$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c3245fc-eb21-4145-89bb-6115dd8f5da5.roa File: 6c3245fc-eb21-4145-89bb-6115dd8f5da5.roa (raw, json) Hash identifier: 7OPytM2wxZkYxgrJK3y88jnBOkALp6KlWjxIAfwW/+8= Subject key identifier: E3:83:34:65:9E:03:95:47:7B:7A:9E:43:AE:AA:49:EE:64:90:5A:42 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F1924170F5ECA40CC5AD6AE946FA002A9178E6C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c3245fc-eb21-4145-89bb-6115dd8f5da5.roa Signing time: Mon 19 May 2025 17:31:58 +0000 ROA not before: Mon 19 May 2025 17:31:58 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:19:24:17:0f:5e:ca:40:cc:5a:d6:ae:94:6f:a0:02:a9:17:8e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 17:31:58 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=624efbd04a2887aa5faf48975a553cd776c087ca6040394d7e9b4ea01567dd2b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:c8:1c:b3:7d:1f:24:44:9e:8f:3d:5b:c9: 8e:25:b8:73:75:3c:6d:2a:0b:9b:82:50:08:7c:c2: 16:09:88:4d:a6:e2:19:a0:8c:db:9d:fc:21:95:f4: 89:cb:c5:39:25:56:21:a6:ec:a8:70:fa:62:33:69: bf:bd:f5:18:a3:02:01:34:13:c7:43:d5:41:b7:42: e1:df:31:85:ea:df:70:bd:1e:7e:7e:47:8b:cd:80: bb:af:54:08:1d:82:d0:19:4d:37:fe:10:39:a5:71: ab:12:9f:e1:50:70:08:1a:6b:03:df:6f:4d:54:9f: 34:d0:a4:ff:94:9a:04:50:b1:2e:d8:81:27:41:bd: f6:d2:85:8d:83:75:0b:99:24:b2:5c:b3:30:b1:fe: fe:30:f9:dc:6c:cb:3a:90:47:2d:72:6e:c9:81:bc: f1:4e:85:e5:39:2b:48:02:f7:66:4c:e3:ba:99:08: ab:06:2b:19:92:9a:26:62:3b:a7:ca:70:64:69:b4: 40:ad:4e:0d:fc:94:0a:96:3e:ed:29:77:78:14:c7: cf:b8:d5:ab:11:c2:a5:71:16:7a:f7:99:06:eb:71: b3:36:d1:62:20:7b:65:78:5d:27:2b:7f:04:20:e7: 36:30:66:9e:1a:e2:ad:9b:84:f4:b9:f6:4f:c8:ea: 0e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:83:34:65:9E:03:95:47:7B:7A:9E:43:AE:AA:49:EE:64:90:5A:42 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c3245fc-eb21-4145-89bb-6115dd8f5da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:6000::/40 Signature Algorithm: sha256WithRSAEncryption 08:b9:45:14:8a:b7:a0:b3:cd:28:72:3f:36:42:9d:18:59:39: 6b:b5:e1:1d:f5:64:05:6a:0b:c5:9c:45:90:29:6a:b3:f4:1c: 4e:9c:d7:45:50:04:4c:c6:f3:72:bd:72:40:09:94:e9:fa:52: 4c:19:27:55:93:66:47:16:41:be:1d:fa:3d:fc:96:9d:09:73: 6e:1f:f9:56:37:1a:17:b0:08:aa:a7:dd:3b:24:e7:b8:a3:97: 4d:c0:28:90:4e:1b:20:0b:2c:54:d2:b3:e1:0f:cb:e9:ae:db: c9:85:c4:40:a9:c8:e3:ee:31:0f:d8:b3:54:9c:26:09:d2:c3: 41:aa:8d:ca:04:70:b6:18:d9:bf:7d:4e:3c:ac:e4:07:b5:ac: 95:dc:b8:88:24:b7:f5:49:67:41:d4:c2:6c:03:97:8c:79:17: 31:6d:f4:74:d0:9f:e1:fa:c2:e3:b4:e7:cd:58:75:ae:d9:36: c2:0f:74:93:f3:ec:a0:01:e8:0e:af:78:8b:cf:8e:42:21:d5: 41:0b:1d:3a:ec:f9:28:6c:23:25:f6:91:5f:31:cf:3a:58:c2: 7e:3b:3d:62:4c:60:01:80:0c:01:ff:ec:90:f4:74:03:c0:a8: b1:61:b2:92:28:24:61:a3:63:5c:f7:cf:73:25:5f:93:50:9b: 7e:72:94:d5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfxkkFw9eykDMWtaulG+gAqkXjmwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTczMTU4WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjRlZmJkMDRhMjg4N2FhNWZhZjQ4OTc1YTU1M2NkNzc2 YzA4N2NhNjA0MDM5NGQ3ZTliNGVhMDE1NjdkZDJiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR8sgcs30fJESejz1byY4luHN1PG0qC5uCUAh8whYJiE2m 4hmgjNud/CGV9InLxTklViGm7Khw+mIzab+99RijAgE0E8dD1UG3QuHfMYXq33C9 Hn5+R4vNgLuvVAgdgtAZTTf+EDmlcasSn+FQcAgaawPfb01UnzTQpP+UmgRQsS7Y gSdBvfbShY2DdQuZJLJcszCx/v4w+dxsyzqQRy1ybsmBvPFOheU5K0gC92ZM47qZ CKsGKxmSmiZiO6fKcGRptECtTg38lAqWPu0pd3gUx8+41asRwqVxFnr3mQbrcbM2 0WIge2V4XScrfwQg5zYwZp4a4q2bhPS59k/I6g7xAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU44M0ZZ4DlUd7ep5DrqpJ7mSQWkIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZjMzI0NWZjLWViMjEtNDE0NS04OWJiLTYxMTVkZDhmNWRhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/xYDANBgkqhkiG9w0BAQsFAAOCAQEACLlFFIq3oLPNKHI/NkKdGFk5 a7XhHfVkBWoLxZxFkClqs/QcTpzXRVAETMbzcr1yQAmU6fpSTBknVZNmRxZBvh36 PfyWnQlzbh/5VjcaF7AIqqfdOyTnuKOXTcAokE4bIAssVNKz4Q/L6a7byYXEQKnI 4+4xD9izVJwmCdLDQaqNygRwthjZv31OPKzkB7Wsldy4iCS39UlnQdTCbAOXjHkX MW30dNCf4frC47TnzVh1rtk2wg90k/PsoAHoDq94i8+OQiHVQQsdOuz5KGwjJfaR XzHPOljCfjs9YkxgAYAMAf/skPR0A8CosWGykigkYaNjXPfPcyVfk1CbfnKU1Q== -----END CERTIFICATE-----Generated at Wed Jun 4 11:25:02 2025 by rpki-client