$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0572851a-d139-4fbb-bf0e-936ac842ce41.roa File: 0572851a-d139-4fbb-bf0e-936ac842ce41.roa (raw, json) Hash identifier: gxlqlc7UXbwz5D02O/Ie61xazTLB8S1+urwKwBVWvXI= Subject key identifier: CD:1E:CC:67:ED:22:C5:03:39:A2:63:E5:9D:0E:68:51:46:68:B1:63 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 593433071D38F6FF00655A672E42680F1F3716C0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0572851a-d139-4fbb-bf0e-936ac842ce41.roa Signing time: Mon 05 May 2025 15:20:20 +0000 ROA not before: Mon 05 May 2025 15:20:20 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fa0:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:34:33:07:1d:38:f6:ff:00:65:5a:67:2e:42:68:0f:1f:37:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:20:20 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=13959a66743ed509b9d58b43cce8b4d6966c20c0c2089aa4d6a24281baab9240, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:01:80:f4:69:93:5d:2f:14:3c:78:df:1d: 0e:f7:fd:f0:ed:2a:63:59:0d:74:92:79:b5:3b:c6: 7a:d2:a7:c8:d5:c5:74:8f:e1:93:87:ec:f8:46:72: 0b:71:3e:d7:80:19:99:10:5d:b1:df:0d:bd:58:ae: ea:9d:96:91:2e:6f:66:ed:3b:32:fe:59:fd:db:83: 6b:b3:a8:2d:6f:45:33:29:2e:08:fa:4f:91:45:3e: 1b:ec:32:de:81:f0:8d:3e:21:3a:e2:de:85:bd:26: 1d:79:df:78:37:06:da:14:d9:b6:bb:97:ba:0b:b0: b5:ea:49:c5:66:bf:79:5c:68:ec:ef:9a:c7:6a:26: c7:1d:fd:ea:59:0d:51:1d:60:c6:e5:ab:60:8e:8e: 50:05:14:c2:0b:74:d5:fc:dc:a8:e9:0f:9d:d4:1f: df:77:e0:1f:56:ce:68:78:09:4b:fd:36:e6:3b:22: 66:e7:7a:a3:90:d1:3d:03:12:6a:a5:18:df:b2:d6: 43:5b:f2:b6:49:16:71:3e:9b:d6:37:b6:74:6c:74: 31:38:8e:14:45:9a:0c:2a:f1:e2:25:de:fa:38:e3: 26:f5:6d:1f:d3:df:e2:79:61:05:7e:1f:d7:bc:54: ce:14:23:d8:c4:60:ca:0d:c5:3b:4f:51:25:98:2d: 18:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1E:CC:67:ED:22:C5:03:39:A2:63:E5:9D:0E:68:51:46:68:B1:63 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0572851a-d139-4fbb-bf0e-936ac842ce41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fa0:8000::/39 Signature Algorithm: sha256WithRSAEncryption 82:40:82:4a:82:7a:bc:95:1f:97:fd:63:3f:e4:42:81:07:63: 5b:0b:91:b6:68:18:78:b3:60:a7:a7:79:0d:68:db:5d:d3:31: 03:76:d4:1d:a7:c6:12:4f:a3:6f:2b:39:55:ba:17:12:78:9e: 13:f1:c5:63:5a:23:18:3f:89:fe:cf:4a:9f:3d:6a:21:e9:f3: 45:87:fb:82:44:98:2f:e0:1f:11:93:74:60:8a:cd:28:ba:14: e9:4f:6d:1b:3f:02:0e:44:54:4d:a4:d0:d7:39:9d:7c:79:23: 8d:0d:d0:ee:5d:dd:71:a3:13:c3:79:c7:86:5b:c1:7d:ce:f0: 4c:65:c4:bd:94:4f:0e:9f:5f:7e:80:0d:f4:23:39:ae:5f:74: c7:0f:a2:b1:13:bd:bb:3a:ef:dd:d5:e4:82:3d:c3:42:ab:ff: 36:e9:18:43:c1:35:31:b1:bd:21:75:39:d6:05:df:66:58:2f: 71:87:cb:00:f8:15:24:c8:8b:47:8b:b1:f4:37:19:ba:c8:1f: 13:53:f5:af:67:ef:80:68:c7:49:4e:1a:38:64:d3:ce:ca:14: 24:00:8d:2d:d4:3a:ff:21:cf:29:e1:99:43:b6:10:e6:19:bb: 42:a9:0f:df:bf:a1:07:ce:af:c2:de:5b:09:21:49:1a:73:e1: ec:61:14:7c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWTQzBx049v8AZVpnLkJoDx83FsAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTUyMDIwWhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzk1OWE2Njc0M2VkNTA5YjlkNThiNDNjY2U4YjRkNjk2 NmMyMGMwYzIwODlhYTRkNmEyNDI4MWJhYWI5MjQwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6pAGA9GmTXS8UPHjfHQ73/fDtKmNZDXSSebU7xnrSp8jV xXSP4ZOH7PhGcgtxPteAGZkQXbHfDb1YruqdlpEub2btOzL+Wf3bg2uzqC1vRTMp Lgj6T5FFPhvsMt6B8I0+ITri3oW9Jh1533g3BtoU2ba7l7oLsLXqScVmv3lcaOzv msdqJscd/epZDVEdYMblq2COjlAFFMILdNX83KjpD53UH9934B9Wzmh4CUv9NuY7 ImbneqOQ0T0DEmqlGN+y1kNb8rZJFnE+m9Y3tnRsdDE4jhRFmgwq8eIl3vo44yb1 bR/T3+J5YQV+H9e8VM4UI9jEYMoNxTtPUSWYLRijAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUzR7MZ+0ixQM5omPlnQ5oUUZosWMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA1NzI4NTFhLWQxMzktNGZiYi1iZjBlLTkzNmFjODQyY2U0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB+ggDANBgkqhkiG9w0BAQsFAAOCAQEAgkCCSoJ6vJUfl/1jP+RCgQdj WwuRtmgYeLNgp6d5DWjbXdMxA3bUHafGEk+jbys5VboXEnieE/HFY1ojGD+J/s9K nz1qIenzRYf7gkSYL+AfEZN0YIrNKLoU6U9tGz8CDkRUTaTQ1zmdfHkjjQ3Q7l3d caMTw3nHhlvBfc7wTGXEvZRPDp9ffoAN9CM5rl90xw+isRO9uzrv3dXkgj3DQqv/ NukYQ8E1MbG9IXU51gXfZlgvcYfLAPgVJMiLR4ux9DcZusgfE1P1r2fvgGjHSU4a OGTTzsoUJACNLdQ6/yHPKeGZQ7YQ5hm7QqkP37+hB86vwt5bCSFJGnPh7GEUfA== -----END CERTIFICATE-----Generated at Sun May 11 01:22:08 2025 by rpki-client