4:44:ba:bc:1c: 50:26:f9:7d:df:c5:db:f7:44:d2:00:c1:22:9f:e9:c5:81:df: e4:b8:4e:90:08:bf:e0:e5:2b:6b:00:62:3e:f2:fd:96:c2:4c: 06:7c:44:fa:ca:3e:b6:f4:b6:71:56:b6:9a:eb:ee:73:23:0e: 19:95:ce:18:f5:07:a6:c9:76:f1:9f:bc:79:8c:f4:92:f4:16: ab:2d:22:3f:a0:c5:1a:2f:9e:bd:8c:94:95:ad:82:fe:8d:bd: 0b:25:d7:a4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURXKPynI5J4tuW9HNA1Rs8UzVawEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDAyMTU3WhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZjY0NTk3OGQ3YTVmMjkxZDNmZjMzMzNlODIzNzQwMjQ0 NDdiZmY0ODU2MTdiYjIwMjY2ZjA2NTMyN2M3ZDM2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0REEgNyZDASLa9Z46TLxlAHVGFtnFmmMuuY33q52/kgU7 tr0LbBuR9oQf+UuNspDBCoCyx8Y542QVzasKIg/MIFecGedIIEojlpS9ZvCQ91S4 YN5dBwCLldKl5Mg3MC7UyxGjE/O4af7/ruNxfD1KMgYoeQAFT8GtLNkRCcl8LrWk Hx8OSRaKhc1LRo6HpJaEWeb1+xbgZm1AUqGrCtOKLetJqDqaMngsKRQtNS/vwKYF OHXf9kUX2Nn4n5DX7TNurkuT/nPCSiVhu1wiuhqcq2mgLQ6T+DvsdeoaemDfz6c5 tARZIUOTKV6vMXN9mshlZIe3+l9lfnL6K5Mlr9i5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvi3XisSnfdJ2eP8VfZw9Ojzln5cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYwNjA0MmJjLTA5Y2UtNDMyOC04ZTA3LTQwMGQwOTI4OTczMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ywMAwDQYJKoZIhvcNAQELBQADggEBAGceJOTev5efQ9PE1sLKB0TV bv0xsghn6vZB/kmV2Hqiqlk0Ac6sIUvJSONIx1+mcVdmGBkLx4e/Z3Wwvy6KFSWB r0SKqEEZ5pKf4Q5RlGctmoIlWtOGRKp+LJy7jp/6kkGLJNXYMpZWCMasSyctMrPg M3selGWtLWIpO9Yealz+T2tVPeZWCnmSTCGC8Si5H8r1L5izdAtfFJvhuy+0RLq8 HFAm+X3fxdv3RNIAwSKf6cWB3+S4TpAIv+DlK2sAYj7y/ZbCTAZ8RPrKPrb0tnFW tprr7nMjDhmVzhj1B6bJdvGfvHmM9JL0FqstIj+gxRovnr2MlJWtgv6NvQsl16Q= -----END CERTIFICATE-----Generated at Sun Jun 1 05:29:34 2025 by rpki-client