$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec5afb6c-89fb-4dcf-9dd2-a4bda7610a79.roa File: ec5afb6c-89fb-4dcf-9dd2-a4bda7610a79.roa (raw, json) Hash identifier: tgY0LmxINl4qjqFBUpfroBvbaDd0O/Xy4sJHLOuT7i0= Subject key identifier: 01:20:89:3D:88:68:FE:7C:08:25:65:88:AE:50:41:B9:2D:9F:C5:DF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1A67E4C479E3CE796A5908AE9B9F9A56CF7BD287 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec5afb6c-89fb-4dcf-9dd2-a4bda7610a79.roa Signing time: Mon 19 May 2025 15:20:23 +0000 ROA not before: Mon 19 May 2025 15:20:23 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:67:e4:c4:79:e3:ce:79:6a:59:08:ae:9b:9f:9a:56:cf:7b:d2:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 15:20:23 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=cd61dfa35f2f0a06da66bef142e5dfb75a6063a203e6f64232e17834d8a0237f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3e:65:9f:25:84:54:39:53:d4:dd:9a:63:11: ca:c1:03:c4:4e:69:c1:a8:cd:12:39:6a:72:bd:3b: 51:d4:0b:d4:87:4f:9c:f2:10:89:d1:f0:8d:db:37: 5c:da:82:36:de:07:35:7a:68:f2:23:4f:90:a4:92: 72:4e:c1:82:b2:f9:38:55:29:f5:42:9d:75:65:d2: ce:c5:0f:3e:f2:b1:29:23:37:f2:28:66:59:5e:9c: a8:07:5c:ed:0f:76:b0:c1:1d:66:eb:63:98:aa:d9: 12:9b:df:82:9e:f5:16:88:e2:c9:d3:a5:96:53:c3: 8f:d0:d9:6d:ac:b3:a8:07:30:22:fe:aa:74:14:b0: 4d:9b:33:f0:d0:3e:df:d6:98:e5:48:a2:fd:2d:47: 00:0e:20:45:99:55:b0:22:fe:bb:79:f3:23:0e:8a: fa:82:dd:39:00:2c:de:5a:a4:92:fa:3f:85:68:41: a3:3e:40:97:7d:04:5f:88:6c:07:6d:38:da:b9:e3: ca:ad:be:32:00:66:d5:cc:47:10:20:60:0d:3b:a6: 27:90:69:97:d2:c4:7f:a6:77:99:72:44:8c:1a:83: 8f:31:d5:07:4b:7f:5f:af:e8:aa:e2:b6:48:bf:76: b6:27:29:2d:51:e7:a2:93:b5:3d:26:2a:b3:27:ec: 53:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:20:89:3D:88:68:FE:7C:08:25:65:88:AE:50:41:B9:2D:9F:C5:DF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec5afb6c-89fb-4dcf-9dd2-a4bda7610a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8080::/48 Signature Algorithm: sha256WithRSAEncryption b0:1d:28:f9:59:7c:56:5d:8a:c8:3d:df:63:42:7e:20:a0:c7: 39:0c:1c:14:6b:1b:c0:6c:eb:b3:8b:7f:69:8e:64:6d:55:98: af:2a:5e:06:4b:6b:74:c5:89:fc:b3:0b:e0:62:4a:05:1b:37: c3:f4:38:a1:f9:2f:b6:f3:ce:b4:f8:40:05:e7:21:81:ee:12: d4:2d:fd:5e:41:f1:68:8c:83:fb:95:75:21:17:14:35:4a:0b: 11:1c:21:18:9e:5c:b3:8c:49:9e:9a:19:ff:68:b4:c6:6c:a3: 25:20:9f:76:2e:91:1e:e0:58:7e:d3:ae:27:e1:29:c7:b7:d7: ff:bb:ca:ff:70:7f:92:48:37:98:58:65:8b:e9:91:cb:4e:92: c4:8c:0b:41:72:f2:b0:11:e3:4e:72:8d:35:d9:85:44:8b:de: 90:86:35:44:61:6f:86:c0:12:53:01:5a:ba:56:2f:34:59:3c: 2e:5a:13:82:81:91:09:19:b8:a1:c5:5b:65:07:49:8b:78:08: 20:0f:b8:7b:37:e2:ae:46:ec:5d:40:4e:64:94:ec:88:b2:e3: 54:75:0c:09:5d:e7:73:95:d2:41:54:eb:4c:30:15:3f:a0:88: 29:db:f5:7c:90:cb:42:61:33:be:5e:70:73:ac:5d:47:6c:98: 71:83:b9:70 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGmfkxHnjznlqWQium5+aVs970ocwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTUyMDIzWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDYxZGZhMzVmMmYwYTA2ZGE2NmJlZjE0MmU1ZGZiNzVh NjA2M2EyMDNlNmY2NDIzMmUxNzgzNGQ4YTAyMzdmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTPmWfJYRUOVPU3ZpjEcrBA8ROacGozRI5anK9O1HUC9SH T5zyEInR8I3bN1zagjbeBzV6aPIjT5CkknJOwYKy+ThVKfVCnXVl0s7FDz7ysSkj N/IoZllenKgHXO0PdrDBHWbrY5iq2RKb34Ke9RaI4snTpZZTw4/Q2W2ss6gHMCL+ qnQUsE2bM/DQPt/WmOVIov0tRwAOIEWZVbAi/rt58yMOivqC3TkALN5apJL6P4Vo QaM+QJd9BF+IbAdtONq548qtvjIAZtXMRxAgYA07pieQaZfSxH+md5lyRIwag48x 1QdLf1+v6Kritki/drYnKS1R56KTtT0mKrMn7FPVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUASCJPYho/nwIJWWIrlBBuS2fxd8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VjNWFmYjZjLTg5ZmItNGRjZi05ZGQyLWE0YmRhNzYxMGE3OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gIAwDQYJKoZIhvcNAQELBQADggEBALAdKPlZfFZdisg932NCfiCg xzkMHBRrG8Bs67OLf2mOZG1VmK8qXgZLa3TFifyzC+BiSgUbN8P0OKH5L7bzzrT4 QAXnIYHuEtQt/V5B8WiMg/uVdSEXFDVKCxEcIRieXLOMSZ6aGf9otMZsoyUgn3Yu kR7gWH7TrifhKce31/+7yv9wf5JIN5hYZYvpkctOksSMC0Fy8rAR405yjTXZhUSL 3pCGNURhb4bAElMBWrpWLzRZPC5aE4KBkQkZuKHFW2UHSYt4CCAPuHs34q5G7F1A TmSU7Iiy41R1DAld53OV0kFU60wwFT+giCnb9XyQy0JhM75ecHOsXUdsmHGDuXA= -----END CERTIFICATE-----Generated at Sun Jun 1 04:22:42 2025 by rpki-client