$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde42f65-0ec0-46f5-ba64-f838927269dc.roa File: bde42f65-0ec0-46f5-ba64-f838927269dc.roa (raw, json) Hash identifier: YQdbGkY/sLoGgQK7p0pVZyBQLshj9FzBwKXMwjangiM= Subject key identifier: 3F:3A:7B:31:60:09:0A:31:D3:42:99:2B:E2:DF:C9:18:CB:45:E8:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 778982EF37BAEF52246A52A31144169C11703B75 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde42f65-0ec0-46f5-ba64-f838927269dc.roa Signing time: Sat 17 May 2025 00:30:17 +0000 ROA not before: Sat 17 May 2025 00:30:17 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:89:82:ef:37:ba:ef:52:24:6a:52:a3:11:44:16:9c:11:70:3b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:30:17 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=749d04ee19d3dbb7655a26493483b44cbe495bdefc1d70a39564a2a21a143068, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:76:6b:f7:4a:0e:47:0c:04:9c:ff:85:26: fa:71:3c:a2:91:b1:1e:d9:db:aa:cf:5b:bb:f9:66: c6:0f:4a:0a:57:19:03:aa:20:f7:f6:67:80:42:19: 6f:52:9f:d8:5e:1d:69:bf:9f:8f:d6:33:0b:48:a8: 5c:16:6e:20:4b:93:84:40:21:a4:e6:5f:bd:1c:91: 19:4b:ff:37:21:25:12:80:94:e5:c8:37:4a:d3:e1: 58:6b:ab:93:f5:b9:27:0a:01:77:7d:ce:d6:17:f3: e7:e5:2b:84:bc:44:74:0c:9e:88:38:e7:61:91:f6: b3:11:1e:87:95:fe:66:37:47:ea:00:61:2a:b8:71: 86:e0:54:4c:b2:47:ce:88:74:bb:fe:f8:8e:fa:2a: 61:ba:4d:47:f6:82:f1:c4:7c:59:b3:7e:f8:67:3d: e3:c7:5a:f0:d1:7d:d1:e6:8b:85:5e:77:51:5d:a6: 58:cb:fc:f2:88:6c:99:7d:54:43:e2:33:aa:9f:c8: e2:cc:e5:53:3a:18:1c:cf:e3:3f:f2:f8:58:56:33: 42:7c:03:e3:7e:2c:2e:1b:f5:85:ae:d4:79:43:65: 38:35:bf:f7:31:09:64:9e:2d:12:34:1c:9c:c4:61: 85:33:1b:d4:01:98:26:05:77:e4:ff:42:b9:7f:fe: f2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3A:7B:31:60:09:0A:31:D3:42:99:2B:E2:DF:C9:18:CB:45:E8:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bde42f65-0ec0-46f5-ba64-f838927269dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:8040::/48 Signature Algorithm: sha256WithRSAEncryption 98:04:a9:29:ca:5d:2a:83:d4:63:12:12:db:16:ad:7a:e6:1b: 1e:d9:60:6f:2d:62:ae:c1:e8:2f:bf:fe:97:2d:48:f1:20:6d: d9:6f:44:1d:f3:35:cd:24:31:28:06:fb:01:a5:bf:8c:50:38: 11:6c:20:84:70:0a:87:41:2b:fd:92:75:4e:2b:6b:3e:cf:84: b3:aa:6c:95:54:b2:a9:96:cb:15:b5:87:32:96:cf:53:1f:3b: 10:dc:8c:7c:e9:13:1c:86:e6:68:d5:d6:aa:df:12:85:c3:d0: e2:9e:4a:68:1c:b7:08:7c:a2:ca:d5:fb:e2:f7:89:58:90:2a: 06:2a:1d:52:20:67:fa:de:3d:b5:a0:18:9e:64:2c:e5:6f:0b: 8b:00:16:dd:19:2e:f8:27:2f:6c:15:4f:9f:95:4d:e7:65:84: 32:12:a8:de:cf:60:1b:6f:2f:99:f3:ce:78:09:47:fd:75:0b: e6:bc:1c:42:20:67:8f:24:42:cc:eb:e2:23:d7:5c:56:f1:15: b7:fe:c3:2d:93:49:d3:23:71:69:09:11:c4:85:72:5e:42:d1: cd:1a:4e:89:63:84:0e:52:13:52:98:4b:8b:b6:04:a4:95:37: ef:62:57:ed:9f:29:d1:7e:c3:6f:74:b7:e7:3a:0d:a8:16:76: e7:03:88:12 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd4mC7ze671IkalKjEUQWnBFwO3UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDAzMDE3WhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDlkMDRlZTE5ZDNkYmI3NjU1YTI2NDkzNDgzYjQ0Y2Jl NDk1YmRlZmMxZDcwYTM5NTY0YTJhMjFhMTQzMDY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1xHZr90oORwwEnP+FJvpxPKKRsR7Z26rPW7v5ZsYPSgpX GQOqIPf2Z4BCGW9Sn9heHWm/n4/WMwtIqFwWbiBLk4RAIaTmX70ckRlL/zchJRKA lOXIN0rT4Vhrq5P1uScKAXd9ztYX8+flK4S8RHQMnog452GR9rMRHoeV/mY3R+oA YSq4cYbgVEyyR86IdLv++I76KmG6TUf2gvHEfFmzfvhnPePHWvDRfdHmi4Ved1Fd pljL/PKIbJl9VEPiM6qfyOLM5VM6GBzP4z/y+FhWM0J8A+N+LC4b9YWu1HlDZTg1 v/cxCWSeLRI0HJzEYYUzG9QBmCYFd+T/Qrl//vIpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPzp7MWAJCjHTQpkr4t/JGMtF6GYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JkZTQyZjY1LTBlYzAtNDZmNS1iYTY0LWY4Mzg5MjcyNjlkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hgEAwDQYJKoZIhvcNAQELBQADggEBAJgEqSnKXSqD1GMSEtsWrXrm Gx7ZYG8tYq7B6C+//pctSPEgbdlvRB3zNc0kMSgG+wGlv4xQOBFsIIRwCodBK/2S dU4raz7PhLOqbJVUsqmWyxW1hzKWz1MfOxDcjHzpExyG5mjV1qrfEoXD0OKeSmgc twh8osrV++L3iViQKgYqHVIgZ/rePbWgGJ5kLOVvC4sAFt0ZLvgnL2wVT5+VTedl hDISqN7PYBtvL5nzzngJR/11C+a8HEIgZ48kQszr4iPXXFbxFbf+wy2TSdMjcWkJ EcSFcl5C0c0aToljhA5SE1KYS4u2BKSVN+9iV+2fKdF+w290t+c6DagWducDiBI= -----END CERTIFICATE-----Generated at Sun Jun 1 05:19:41 2025 by rpki-client