$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90084649-cf25-4be9-a304-6d646c6b02c6.roa File: 90084649-cf25-4be9-a304-6d646c6b02c6.roa (raw, json) Hash identifier: QE7IkhGjOiy6iI8qIUxmy9acIoJ0KksX9Hhl/V5q76E= Subject key identifier: 9C:C7:80:FB:ED:E0:93:65:51:91:6F:54:A0:7A:78:6C:1F:11:D7:04 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58FE5F9A9E36B5FE10E3E81CF1F3DC8897FD8BCC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90084649-cf25-4be9-a304-6d646c6b02c6.roa Signing time: Tue 03 Jun 2025 20:24:34 +0000 ROA not before: Tue 03 Jun 2025 20:24:34 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:81b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fe:5f:9a:9e:36:b5:fe:10:e3:e8:1c:f1:f3:dc:88:97:fd:8b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 3 20:24:34 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=4053ecca3f8a85ea018912a897d7d91af9eb69f481fd1013c2e9aa91866d6c3c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cd:d7:ca:ab:03:74:a9:b6:19:8c:f8:72:67: 6b:a7:30:58:84:4d:e4:6d:58:fa:2b:7e:66:5f:64: ef:a9:39:6a:6a:39:28:5d:3d:5f:66:f4:ee:8f:65: 89:72:98:ac:d7:b6:bf:a8:82:51:31:97:c4:ca:a6: 90:3b:4a:69:9e:c2:18:64:46:d9:bb:86:f9:2f:33: 74:2f:76:13:90:d6:eb:0e:32:5e:ab:0d:2d:3c:0a: 99:b3:e6:d7:e3:0f:6a:03:a0:3c:2f:77:a3:16:0c: c5:1d:9c:15:ba:f3:46:c6:0d:4d:68:7f:9b:a4:4f: cd:14:da:ba:d9:12:08:7d:93:4f:a5:78:a6:e4:3c: 3b:70:c5:07:24:60:58:72:82:71:01:04:38:3b:10: 7a:1e:77:a0:b5:7d:fa:2f:7b:53:f9:e4:cf:e3:6c: 00:61:d4:84:4b:39:93:40:84:72:5a:f0:c7:d9:31: 50:f0:3d:b0:f7:a9:7b:b5:4c:ce:03:97:ff:58:08: eb:d0:cb:66:fb:7c:02:d8:f6:f5:76:13:8c:83:b3: 3b:65:74:a9:b7:38:43:fc:0c:7a:c4:d3:5d:46:a2: e7:51:71:c3:e0:8d:a4:0e:4d:c7:23:cb:b2:dc:f9: cd:4c:c0:18:e1:68:57:8b:6d:51:48:cd:fa:d0:0f: a5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C7:80:FB:ED:E0:93:65:51:91:6F:54:A0:7A:78:6C:1F:11:D7:04 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90084649-cf25-4be9-a304-6d646c6b02c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:81b0::/48 Signature Algorithm: sha256WithRSAEncryption 7e:fe:fa:b3:9a:1d:36:6e:44:bf:c5:18:c4:81:fb:d7:57:a6: 08:e4:38:aa:51:91:dc:60:1e:23:71:0a:46:fd:ca:fe:8d:90: 62:1b:76:30:99:6c:77:45:5c:12:b9:58:f8:64:b9:c2:b1:2a: d0:e3:63:c0:fa:61:e8:9b:34:c9:fb:e8:60:b9:8f:0b:24:cb: 3f:3e:e3:b5:7d:71:d8:dc:33:68:9f:1b:96:43:57:1c:ed:5b: bb:8d:44:18:3f:56:1d:44:0a:42:d7:82:68:60:9a:02:0d:f9: 69:b2:44:14:d0:69:43:d7:fc:92:2d:28:da:ea:f9:90:f7:a0: 13:15:bf:10:5a:20:87:6f:49:bb:60:e1:a2:c9:64:ba:1d:4f: c4:08:77:4b:e4:d9:d6:cd:83:73:7a:7d:1b:cc:4c:a2:07:18: 3d:8f:61:f3:ea:de:0b:95:64:80:e9:09:5c:48:bf:3b:f2:85: d8:a2:c7:a0:47:c4:62:64:11:16:7a:34:f6:da:69:c0:c5:c6: 6c:ac:4d:ac:76:0d:e2:97:5f:ed:dc:6f:90:8a:ea:36:d9:d6: 9e:8e:2e:18:89:d7:11:5d:8b:bd:e0:30:20:3f:a3:3c:16:b1: e1:f0:1b:3c:22:69:7d:da:15:c4:ce:77:72:83:6b:89:2b:a9: 21:69:0d:35 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWP5fmp42tf4Q4+gc8fPciJf9i8wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjAzMjAyNDM0WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDUzZWNjYTNmOGE4NWVhMDE4OTEyYTg5N2Q3ZDkxYWY5 ZWI2OWY0ODFmZDEwMTNjMmU5YWE5MTg2NmQ2YzNjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJzdfKqwN0qbYZjPhyZ2unMFiETeRtWPorfmZfZO+pOWpq OShdPV9m9O6PZYlymKzXtr+oglExl8TKppA7SmmewhhkRtm7hvkvM3QvdhOQ1usO Ml6rDS08Cpmz5tfjD2oDoDwvd6MWDMUdnBW680bGDU1of5ukT80U2rrZEgh9k0+l eKbkPDtwxQckYFhygnEBBDg7EHoed6C1ffove1P55M/jbABh1IRLOZNAhHJa8MfZ MVDwPbD3qXu1TM4Dl/9YCOvQy2b7fALY9vV2E4yDsztldKm3OEP8DHrE011GoudR ccPgjaQOTccjy7Lc+c1MwBjhaFeLbVFIzfrQD6XJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnMeA++3gk2VRkW9UoHp4bB8R1wQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkwMDg0NjQ5LWNmMjUtNGJlOS1hMzA0LTZkNjQ2YzZiMDJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgbAwDQYJKoZIhvcNAQELBQADggEBAH7++rOaHTZuRL/FGMSB+9dX pgjkOKpRkdxgHiNxCkb9yv6NkGIbdjCZbHdFXBK5WPhkucKxKtDjY8D6YeibNMn7 6GC5jwskyz8+47V9cdjcM2ifG5ZDVxztW7uNRBg/Vh1ECkLXgmhgmgIN+WmyRBTQ aUPX/JItKNrq+ZD3oBMVvxBaIIdvSbtg4aLJZLodT8QId0vk2dbNg3N6fRvMTKIH GD2PYfPq3guVZIDpCVxIvzvyhdiix6BHxGJkERZ6NPbaacDFxmysTax2DeKXX+3c b5CK6jbZ1p6OLhiJ1xFdi73gMCA/ozwWseHwGzwiaX3aFcTOd3KDa4krqSFpDTU= -----END CERTIFICATE-----Generated at Sun Jun 8 20:30:32 2025 by rpki-client