$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1da63c-2a68-4ace-b196-5ef2574e6754.roa File: db1da63c-2a68-4ace-b196-5ef2574e6754.roa (raw, json) Hash identifier: siZyMqf+AkjW3W3ibUylvIBXX9seGrcm3x8LLVeUME8= Subject key identifier: D0:BD:90:97:16:D9:F5:47:5B:0D:47:81:03:86:3F:22:EA:1F:09:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 565C12ABD00C4B0055B69C3FA542EF638B701EBE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1da63c-2a68-4ace-b196-5ef2574e6754.roa Signing time: Sat 17 May 2025 00:40:29 +0000 ROA not before: Sat 17 May 2025 00:40:29 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f00:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5c:12:ab:d0:0c:4b:00:55:b6:9c:3f:a5:42:ef:63:8b:70:1e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:40:29 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=073cf7a70789f64798ad16404811a3f13866b5bbc177a41ff779d34ec41d3ba2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:d5:61:d4:c2:d3:53:9a:5d:4c:46:be:8c: c5:a0:f4:ae:0d:26:c2:c5:83:c6:4f:b4:09:ae:ca: 07:5f:22:c3:10:9b:23:0d:5c:97:fc:02:86:06:f1: 50:ee:6d:d7:d7:84:3d:2e:77:be:38:98:bd:91:f1: 77:44:cb:28:7f:1b:3d:fc:c7:b8:0d:db:2e:ab:77: a8:88:3f:94:47:38:23:a1:55:f0:9e:7c:76:ae:c3: 24:b8:e0:0a:e2:92:ac:d8:3b:16:10:44:47:6c:7b: 09:9e:ce:b4:26:7f:57:58:d4:00:21:71:a6:0a:09: a8:b1:48:f4:b6:73:0c:c5:96:2c:2e:c8:97:6a:01: ac:24:db:d4:72:42:54:c7:44:69:86:04:1d:2e:3e: 3f:2a:59:8b:70:d5:6e:fe:ff:40:7a:6d:56:2e:e8: ff:0f:e3:c4:85:58:93:80:6f:84:a3:f7:ab:1d:24: cf:7c:64:5a:4a:bf:09:42:3a:31:02:6b:d7:c0:30: 6f:47:fa:ac:97:a6:1a:9a:4f:19:50:8a:de:a7:4c: 2e:42:c2:36:d6:bd:70:0b:5e:6a:91:3a:96:d7:1a: ca:85:5c:74:6f:71:68:11:e1:70:5a:0d:f0:b0:c3: f4:59:be:1b:c4:b6:0b:e2:55:41:56:48:b9:fd:1c: 26:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BD:90:97:16:D9:F5:47:5B:0D:47:81:03:86:3F:22:EA:1F:09:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db1da63c-2a68-4ace-b196-5ef2574e6754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:5000::/40 Signature Algorithm: sha256WithRSAEncryption b6:91:25:73:27:ae:cb:56:aa:f6:9a:b9:2a:f4:7a:2c:f9:b1: eb:ae:f6:9f:a7:63:4a:bb:13:74:90:34:de:b9:75:46:03:93: b2:0b:e2:57:1e:0d:36:c6:1b:68:ce:32:2d:a4:2f:25:da:88: 59:03:8b:b3:2a:28:30:e3:3c:02:ac:df:64:f4:a9:1e:db:19: 07:02:98:c2:63:69:8b:1b:2f:28:40:0a:28:31:e2:ec:58:a3: c4:19:6b:d0:fd:f5:4b:79:2f:cc:19:79:39:74:6a:e6:a8:71: 78:8c:13:fc:03:1a:49:b6:53:f1:62:7d:92:67:36:48:25:77: ca:e5:a7:34:02:25:14:da:31:c1:0a:42:cd:17:ff:70:45:18: 53:6c:99:c8:b8:7a:19:e4:8c:0e:b6:46:cb:7f:7d:de:3e:71: 4c:c3:72:b0:60:5a:b1:bc:17:7d:38:31:5c:cb:a2:ab:c8:a5: 9d:3d:77:2e:76:09:e9:59:37:1c:13:96:4c:56:fa:51:31:32: 29:96:e1:e4:40:cf:5c:37:09:72:bc:44:f6:6b:4e:c2:62:9b: ae:5c:e7:6c:7a:69:7d:2a:a1:c1:4e:da:f2:a6:fd:40:a2:dc: 98:6b:6e:b5:95:a4:75:68:73:a1:59:4a:32:2d:99:85:cd:cf: d4:09:92:50 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVlwSq9AMSwBVtpw/pULvY4twHr4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDA0MDI5WhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzNjZjdhNzA3ODlmNjQ3OThhZDE2NDA0ODExYTNmMTM4 NjZiNWJiYzE3N2E0MWZmNzc5ZDM0ZWM0MWQzYmEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHJNVh1MLTU5pdTEa+jMWg9K4NJsLFg8ZPtAmuygdfIsMQ myMNXJf8AoYG8VDubdfXhD0ud744mL2R8XdEyyh/Gz38x7gN2y6rd6iIP5RHOCOh VfCefHauwyS44ArikqzYOxYQREdsewmezrQmf1dY1AAhcaYKCaixSPS2cwzFliwu yJdqAawk29RyQlTHRGmGBB0uPj8qWYtw1W7+/0B6bVYu6P8P48SFWJOAb4Sj96sd JM98ZFpKvwlCOjECa9fAMG9H+qyXphqaTxlQit6nTC5CwjbWvXALXmqROpbXGsqF XHRvcWgR4XBaDfCww/RZvhvEtgviVUFWSLn9HCZ5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU0L2QlxbZ9UdbDUeBA4Y/IuofCbwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiMWRhNjNjLTJhNjgtNGFjZS1iMTk2LTVlZjI1NzRlNjc1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB8AUDANBgkqhkiG9w0BAQsFAAOCAQEAtpElcyeuy1aq9pq5KvR6LPmx 6672n6djSrsTdJA03rl1RgOTsgviVx4NNsYbaM4yLaQvJdqIWQOLsyooMOM8Aqzf ZPSpHtsZBwKYwmNpixsvKEAKKDHi7FijxBlr0P31S3kvzBl5OXRq5qhxeIwT/AMa SbZT8WJ9kmc2SCV3yuWnNAIlFNoxwQpCzRf/cEUYU2yZyLh6GeSMDrZGy3993j5x TMNysGBasbwXfTgxXMuiq8ilnT13LnYJ6Vk3HBOWTFb6UTEyKZbh5EDPXDcJcrxE 9mtOwmKbrlznbHppfSqhwU7a8qb9QKLcmGtutZWkdWhzoVlKMi2Zhc3P1AmSUA== -----END CERTIFICATE-----Generated at Sun Jun 1 04:54:39 2025 by rpki-client