$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbd0543e-2064-4724-a262-55d2da27552d.roa File: fbd0543e-2064-4724-a262-55d2da27552d.roa (raw, json) Hash identifier: TKXYiIBjpgsrgXM05UDtLQmTtvqDxA2uYGeubOD09FU= Subject key identifier: 46:DA:63:F4:D0:87:E2:7F:6D:D8:B6:E0:4F:79:DC:DE:7C:58:DA:DA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5AB832801EF1C2B6B220BC52788E9752541276EF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbd0543e-2064-4724-a262-55d2da27552d.roa Signing time: Mon 12 May 2025 15:20:19 +0000 ROA not before: Mon 12 May 2025 15:20:19 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fbb:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b8:32:80:1e:f1:c2:b6:b2:20:bc:52:78:8e:97:52:54:12:76:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 15:20:19 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=79b63a4b0fb3bad5ab1376cfd6920b331b6366ea5dec4acf5d0f33f57e014c7b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:db:bc:87:b6:c7:bf:ad:04:1a:a7:f0:13:c5: 4b:73:29:6c:70:fd:6f:9f:0b:35:d5:57:72:fd:ee: d5:2a:8d:f0:e3:ae:54:2b:61:c3:10:c0:8c:9e:3b: 9a:78:b5:01:db:f4:53:56:fb:90:2e:10:77:fe:0f: 8a:0c:6c:f5:0c:17:4c:fc:15:01:37:e4:39:5c:86: ab:56:7c:cb:0b:ab:71:87:1d:3e:e5:41:7f:9b:32: 4c:a7:2f:96:6f:8b:35:bb:94:d2:32:4e:41:8c:0f: 85:5c:f5:34:d7:ad:a6:4a:a1:e2:f4:c9:79:b5:13: 2e:a6:70:19:9c:6e:b1:76:93:0c:ef:af:51:19:de: 1d:07:44:54:1f:61:b4:55:33:df:46:14:6a:40:27: 24:6e:aa:fd:fc:60:3a:30:32:9b:21:d2:49:bd:63: 64:5d:63:fc:6c:66:72:a4:de:e7:eb:a0:e7:1a:d9: be:4f:78:4a:b1:23:81:24:d9:35:79:17:7c:e8:10: 14:75:16:74:6a:16:75:95:a8:26:2c:78:30:52:a6: d3:b6:c0:5b:b0:b6:d5:f0:24:97:5d:e1:ea:fa:56: 34:92:94:13:42:ba:56:70:c7:ba:fa:a6:94:73:f9: dd:0e:53:fc:d4:14:35:51:dd:be:3a:a7:47:9e:7a: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DA:63:F4:D0:87:E2:7F:6D:D8:B6:E0:4F:79:DC:DE:7C:58:DA:DA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbd0543e-2064-4724-a262-55d2da27552d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fbb:5000::/40 Signature Algorithm: sha256WithRSAEncryption 48:ac:f6:52:b4:6e:dd:bb:e1:8e:4d:51:c3:09:51:26:7c:8f: b3:13:0a:7f:c1:f7:42:ee:a2:eb:5b:6e:da:29:58:6a:de:c8: fb:63:7a:f5:80:fd:1d:83:4b:4e:24:ad:15:fd:91:63:af:20: 5f:69:8c:14:07:da:1e:9a:9e:23:a3:44:d5:2c:c8:b1:85:e6: 08:e3:7d:06:af:43:98:a3:60:22:b7:a1:3c:df:6c:8e:72:e8: d2:f2:ec:59:6c:09:a5:75:2a:aa:8a:aa:ff:48:34:15:9a:5f: a8:b3:82:ae:7f:2f:8b:d0:27:c9:99:04:38:e8:9d:f0:76:a2: 26:8e:70:b8:2c:35:14:ea:43:fe:34:4a:2c:b5:9e:8d:91:02: d6:5a:77:8f:28:d2:dd:95:4b:4c:7d:26:bf:7c:02:f8:b5:d9: c4:2b:1f:53:47:6c:2a:17:ba:00:63:95:71:64:7a:b7:d8:53: d7:4b:ac:7a:f2:f1:12:6a:ed:38:bc:d1:cf:be:05:8e:e9:bc: 1d:a0:e4:31:4f:2f:f1:bc:0b:8c:b1:c3:13:29:f4:fc:38:c0: f5:38:ad:95:fe:39:69:e5:79:b0:6c:ed:54:09:67:3a:33:94: 01:0d:0f:da:a3:c5:3a:a5:82:52:7b:bc:eb:f5:eb:31:49:c0: 58:a8:eb:84 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWrgygB7xwrayILxSeI6XUlQSdu8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEyMTUyMDE5WhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWI2M2E0YjBmYjNiYWQ1YWIxMzc2Y2ZkNjkyMGIzMzFi NjM2NmVhNWRlYzRhY2Y1ZDBmMzNmNTdlMDE0YzdiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDg27yHtse/rQQap/ATxUtzKWxw/W+fCzXVV3L97tUqjfDj rlQrYcMQwIyeO5p4tQHb9FNW+5AuEHf+D4oMbPUMF0z8FQE35DlchqtWfMsLq3GH HT7lQX+bMkynL5ZvizW7lNIyTkGMD4Vc9TTXraZKoeL0yXm1Ey6mcBmcbrF2kwzv r1EZ3h0HRFQfYbRVM99GFGpAJyRuqv38YDowMpsh0km9Y2RdY/xsZnKk3ufroOca 2b5PeEqxI4Ek2TV5F3zoEBR1FnRqFnWVqCYseDBSptO2wFuwttXwJJdd4er6VjSS lBNCulZwx7r6ppRz+d0OU/zUFDVR3b46p0eeei5JAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQURtpj9NCH4n9t2LbgT3nc3nxY2towHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZiZDA1NDNlLTIwNjQtNDcyNC1hMjYyLTU1ZDJkYTI3NTUyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+7UDANBgkqhkiG9w0BAQsFAAOCAQEASKz2UrRu3bvhjk1RwwlRJnyP sxMKf8H3Qu6i61tu2ilYat7I+2N69YD9HYNLTiStFf2RY68gX2mMFAfaHpqeI6NE 1SzIsYXmCON9Bq9DmKNgIrehPN9sjnLo0vLsWWwJpXUqqoqq/0g0FZpfqLOCrn8v i9AnyZkEOOid8HaiJo5wuCw1FOpD/jRKLLWejZEC1lp3jyjS3ZVLTH0mv3wC+LXZ xCsfU0dsKhe6AGOVcWR6t9hT10usevLxEmrtOLzRz74Fjum8HaDkMU8v8bwLjLHD Eyn0/DjA9Titlf45aeV5sGztVAlnOjOUAQ0P2qPFOqWCUnu86/XrMUnAWKjrhA== -----END CERTIFICATE-----Generated at Sun Jun 1 04:44:02 2025 by rpki-client