$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6ee98da-ac5f-4668-ae34-9e956ff075a4.roa File: e6ee98da-ac5f-4668-ae34-9e956ff075a4.roa (raw, json) Hash identifier: MjY2czV99diXDkiAjhvbu61jGrKriPxWcsb9nz/pPt4= Subject key identifier: 36:CB:50:75:F0:6A:EB:35:96:B3:86:96:52:FF:8A:32:E8:32:11:A7 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7692C1ADFA74073DB208E1B744F108E0A88C9764 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6ee98da-ac5f-4668-ae34-9e956ff075a4.roa Signing time: Fri 16 May 2025 17:00:28 +0000 ROA not before: Fri 16 May 2025 17:00:28 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:81d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:92:c1:ad:fa:74:07:3d:b2:08:e1:b7:44:f1:08:e0:a8:8c:97:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 17:00:28 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=61be7b090fdec081c324ff1ab2a40d932b109e6ce58bcb2551b85ef2b7d34129, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:7c:ef:22:2b:3e:58:6e:ef:7f:05:78:e4: f1:30:99:9b:70:98:c6:05:97:7e:e1:e0:6a:d8:66: 9d:fb:3f:df:d7:3f:bd:84:f2:70:37:88:41:85:8a: c0:06:64:28:5f:47:04:fc:1f:90:2d:8d:16:ec:fa: 7e:8d:29:80:48:d9:f5:a4:51:23:36:fc:e4:be:b3: 5d:fe:06:fa:24:45:49:84:70:8f:83:6d:73:21:64: 5a:91:e1:aa:02:4b:39:eb:b1:bd:a2:f6:73:8e:11: f7:7a:2f:bd:6d:d6:d4:93:10:c6:58:36:1c:6f:cc: f6:71:75:f8:18:8f:5c:ef:b8:af:07:4f:d8:4d:50: 06:7b:9c:6e:59:53:e1:ea:bd:1c:dd:2d:d0:52:5d: 5e:03:59:60:35:41:77:4f:c4:c4:40:a2:91:3c:b5: 4e:52:d0:30:a1:47:e1:52:d9:94:6d:c8:38:23:30: 7c:63:c4:e8:d5:32:75:d6:32:48:05:5e:2d:5b:7d: 62:3d:7d:89:8d:5d:41:2c:20:a2:41:f0:05:2e:61: fa:29:19:20:c7:4d:0a:04:1b:1b:49:a0:3c:a4:82: f2:5f:b8:ee:4d:2a:4b:aa:61:ac:23:18:3d:8c:da: 9e:47:af:2a:82:75:29:38:18:9f:2b:6c:09:d3:b7: 4c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CB:50:75:F0:6A:EB:35:96:B3:86:96:52:FF:8A:32:E8:32:11:A7 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6ee98da-ac5f-4668-ae34-9e956ff075a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:81d0::/48 Signature Algorithm: sha256WithRSAEncryption 0d:3d:b6:17:d6:c5:47:64:f5:bc:de:c8:47:75:04:8c:5f:11: 14:e8:e6:32:a6:cc:7e:a6:fd:9a:cf:57:81:ca:af:68:4c:2d: 73:e7:71:87:e9:f4:dc:5e:db:0c:e2:79:e3:4b:43:b9:9c:b6: 25:b6:3a:f5:dd:07:cf:24:1d:2e:08:5c:8b:6f:a9:f5:9c:dc: 1f:2a:38:f7:70:4b:03:70:b8:4f:e1:bd:cf:27:6f:38:91:f8: 98:22:df:24:81:92:2b:b8:e2:ee:6b:b6:a0:de:56:fb:12:8b: 8d:eb:0e:cb:ff:0f:7d:4a:d0:bd:1a:59:c5:d9:3f:32:9b:05: 54:c7:46:f4:39:a7:da:8d:00:33:40:ac:15:16:43:fc:86:7a: 33:32:db:73:b2:25:6b:7d:14:f3:e3:5c:29:32:b6:e2:53:18: 05:bf:50:3d:f4:ad:25:17:0a:37:3c:12:b7:2f:a0:00:88:fa: f5:6e:ad:41:af:7e:28:a2:bc:72:19:c8:c0:49:74:c9:97:93: bc:68:f6:23:03:3d:39:7f:85:05:63:af:dc:4a:42:11:c1:a0: 23:69:a5:ac:d2:83:d6:3e:31:31:10:bd:37:b9:dd:88:f9:4d: 2d:7e:18:f6:1d:49:a0:bd:c7:db:98:d5:cb:f6:fc:7c:59:26: a4:65:c8:46 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdpLBrfp0Bz2yCOG3RPEI4KiMl2QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTcwMDI4WhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MWJlN2IwOTBmZGVjMDgxYzMyNGZmMWFiMmE0MGQ5MzJi MTA5ZTZjZTU4YmNiMjU1MWI4NWVmMmI3ZDM0MTI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1LXzvIis+WG7vfwV45PEwmZtwmMYFl37h4GrYZp37P9/X P72E8nA3iEGFisAGZChfRwT8H5AtjRbs+n6NKYBI2fWkUSM2/OS+s13+BvokRUmE cI+DbXMhZFqR4aoCSznrsb2i9nOOEfd6L71t1tSTEMZYNhxvzPZxdfgYj1zvuK8H T9hNUAZ7nG5ZU+HqvRzdLdBSXV4DWWA1QXdPxMRAopE8tU5S0DChR+FS2ZRtyDgj MHxjxOjVMnXWMkgFXi1bfWI9fYmNXUEsIKJB8AUuYfopGSDHTQoEGxtJoDykgvJf uO5NKkuqYawjGD2M2p5HryqCdSk4GJ8rbAnTt0y7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNstQdfBq6zWWs4aWUv+KMugyEacwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U2ZWU5OGRhLWFjNWYtNDY2OC1hZTM0LTllOTU2ZmYwNzVhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gdAwDQYJKoZIhvcNAQELBQADggEBAA09thfWxUdk9bzeyEd1BIxf ERTo5jKmzH6m/ZrPV4HKr2hMLXPncYfp9Nxe2wzieeNLQ7mctiW2OvXdB88kHS4I XItvqfWc3B8qOPdwSwNwuE/hvc8nbziR+Jgi3ySBkiu44u5rtqDeVvsSi43rDsv/ D31K0L0aWcXZPzKbBVTHRvQ5p9qNADNArBUWQ/yGejMy23OyJWt9FPPjXCkytuJT GAW/UD30rSUXCjc8ErcvoACI+vVurUGvfiiivHIZyMBJdMmXk7xo9iMDPTl/hQVj r9xKQhHBoCNppazSg9Y+MTEQvTe53Yj5TS1+GPYdSaC9x9uY1cv2/HxZJqRlyEY= -----END CERTIFICATE-----Generated at Wed Jun 4 11:25:03 2025 by rpki-client