$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83dcb0f4-8c84-4084-a564-98b99b2911ea.roa File: 83dcb0f4-8c84-4084-a564-98b99b2911ea.roa (raw, json) Hash identifier: CY9Aotg2SskyT7LEW4KVm3gncU2w3oiQflEAKF9mkSA= Subject key identifier: 5B:5E:ED:83:BC:78:D9:06:21:FE:EB:30:73:13:23:BB:3A:15:C2:66 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51462120FF4CAAF14A02F82E5D419EACF7C47FE4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83dcb0f4-8c84-4084-a564-98b99b2911ea.roa Signing time: Wed 11 Jun 2025 00:11:34 +0000 ROA not before: Wed 11 Jun 2025 00:11:34 +0000 ROA not after: Wed 16 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:3400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:46:21:20:ff:4c:aa:f1:4a:02:f8:2e:5d:41:9e:ac:f7:c4:7f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 11 00:11:34 2025 GMT Not After : Jul 16 23:59:59 2025 GMT Subject: serialNumber=6893078fe8e1faab60ac2fff8920fc07aa069e395585ef9cf8d85fc53031f21d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1d:4a:90:38:9b:0d:fe:6c:01:d8:ab:b9:d1: c8:3a:50:3f:40:77:05:be:72:89:c4:5c:c3:1e:f7: d8:bf:23:9a:86:4c:3e:6f:55:ea:8a:31:cb:10:22: 98:cb:67:91:aa:e1:a2:08:89:8c:97:81:a4:3f:66: 5d:93:4d:09:46:0d:ea:5d:21:9b:4e:2c:4c:35:7d: bb:1c:aa:05:7f:92:5e:7e:d7:21:44:fe:af:99:93: e7:78:a9:25:ac:a5:66:d6:d2:b9:a4:23:ef:b4:95: 86:2d:70:e9:57:66:a4:a3:7a:35:7c:80:12:00:98: 53:f1:0d:af:bd:ab:08:a4:20:c9:88:a7:7c:e4:fd: 1e:2a:70:dd:b6:f0:1f:95:9f:14:13:eb:f0:51:16: 65:31:63:44:76:38:0c:2d:f0:90:41:3f:7e:70:50: 9e:16:a5:d4:f7:9f:ce:a1:2c:f3:63:cd:2b:4a:40: 7c:d5:bc:15:02:91:cb:64:d9:f7:0d:78:66:34:05: a5:4a:c8:fa:62:27:64:91:b1:e0:83:e4:d8:a4:d8: 32:a2:d2:63:85:6b:b2:c9:c2:1c:6e:d1:76:d0:9e: c6:4b:97:bf:94:1d:b5:03:51:c2:80:44:54:8f:04: ba:ba:07:c8:9e:bd:7d:78:26:ef:4b:71:7c:2e:84: 56:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5E:ED:83:BC:78:D9:06:21:FE:EB:30:73:13:23:BB:3A:15:C2:66 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83dcb0f4-8c84-4084-a564-98b99b2911ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:3400::/40 Signature Algorithm: sha256WithRSAEncryption b1:7d:e5:3a:d4:99:a3:89:75:12:ec:07:de:de:2f:22:ac:57: 55:37:d9:e7:c8:26:10:b2:b0:5d:37:a0:3e:6f:a4:1e:71:f3: 29:8a:8f:2c:9c:1f:e1:2f:47:ac:b6:14:55:94:81:81:91:ff: b1:84:74:57:2e:f5:ee:c7:3f:68:5b:fe:5f:5f:db:68:e6:c2: af:44:0a:b9:35:dc:69:86:b6:9a:e2:cc:26:7a:37:27:62:c3: fa:db:dc:c8:67:fb:72:1f:d6:b0:3b:38:27:49:45:fb:20:76: 16:d8:da:15:10:cb:5f:6e:f6:44:1c:d2:3d:7d:69:75:1b:e2: ec:57:db:a9:ac:df:92:f2:3a:17:c1:b6:85:6b:39:55:c5:f6: 5b:26:a8:d6:46:c9:69:a8:da:6e:cc:06:5e:c2:f6:22:20:93: ad:47:eb:ea:33:49:a1:94:b6:9e:c8:99:ec:9f:4e:f4:2c:7c: b0:3d:51:ff:16:6a:2c:7c:c0:35:15:ab:89:9e:cd:40:f7:95: d2:31:80:80:e0:3c:a7:12:80:2e:0d:03:df:cf:d5:47:d6:1b: eb:55:14:bc:c6:6a:dc:6d:94:c5:bf:f5:59:c9:9e:58:2a:0c: b2:4b:d9:48:ae:db:53:37:a3:44:e3:9e:ba:ad:dd:98:dd:5f: 53:92:7b:6f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUUYhIP9MqvFKAvguXUGerPfEf+QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDAxMTM0WhcNMjUwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODkzMDc4ZmU4ZTFmYWFiNjBhYzJmZmY4OTIwZmMwN2Fh MDY5ZTM5NTU4NWVmOWNmOGQ4NWZjNTMwMzFmMjFkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFHUqQOJsN/mwB2Ku50cg6UD9AdwW+conEXMMe99i/I5qG TD5vVeqKMcsQIpjLZ5Gq4aIIiYyXgaQ/Zl2TTQlGDepdIZtOLEw1fbscqgV/kl5+ 1yFE/q+Zk+d4qSWspWbW0rmkI++0lYYtcOlXZqSjejV8gBIAmFPxDa+9qwikIMmI p3zk/R4qcN228B+VnxQT6/BRFmUxY0R2OAwt8JBBP35wUJ4WpdT3n86hLPNjzStK QHzVvBUCkctk2fcNeGY0BaVKyPpiJ2SRseCD5Nik2DKi0mOFa7LJwhxu0XbQnsZL l7+UHbUDUcKARFSPBLq6B8ievX14Ju9LcXwuhFaZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUW17tg7x42QYh/uswcxMjuzoVwmYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgzZGNiMGY0LThjODQtNDA4NC1hNTY0LTk4Yjk5YjI5MTFlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9hNDANBgkqhkiG9w0BAQsFAAOCAQEAsX3lOtSZo4l1EuwH3t4vIqxX VTfZ58gmELKwXTegPm+kHnHzKYqPLJwf4S9HrLYUVZSBgZH/sYR0Vy717sc/aFv+ X1/baObCr0QKuTXcaYa2muLMJno3J2LD+tvcyGf7ch/WsDs4J0lF+yB2FtjaFRDL X272RBzSPX1pdRvi7FfbqazfkvI6F8G2hWs5VcX2Wyao1kbJaajabswGXsL2IiCT rUfr6jNJoZS2nsiZ7J9O9Cx8sD1R/xZqLHzANRWriZ7NQPeV0jGAgOA8pxKALg0D 38/VR9Yb61UUvMZq3G2Uxb/1WcmeWCoMskvZSK7bUzejROOeuq3dmN1fU5J7bw== -----END CERTIFICATE-----Generated at Sat Jun 14 06:50:56 2025 by rpki-client