$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85b0508-075c-4869-b943-85c4265c8ce7.roa File: e85b0508-075c-4869-b943-85c4265c8ce7.roa (raw, json) Hash identifier: PXdS6YbOnjkr+C8WHZsyBP55mPn0jRqZJ1GL7sqULXI= Subject key identifier: 45:98:4A:B5:CA:29:C4:8B:04:1B:93:E8:9A:3E:3E:12:DD:0F:3F:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1F323DBC91B95E0F8911AC777096AF78F69450B2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85b0508-075c-4869-b943-85c4265c8ce7.roa Signing time: Fri 16 May 2025 17:01:53 +0000 ROA not before: Fri 16 May 2025 17:01:53 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff4:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:32:3d:bc:91:b9:5e:0f:89:11:ac:77:70:96:af:78:f6:94:50:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 17:01:53 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=d5dc5662c445c9f00b8b8f2f4e50d408b63706e49c06147b61762edf3a8a068a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:3d:1a:8b:5a:1e:42:b9:26:6c:3d:3a:6c: c0:93:fd:57:54:44:9a:7b:08:d6:c6:f9:0e:6d:27: 00:98:25:64:87:bc:90:5b:63:79:ab:4b:76:92:f3: 0e:83:31:33:01:c5:d0:41:75:f4:e4:54:a4:a7:bf: 05:c1:7e:4e:0e:b2:6f:f1:bf:0d:8e:6b:63:b1:58: 46:67:8f:03:dc:51:c5:61:af:8c:bb:f7:fa:17:4e: 65:04:19:46:fb:06:6f:94:4e:89:d7:95:2c:0f:5b: 35:3a:79:f6:4f:62:4f:22:67:e3:bf:8c:64:15:69: 10:3b:34:1f:d2:c9:cc:55:af:40:b4:36:82:c7:2a: 77:47:23:07:08:70:99:43:6b:e4:37:25:25:3e:e2: 13:f6:21:a5:17:8d:eb:da:40:dd:c8:09:e9:bf:49: e2:70:e4:9f:ec:8c:48:fe:6f:fb:7e:2b:b9:70:76: e1:59:07:da:90:db:15:41:88:fb:67:4e:f6:3c:17: bb:c4:ad:d6:d0:3c:03:b8:c3:a9:57:62:48:15:f9: c0:2a:a2:13:75:af:c7:24:08:e6:56:c6:07:b7:ae: 16:e6:cb:ea:d5:49:a8:cb:42:b7:5e:a0:81:83:bb: a8:6b:40:4a:52:fd:f2:cf:3b:d4:75:75:08:c5:e6: f8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:98:4A:B5:CA:29:C4:8B:04:1B:93:E8:9A:3E:3E:12:DD:0F:3F:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e85b0508-075c-4869-b943-85c4265c8ce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:2040::/48 Signature Algorithm: sha256WithRSAEncryption a1:7f:af:d5:2a:9b:f6:9e:7c:87:b3:b1:7f:d2:63:47:f5:c2: 82:54:12:72:15:10:45:ac:4e:0e:f8:d0:48:49:9d:ed:94:2d: 67:74:e0:49:79:0b:72:6b:de:62:90:e8:60:b3:25:43:98:19: e2:0b:f2:af:20:bf:b6:1e:95:06:c2:b1:98:ef:50:39:06:0c: da:8d:38:e1:04:f3:5d:6d:d8:f3:00:6b:59:6c:43:19:9f:13: 4b:03:ee:13:8b:0e:79:ef:97:39:31:90:d9:63:88:c1:5e:7e: 9d:d5:ba:9c:0f:8a:83:cb:6c:b4:40:76:8d:80:e6:5f:5e:cf: bd:1c:7c:69:28:02:75:d2:ec:93:c5:b7:f9:b5:d1:56:57:d6: 1c:28:4c:d3:78:48:a9:57:18:2f:f5:5c:55:b0:c3:c5:6c:04: d6:bd:36:10:93:10:09:71:da:21:11:c4:45:5b:0f:33:fc:f3: 87:60:00:69:14:8b:87:51:5e:e2:23:2e:85:54:02:ea:ed:70: 45:ab:56:eb:9b:52:1b:3b:9a:7e:79:b2:b6:ba:8e:18:ee:9c: e4:ed:11:10:dd:6c:e7:61:87:78:b8:9a:ca:97:5f:92:54:7a: 8f:ca:de:61:06:38:2f:fd:e0:c3:d3:70:b2:04:c4:c0:e7:44: 2d:63:73:67 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHzI9vJG5Xg+JEax3cJavePaUULIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTcwMTUzWhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWRjNTY2MmM0NDVjOWYwMGI4YjhmMmY0ZTUwZDQwOGI2 MzcwNmU0OWMwNjE0N2I2MTc2MmVkZjNhOGEwNjhhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxmT0ai1oeQrkmbD06bMCT/VdURJp7CNbG+Q5tJwCYJWSH vJBbY3mrS3aS8w6DMTMBxdBBdfTkVKSnvwXBfk4Osm/xvw2Oa2OxWEZnjwPcUcVh r4y79/oXTmUEGUb7Bm+UTonXlSwPWzU6efZPYk8iZ+O/jGQVaRA7NB/SycxVr0C0 NoLHKndHIwcIcJlDa+Q3JSU+4hP2IaUXjevaQN3ICem/SeJw5J/sjEj+b/t+K7lw duFZB9qQ2xVBiPtnTvY8F7vErdbQPAO4w6lXYkgV+cAqohN1r8ckCOZWxge3rhbm y+rVSajLQrdeoIGDu6hrQEpS/fLPO9R1dQjF5vgvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURZhKtcopxIsEG5Pomj4+Et0PP4UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U4NWIwNTA4LTA3NWMtNDg2OS1iOTQzLTg1YzQyNjVjOGNlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/0IEAwDQYJKoZIhvcNAQELBQADggEBAKF/r9Uqm/aefIezsX/SY0f1 woJUEnIVEEWsTg740EhJne2ULWd04El5C3Jr3mKQ6GCzJUOYGeIL8q8gv7YelQbC sZjvUDkGDNqNOOEE811t2PMAa1lsQxmfE0sD7hOLDnnvlzkxkNljiMFefp3VupwP ioPLbLRAdo2A5l9ez70cfGkoAnXS7JPFt/m10VZX1hwoTNN4SKlXGC/1XFWww8Vs BNa9NhCTEAlx2iERxEVbDzP884dgAGkUi4dRXuIjLoVUAurtcEWrVuubUhs7mn55 sra6jhjunOTtERDdbOdhh3i4msqXX5JUeo/K3mEGOC/94MPTcLIExMDnRC1jc2c= -----END CERTIFICATE-----Generated at Sun Jun 1 04:31:04 2025 by rpki-client