$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86160c65-49b2-44a7-b815-90848ebe0f52.roa File: 86160c65-49b2-44a7-b815-90848ebe0f52.roa (raw, json) Hash identifier: UVQbKSpKZ5Flvz9xamsxqGi+Qlp6zMbvhtpj3cqiABo= Subject key identifier: 12:5C:0C:FF:14:D1:2E:9E:7B:A9:21:CF:A4:F1:8A:9C:6C:CA:5E:FF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 570B24C39550975355E236357E9BB86EFA76EDFE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86160c65-49b2-44a7-b815-90848ebe0f52.roa Signing time: Sat 17 May 2025 00:51:13 +0000 ROA not before: Sat 17 May 2025 00:51:13 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f61:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0b:24:c3:95:50:97:53:55:e2:36:35:7e:9b:b8:6e:fa:76:ed:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:51:13 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=7010624ba9fc0ae272e738510293a0df5278f721176c571bbb90107360c4a1db, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:09:d6:e2:ba:c8:66:19:b5:a5:51:05:1f:40: 39:37:3c:9a:87:da:6d:f9:38:5d:fd:7a:a2:79:d2: 33:0a:8e:21:37:24:b5:45:92:8b:51:92:cd:14:73: c5:ea:97:ab:bb:a1:52:73:74:cd:57:3e:fd:c1:80: 90:35:ab:82:c7:fb:2c:f8:15:1b:dd:3b:67:59:5d: d1:ce:7b:0b:4e:f3:4b:14:d4:ea:cd:04:c5:e3:2f: 0a:9c:a2:5e:4a:3d:d8:f6:a9:30:f1:aa:5c:60:bb: 38:34:e5:2e:4c:6f:9b:81:2a:b8:12:16:fd:0d:de: 88:86:b3:cd:3a:0e:98:56:ed:1d:aa:e5:5d:11:f3: de:56:24:f1:e5:cc:d6:ea:1b:9e:69:e4:d2:76:c2: a7:5c:f8:2d:4f:5d:99:88:44:3a:bf:c8:c3:29:39: ef:81:29:3a:64:05:b6:62:d3:38:5b:28:39:ea:5b: 11:1c:67:47:6c:2f:8a:f3:7f:eb:5a:93:cb:17:70: 55:bc:8e:5f:e7:0e:9c:e5:49:ed:ed:81:68:b2:40: 8f:a8:42:01:05:87:f7:82:67:62:57:b1:20:b8:a6: 28:50:c9:f2:1f:f8:93:50:6e:8f:4a:7c:f1:6d:eb: 5a:35:ff:d8:78:8e:9b:67:2d:8c:93:36:2c:21:65: 1f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5C:0C:FF:14:D1:2E:9E:7B:A9:21:CF:A4:F1:8A:9C:6C:CA:5E:FF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86160c65-49b2-44a7-b815-90848ebe0f52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:2080::/48 Signature Algorithm: sha256WithRSAEncryption 15:77:c9:bc:d7:d0:f9:6c:5a:7d:cd:7c:ce:43:0e:86:4f:c7: 26:94:7b:12:28:63:9e:eb:da:b9:28:18:f6:fb:dd:e9:c9:78: b6:44:88:24:e4:79:4b:a3:72:2f:b5:ff:a4:05:77:bc:0e:bf: 9d:b5:1c:9f:b1:ea:30:80:59:32:55:93:be:cb:70:a7:82:c9: 01:57:a8:62:90:84:57:09:a2:ca:15:72:00:65:7d:b1:51:60: 17:36:38:2b:f0:5e:e2:ae:92:a7:6c:61:97:d3:02:6e:13:86: f6:58:87:58:cc:36:4d:db:c0:2b:b3:db:98:73:b2:af:79:1f: 31:be:d8:7d:61:56:a0:5f:0c:e3:ea:10:f5:5c:12:78:59:9b: d4:8d:93:77:40:a1:f4:2e:1e:96:37:13:bb:2a:d2:88:b6:38: f0:a3:a3:39:ca:be:09:79:22:40:17:04:7c:fa:c7:f9:0c:c1: 2c:26:12:60:b3:ad:d5:20:9f:36:47:fb:39:ba:94:d7:07:29: f4:2e:ab:e2:2c:b1:6d:ee:2c:e8:db:c5:e6:ea:71:8a:aa:84: 9c:05:69:f7:de:65:53:55:5e:17:b7:80:d0:52:1d:d1:26:b1: 48:78:40:cd:c1:de:a1:56:15:09:33:ed:77:01:bd:d6:b7:a1: 82:62:bc:22 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVwskw5VQl1NV4jY1fpu4bvp27f4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDA1MTEzWhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDEwNjI0YmE5ZmMwYWUyNzJlNzM4NTEwMjkzYTBkZjUy NzhmNzIxMTc2YzU3MWJiYjkwMTA3MzYwYzRhMWRiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiCdbiushmGbWlUQUfQDk3PJqH2m35OF39eqJ50jMKjiE3 JLVFkotRks0Uc8Xql6u7oVJzdM1XPv3BgJA1q4LH+yz4FRvdO2dZXdHOewtO80sU 1OrNBMXjLwqcol5KPdj2qTDxqlxguzg05S5Mb5uBKrgSFv0N3oiGs806DphW7R2q 5V0R895WJPHlzNbqG55p5NJ2wqdc+C1PXZmIRDq/yMMpOe+BKTpkBbZi0zhbKDnq WxEcZ0dsL4rzf+tak8sXcFW8jl/nDpzlSe3tgWiyQI+oQgEFh/eCZ2JXsSC4pihQ yfIf+JNQbo9KfPFt61o1/9h4jptnLYyTNiwhZR89AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUElwM/xTRLp57qSHPpPGKnGzKXv8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2MTYwYzY1LTQ5YjItNDRhNy1iODE1LTkwODQ4ZWJlMGY1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hIIAwDQYJKoZIhvcNAQELBQADggEBABV3ybzX0PlsWn3NfM5DDoZP xyaUexIoY57r2rkoGPb73enJeLZEiCTkeUujci+1/6QFd7wOv521HJ+x6jCAWTJV k77LcKeCyQFXqGKQhFcJosoVcgBlfbFRYBc2OCvwXuKukqdsYZfTAm4ThvZYh1jM Nk3bwCuz25hzsq95HzG+2H1hVqBfDOPqEPVcEnhZm9SNk3dAofQuHpY3E7sq0oi2 OPCjoznKvgl5IkAXBHz6x/kMwSwmEmCzrdUgnzZH+zm6lNcHKfQuq+IssW3uLOjb xebqcYqqhJwFaffeZVNVXhe3gNBSHdEmsUh4QM3B3qFWFQkz7XcBvda3oYJivCI= -----END CERTIFICATE-----Generated at Fri Jun 6 05:31:13 2025 by rpki-client