$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1cdc996-d9de-4ebc-9b37-048cf0e36669.roa File: b1cdc996-d9de-4ebc-9b37-048cf0e36669.roa (raw, json) Hash identifier: B/7t5kb88pqmnMtCL8iPXPao/DpZHvoninJfzJv1X+w= Subject key identifier: 16:AE:62:41:60:1A:8F:3D:D8:C4:2E:45:9D:9B:1C:02:C9:B3:37:38 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7813843E89E79D056FA7E7867274E81848C3BEA2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1cdc996-d9de-4ebc-9b37-048cf0e36669.roa Signing time: Mon 19 May 2025 15:30:15 +0000 ROA not before: Mon 19 May 2025 15:30:15 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:c040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:13:84:3e:89:e7:9d:05:6f:a7:e7:86:72:74:e8:18:48:c3:be:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 15:30:15 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=3c1dfc56db71f6dbca8d1120f7a4ca418ed0492890ca72b40d6e26a5a2fe05ff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:81:46:a7:be:d9:0d:56:a3:f7:4c:57:1f:cf: 5b:f2:2a:60:68:c5:e5:2f:67:c9:1e:22:e6:57:00: f7:b1:a8:10:b3:37:b7:e0:6b:41:be:5d:16:28:70: 11:a4:b1:bb:77:e9:57:06:8c:e7:37:55:9b:29:60: c7:ab:9e:7c:ff:8b:af:11:12:0c:7b:10:83:66:f0: 70:22:c8:d0:5c:57:f3:7b:e8:38:b9:a5:bd:8d:e1: b3:5a:fb:42:e0:23:a9:08:f0:13:79:bc:7e:2c:2a: 2e:75:93:f9:1a:6e:14:6f:1f:b8:fd:ff:2d:d5:45: 58:95:d8:2d:0e:86:ec:6a:d5:c0:f0:b2:11:da:8b: dc:10:cc:18:8e:47:d6:5c:22:92:91:93:11:a0:03: cb:41:d5:0a:ad:8b:bf:06:77:3f:65:d4:ad:75:19: a1:d5:19:db:d8:27:28:a1:40:17:a4:46:53:06:c5: cd:08:45:7b:dc:01:f2:63:d3:0a:6f:0a:6b:2d:eb: c6:a5:d9:8a:4f:fe:c9:49:db:e9:6e:fc:84:73:8b: 32:40:6a:47:33:f2:b9:8a:f5:71:13:aa:3e:e3:68: 05:06:3d:06:54:38:2f:34:37:9e:d9:f4:70:e9:57: 67:f3:b2:9f:fa:48:ab:bb:58:ae:30:15:38:8a:75: a0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AE:62:41:60:1A:8F:3D:D8:C4:2E:45:9D:9B:1C:02:C9:B3:37:38 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1cdc996-d9de-4ebc-9b37-048cf0e36669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:c040::/46 Signature Algorithm: sha256WithRSAEncryption ca:47:5b:16:d8:7f:f5:8a:4e:9c:56:58:fc:42:85:3a:6d:66: 77:81:a5:ca:b7:98:77:ee:aa:df:61:3e:13:0f:31:82:24:c8: 14:27:6f:c3:30:2c:e2:6d:40:7a:04:8b:95:9a:e3:fc:43:33: 3b:9d:2d:a7:ae:02:b1:6b:3a:74:50:75:73:22:e6:ad:24:f8: 3b:11:2c:6a:a7:42:1b:d6:25:3a:73:e2:e3:40:3a:61:18:67: 49:bf:b0:75:36:c8:ed:e9:71:f4:07:67:a4:8d:76:e3:0d:28: 2e:86:f1:d1:bb:06:b4:35:8d:4b:95:99:94:6b:a8:33:aa:10: 33:bd:23:85:43:b5:24:8f:b9:0b:19:26:ab:22:0b:5a:55:8a: 7b:c2:4c:bf:ad:3b:e1:39:70:1a:87:ec:74:72:f2:05:c8:8b: 6c:f7:84:30:bd:e1:c0:bf:76:9c:00:98:9e:09:38:9a:1e:f2: 8a:14:aa:75:f0:68:6f:94:82:9d:98:60:fe:97:0e:33:71:30: 9f:1c:6b:45:c6:7f:28:e8:ef:33:93:e5:ea:79:ac:ed:1a:1c: 07:42:19:84:34:ac:33:99:4b:a5:2e:84:27:05:1e:5c:77:96: e6:11:c5:93:90:40:83:bf:43:99:55:30:fb:f6:f4:69:72:40: 08:1e:87:01 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeBOEPonnnQVvp+eGcnToGEjDvqIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTUzMDE1WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzFkZmM1NmRiNzFmNmRiY2E4ZDExMjBmN2E0Y2E0MThl ZDA0OTI4OTBjYTcyYjQwZDZlMjZhNWEyZmUwNWZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrgUanvtkNVqP3TFcfz1vyKmBoxeUvZ8keIuZXAPexqBCz N7fga0G+XRYocBGksbt36VcGjOc3VZspYMernnz/i68REgx7EINm8HAiyNBcV/N7 6Di5pb2N4bNa+0LgI6kI8BN5vH4sKi51k/kabhRvH7j9/y3VRViV2C0Ohuxq1cDw shHai9wQzBiOR9ZcIpKRkxGgA8tB1Qqti78Gdz9l1K11GaHVGdvYJyihQBekRlMG xc0IRXvcAfJj0wpvCmst68al2YpP/slJ2+lu/IRzizJAakcz8rmK9XETqj7jaAUG PQZUOC80N57Z9HDpV2fzsp/6SKu7WK4wFTiKdaAFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFq5iQWAajz3YxC5FnZscAsmzNzgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IxY2RjOTk2LWQ5ZGUtNGViYy05YjM3LTA0OGNmMGUzNjY2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/7wEAwDQYJKoZIhvcNAQELBQADggEBAMpHWxbYf/WKTpxWWPxChTpt ZneBpcq3mHfuqt9hPhMPMYIkyBQnb8MwLOJtQHoEi5Wa4/xDMzudLaeuArFrOnRQ dXMi5q0k+DsRLGqnQhvWJTpz4uNAOmEYZ0m/sHU2yO3pcfQHZ6SNduMNKC6G8dG7 BrQ1jUuVmZRrqDOqEDO9I4VDtSSPuQsZJqsiC1pVinvCTL+tO+E5cBqH7HRy8gXI i2z3hDC94cC/dpwAmJ4JOJoe8ooUqnXwaG+Ugp2YYP6XDjNxMJ8ca0XGfyjo7zOT 5ep5rO0aHAdCGYQ0rDOZS6UuhCcFHlx3luYRxZOQQIO/Q5lVMPv29GlyQAgehwE= -----END CERTIFICATE-----Generated at Sun Jun 1 05:08:54 2025 by rpki-client