$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ee79c98-182f-4893-8e2e-0282a7731dda.roa File: 3ee79c98-182f-4893-8e2e-0282a7731dda.roa (raw, json) Hash identifier: SiO9iBs6o5bmw1IQS8mTrfFtA8L1sxXzlRodhA65jnU= Subject key identifier: 6E:1A:27:3F:B5:B9:37:0A:95:1F:7F:2D:37:31:30:98:2F:DE:DE:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F1B9A0D82303804ACE30B93DE45A2E5EC8332 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ee79c98-182f-4893-8e2e-0282a7731dda.roa Signing time: Sat 03 May 2025 00:21:13 +0000 ROA not before: Sat 03 May 2025 00:21:13 +0000 ROA not after: Sat 07 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1e:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:1b:9a:0d:82:30:38:04:ac:e3:0b:93:de:45:a2:e5:ec:83:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 3 00:21:13 2025 GMT Not After : Jun 7 23:59:59 2025 GMT Subject: serialNumber=70c37960bdb482e397d490e423d1a76da274e6d720bfb1efafb1ceaa859c8514, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:e3:a9:cf:ee:6a:0b:53:f6:23:1e:48:50: f8:84:4f:bd:a0:3c:38:10:6d:fd:bc:6e:39:b3:16: 00:95:06:d6:98:dc:97:fe:6f:18:b1:38:0c:b9:a6: ae:69:cd:6a:86:86:0c:85:1c:73:1e:e5:6d:5e:67: 09:d8:25:cd:31:9a:ca:0c:2f:ca:65:7e:02:dd:1e: 08:1e:a6:21:c6:62:13:21:44:bf:65:aa:51:66:80: d4:95:27:8c:2e:d4:98:88:27:85:f5:41:af:ca:9b: de:5c:c7:58:90:f0:22:00:32:07:06:d5:04:d6:3c: 17:b0:82:a8:58:60:b1:1e:98:f1:ac:5c:e1:6d:c1: 77:f9:5d:9e:f2:6e:b9:66:26:98:a0:25:f1:c8:73: 90:67:15:8f:f1:82:37:3e:e5:f6:9d:87:06:5b:ff: e9:b7:4c:43:80:79:ff:f2:2c:78:08:86:ac:03:e8: 0d:b0:e5:90:92:0d:26:05:d1:3d:7f:b2:45:aa:d5: f2:b4:76:3a:db:41:46:ea:c1:20:2a:85:65:20:39: 7e:65:d3:aa:7c:f9:18:ad:77:e3:9c:47:b5:21:78: 0a:db:a2:08:19:a1:56:74:b6:bd:9f:78:57:06:0f: f9:60:a4:fd:f9:a6:9f:0d:83:7f:44:2f:74:a9:3e: f1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1A:27:3F:B5:B9:37:0A:95:1F:7F:2D:37:31:30:98:2F:DE:DE:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ee79c98-182f-4893-8e2e-0282a7731dda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1e:8000::/36 Signature Algorithm: sha256WithRSAEncryption 00:26:65:4b:9a:14:04:ef:3b:1a:0f:3f:6a:5b:94:a4:3d:89: d3:b9:65:ec:71:8a:02:e6:87:84:b5:7b:db:55:5d:46:e4:9b: db:ed:b2:18:4a:0f:42:2b:84:54:d4:1c:d1:3e:8a:ea:83:18: d3:6c:71:8e:04:6f:6b:84:50:ac:74:7b:4f:0a:db:3f:9c:b5: 60:a4:1a:f9:f9:22:d6:bd:20:72:6f:59:ca:b6:1b:e4:f9:6f: e5:37:d7:38:3d:24:26:f5:a9:8e:e7:2e:da:7a:8d:af:be:2a: 89:dc:73:c0:f7:8d:3d:90:3a:79:cc:29:e7:fa:21:ef:d7:0f: 90:85:38:b7:6a:c0:a9:d7:61:f6:64:95:80:38:de:f7:a9:4b: af:98:b0:fa:ad:9c:ae:02:84:39:5a:6c:af:4b:21:0e:a5:77: 19:70:d0:a9:20:b4:86:ce:75:f3:59:80:53:37:aa:6f:5e:f6: 01:3b:19:bf:3b:af:4b:74:6d:14:7f:fe:43:aa:a5:1f:cc:f0: 0f:36:2d:f7:fb:b3:51:f5:c6:f6:d8:b5:33:d3:33:bd:39:9e: 70:f3:8d:62:07:09:c6:4a:a1:78:7e:2c:7c:bd:cc:58:db:a7: 22:20:6f:a6:6f:3f:43:a2:f0:07:71:e4:f7:ed:80:4b:e7:cc: 96:39:fc:01 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgITbxuaDYIwOASs4wuT3kWi5eyDMjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA1MDMwMDIxMTNaFw0yNTA2MDcyMzU5NTla MHoxSTBHBgNVBAUTQDcwYzM3OTYwYmRiNDgyZTM5N2Q0OTBlNDIzZDFhNzZkYTI3 NGU2ZDcyMGJmYjFlZmFmYjFjZWFhODU5Yzg1MTQxLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMc946nP7moLU/YjHkhQ+IRPvaA8OBBt/bxuObMWAJUG1pjc l/5vGLE4DLmmrmnNaoaGDIUccx7lbV5nCdglzTGaygwvymV+At0eCB6mIcZiEyFE v2WqUWaA1JUnjC7UmIgnhfVBr8qb3lzHWJDwIgAyBwbVBNY8F7CCqFhgsR6Y8axc 4W3Bd/ldnvJuuWYmmKAl8chzkGcVj/GCNz7l9p2HBlv/6bdMQ4B5//IseAiGrAPo DbDlkJINJgXRPX+yRarV8rR2OttBRurBICqFZSA5fmXTqnz5GK1345xHtSF4Ctui CBmhVnS2vZ94VwYP+WCk/fmmnw2Df0QvdKk+8XMCAwEAAaOCArMwggKvMB0GA1Ud DgQWBBRuGic/tbk3CpUffy03MTCYL97eszAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvM2VlNzljOTgtMTgyZi00ODkzLThlMmUtMDI4MmE3NzMxZGRhLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw CAMGBCYAHx6AMA0GCSqGSIb3DQEBCwUAA4IBAQAAJmVLmhQE7zsaDz9qW5SkPYnT uWXscYoC5oeEtXvbVV1G5Jvb7bIYSg9CK4RU1BzRPorqgxjTbHGOBG9rhFCsdHtP Cts/nLVgpBr5+SLWvSByb1nKthvk+W/lN9c4PSQm9amO5y7aeo2vviqJ3HPA9409 kDp5zCnn+iHv1w+QhTi3asCp12H2ZJWAON73qUuvmLD6rZyuAoQ5WmyvSyEOpXcZ cNCpILSGznXzWYBTN6pvXvYBOxm/O69LdG0Uf/5DqqUfzPAPNi33+7NR9cb22LUz 0zO9OZ5w841iBwnGSqF4fix8vcxY26ciIG+mbz9DovAHceT37YBL58yWOfwB -----END CERTIFICATE-----Generated at Mon May 5 05:35:01 2025 by rpki-client