$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e9657c6-7ada-4c85-8cb8-bcc93db16fb7.roa File: 8e9657c6-7ada-4c85-8cb8-bcc93db16fb7.roa (raw, json) Hash identifier: QVzXmJvjpdLIUisvqW0myzC1BwaModGECOd8QmO9eao= Subject key identifier: 10:ED:77:F8:0C:0A:34:D3:C3:C1:B8:C0:7D:F0:96:F6:9E:52:D7:93 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51640FF0EDEBFDEE06C1440C4E5699C27CE27F62 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e9657c6-7ada-4c85-8cb8-bcc93db16fb7.roa Signing time: Thu 22 May 2025 01:07:16 +0000 ROA not before: Thu 22 May 2025 01:07:16 +0000 ROA not after: Thu 26 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb9:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:64:0f:f0:ed:eb:fd:ee:06:c1:44:0c:4e:56:99:c2:7c:e2:7f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 01:07:16 2025 GMT Not After : Jun 26 23:59:59 2025 GMT Subject: serialNumber=e7960d9cd4977107c1f3dbaaea78905a5d9df64e06e0abdf043df20cf74fee93, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:9f:01:ef:c9:18:4b:39:d9:4b:7b:fc:e9: ca:fc:90:a4:e5:83:3c:96:b9:dd:f5:66:27:b4:da: dc:3d:86:a0:4f:f9:90:a6:06:2c:a1:c8:a2:5d:24: fd:2b:07:4a:b7:ff:63:3c:28:5c:58:7c:4a:b8:ef: 32:75:34:a2:64:1b:f6:d7:16:85:6f:d2:6d:22:72: 12:bb:00:40:8f:b4:55:d8:2c:cc:10:fd:3f:4b:9f: 3e:45:0c:a6:f4:7d:ea:cc:e2:c7:38:88:8f:10:c6: 4f:81:81:38:dc:23:c5:10:3d:83:8c:fc:d7:c8:ef: 3c:a6:51:dc:57:75:ae:81:4a:11:2d:1c:9f:66:ee: 6a:87:70:56:f3:f6:52:67:df:2b:9b:9d:ae:5a:fb: fa:9e:f1:fa:8c:f5:b9:52:0f:f2:4c:95:6f:f9:60: 23:46:8b:b4:82:df:4a:f1:00:19:03:45:82:a0:37: d2:e3:92:96:24:7a:f0:c7:ed:01:2c:5b:a6:3c:18: b3:d6:53:35:62:5a:3d:d1:62:34:38:07:46:00:0a: 9b:d8:41:39:be:ad:4b:95:ad:eb:7f:b5:a0:d8:77: 1a:90:17:a5:95:87:32:5b:e5:65:72:06:a1:06:e9: ca:5d:21:c9:47:31:33:6c:2d:09:c1:42:ed:18:ff: bc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:ED:77:F8:0C:0A:34:D3:C3:C1:B8:C0:7D:F0:96:F6:9E:52:D7:93 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e9657c6-7ada-4c85-8cb8-bcc93db16fb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb9:3400::/40 Signature Algorithm: sha256WithRSAEncryption 17:bb:cc:aa:52:4c:73:14:01:d3:07:78:b1:65:ad:07:90:8c: 3d:26:28:cc:73:a9:fd:3f:a9:a9:79:96:4d:4a:1a:b1:33:4d: ba:34:bc:38:75:de:60:d5:c9:f9:51:54:46:fb:b3:fa:53:37: f1:1c:44:56:ff:01:cd:4c:84:54:fd:9e:3c:dc:f5:a2:51:52: 78:2f:6e:eb:6e:50:13:7b:0e:0d:8a:ad:4e:66:63:2c:11:7a: 67:23:8c:34:9b:2b:53:46:73:9f:e3:d9:f3:ac:af:d0:66:2c: a2:15:ee:94:39:91:62:12:5c:16:fc:1c:6f:5e:70:e1:78:c2: b3:38:ef:d4:fb:18:6d:44:8c:f4:a6:73:16:6c:d0:b0:90:ad: 97:70:4b:52:1e:90:ea:bd:8e:bd:28:dc:83:a1:5a:8c:6b:28: f2:da:de:ec:16:b2:31:4a:c3:a7:cb:61:95:56:87:81:a4:f3: b6:7f:a0:f1:91:0a:e5:66:bb:02:52:7f:1e:58:90:86:64:fb: 92:1e:71:31:f3:c6:7e:15:31:e9:34:0b:4c:be:23:16:e9:ef: e4:b4:37:ef:00:ae:6e:f7:aa:60:fa:e5:16:a0:c1:0e:cb:0c: 08:36:ac:1c:4b:cc:18:06:60:09:1c:a0:bb:88:58:94:5c:f0: d8:f7:2d:4e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUWQP8O3r/e4GwUQMTlaZwnzif2IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIyMDEwNzE2WhcNMjUwNjI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzk2MGQ5Y2Q0OTc3MTA3YzFmM2RiYWFlYTc4OTA1YTVk OWRmNjRlMDZlMGFiZGYwNDNkZjIwY2Y3NGZlZTkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1wZ8B78kYSznZS3v86cr8kKTlgzyWud31Zie02tw9hqBP +ZCmBiyhyKJdJP0rB0q3/2M8KFxYfEq47zJ1NKJkG/bXFoVv0m0ichK7AECPtFXY LMwQ/T9Lnz5FDKb0ferM4sc4iI8Qxk+BgTjcI8UQPYOM/NfI7zymUdxXda6BShEt HJ9m7mqHcFbz9lJn3yubna5a+/qe8fqM9blSD/JMlW/5YCNGi7SC30rxABkDRYKg N9LjkpYkevDH7QEsW6Y8GLPWUzViWj3RYjQ4B0YACpvYQTm+rUuVret/taDYdxqQ F6WVhzJb5WVyBqEG6cpdIclHMTNsLQnBQu0Y/7yjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUEO13+AwKNNPDwbjAffCW9p5S15MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhlOTY1N2M2LTdhZGEtNGM4NS04Y2I4LWJjYzkzZGIxNmZiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+5NDANBgkqhkiG9w0BAQsFAAOCAQEAF7vMqlJMcxQB0wd4sWWtB5CM PSYozHOp/T+pqXmWTUoasTNNujS8OHXeYNXJ+VFURvuz+lM38RxEVv8BzUyEVP2e PNz1olFSeC9u625QE3sODYqtTmZjLBF6ZyOMNJsrU0Zzn+PZ86yv0GYsohXulDmR YhJcFvwcb15w4XjCszjv1PsYbUSM9KZzFmzQsJCtl3BLUh6Q6r2OvSjcg6FajGso 8tre7BayMUrDp8thlVaHgaTztn+g8ZEK5Wa7AlJ/HliQhmT7kh5xMfPGfhUx6TQL TL4jFunv5LQ37wCubveqYPrlFqDBDssMCDasHEvMGAZgCRygu4hYlFzw2PctTg== -----END CERTIFICATE-----Generated at Sun Jun 1 05:00:30 2025 by rpki-client