$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017836f-79ac-458c-a671-00131a37e9d6.roa File: c017836f-79ac-458c-a671-00131a37e9d6.roa (raw, json) Hash identifier: 7QX7wFDq/fvSHDQlIQIyLFueay5YS8n2PzLn9BBzNVo= Subject key identifier: 74:21:49:15:2C:43:45:76:BE:C2:A6:0F:6E:3C:88:9D:DD:D2:AE:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1FF4BD3518225AEE6D0811A465000012C8BEAFA4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017836f-79ac-458c-a671-00131a37e9d6.roa Signing time: Mon 19 May 2025 15:10:27 +0000 ROA not before: Mon 19 May 2025 15:10:27 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:60c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f4:bd:35:18:22:5a:ee:6d:08:11:a4:65:00:00:12:c8:be:af:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 15:10:27 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=e08bcbaa4fb900f9cd9a5736edfeb0a607bf12d3e3cf2b369a61f0cd82e4d649, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c6:08:ee:1d:23:bf:68:90:86:51:c9:9e:5f: fd:65:e8:34:24:73:34:25:92:91:8b:bd:af:09:f0: 7a:11:24:fe:cf:b2:c8:11:55:f5:22:3e:28:1c:a7: 28:7e:4e:8c:ff:7e:8d:98:06:9d:40:a7:81:af:2b: e0:75:af:ca:c7:14:22:d7:0f:c1:16:0e:6d:7b:26: b2:e3:b0:ac:ff:6d:d2:d3:8c:fd:96:cc:e1:de:49: 0e:0e:d6:06:3e:1a:30:1e:f1:67:d3:11:fb:51:14: 90:c7:31:94:08:64:57:7d:32:77:e2:af:a8:e2:cf: b7:3f:a0:43:48:d1:74:5b:dd:58:3f:6d:0a:03:b4: cc:00:a7:b4:93:44:d4:40:f0:2c:d8:4a:fd:19:b5: 27:76:99:91:b8:33:43:e6:fb:24:02:06:c2:0d:13: 67:d8:d1:24:ae:af:f4:54:02:8f:4c:5e:86:17:a6: 7e:8c:fe:05:63:40:88:4e:a5:45:1f:cc:31:0c:17: 40:a7:57:ad:64:8a:ab:37:75:5d:e0:53:ca:f1:20: 90:88:96:6f:3c:69:34:d8:03:56:ee:f2:8f:0e:ff: 0e:36:74:0c:6a:73:d5:83:d7:a4:cc:09:9d:c6:b6: f8:72:6a:f2:55:9c:96:6a:28:36:07:47:a1:0f:e1: 63:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:21:49:15:2C:43:45:76:BE:C2:A6:0F:6E:3C:88:9D:DD:D2:AE:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017836f-79ac-458c-a671-00131a37e9d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:60c0::/46 Signature Algorithm: sha256WithRSAEncryption 5f:7e:fc:3e:b8:f6:0c:1b:74:4e:a0:b3:e3:0d:3f:1e:da:60: 33:90:eb:c1:cd:9e:33:41:a9:bf:7a:04:2a:45:93:c7:53:8f: 2a:b5:1b:1e:d5:81:73:14:f0:8a:40:03:67:9c:3c:85:16:1e: fb:b2:bf:ad:3d:ac:89:e2:40:09:01:2e:fe:60:c3:40:8c:6f: 57:6e:d2:c1:1d:0f:3c:e5:12:a4:34:02:fc:41:d7:ff:76:c1: f2:6e:b8:a1:89:ef:50:67:fe:19:2a:ad:ef:47:03:fc:af:d0: 94:c9:af:60:93:2a:f9:18:2a:d2:74:96:b0:40:9d:75:25:a3: e9:5d:b0:b5:5a:fc:23:ff:2f:60:b5:25:0d:ad:29:e7:5f:a1: 7f:d1:bf:3b:10:ae:81:da:f0:0e:d5:10:bc:e0:00:8f:a3:4c: 30:7d:75:fb:d5:68:08:83:2d:39:a9:bb:1f:e0:ff:16:a4:c9: a4:cf:3c:cb:09:5a:30:d3:d6:58:e5:32:ff:ef:e4:e4:79:50: 47:59:bb:31:ca:05:30:1f:11:69:e5:ce:0c:66:0b:fc:0a:e2: 8f:b0:ec:83:55:b1:bb:51:1e:f0:14:15:45:78:fa:e3:50:83: b8:01:82:b7:dd:b6:2d:9e:50:40:6b:a1:6f:cc:94:50:ce:d3: a5:c9:3f:cd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUH/S9NRgiWu5tCBGkZQAAEsi+r6QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTUxMDI3WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDhiY2JhYTRmYjkwMGY5Y2Q5YTU3MzZlZGZlYjBhNjA3 YmYxMmQzZTNjZjJiMzY5YTYxZjBjZDgyZTRkNjQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoxgjuHSO/aJCGUcmeX/1l6DQkczQlkpGLva8J8HoRJP7P ssgRVfUiPigcpyh+Toz/fo2YBp1Ap4GvK+B1r8rHFCLXD8EWDm17JrLjsKz/bdLT jP2WzOHeSQ4O1gY+GjAe8WfTEftRFJDHMZQIZFd9Mnfir6jiz7c/oENI0XRb3Vg/ bQoDtMwAp7STRNRA8CzYSv0ZtSd2mZG4M0Pm+yQCBsINE2fY0SSur/RUAo9MXoYX pn6M/gVjQIhOpUUfzDEMF0CnV61kiqs3dV3gU8rxIJCIlm88aTTYA1bu8o8O/w42 dAxqc9WD16TMCZ3GtvhyavJVnJZqKDYHR6EP4WPBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdCFJFSxDRXa+wqYPbjyInd3SrtEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwMTc4MzZmLTc5YWMtNDU4Yy1hNjcxLTAwMTMxYTM3ZTlkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB9pYMAwDQYJKoZIhvcNAQELBQADggEBAF9+/D649gwbdE6gs+MNPx7a YDOQ68HNnjNBqb96BCpFk8dTjyq1Gx7VgXMU8IpAA2ecPIUWHvuyv609rIniQAkB Lv5gw0CMb1du0sEdDzzlEqQ0AvxB1/92wfJuuKGJ71Bn/hkqre9HA/yv0JTJr2CT KvkYKtJ0lrBAnXUlo+ldsLVa/CP/L2C1JQ2tKedfoX/RvzsQroHa8A7VELzgAI+j TDB9dfvVaAiDLTmpux/g/xakyaTPPMsJWjDT1ljlMv/v5OR5UEdZuzHKBTAfEWnl zgxmC/wK4o+w7INVsbtRHvAUFUV4+uNQg7gBgrfdti2eUEBroW/MlFDO06XJP80= -----END CERTIFICATE-----Generated at Sun Jun 1 04:28:37 2025 by rpki-client