$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbeb2c0b-8a71-454d-8f89-6e499008ee79.roa File: dbeb2c0b-8a71-454d-8f89-6e499008ee79.roa (raw, json) Hash identifier: +8hgVtwgqOpwB1D+isnC38ujF4rrXhv116o/rg1+7VE= Subject key identifier: 46:27:FA:33:9F:C2:D1:A9:A1:8C:E7:AE:A7:19:85:C1:3F:B7:E1:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 377FEB991F35A001637C228B6067A96EDE801E5A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbeb2c0b-8a71-454d-8f89-6e499008ee79.roa Signing time: Fri 16 May 2025 16:31:05 +0000 ROA not before: Fri 16 May 2025 16:31:05 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7f:eb:99:1f:35:a0:01:63:7c:22:8b:60:67:a9:6e:de:80:1e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 16:31:05 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=85fcdcd17cb4358211657b312c122397970d3afeb63af170db2ebe5e429b4e03, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1f:a3:1c:d7:d8:36:cc:20:49:6d:db:79:4b: 2d:04:9f:14:99:92:d5:d2:22:8b:12:63:d4:89:0a: b2:56:d0:47:5b:af:fa:07:63:05:ce:a9:39:57:4a: 84:0a:9b:fe:2f:f3:80:15:48:c0:c1:0e:d6:e5:c2: 11:45:25:dc:bb:b1:c0:9a:37:04:a3:db:d0:9d:e8: 92:1f:f9:8a:81:b2:9d:47:75:1e:4d:d3:7b:e1:3d: 80:ca:29:a6:1c:7f:c8:72:f4:8a:41:66:69:35:a0: d8:4e:6e:89:50:a0:bb:1a:2c:38:f4:21:f4:df:95: 40:04:d7:69:df:57:4c:8d:8a:f1:31:59:95:46:82: 59:31:03:e1:a7:b8:26:90:5c:fc:4b:f3:18:ce:04: 8e:ad:43:b1:2a:18:f9:73:25:b0:be:7b:a4:b5:19: 3c:3e:7e:a3:a4:09:e6:85:3e:1c:67:7f:9d:45:d5: 89:b4:f1:7f:52:bc:72:6a:53:bb:8b:ef:a6:40:ec: 3e:84:d6:d0:40:88:bb:3a:02:f4:05:5f:08:35:52: 28:de:ee:97:41:82:80:29:b0:8d:7d:4e:9b:c5:74: 72:b1:0c:aa:a3:ad:84:3a:70:c6:28:fa:53:48:d8: bd:c6:b8:e0:84:6a:61:c8:ea:12:7f:b3:c6:21:0c: 13:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:27:FA:33:9F:C2:D1:A9:A1:8C:E7:AE:A7:19:85:C1:3F:B7:E1:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbeb2c0b-8a71-454d-8f89-6e499008ee79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:2080::/48 Signature Algorithm: sha256WithRSAEncryption 14:94:69:a9:1c:e5:8a:91:1a:82:58:d0:48:9a:b1:05:79:e5: dc:7a:08:6e:73:b5:d4:75:66:ce:a4:ba:f4:95:00:c1:cc:31: 47:b5:18:a6:55:4f:c2:b4:18:31:2a:23:58:f2:80:a6:ce:fa: ea:b4:d5:24:b5:81:e3:c8:cb:90:ff:df:44:2c:d7:7a:3f:80: 43:63:cc:80:52:34:fb:08:20:4d:b2:a7:03:aa:0c:e3:73:1e: d3:97:d2:d4:a7:81:fe:6b:5a:47:00:f8:97:bd:4e:c9:33:e8: 6c:10:b8:ae:cb:4c:4d:78:3b:ee:25:7d:d8:c7:28:76:d0:4f: 92:47:09:88:11:e9:cd:86:81:9e:73:78:c8:38:c4:e5:f3:dc: 09:a3:38:d2:19:d0:08:7e:09:bc:3b:6b:19:26:bb:ed:5f:47: 7c:b4:5c:58:60:22:46:01:cf:c7:cb:37:18:a3:a4:4a:db:ca: bd:03:66:b6:c7:de:80:1b:0c:13:80:69:d2:78:b0:4c:49:4e: c1:1b:a8:d4:46:82:46:a0:59:d1:13:ad:a6:98:aa:92:6b:14: 1e:2f:84:7b:8c:30:86:d3:ff:a7:3f:25:94:c2:56:2c:7d:aa: d8:ec:c9:29:c1:29:fd:72:5f:0c:ef:cc:d2:db:8e:92:c6:60: ec:10:48:b5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUN3/rmR81oAFjfCKLYGepbt6AHlowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTYzMTA1WhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NWZjZGNkMTdjYjQzNTgyMTE2NTdiMzEyYzEyMjM5Nzk3 MGQzYWZlYjYzYWYxNzBkYjJlYmU1ZTQyOWI0ZTAzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWH6Mc19g2zCBJbdt5Sy0EnxSZktXSIosSY9SJCrJW0Edb r/oHYwXOqTlXSoQKm/4v84AVSMDBDtblwhFFJdy7scCaNwSj29Cd6JIf+YqBsp1H dR5N03vhPYDKKaYcf8hy9IpBZmk1oNhObolQoLsaLDj0IfTflUAE12nfV0yNivEx WZVGglkxA+GnuCaQXPxL8xjOBI6tQ7EqGPlzJbC+e6S1GTw+fqOkCeaFPhxnf51F 1Ym08X9SvHJqU7uL76ZA7D6E1tBAiLs6AvQFXwg1Uije7pdBgoApsI19TpvFdHKx DKqjrYQ6cMYo+lNI2L3GuOCEamHI6hJ/s8YhDBP9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURif6M5/C0amhjOeupxmFwT+34S8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RiZWIyYzBiLThhNzEtNDU0ZC04Zjg5LTZlNDk5MDA4ZWU3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/0IIAwDQYJKoZIhvcNAQELBQADggEBABSUaakc5YqRGoJY0EiasQV5 5dx6CG5ztdR1Zs6kuvSVAMHMMUe1GKZVT8K0GDEqI1jygKbO+uq01SS1gePIy5D/ 30Qs13o/gENjzIBSNPsIIE2ypwOqDONzHtOX0tSngf5rWkcA+Je9Tskz6GwQuK7L TE14O+4lfdjHKHbQT5JHCYgR6c2GgZ5zeMg4xOXz3AmjONIZ0Ah+Cbw7axkmu+1f R3y0XFhgIkYBz8fLNxijpErbyr0DZrbH3oAbDBOAadJ4sExJTsEbqNRGgkagWdET raaYqpJrFB4vhHuMMIbT/6c/JZTCVix9qtjsySnBKf1yXwzvzNLbjpLGYOwQSLU= -----END CERTIFICATE-----Generated at Sun Jun 1 05:26:36 2025 by rpki-client