$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c8d69d7-280f-4ea4-ae81-341431cb2ffc.roa File: 2c8d69d7-280f-4ea4-ae81-341431cb2ffc.roa (raw, json) Hash identifier: +bqbghtjhhJn013Ntar7Bb5maTRViZlFh2qQqA9cKzM= Subject key identifier: 2F:13:00:C8:79:71:65:DB:C6:C2:EF:09:07:F3:12:F2:F6:90:F0:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 58273A38C957C52415D2F4F7522725E185B0392E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c8d69d7-280f-4ea4-ae81-341431cb2ffc.roa Signing time: Fri 30 May 2025 00:11:02 +0000 ROA not before: Fri 30 May 2025 00:11:02 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff1:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:27:3a:38:c9:57:c5:24:15:d2:f4:f7:52:27:25:e1:85:b0:39:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 30 00:11:02 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=c5ac3b81b79593eb3ebb00fd418589c8da1c29fe408c06839f5cd443f94ab03f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:37:e2:85:75:c5:ac:44:36:ba:e2:2c:5e: 49:57:ea:32:d7:4a:35:cf:92:5e:4b:f8:71:93:46: c6:2d:fd:c1:24:62:3b:2a:fc:5c:15:d7:25:e7:4b: 94:46:80:50:92:6b:cf:77:72:8d:e1:fe:d8:7e:db: 8e:46:63:6e:b2:59:a0:31:1f:57:34:ac:8b:c3:7c: 85:11:ed:76:3c:4d:6c:0c:50:01:55:34:91:15:27: 3a:f2:af:ec:49:a0:a0:e6:5c:04:b5:88:3d:64:50: 88:db:3a:21:bb:b1:2e:ac:a2:f3:bd:a0:52:86:cc: 0b:da:97:0b:53:6a:2b:a3:2f:21:bd:21:16:56:81: 01:67:0d:da:aa:ad:9a:ea:01:da:78:09:90:5b:cb: 94:1b:9d:08:0b:32:3a:70:7f:54:27:83:82:f6:b3: f4:59:9d:49:05:4b:9e:c2:7b:91:00:23:86:c2:01: 12:aa:2a:40:45:44:1a:a5:2d:98:81:56:ad:b4:66: f4:e9:2a:71:4d:b5:19:79:fc:55:04:77:99:2a:39: 76:94:37:18:6a:a8:fc:3a:83:a9:05:1a:03:30:ac: 27:d4:23:e6:06:f4:e7:08:d6:46:2e:ac:1e:1d:72: b6:83:1b:b2:5f:ba:ce:38:bd:d5:25:26:05:4e:10: ab:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:13:00:C8:79:71:65:DB:C6:C2:EF:09:07:F3:12:F2:F6:90:F0:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c8d69d7-280f-4ea4-ae81-341431cb2ffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:2000::/40 Signature Algorithm: sha256WithRSAEncryption 6f:c7:bd:fc:ef:fe:33:1f:5f:70:f8:ff:dc:c5:0d:97:53:71: 80:d5:96:29:ec:1e:9e:c5:5c:f6:30:81:76:4d:d6:e0:e7:bc: c5:64:d7:0e:a2:0c:3a:b7:a6:20:13:0d:05:e9:ae:a3:51:a8: 4a:8a:d7:ed:a7:b7:dc:43:5a:80:4a:35:e7:c8:34:31:bc:b0: aa:c4:28:34:4d:d9:7a:ec:c7:c3:0a:c6:1d:c8:dc:52:17:7d: 3c:41:4b:57:a4:ac:cd:d1:50:d3:58:5e:e8:ba:4e:d3:47:b7: c8:bb:cd:9d:cb:0e:b6:f2:2c:ae:25:40:1b:71:48:09:8d:1e: 69:5d:52:5c:54:92:fc:9b:bb:64:ac:96:e9:ec:99:c9:30:ac: a8:61:65:32:41:4b:94:af:e4:73:5b:5f:ad:0d:9f:a6:a9:4e: b1:33:fe:b7:ff:8d:8c:59:e2:8e:67:85:22:8f:8c:ca:cb:e3: ac:3e:22:f4:14:1c:4a:46:5d:9c:73:22:4d:0a:2f:d2:e0:63: 6e:aa:c7:fb:d9:9e:f1:85:d7:b9:c9:c6:5a:da:43:44:1e:a8: 94:f2:54:cf:54:5d:58:03:7b:a9:11:17:7c:64:77:76:69:5d: 77:d0:44:5d:81:d5:1d:fe:ad:74:a7:b6:a2:15:45:98:4e:dd: 1f:04:9a:b2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWCc6OMlXxSQV0vT3Uicl4YWwOS4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTMwMDAxMTAyWhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNWFjM2I4MWI3OTU5M2ViM2ViYjAwZmQ0MTg1ODljOGRh MWMyOWZlNDA4YzA2ODM5ZjVjZDQ0M2Y5NGFiMDNmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMYzfihXXFrEQ2uuIsXklX6jLXSjXPkl5L+HGTRsYt/cEk Yjsq/FwV1yXnS5RGgFCSa893co3h/th+245GY26yWaAxH1c0rIvDfIUR7XY8TWwM UAFVNJEVJzryr+xJoKDmXAS1iD1kUIjbOiG7sS6sovO9oFKGzAvalwtTaiujLyG9 IRZWgQFnDdqqrZrqAdp4CZBby5QbnQgLMjpwf1Qng4L2s/RZnUkFS57Ce5EAI4bC ARKqKkBFRBqlLZiBVq20ZvTpKnFNtRl5/FUEd5kqOXaUNxhqqPw6g6kFGgMwrCfU I+YG9OcI1kYurB4dcraDG7Jfus44vdUlJgVOEKvXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQULxMAyHlxZdvGwu8JB/MS8vaQ8LQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJjOGQ2OWQ3LTI4MGYtNGVhNC1hZTgxLTM0MTQzMWNiMmZmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/xIDANBgkqhkiG9w0BAQsFAAOCAQEAb8e9/O/+Mx9fcPj/3MUNl1Nx gNWWKewensVc9jCBdk3W4Oe8xWTXDqIMOremIBMNBemuo1GoSorX7ae33ENagEo1 58g0MbywqsQoNE3ZeuzHwwrGHcjcUhd9PEFLV6SszdFQ01he6LpO00e3yLvNncsO tvIsriVAG3FICY0eaV1SXFSS/Ju7ZKyW6eyZyTCsqGFlMkFLlK/kc1tfrQ2fpqlO sTP+t/+NjFnijmeFIo+MysvjrD4i9BQcSkZdnHMiTQov0uBjbqrH+9me8YXXucnG WtpDRB6olPJUz1RdWAN7qREXfGR3dmldd9BEXYHVHf6tdKe2ohVFmE7dHwSasg== -----END CERTIFICATE-----Generated at Sat Jun 14 06:25:17 2025 by rpki-client