$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1287aa-91c5-4550-bf04-c7c8d393b8f2.roa File: ba1287aa-91c5-4550-bf04-c7c8d393b8f2.roa (raw, json) Hash identifier: FUoZmzVpJc+p7bprGnp5c97rzxb7BtwjFl6VCbn1KZg= Subject key identifier: F8:A6:11:26:AB:A7:9E:E5:13:5B:17:D9:83:36:CB:3D:D6:31:DE:E9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6C9E4360D29B8036FEF03DB6FD353D07A72FF89D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1287aa-91c5-4550-bf04-c7c8d393b8f2.roa Signing time: Sat 17 May 2025 00:11:01 +0000 ROA not before: Sat 17 May 2025 00:11:01 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4070::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9e:43:60:d2:9b:80:36:fe:f0:3d:b6:fd:35:3d:07:a7:2f:f8:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:11:01 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=731e2a7ab4714a43118e9242148bced2af1f6e021546a03709bb9f95d89ecb71, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5b:78:71:b6:45:a2:58:96:41:15:66:ca:9e: 8e:16:2d:fa:f0:39:37:1a:ce:1e:6b:64:f0:63:82: 89:fd:7a:87:71:b4:37:86:fb:a9:db:51:d8:2d:fe: b5:6f:da:be:fe:3e:bc:06:93:0c:bc:9e:85:d1:e0: d3:2b:7a:af:e2:82:62:c3:9d:ff:23:56:8d:3a:ca: 61:af:57:cb:c7:87:e0:70:4c:c6:df:83:ea:ea:5a: 0f:1a:51:c0:eb:dc:db:5c:d9:e7:66:25:75:16:41: 7e:3b:91:dd:c0:3e:bd:d1:61:9a:36:c1:3a:d8:17: d1:c9:16:bd:07:40:48:75:49:ed:4f:28:20:d7:26: 56:3e:13:a6:28:6f:bd:64:fe:9d:f6:5b:dd:1b:0e: c6:c2:41:8e:72:7f:c1:2b:b9:cf:b3:3d:91:62:d4: ec:e7:20:55:4b:e3:14:9d:2a:63:10:59:df:1f:af: 11:69:fc:98:f0:fb:58:4f:93:b6:9b:e7:75:21:d0: 76:b6:0d:be:e6:ab:b0:f7:fc:9a:d4:cb:11:2b:34: 31:18:ef:9e:af:bc:0e:1b:8e:07:6a:58:c7:92:fe: 77:02:b3:2b:97:07:8d:34:34:35:ea:6b:a5:66:a6: a8:55:ab:73:48:2c:b2:45:bb:d5:b9:48:db:b9:e7: 92:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A6:11:26:AB:A7:9E:E5:13:5B:17:D9:83:36:CB:3D:D6:31:DE:E9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1287aa-91c5-4550-bf04-c7c8d393b8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4070::/48 Signature Algorithm: sha256WithRSAEncryption 4d:63:7e:03:d6:e3:e7:99:40:fb:79:e7:41:01:c0:3e:e8:79: 38:da:18:5c:64:c4:c2:61:33:e7:f4:5f:fe:33:c5:10:30:3a: 6a:2c:7d:3a:b0:59:14:91:4c:24:ed:ac:97:32:01:14:04:f8: 35:de:20:58:53:19:04:cb:15:cc:72:d3:7d:da:c5:57:be:7a: d0:d3:b9:4c:df:fa:e2:c3:1c:96:a6:2a:40:ce:70:03:eb:bc: b3:89:31:5f:b9:9b:63:5e:a4:47:05:ba:dc:16:04:06:ce:81: 71:63:59:67:7d:59:b3:18:e9:25:61:66:d6:cd:0e:24:b2:81: c6:7d:4c:64:54:76:3f:cf:32:38:4e:46:1c:36:cb:fc:07:8c: 1a:c8:ca:fd:a8:b5:4e:d0:6b:b6:e9:0a:81:46:8c:a2:ae:d9: 18:bb:ec:0f:62:93:a3:b7:02:5e:c6:f4:a6:0b:d4:f0:ac:6e: 3c:7a:05:d3:ce:49:71:58:84:22:36:ad:59:44:51:e7:62:ca: 3c:90:6e:0a:b7:05:f7:e1:66:f8:cb:cb:ad:a6:32:d1:0e:3b: 9a:a8:3c:a9:01:1f:ac:16:06:f8:38:f1:50:c7:3e:a9:b5:a9: 0d:5c:b0:a7:a5:bd:d0:5b:f5:e7:bd:b9:a4:d4:66:1a:9c:07: ba:cc:a2:e8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbJ5DYNKbgDb+8D22/TU9B6cv+J0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDAxMTAxWhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzFlMmE3YWI0NzE0YTQzMTE4ZTkyNDIxNDhiY2VkMmFm MWY2ZTAyMTU0NmEwMzcwOWJiOWY5NWQ4OWVjYjcxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdW3hxtkWiWJZBFWbKno4WLfrwOTcazh5rZPBjgon9eodx tDeG+6nbUdgt/rVv2r7+PrwGkwy8noXR4NMreq/igmLDnf8jVo06ymGvV8vHh+Bw TMbfg+rqWg8aUcDr3Ntc2edmJXUWQX47kd3APr3RYZo2wTrYF9HJFr0HQEh1Se1P KCDXJlY+E6Yob71k/p32W90bDsbCQY5yf8Eruc+zPZFi1OznIFVL4xSdKmMQWd8f rxFp/Jjw+1hPk7ab53Uh0Ha2Db7mq7D3/JrUyxErNDEY756vvA4bjgdqWMeS/ncC syuXB400NDXqa6VmpqhVq3NILLJFu9W5SNu555IhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+KYRJqunnuUTWxfZgzbLPdYx3ukwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhMTI4N2FhLTkxYzUtNDU1MC1iZjA0LWM3YzhkMzkzYjhmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QHAwDQYJKoZIhvcNAQELBQADggEBAE1jfgPW4+eZQPt550EBwD7o eTjaGFxkxMJhM+f0X/4zxRAwOmosfTqwWRSRTCTtrJcyARQE+DXeIFhTGQTLFcxy 033axVe+etDTuUzf+uLDHJamKkDOcAPrvLOJMV+5m2NepEcFutwWBAbOgXFjWWd9 WbMY6SVhZtbNDiSygcZ9TGRUdj/PMjhORhw2y/wHjBrIyv2otU7Qa7bpCoFGjKKu 2Ri77A9ik6O3Al7G9KYL1PCsbjx6BdPOSXFYhCI2rVlEUediyjyQbgq3BffhZvjL y62mMtEOO5qoPKkBH6wWBvg48VDHPqm1qQ1csKelvdBb9ee9uaTUZhqcB7rMoug= -----END CERTIFICATE-----Generated at Sun Jun 1 05:03:01 2025 by rpki-client