$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0906f9d-1cca-43f0-b3d7-758e92ff46a1.roa File: e0906f9d-1cca-43f0-b3d7-758e92ff46a1.roa (raw, json) Hash identifier: 8TjRE0E+gqPVEvoKMtEPZsEw0vtdICOoLgIRwtQQxMM= Subject key identifier: 66:D0:9E:7A:48:0D:53:8C:6C:E8:CB:35:E5:AB:29:E5:74:E9:2A:A0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3468259CCF823E1D3115A16564DA9A6C1DDD3C4E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0906f9d-1cca-43f0-b3d7-758e92ff46a1.roa Signing time: Mon 12 May 2025 15:20:22 +0000 ROA not before: Mon 12 May 2025 15:20:22 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fbb:7400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:68:25:9c:cf:82:3e:1d:31:15:a1:65:64:da:9a:6c:1d:dd:3c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 15:20:22 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=dce00b7b46ecc867e54d95ea16ebb33dfd2413a3023a917f5f7f5ae9084eaf52, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:69:1a:2b:6c:44:d4:40:ae:f2:5b:6c:5b:50: 5e:cd:6f:85:ca:97:65:56:71:7e:dc:52:7d:25:f4: fc:c8:f2:16:a7:41:5c:f5:0f:5f:b7:17:d3:84:e2: 56:3c:4c:9d:2f:e2:fb:58:46:c8:57:27:73:be:fe: ed:31:ca:d7:ca:e7:3d:01:9d:97:56:15:c9:91:01: df:34:e0:46:d2:69:67:12:91:6f:e0:73:0a:03:ad: 17:ce:c5:0a:96:9d:b8:68:01:e2:78:5a:ee:ee:53: 04:aa:c3:d0:92:48:d6:ce:81:2b:53:1b:25:0c:11: 8a:c4:31:d8:da:a4:20:2b:b3:83:a2:18:75:06:00: 18:2c:94:72:ae:eb:62:d7:12:bc:61:cd:f1:02:cb: c7:59:e5:f6:e3:a6:87:b2:73:de:27:0a:12:08:c0: c7:52:4d:88:0f:05:cc:bd:1c:65:67:34:43:aa:ad: 71:4e:ad:b3:af:23:6b:17:b1:17:4d:58:25:13:94: 94:4e:74:1e:73:9d:e5:ed:13:46:20:24:66:20:8a: 26:3c:26:cb:07:8b:c0:c2:7a:cb:a6:6f:35:67:f0: 5d:f2:cd:0f:a2:fd:68:00:51:30:1c:23:bd:96:6c: 7c:83:d7:71:a8:9d:3e:a2:8f:68:cc:84:44:15:9d: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D0:9E:7A:48:0D:53:8C:6C:E8:CB:35:E5:AB:29:E5:74:E9:2A:A0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0906f9d-1cca-43f0-b3d7-758e92ff46a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fbb:7400::/40 Signature Algorithm: sha256WithRSAEncryption 73:99:10:90:9d:69:8f:4b:90:d7:93:91:3e:b9:ab:18:ef:e0: d6:18:de:cb:5e:dd:b9:48:8c:33:ce:67:63:8b:c5:bd:55:e4: 61:27:cb:10:43:6c:be:aa:41:50:87:cd:b0:c4:40:67:99:84: 0f:f8:37:a3:2e:7f:cf:bd:98:b0:2d:58:86:70:48:c8:4c:af: 04:86:db:94:9e:10:0d:51:3d:7e:e7:bf:ff:9c:6c:90:81:35: b4:90:fb:f9:1f:38:53:d0:75:ba:f5:05:db:55:1c:44:ce:ba: b9:16:55:29:47:c0:b4:21:17:2f:01:a4:f5:ac:00:1e:f2:82: 31:07:bd:2e:c5:99:2a:4b:0c:e9:7b:cd:1f:43:0f:81:89:97: 29:1e:a9:c1:c5:20:8b:ea:9f:5b:76:8a:bf:bc:9b:16:33:1a: 46:1c:40:81:be:f8:40:ad:56:f3:4a:5c:04:2e:df:c1:a3:0f: 32:db:78:37:3a:ac:f1:ad:16:8d:49:8c:7d:7b:04:7c:a8:55: eb:b9:ee:b8:d0:f1:3b:0c:0c:e8:96:7a:c5:44:56:04:36:4e: 30:d0:d2:eb:0d:ec:ca:3c:1b:4d:6c:c7:64:a4:05:24:69:df: c7:76:ea:d0:f4:e7:35:f6:52:7c:51:6a:5f:fe:33:12:68:5a: 1c:c3:51:4f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNGglnM+CPh0xFaFlZNqabB3dPE4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEyMTUyMDIyWhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2UwMGI3YjQ2ZWNjODY3ZTU0ZDk1ZWExNmViYjMzZGZk MjQxM2EzMDIzYTkxN2Y1ZjdmNWFlOTA4NGVhZjUyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTaRorbETUQK7yW2xbUF7Nb4XKl2VWcX7cUn0l9PzI8han QVz1D1+3F9OE4lY8TJ0v4vtYRshXJ3O+/u0xytfK5z0BnZdWFcmRAd804EbSaWcS kW/gcwoDrRfOxQqWnbhoAeJ4Wu7uUwSqw9CSSNbOgStTGyUMEYrEMdjapCArs4Oi GHUGABgslHKu62LXErxhzfECy8dZ5fbjpoeyc94nChIIwMdSTYgPBcy9HGVnNEOq rXFOrbOvI2sXsRdNWCUTlJROdB5zneXtE0YgJGYgiiY8JssHi8DCesumbzVn8F3y zQ+i/WgAUTAcI72WbHyD13GonT6ij2jMhEQVnXkvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUZtCeekgNU4xs6Ms15asp5XTpKqAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UwOTA2ZjlkLTFjY2EtNDNmMC1iM2Q3LTc1OGU5MmZmNDZhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+7dDANBgkqhkiG9w0BAQsFAAOCAQEAc5kQkJ1pj0uQ15ORPrmrGO/g 1hjey17duUiMM85nY4vFvVXkYSfLEENsvqpBUIfNsMRAZ5mED/g3oy5/z72YsC1Y hnBIyEyvBIbblJ4QDVE9fue//5xskIE1tJD7+R84U9B1uvUF21UcRM66uRZVKUfA tCEXLwGk9awAHvKCMQe9LsWZKksM6XvNH0MPgYmXKR6pwcUgi+qfW3aKv7ybFjMa RhxAgb74QK1W80pcBC7fwaMPMtt4Nzqs8a0WjUmMfXsEfKhV67nuuNDxOwwM6JZ6 xURWBDZOMNDS6w3syjwbTWzHZKQFJGnfx3bq0PTnNfZSfFFqX/4zEmhaHMNRTw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:32:57 2025 by rpki-client