$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8535a9ec-bdd5-4f77-8f81-ebc2ed78e9b4.roa File: 8535a9ec-bdd5-4f77-8f81-ebc2ed78e9b4.roa (raw, json) Hash identifier: eoaITNHuQ0FfAfgc6d2bgw9QdiGVgirEZKW2zBHQJs0= Subject key identifier: 47:3A:FA:94:58:C9:E9:15:19:04:4A:32:DA:01:2D:BC:C4:10:55:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7BF27F85555FA029D8D606840332CD8CAB592BAC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8535a9ec-bdd5-4f77-8f81-ebc2ed78e9b4.roa Signing time: Fri 16 May 2025 17:20:22 +0000 ROA not before: Fri 16 May 2025 17:20:22 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f2:7f:85:55:5f:a0:29:d8:d6:06:84:03:32:cd:8c:ab:59:2b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 17:20:22 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=a289ff6ef0ae850c2ae7a80b608fcc69035b0dea855e58e57a31c5be0a2d750b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b2:e7:ef:22:1b:46:f6:6b:a8:bd:a5:6f:77: c5:6b:f1:89:90:39:4f:76:a6:9b:0c:f7:50:4d:c0: 93:8d:32:ae:72:18:11:e1:dd:10:08:0c:de:2c:37: 40:79:51:8e:c5:48:ce:41:25:fc:89:86:88:08:09: 2d:ce:6f:41:ed:9d:82:cd:3d:a8:95:76:3c:9b:fd: e1:dd:01:29:f3:af:d7:c7:a4:5a:37:0e:a9:13:50: 15:fe:f5:6e:97:d2:34:dd:96:f2:0e:0f:66:ff:b6: 41:f0:44:c1:70:cd:15:b9:c0:04:30:e0:a0:03:dc: 25:d9:39:b5:ed:45:30:1c:75:1a:e0:d4:a4:01:90: 85:da:ee:04:c7:f8:59:0c:bd:5d:ff:f6:5a:95:eb: 51:14:cb:09:51:b1:fc:5d:17:a1:76:09:f3:9b:70: 49:84:cb:78:c1:fd:74:ce:ce:d9:0d:ee:09:be:bb: 5f:6c:07:93:fe:eb:06:2d:35:6a:0f:15:d5:36:8d: 7f:f9:d3:6d:9e:84:f3:14:28:4e:a6:5b:5c:26:fc: 60:e3:1d:e6:27:33:eb:56:c8:cc:80:b7:0c:54:3f: bc:34:40:b8:c5:25:fe:ae:a9:c1:2c:66:18:ee:7c: e4:62:d7:05:da:90:35:ad:13:3a:d8:a6:fc:b2:4c: 39:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3A:FA:94:58:C9:E9:15:19:04:4A:32:DA:01:2D:BC:C4:10:55:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8535a9ec-bdd5-4f77-8f81-ebc2ed78e9b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:2040::/48 Signature Algorithm: sha256WithRSAEncryption ac:0c:2a:2c:df:9e:0f:ed:eb:bd:04:9c:d5:62:f4:82:2a:a7: 2d:1b:a6:44:53:36:85:77:8d:60:f3:32:b9:a5:0b:d7:b6:a6: ab:ba:74:7a:c7:28:72:a7:d9:93:02:9f:3b:5f:98:6c:53:17: 5e:f4:f4:11:f9:13:c0:ea:b0:ae:09:5b:da:31:e0:33:f2:be: c5:ea:1c:1d:d0:25:f4:65:ca:5c:71:ab:63:86:59:e1:0a:31: 59:80:57:e7:d0:a8:73:0a:93:35:52:af:b3:82:a7:43:a0:84: c2:28:2a:57:23:a3:f3:10:eb:36:2c:24:7c:2c:f3:76:fe:bb: 47:23:59:22:8b:2f:8a:e9:93:87:ac:a5:ef:10:0c:cf:f2:85: d7:ff:29:a0:0e:37:d7:11:2d:43:8e:f0:36:80:0d:37:00:ef: 6f:b1:99:28:f5:5f:69:6b:68:24:b7:2d:d6:09:96:b7:b1:23: f9:12:fe:9e:6c:63:b4:87:c5:a3:ef:08:6f:bb:e8:ed:02:7a: 95:49:4c:70:ea:0a:b0:37:f4:f5:7d:e4:94:e4:03:f8:a4:2a: 3c:ff:5b:5c:d0:19:be:7d:15:ae:03:b9:d2:30:eb:34:c6:46: 82:dc:a7:10:5c:25:c2:36:ce:e9:40:49:b9:ed:d6:4b:a7:8f: 53:60:02:27 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUe/J/hVVfoCnY1gaEAzLNjKtZK6wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTcyMDIyWhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjg5ZmY2ZWYwYWU4NTBjMmFlN2E4MGI2MDhmY2M2OTAz NWIwZGVhODU1ZTU4ZTU3YTMxYzViZTBhMmQ3NTBiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZsufvIhtG9muovaVvd8Vr8YmQOU92ppsM91BNwJONMq5y GBHh3RAIDN4sN0B5UY7FSM5BJfyJhogICS3Ob0HtnYLNPaiVdjyb/eHdASnzr9fH pFo3DqkTUBX+9W6X0jTdlvIOD2b/tkHwRMFwzRW5wAQw4KAD3CXZObXtRTAcdRrg 1KQBkIXa7gTH+FkMvV3/9lqV61EUywlRsfxdF6F2CfObcEmEy3jB/XTOztkN7gm+ u19sB5P+6wYtNWoPFdU2jX/5022ehPMUKE6mW1wm/GDjHeYnM+tWyMyAtwxUP7w0 QLjFJf6uqcEsZhjufORi1wXakDWtEzrYpvyyTDntAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURzr6lFjJ6RUZBEoy2gEtvMQQVWYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg1MzVhOWVjLWJkZDUtNGY3Ny04ZjgxLWViYzJlZDc4ZTliNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AIEAwDQYJKoZIhvcNAQELBQADggEBAKwMKizfng/t670EnNVi9IIq py0bpkRTNoV3jWDzMrmlC9e2pqu6dHrHKHKn2ZMCnztfmGxTF1709BH5E8DqsK4J W9ox4DPyvsXqHB3QJfRlylxxq2OGWeEKMVmAV+fQqHMKkzVSr7OCp0OghMIoKlcj o/MQ6zYsJHws83b+u0cjWSKLL4rpk4espe8QDM/yhdf/KaAON9cRLUOO8DaADTcA 72+xmSj1X2lraCS3LdYJlrexI/kS/p5sY7SHxaPvCG+76O0CepVJTHDqCrA39PV9 5JTkA/ikKjz/W1zQGb59Fa4DudIw6zTGRoLcpxBcJcI2zulASbnt1kunj1NgAic= -----END CERTIFICATE-----Generated at Sun Jun 1 04:55:23 2025 by rpki-client