$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89de9e52-4387-4a27-8ef0-f21212663bb4.roa File: 89de9e52-4387-4a27-8ef0-f21212663bb4.roa (raw, json) Hash identifier: vl3O82LuDSS5yZK7x61hB+EfDUrBhYIQzQNiaoZl794= Subject key identifier: E0:E1:6E:59:99:5F:6D:ED:F8:33:A4:0B:8F:80:A4:74:AC:F6:8B:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 43D996E547C68B18142F900D8CEDD477D98B8A7A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89de9e52-4387-4a27-8ef0-f21212663bb4.roa Signing time: Mon 19 May 2025 18:00:16 +0000 ROA not before: Mon 19 May 2025 18:00:16 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f15::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d9:96:e5:47:c6:8b:18:14:2f:90:0d:8c:ed:d4:77:d9:8b:8a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:00:16 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=9a0b5c78ca0f962bc69323eaa6fe3687ddcdf5e66e35321c36ba9cdc3be9173d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:02:27:55:63:c2:62:84:e6:ea:23:d7:f0: f8:3e:ab:61:14:7f:61:17:3f:41:d1:ac:c6:79:8a: f5:2d:9f:32:4f:4c:55:bb:3a:eb:17:c8:b6:f1:83: 2d:77:23:b8:0b:53:60:ba:fe:9e:18:ca:e4:da:1c: a1:20:cc:16:53:ce:31:aa:ff:8d:4f:3a:98:d7:bd: a8:7f:54:ea:cf:18:2d:ee:4c:60:d3:a0:f1:b7:04: 14:72:e1:3e:ac:49:8e:a6:7e:6d:f3:3b:ee:43:53: ea:c8:44:a9:db:ec:81:60:f1:6c:8c:a0:ec:27:6f: 45:2c:df:58:d8:4b:4e:b6:f9:c0:5c:a7:b0:28:9e: f6:e2:d8:c5:af:f7:45:49:e6:74:b6:46:69:ef:67: 91:92:c3:66:9b:dd:4d:8a:5e:fc:82:a8:ab:f8:c1: 94:d3:7d:41:16:d1:14:1c:07:91:aa:23:58:25:2f: 2c:fb:52:cc:58:34:98:26:f8:16:40:75:7b:92:56: 74:2d:0c:d3:7e:e3:59:de:82:c5:eb:41:12:26:9b: 77:90:bd:77:32:b5:58:b5:c2:5d:b0:f5:5e:fc:f2: 0a:3b:5a:ae:e3:ea:08:45:80:e5:77:e0:56:b4:67: 12:19:0b:a2:66:20:cd:0f:59:af:22:18:7b:81:9e: 33:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E1:6E:59:99:5F:6D:ED:F8:33:A4:0B:8F:80:A4:74:AC:F6:8B:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89de9e52-4387-4a27-8ef0-f21212663bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f15::/36 Signature Algorithm: sha256WithRSAEncryption 0a:f8:ab:11:2b:9e:af:71:c5:c5:9d:07:bc:75:d3:69:8d:97: b5:94:ef:79:89:b2:d3:58:81:50:21:b1:3c:19:1c:f7:68:44: b0:9d:2c:e2:e5:98:c5:66:1d:1b:2a:5d:11:00:9c:4f:3b:50: f1:9a:49:1c:9d:c2:ea:89:09:30:33:c4:e9:7f:b6:b2:fc:ec: cb:95:2a:1f:c6:28:8d:17:7e:ea:7e:b3:c5:af:e8:ea:5b:2f: 3a:87:37:49:ce:0a:56:ce:2a:f3:1b:db:3c:cc:f2:a8:98:54: d4:45:37:44:ea:55:72:62:fe:8f:0c:b3:7e:67:08:a8:c7:89: b3:7c:56:71:68:a4:ef:6e:25:3a:9e:71:6b:05:cb:ef:d4:9f: 37:a2:67:6b:57:1f:14:ea:8a:98:ef:1b:47:60:1b:8d:56:e2: 81:2c:b8:9c:76:de:24:8c:3c:10:f0:2c:ea:12:26:85:42:69: 31:81:46:a4:b7:62:c9:e7:19:99:bd:d7:a4:ba:9c:6b:5d:22: b9:e0:24:fd:c7:4f:41:f4:0a:f0:51:ee:6f:f7:b7:2b:b1:ea: f2:1c:c0:13:47:de:79:fa:87:93:0a:9a:d6:ff:2f:9d:97:45: 03:73:d5:0a:cc:2b:4c:f6:5e:aa:97:47:d1:77:47:6e:20:1f: e7:f3:7d:65 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQ9mW5UfGixgUL5ANjO3Ud9mLinowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgwMDE2WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTBiNWM3OGNhMGY5NjJiYzY5MzIzZWFhNmZlMzY4N2Rk Y2RmNWU2NmUzNTMyMWMzNmJhOWNkYzNiZTkxNzNkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1zQInVWPCYoTm6iPX8Pg+q2EUf2EXP0HRrMZ5ivUtnzJP TFW7OusXyLbxgy13I7gLU2C6/p4YyuTaHKEgzBZTzjGq/41POpjXvah/VOrPGC3u TGDToPG3BBRy4T6sSY6mfm3zO+5DU+rIRKnb7IFg8WyMoOwnb0Us31jYS062+cBc p7Aonvbi2MWv90VJ5nS2RmnvZ5GSw2ab3U2KXvyCqKv4wZTTfUEW0RQcB5GqI1gl Lyz7UsxYNJgm+BZAdXuSVnQtDNN+41negsXrQRImm3eQvXcytVi1wl2w9V788go7 Wq7j6ghFgOV34Fa0ZxIZC6JmIM0PWa8iGHuBnjOZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4OFuWZlfbe34M6QLj4CkdKz2i1gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg5ZGU5ZTUyLTQzODctNGEyNy04ZWYwLWYyMTIxMjY2M2JiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8VADANBgkqhkiG9w0BAQsFAAOCAQEACvirESuer3HFxZ0HvHXTaY2X tZTveYmy01iBUCGxPBkc92hEsJ0s4uWYxWYdGypdEQCcTztQ8ZpJHJ3C6okJMDPE 6X+2svzsy5UqH8YojRd+6n6zxa/o6lsvOoc3Sc4KVs4q8xvbPMzyqJhU1EU3ROpV cmL+jwyzfmcIqMeJs3xWcWik724lOp5xawXL79SfN6Jna1cfFOqKmO8bR2AbjVbi gSy4nHbeJIw8EPAs6hImhUJpMYFGpLdiyecZmb3XpLqca10iueAk/cdPQfQK8FHu b/e3K7Hq8hzAE0feefqHkwqa1v8vnZdFA3PVCswrTPZeqpdH0XdHbiAf5/N9ZQ== -----END CERTIFICATE-----Generated at Mon Jun 9 06:25:58 2025 by rpki-client