$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dee8d249-7ef2-4dad-a5c9-1187567be096.roa File: dee8d249-7ef2-4dad-a5c9-1187567be096.roa (raw, json) Hash identifier: /z7w+eXz4KV6Z57aio7kmSjHrF7xH6CEmUIwY+o0yyI= Subject key identifier: E0:9A:C0:DD:5E:C8:27:E3:8C:57:69:F9:90:16:91:DD:24:88:43:A3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7F77F9C138010CE1BFB27B8EDDCE17F6FD7A5695 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dee8d249-7ef2-4dad-a5c9-1187567be096.roa Signing time: Mon 12 May 2025 15:20:11 +0000 ROA not before: Mon 12 May 2025 15:20:11 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:77:f9:c1:38:01:0c:e1:bf:b2:7b:8e:dd:ce:17:f6:fd:7a:56:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 15:20:11 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=064bc77506e653023acd3076e7ec8862e219f060f064bb2456a78c69273c8457, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:60:0f:a1:72:8a:e3:bd:49:b8:9d:04:d3: 05:9d:ca:7e:64:2e:6d:fe:55:de:7e:0d:8d:e0:46: 23:75:e8:24:84:81:f3:dc:01:2b:f5:c6:b7:ce:94: b1:d4:cb:90:b6:d5:56:b3:fd:38:75:7d:fc:ed:23: 70:4e:99:75:79:25:c6:f6:40:27:03:ca:45:3c:12: 54:fd:ca:e5:b6:cc:40:5c:23:c0:ce:a5:7b:5b:d9: 37:52:e3:a6:f9:84:07:37:12:57:41:fc:44:79:94: 0b:7f:d6:df:ae:b0:14:87:aa:73:a5:87:21:09:d4: c8:f6:bc:54:3a:95:5b:a6:c0:e5:4d:1d:fe:75:5d: 94:70:16:2b:1d:99:9d:d1:16:f4:ce:e8:82:db:5b: c1:bd:50:29:9d:2b:83:8e:24:95:98:57:e4:b4:56: ab:50:3b:a6:92:3f:06:77:f5:8c:15:6a:47:8e:2b: 24:33:84:02:c2:9f:41:81:9c:f9:26:7d:5d:39:1e: f4:30:36:15:d7:f3:f1:4f:af:8a:ab:78:1b:de:a3: ff:7e:1f:9e:9d:b6:d4:e0:96:8f:36:f3:db:7b:9a: dc:b2:45:8e:18:bd:52:cb:fa:94:e1:20:d7:f0:f6: 11:51:8f:8b:84:b2:11:2b:d3:89:b9:2f:5a:f1:ad: 5a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9A:C0:DD:5E:C8:27:E3:8C:57:69:F9:90:16:91:DD:24:88:43:A3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dee8d249-7ef2-4dad-a5c9-1187567be096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:6000::/40 Signature Algorithm: sha256WithRSAEncryption 47:62:99:b1:3a:0b:47:e9:72:ff:e0:e1:cf:95:5a:58:76:c1: ce:c9:19:0d:b8:28:a2:0d:c7:75:a9:f5:6f:ea:21:51:71:a7: c7:26:ae:69:09:e0:ab:b7:c3:93:93:70:b3:81:c5:65:75:c7: 6e:8d:bf:45:4c:b3:73:4c:0d:1f:47:43:d7:e7:2f:01:72:74: 79:ba:82:eb:c5:18:6b:e9:8e:56:14:82:ce:98:91:23:db:b9: 8c:60:d3:42:92:47:04:a9:64:39:71:aa:6a:eb:3b:71:c8:5d: 70:37:66:ac:b9:70:40:7d:9a:c8:93:73:fe:33:53:7e:ae:d8: 76:f3:f7:a6:17:02:fd:5f:7e:4a:37:1e:3f:d6:33:a1:15:13: 2c:ce:9e:88:98:d1:b8:cb:70:9d:69:bb:8b:d0:5f:1a:25:f1: 7c:14:b3:98:f5:24:67:a7:2a:1b:10:0c:f5:43:d1:8d:af:4a: ac:58:e9:fb:11:38:f4:17:87:f9:28:d4:c5:77:9d:4f:69:b1: d0:e6:38:a1:4a:44:8a:b0:3d:44:f6:27:48:73:71:90:64:ee: ef:f0:71:8d:3d:61:17:e5:a3:88:c9:9f:91:38:b8:49:10:9b: 5f:81:81:26:c7:20:22:d3:5f:08:ef:79:1d:12:65:38:4a:6e: ea:df:42:4c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUf3f5wTgBDOG/snuO3c4X9v16VpUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEyMTUyMDExWhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjRiYzc3NTA2ZTY1MzAyM2FjZDMwNzZlN2VjODg2MmUy MTlmMDYwZjA2NGJiMjQ1NmE3OGM2OTI3M2M4NDU3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5P2APoXKK471JuJ0E0wWdyn5kLm3+Vd5+DY3gRiN16CSE gfPcASv1xrfOlLHUy5C21Vaz/Th1ffztI3BOmXV5Jcb2QCcDykU8ElT9yuW2zEBc I8DOpXtb2TdS46b5hAc3EldB/ER5lAt/1t+usBSHqnOlhyEJ1Mj2vFQ6lVumwOVN Hf51XZRwFisdmZ3RFvTO6ILbW8G9UCmdK4OOJJWYV+S0VqtQO6aSPwZ39YwVakeO KyQzhALCn0GBnPkmfV05HvQwNhXX8/FPr4qreBveo/9+H56dttTglo8289t7mtyy RY4YvVLL+pThINfw9hFRj4uEshEr04m5L1rxrVpnAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4JrA3V7IJ+OMV2n5kBaR3SSIQ6MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RlZThkMjQ5LTdlZjItNGRhZC1hNWM5LTExODc1NjdiZTA5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/0YDANBgkqhkiG9w0BAQsFAAOCAQEAR2KZsToLR+ly/+Dhz5VaWHbB zskZDbgoog3Hdan1b+ohUXGnxyauaQngq7fDk5Nws4HFZXXHbo2/RUyzc0wNH0dD 1+cvAXJ0ebqC68UYa+mOVhSCzpiRI9u5jGDTQpJHBKlkOXGqaus7cchdcDdmrLlw QH2ayJNz/jNTfq7YdvP3phcC/V9+SjceP9YzoRUTLM6eiJjRuMtwnWm7i9BfGiXx fBSzmPUkZ6cqGxAM9UPRja9KrFjp+xE49BeH+SjUxXedT2mx0OY4oUpEirA9RPYn SHNxkGTu7/BxjT1hF+WjiMmfkTi4SRCbX4GBJscgItNfCO95HRJlOEpu6t9CTA== -----END CERTIFICATE-----Generated at Sun Jun 1 05:18:36 2025 by rpki-client