$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa File: d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa (raw, json) Hash identifier: lD2aHQVJ+SIrDHHxJ21UPzeFaIclbNva28Iorbjz7h4= Subject key identifier: 54:15:5C:FC:73:59:F2:9D:BF:DF:31:94:B7:59:A1:6B:6C:53:CE:46 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1B883988A7ED05604B10B1CC3A8534D810C469F6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa Signing time: Mon 19 May 2025 18:10:51 +0000 ROA not before: Mon 19 May 2025 18:10:51 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1c:c800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:88:39:88:a7:ed:05:60:4b:10:b1:cc:3a:85:34:d8:10:c4:69:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:10:51 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=ad0441b058fb8a3823339539ee4aedac3b4ac523272c744a1dab2eb21d6ddc59, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:0b:d4:e7:ad:9a:5c:f1:f1:cc:e9:d3:cb: a8:84:66:31:4b:b4:0f:c9:d0:2f:fb:c9:5a:5c:24: a5:20:4e:bc:47:66:3e:81:5d:18:61:27:39:45:06: 20:43:97:0b:c9:d4:60:c0:9b:4f:b8:ed:28:69:30: 55:34:55:78:d6:6e:8f:d4:58:24:89:d7:fe:c7:1f: ff:8a:8e:72:9a:5d:40:9c:cf:86:0d:5b:1e:35:8d: 1b:59:d4:25:2e:6e:b0:87:d4:06:76:8d:01:da:66: f5:a3:c6:c9:64:48:3b:3e:6c:58:a6:92:16:77:1a: 75:43:df:5e:86:ce:03:23:b3:f7:3c:1a:ad:6f:df: ff:d7:c4:d9:a1:50:ef:d9:79:f9:bf:01:98:67:2e: 0b:e5:23:c2:f6:40:f9:a7:53:67:b7:0b:6e:fb:61: 69:12:cc:a5:11:03:6f:3e:62:7a:c4:39:bc:d6:1d: de:30:59:96:77:30:ea:8e:fe:8c:b5:85:7d:e9:c8: 08:15:f8:86:1a:69:cf:a1:b4:35:f6:10:3e:3a:ed: 3d:0c:36:d6:83:f6:ad:7c:d3:5b:ca:5f:1d:2c:1b: bd:08:96:ae:62:c4:dd:ae:78:60:2e:2a:0e:8f:da: 2c:fe:ef:6e:a8:67:71:f9:15:76:3e:de:29:a2:9c: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:15:5C:FC:73:59:F2:9D:BF:DF:31:94:B7:59:A1:6B:6C:53:CE:46 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1c:c800::/37 Signature Algorithm: sha256WithRSAEncryption 87:25:06:70:bc:49:ea:20:f2:af:af:86:85:8e:9a:3b:31:0d: f3:9f:2b:b8:80:1b:b7:bf:91:23:d9:9c:e7:34:c3:bc:7d:3b: 0c:55:fa:45:b5:f6:90:b1:c6:fa:b3:88:7f:b0:40:aa:47:e2: 72:af:23:98:6e:cf:73:68:1b:e3:6a:2b:96:cd:a6:e7:b0:fe: 2c:d1:3f:5c:0b:20:12:1e:eb:81:69:67:00:07:4f:86:45:85: 93:fd:3b:59:3d:c2:35:51:2f:34:d7:e6:f6:1e:6b:e8:73:87: fa:9b:00:6e:ed:06:f4:e2:15:a3:f5:ba:29:f5:c7:aa:76:a6: 3a:c9:4b:76:3a:08:5e:c5:88:bc:0f:9d:38:35:7d:a8:df:ac: eb:f7:16:fc:cb:ae:67:d6:a1:75:74:a1:50:fa:af:a8:f0:25: 13:ca:f1:e6:ca:91:e8:c3:bb:db:e0:9d:9f:de:f4:6f:0c:69: 9e:4e:b4:0a:91:39:db:c0:58:0e:7e:30:5c:37:7a:03:74:53: 70:cd:2d:b2:18:f0:b6:ca:92:ef:bf:bc:6b:80:07:4a:1b:b7: 61:b8:8d:b9:30:0e:f5:fa:c8:d3:90:23:ce:69:b5:4f:67:df: 30:18:b4:a6:c0:db:0a:bf:3b:67:2d:ae:9b:bd:65:e7:75:c0: d8:92:e5:f9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUG4g5iKftBWBLELHMOoU02BDEafYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgxMDUxWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDA0NDFiMDU4ZmI4YTM4MjMzMzk1MzllZTRhZWRhYzNi NGFjNTIzMjcyYzc0NGExZGFiMmViMjFkNmRkYzU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7lQvU562aXPHxzOnTy6iEZjFLtA/J0C/7yVpcJKUgTrxH Zj6BXRhhJzlFBiBDlwvJ1GDAm0+47ShpMFU0VXjWbo/UWCSJ1/7HH/+KjnKaXUCc z4YNWx41jRtZ1CUubrCH1AZ2jQHaZvWjxslkSDs+bFimkhZ3GnVD316GzgMjs/c8 Gq1v3//XxNmhUO/Zefm/AZhnLgvlI8L2QPmnU2e3C277YWkSzKURA28+YnrEObzW Hd4wWZZ3MOqO/oy1hX3pyAgV+IYaac+htDX2ED467T0MNtaD9q1801vKXx0sG70I lq5ixN2ueGAuKg6P2iz+726oZ3H5FXY+3iminIdDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUVBVc/HNZ8p2/3zGUt1mha2xTzkYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QzNmMxMDVmLWE2ZTQtNGYzYS1hYmNiLWRhYWZmNTRiNWU3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8cyDANBgkqhkiG9w0BAQsFAAOCAQEAhyUGcLxJ6iDyr6+GhY6aOzEN 858ruIAbt7+RI9mc5zTDvH07DFX6RbX2kLHG+rOIf7BAqkficq8jmG7Pc2gb42or ls2m57D+LNE/XAsgEh7rgWlnAAdPhkWFk/07WT3CNVEvNNfm9h5r6HOH+psAbu0G 9OIVo/W6KfXHqnamOslLdjoIXsWIvA+dODV9qN+s6/cW/MuuZ9ahdXShUPqvqPAl E8rx5sqR6MO72+Cdn970bwxpnk60CpE528BYDn4wXDd6A3RTcM0tshjwtsqS77+8 a4AHShu3YbiNuTAO9frI05Ajzmm1T2ffMBi0psDbCr87Zy2um71l53XA2JLl+Q== -----END CERTIFICATE-----Generated at Sun Jun 1 04:38:20 2025 by rpki-client