$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efc992f9-00af-49f7-9474-d7a5b0a4a931.roa File: efc992f9-00af-49f7-9474-d7a5b0a4a931.roa (raw, json) Hash identifier: nKZZm6LU70ZtyrRy4JeHF07NPDKljDSIqd8yaIfR5NU= Subject key identifier: 93:18:5C:FF:D7:26:9E:07:94:BD:1C:43:E6:74:90:BC:BD:20:12:DB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B95D1A918EFEF15B903989E5A2DF780E1D7585B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efc992f9-00af-49f7-9474-d7a5b0a4a931.roa Signing time: Fri 30 May 2025 00:10:18 +0000 ROA not before: Fri 30 May 2025 00:10:18 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01:4850::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:95:d1:a9:18:ef:ef:15:b9:03:98:9e:5a:2d:f7:80:e1:d7:58:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 30 00:10:18 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=a9774d205f8c6f21b7fcda16d4572594b0f7247f436a55bf11587045b94a7d6c, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:df:1d:b3:6e:d0:87:22:63:68:03:fa:e7: 92:52:4a:10:f7:15:71:0c:0f:7c:d0:66:2a:31:4c: da:90:e7:13:d6:9d:aa:0f:e6:10:a1:f6:4e:3f:8e: 15:1b:52:b4:83:fd:3c:8b:34:b1:11:d5:d6:d7:42: 22:bc:53:6c:0d:88:69:e7:94:f8:cc:ad:1d:0a:7c: 7b:dc:73:d6:bf:d7:e9:9b:93:ee:da:cd:e8:5e:05: 60:34:61:6c:50:60:0e:9d:a2:2e:0c:72:e9:ee:d4: 7f:15:75:31:a3:19:28:9d:73:83:77:40:45:5b:8d: 5d:d4:87:2f:1a:d7:01:8a:7b:96:6d:91:25:70:ba: dd:00:2a:fa:4e:52:90:ab:0a:61:56:97:c8:4e:0a: 6f:a0:17:f6:06:b3:2d:07:68:37:bb:07:5e:00:c0: 48:4d:ee:77:74:05:04:c6:ac:fc:bb:84:db:4b:23: 4f:87:e7:ca:83:0a:a5:78:87:4d:06:5d:e6:5e:a0: a3:d2:c4:c5:6a:b7:d6:25:86:d9:e9:3d:ce:f3:6f: 1b:f5:83:4f:8a:a7:60:57:11:a7:cd:9e:6a:b9:b6: c4:e5:43:4b:62:0e:70:9f:0b:40:3c:b7:e0:c0:24: 84:cc:2a:75:0a:99:35:13:62:79:ca:0b:a7:9f:36: 0a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:18:5C:FF:D7:26:9E:07:94:BD:1C:43:E6:74:90:BC:BD:20:12:DB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efc992f9-00af-49f7-9474-d7a5b0a4a931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4850::/47 Signature Algorithm: sha256WithRSAEncryption a6:d1:d0:96:72:1f:83:c1:2f:ca:c7:b0:99:9d:90:8f:54:b8: f6:84:02:ed:21:a5:16:4f:ee:ac:81:4a:d5:3d:53:e7:77:93: d4:a9:0d:8e:6a:ed:4e:99:7b:94:41:98:39:73:e4:ba:37:b9: cc:66:39:38:8a:c6:90:d0:c2:97:e6:aa:3d:e7:7f:7a:c2:2d: f6:bc:0c:e2:c0:e0:b6:dd:48:10:f2:ed:1c:2d:fa:85:d2:7b: d5:bc:49:d3:e2:0e:83:e0:8e:6f:0a:a1:cd:40:b9:b8:f8:c6: 4a:28:8c:34:2b:e7:f2:37:8e:50:b8:5f:6d:38:db:57:88:62: 49:62:51:8e:3d:bb:85:16:01:ef:04:38:3e:a9:66:6a:f9:f4: 18:a2:7b:84:3e:92:99:c9:9e:1a:15:8a:65:cf:ee:a2:b6:04: 9a:40:d4:2b:2d:bb:20:b0:5a:2b:58:7a:4d:34:4e:16:91:40: 3a:f3:f4:8f:1f:06:60:16:3d:af:39:70:2b:f5:dd:00:15:71: e4:e2:e2:47:57:d9:99:df:c3:ab:27:2f:cb:9a:ab:5a:ba:d6: bf:f1:54:17:6b:c3:42:85:45:06:78:e5:cf:e2:76:a1:35:6c: d5:3a:c2:1d:73:a2:a1:e1:d9:f6:00:4f:0b:14:68:7a:07:99: 64:95:65:4c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUO5XRqRjv7xW5A5ieWi33gOHXWFswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDAxMDE4WhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTc3NGQyMDVmOGM2ZjIxYjdmY2RhMTZkNDU3MjU5NGIw ZjcyNDdmNDM2YTU1YmYxMTU4NzA0NWI5NGE3ZDZjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC63N8ds27QhyJjaAP655JSShD3FXEMD3zQZioxTNqQ5xPW naoP5hCh9k4/jhUbUrSD/TyLNLER1dbXQiK8U2wNiGnnlPjMrR0KfHvcc9a/1+mb k+7azeheBWA0YWxQYA6doi4Mcunu1H8VdTGjGSidc4N3QEVbjV3Uhy8a1wGKe5Zt kSVwut0AKvpOUpCrCmFWl8hOCm+gF/YGsy0HaDe7B14AwEhN7nd0BQTGrPy7hNtL I0+H58qDCqV4h00GXeZeoKPSxMVqt9YlhtnpPc7zbxv1g0+Kp2BXEafNnmq5tsTl Q0tiDnCfC0A8t+DAJITMKnUKmTUTYnnKC6efNgr1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkxhc/9cmngeUvRxD5nSQvL0gEtswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmYzk5MmY5LTAwYWYtNDlmNy05NDc0LWQ3YTViMGE0YTkzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSFAwDQYJKoZIhvcNAQELBQADggEBAKbR0JZyH4PBL8rHsJmdkI9U uPaEAu0hpRZP7qyBStU9U+d3k9SpDY5q7U6Ze5RBmDlz5Lo3ucxmOTiKxpDQwpfm qj3nf3rCLfa8DOLA4LbdSBDy7Rwt+oXSe9W8SdPiDoPgjm8Koc1Aubj4xkoojDQr 5/I3jlC4X20421eIYkliUY49u4UWAe8EOD6pZmr59Biie4Q+kpnJnhoVimXP7qK2 BJpA1CstuyCwWitYek00ThaRQDrz9I8fBmAWPa85cCv13QAVceTi4kdX2Znfw6sn L8uaq1q61r/xVBdrw0KFRQZ45c/idqE1bNU6wh1zoqHh2fYATwsUaHoHmWSVZUw= -----END CERTIFICATE-----Generated at Fri Jun 6 05:30:23 2025 by rpki-client