$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d16d56e-9cdc-4928-81f3-5fe4acdbecc9.roa File: 7d16d56e-9cdc-4928-81f3-5fe4acdbecc9.roa (raw, json) Hash identifier: YDzu+YK4CQOHBClp6Bhm2aoIhOTak37vhoQvf20UsHc= Subject key identifier: 9D:F4:04:83:E4:D2:7E:C9:54:0C:46:8D:16:D1:A8:3B:A1:0F:3A:F3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79DCADE7AE060FD961112C2B986D63363C315915 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d16d56e-9cdc-4928-81f3-5fe4acdbecc9.roa Signing time: Sat 17 May 2025 00:40:28 +0000 ROA not before: Sat 17 May 2025 00:40:28 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f00:5080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:dc:ad:e7:ae:06:0f:d9:61:11:2c:2b:98:6d:63:36:3c:31:59:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:40:28 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=a937c08855c7ddfc8cb36b650e5f0c568309eecb53cfc3d082271587efb4604b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:ad:b7:51:db:96:a7:cb:8c:21:ec:34:1d: 32:36:1d:48:3d:72:16:e1:bc:35:26:43:65:b1:4d: b5:0e:3b:8e:81:42:19:e3:17:b1:e5:fe:84:25:cd: a7:57:19:9f:4e:71:89:76:93:13:fc:fd:e3:d0:f8: 8b:2f:4a:71:3c:e7:6b:74:e2:b0:a9:cb:69:4f:4a: 4d:e3:3d:88:34:f8:ff:52:69:a9:04:69:6d:81:c3: df:72:ad:a7:2c:32:96:66:35:a0:03:19:9c:34:6c: d0:f1:f2:0f:67:c9:6f:98:61:62:84:78:7a:5f:1d: fe:b7:cc:b1:e3:0c:60:1d:29:1c:32:4c:0a:00:8a: 48:4b:2f:02:f6:e2:05:9a:18:fe:b3:39:f2:66:07: a2:72:19:a0:8d:e8:ad:fb:f3:e8:dd:4e:f2:f0:9b: a7:18:91:48:29:b6:ca:7f:36:fc:52:e4:7b:1c:0a: 63:ae:ce:6e:e2:75:9c:2b:b2:40:d3:0a:09:67:37: 3c:1a:cc:2e:82:47:bd:1e:1d:56:84:b4:7e:fc:73: cc:64:f3:e6:b5:7e:20:62:d1:c9:eb:0c:2f:a1:a9: 6a:07:d1:f8:7d:b1:a7:dd:78:5d:09:44:68:65:83: 6c:cd:81:f1:e5:d6:a1:25:86:34:bc:a1:9f:8a:6e: fb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F4:04:83:E4:D2:7E:C9:54:0C:46:8D:16:D1:A8:3B:A1:0F:3A:F3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d16d56e-9cdc-4928-81f3-5fe4acdbecc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:5080::/48 Signature Algorithm: sha256WithRSAEncryption 4e:1f:43:5d:ed:bf:4e:b7:2e:a8:40:70:9e:57:9e:6a:3f:bb: 9d:29:43:be:bb:72:e0:38:6e:dc:b4:98:25:be:8c:77:c6:c2: 3d:9e:88:f9:ee:c6:9b:14:c9:b9:a0:86:11:7a:c8:f0:db:bd: b6:56:b7:53:b8:99:1b:86:34:36:50:85:6f:66:b2:8d:c9:48: 9e:2c:82:32:3e:9c:33:c0:76:86:fe:df:88:64:c8:6e:6e:3e: 8a:18:54:11:1c:30:a1:65:89:05:ad:5b:72:33:24:33:6f:90: d6:3a:99:a0:4f:49:fc:2f:14:82:ea:b1:a5:97:80:1a:a3:4a: b8:01:24:cf:bc:bc:a2:95:d8:96:90:56:a4:5b:4f:f7:aa:d4: 2b:08:dd:59:e6:34:40:fb:2a:14:5f:bd:07:32:6b:3f:be:f9: 9a:4c:3e:17:51:c5:d1:ef:aa:50:b4:95:22:f9:bc:41:8c:5d: 44:70:7f:54:f5:c1:30:59:c6:65:a3:91:1b:d2:0d:48:57:be: 90:fc:ec:07:71:87:80:2c:10:08:2d:48:57:af:67:e0:f3:89: b3:eb:13:9f:28:88:46:5f:1a:62:56:0e:79:5f:33:67:98:37: 1f:e8:80:0c:81:d9:88:45:60:6e:23:30:41:ec:9a:4d:9f:11: 17:77:60:5b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUedyt564GD9lhESwrmG1jNjwxWRUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDA0MDI4WhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTM3YzA4ODU1YzdkZGZjOGNiMzZiNjUwZTVmMGM1Njgz MDllZWNiNTNjZmMzZDA4MjI3MTU4N2VmYjQ2MDRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgcK23UduWp8uMIew0HTI2HUg9chbhvDUmQ2WxTbUOO46B QhnjF7Hl/oQlzadXGZ9OcYl2kxP8/ePQ+IsvSnE852t04rCpy2lPSk3jPYg0+P9S aakEaW2Bw99yracsMpZmNaADGZw0bNDx8g9nyW+YYWKEeHpfHf63zLHjDGAdKRwy TAoAikhLLwL24gWaGP6zOfJmB6JyGaCN6K378+jdTvLwm6cYkUgptsp/NvxS5Hsc CmOuzm7idZwrskDTCglnNzwazC6CR70eHVaEtH78c8xk8+a1fiBi0cnrDC+hqWoH 0fh9safdeF0JRGhlg2zNgfHl1qElhjS8oZ+KbvvbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnfQEg+TSfslUDEaNFtGoO6EPOvMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzdkMTZkNTZlLTljZGMtNDkyOC04MWYzLTVmZTRhY2RiZWNjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AUIAwDQYJKoZIhvcNAQELBQADggEBAE4fQ13tv063LqhAcJ5Xnmo/ u50pQ767cuA4bty0mCW+jHfGwj2eiPnuxpsUybmghhF6yPDbvbZWt1O4mRuGNDZQ hW9mso3JSJ4sgjI+nDPAdob+34hkyG5uPooYVBEcMKFliQWtW3IzJDNvkNY6maBP SfwvFILqsaWXgBqjSrgBJM+8vKKV2JaQVqRbT/eq1CsI3VnmNED7KhRfvQcyaz++ +ZpMPhdRxdHvqlC0lSL5vEGMXURwf1T1wTBZxmWjkRvSDUhXvpD87Adxh4AsEAgt SFevZ+DzibPrE58oiEZfGmJWDnlfM2eYNx/ogAyB2YhFYG4jMEHsmk2fERd3YFs= -----END CERTIFICATE-----Generated at Sun Jun 1 04:32:58 2025 by rpki-client