$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa File: a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa (raw, json) Hash identifier: KGG4nJLHU0x+KuQu3h9Bif8Si3Oqnnw2NGGyd7Wf/w0= Subject key identifier: 3A:D0:C0:2F:16:80:B6:2F:06:09:43:D1:A7:8F:AE:3E:84:D3:53:11 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 62D73C5DB283D26C277796DBDC698F1F7AE4C252 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa Signing time: Mon 19 May 2025 16:11:55 +0000 ROA not before: Mon 19 May 2025 16:11:55 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d7:3c:5d:b2:83:d2:6c:27:77:96:db:dc:69:8f:1f:7a:e4:c2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:11:55 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=39d4fd724d4d216553c09ee4b72d62f4de0f6ee789519799b9ec01c9ac070122, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:32:09:82:59:6e:db:48:d7:ab:7e:cf:25:71: 83:46:52:dc:7f:46:02:a3:9a:b1:39:a3:63:f2:0b: ac:43:22:ab:0a:89:86:be:66:04:d3:1d:b6:36:82: 02:c9:3b:8e:87:65:3c:0c:7f:13:be:75:04:45:8d: 05:9a:b2:15:21:fe:5a:08:06:dd:e9:3e:2a:2e:cf: dc:93:ae:21:9d:ac:32:e8:58:cb:3a:82:e5:bc:64: f8:81:5c:5a:73:b4:a8:59:c4:e6:8a:2a:21:42:d9: b2:16:63:c8:ff:af:1e:cb:e8:47:ba:7c:fa:a6:24: 27:02:98:0b:41:a9:2f:49:61:76:0f:06:bc:85:1a: 59:c4:0c:97:45:4f:84:83:f2:5e:e9:bc:9f:40:c1: ac:c7:ea:2c:79:1b:84:8f:52:5c:76:70:57:31:55: 20:d9:a5:fe:80:4f:a0:d9:f4:cf:cd:cb:48:e3:e0: fe:21:ac:44:dd:fa:c0:e1:9a:88:47:9f:32:94:9a: 46:56:c8:e0:b2:0b:f0:f1:a2:7a:36:d1:71:06:d1: 18:2a:8b:cb:11:ca:d2:eb:52:7b:9d:b6:de:71:e4: f3:8e:f6:9d:cc:8c:83:81:d7:b7:51:96:5d:f9:63: 06:59:48:c7:4d:28:f4:69:05:93:41:15:d0:aa:65: b1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D0:C0:2F:16:80:B6:2F:06:09:43:D1:A7:8F:AE:3E:84:D3:53:11 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ded0f1-3e58-4bf3-b5bc-be8a105e5b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:c000::/40 Signature Algorithm: sha256WithRSAEncryption 37:d1:12:79:a7:c9:ed:66:07:aa:5a:58:09:3a:9e:83:ba:3f: ad:04:f4:8c:e0:31:17:9c:f0:fe:65:52:16:a2:6b:dd:ff:ce: 3c:f7:9a:ff:f2:85:7f:01:36:e1:ef:e7:02:a3:46:72:10:e9: 99:d1:b8:e2:f1:a7:f4:59:56:33:3a:6b:29:25:48:27:23:db: c3:dd:e5:9c:3f:8f:4d:f9:4d:7b:de:ea:89:7a:d6:44:fe:0a: 95:54:be:2b:8f:24:09:ef:bb:0c:c3:70:6d:cd:16:bb:fb:34: 63:07:10:b4:b5:05:07:50:e6:51:88:95:ec:8f:1e:96:4c:8f: 19:27:0a:87:a5:05:46:11:81:5a:d9:6b:95:50:32:95:3a:88: 39:8a:9e:7c:72:4c:57:9b:1a:ce:26:85:b6:d9:7a:9d:a8:5f: 81:f6:10:49:2c:ce:cb:56:fd:9e:33:c1:c8:64:6a:df:40:82: a2:69:53:2c:f8:9f:ac:d4:3e:e3:8d:88:e1:9f:4b:e6:e8:93: 7e:1c:89:02:4c:e2:4d:99:72:bb:c8:d2:67:30:b3:ca:7a:df: e5:e1:44:28:7d:9b:ae:24:5d:6c:bd:ca:e4:10:b0:69:97:df: 9a:be:e2:bb:97:54:08:cb:0c:2a:13:d0:49:3e:b1:6c:d0:0f: 0b:f1:ba:bb -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYtc8XbKD0mwnd5bb3GmPH3rkwlIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTYxMTU1WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOWQ0ZmQ3MjRkNGQyMTY1NTNjMDllZTRiNzJkNjJmNGRl MGY2ZWU3ODk1MTk3OTliOWVjMDFjOWFjMDcwMTIyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoMgmCWW7bSNerfs8lcYNGUtx/RgKjmrE5o2PyC6xDIqsK iYa+ZgTTHbY2ggLJO46HZTwMfxO+dQRFjQWashUh/loIBt3pPiouz9yTriGdrDLo WMs6guW8ZPiBXFpztKhZxOaKKiFC2bIWY8j/rx7L6Ee6fPqmJCcCmAtBqS9JYXYP BryFGlnEDJdFT4SD8l7pvJ9AwazH6ix5G4SPUlx2cFcxVSDZpf6AT6DZ9M/Ny0jj 4P4hrETd+sDhmohHnzKUmkZWyOCyC/Dxono20XEG0Rgqi8sRytLrUnudtt5x5POO 9p3MjIOB17dRll35YwZZSMdNKPRpBZNBFdCqZbHvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUOtDALxaAti8GCUPRp4+uPoTTUxEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2EyZGVkMGYxLTNlNTgtNGJmMy1iNWJjLWJlOGExMDVlNWI0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/ywDANBgkqhkiG9w0BAQsFAAOCAQEAN9ESeafJ7WYHqlpYCTqeg7o/ rQT0jOAxF5zw/mVSFqJr3f/OPPea//KFfwE24e/nAqNGchDpmdG44vGn9FlWMzpr KSVIJyPbw93lnD+PTflNe97qiXrWRP4KlVS+K48kCe+7DMNwbc0Wu/s0YwcQtLUF B1DmUYiV7I8elkyPGScKh6UFRhGBWtlrlVAylTqIOYqefHJMV5saziaFttl6nahf gfYQSSzOy1b9njPByGRq30CComlTLPifrNQ+442I4Z9L5uiTfhyJAkziTZlyu8jS ZzCzynrf5eFEKH2briRdbL3K5BCwaZffmr7iu5dUCMsMKhPQST6xbNAPC/G6uw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:52:18 2025 by rpki-client