$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b657d4e-52fc-4f40-8116-3ac214b5ec11.roa File: 8b657d4e-52fc-4f40-8116-3ac214b5ec11.roa (raw, json) Hash identifier: tjeorzfAzZHxIc9weQxTXXZerJJ6UIZNfq6/Q+OgCEk= Subject key identifier: E4:7B:8E:A8:EC:38:A3:AE:9D:48:92:5F:B1:3D:67:E8:DA:6D:60:39 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3FE44BD200BB12E74C4CE1698E1F1ECE7D9A9A8F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b657d4e-52fc-4f40-8116-3ac214b5ec11.roa Signing time: Wed 07 May 2025 00:10:55 +0000 ROA not before: Wed 07 May 2025 00:10:55 +0000 ROA not after: Wed 11 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f12:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e4:4b:d2:00:bb:12:e7:4c:4c:e1:69:8e:1f:1e:ce:7d:9a:9a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 7 00:10:55 2025 GMT Not After : Jun 11 23:59:59 2025 GMT Subject: serialNumber=de9b2530d72faa78dcbf57dc9063fe0d57fba7269e7bb1e0e4684198df465e14, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:57:ec:19:7d:c3:e6:fd:37:89:ef:a0:0e:8c: 96:76:2d:95:98:3f:d1:5e:4b:86:ba:ba:3c:53:05: 5c:17:9c:d5:4a:92:c0:0c:51:45:f9:5c:ee:44:61: 6f:d1:df:35:6b:e6:04:c1:ba:65:7f:34:77:ed:60: bb:5b:cf:fe:c1:4d:83:43:0b:44:06:31:8d:80:50: 7c:b2:08:55:9b:8b:a2:a8:b1:39:e6:a5:9b:99:56: 25:51:3e:9e:d9:14:d2:eb:49:3d:17:14:17:de:d3: bd:31:f1:32:02:b7:58:e9:ac:e6:65:a9:58:d4:71: 4d:2b:6c:27:e9:a3:13:cd:c4:9f:2f:19:11:cc:f9: 4c:53:95:ec:91:bc:37:c2:b0:5f:e9:b2:40:22:2d: 34:21:4b:9f:98:ff:e0:5f:c7:04:dd:53:e0:84:8e: 89:a9:21:93:b2:01:5f:94:78:c2:58:d3:ae:56:5c: 5f:11:5c:8b:e1:03:e3:0f:c5:20:2f:53:40:ab:11: 2d:3f:5c:f6:29:d3:aa:f0:fd:aa:57:b6:31:9e:8a: 91:15:15:db:b3:bc:25:3c:78:45:3d:bd:7b:2d:46: 7f:cd:61:4f:11:0d:32:c9:b5:f5:f0:23:e3:ab:52: c7:c7:76:ad:3e:75:7b:fe:11:00:bb:73:86:7c:31: 9a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7B:8E:A8:EC:38:A3:AE:9D:48:92:5F:B1:3D:67:E8:DA:6D:60:39 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b657d4e-52fc-4f40-8116-3ac214b5ec11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f12:c000::/36 Signature Algorithm: sha256WithRSAEncryption a3:5b:44:d7:e0:d0:54:d1:ec:b9:19:43:9c:3c:ac:08:83:48: 88:74:41:e8:28:e6:16:5f:bd:63:b4:27:2c:8d:3b:2a:dc:f7: b2:bc:4c:d8:6a:14:4b:0c:32:3e:05:d0:ab:e3:b3:29:fd:65: 5f:82:9b:91:1d:cd:3a:5f:ae:5f:28:85:c7:3c:1b:4a:71:a4: 48:f3:33:a0:90:7a:12:23:3d:10:88:8f:91:29:57:4a:39:a1: 6a:88:cf:64:6a:68:bf:68:79:0b:2c:44:8a:71:e1:04:23:8f: e3:ef:d4:c5:13:9c:ac:ba:08:22:66:58:f1:a6:74:54:14:ba: 34:73:aa:b2:07:fb:8a:2c:aa:b1:e3:85:bf:fe:c4:a6:f0:43: 15:d4:9f:8e:4f:db:32:67:e7:b2:7b:df:53:80:ba:29:18:20: 28:6d:95:e9:9d:35:d7:aa:c5:63:e7:b7:03:d8:1c:45:c9:a3: db:7e:c7:bb:16:9c:2e:ac:0c:d3:5d:66:f3:d6:92:1b:af:2c: 2f:9a:6e:9d:00:96:44:d5:64:bc:41:4f:59:da:c7:ee:e8:bd: 70:36:58:01:cf:41:e7:be:73:58:0c:4d:6e:76:d4:bd:74:b7: 23:62:68:bb:97:38:66:0b:a8:c1:86:30:69:a9:b5:a3:8e:03: 21:06:2c:fc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUP+RL0gC7EudMTOFpjh8ezn2amo8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA3MDAxMDU1WhcNMjUwNjExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTliMjUzMGQ3MmZhYTc4ZGNiZjU3ZGM5MDYzZmUwZDU3 ZmJhNzI2OWU3YmIxZTBlNDY4NDE5OGRmNDY1ZTE0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUV+wZfcPm/TeJ76AOjJZ2LZWYP9FeS4a6ujxTBVwXnNVK ksAMUUX5XO5EYW/R3zVr5gTBumV/NHftYLtbz/7BTYNDC0QGMY2AUHyyCFWbi6Ko sTnmpZuZViVRPp7ZFNLrST0XFBfe070x8TICt1jprOZlqVjUcU0rbCfpoxPNxJ8v GRHM+UxTleyRvDfCsF/pskAiLTQhS5+Y/+BfxwTdU+CEjompIZOyAV+UeMJY065W XF8RXIvhA+MPxSAvU0CrES0/XPYp06rw/apXtjGeipEVFduzvCU8eEU9vXstRn/N YU8RDTLJtfXwI+OrUsfHdq0+dXv+EQC7c4Z8MZqNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU5HuOqOw4o66dSJJfsT1n6NptYDkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzhiNjU3ZDRlLTUyZmMtNGY0MC04MTE2LTNhYzIxNGI1ZWMxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8SwDANBgkqhkiG9w0BAQsFAAOCAQEAo1tE1+DQVNHsuRlDnDysCINI iHRB6CjmFl+9Y7QnLI07Ktz3srxM2GoUSwwyPgXQq+OzKf1lX4KbkR3NOl+uXyiF xzwbSnGkSPMzoJB6EiM9EIiPkSlXSjmhaojPZGpov2h5CyxEinHhBCOP4+/UxROc rLoIImZY8aZ0VBS6NHOqsgf7iiyqseOFv/7EpvBDFdSfjk/bMmfnsnvfU4C6KRgg KG2V6Z0116rFY+e3A9gcRcmj237HuxacLqwM011m89aSG68sL5punQCWRNVkvEFP WdrH7ui9cDZYAc9B575zWAxNbnbUvXS3I2Jou5c4ZguowYYwaam1o44DIQYs/A== -----END CERTIFICATE-----Generated at Sat May 10 21:47:45 2025 by rpki-client