$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10eee66f-24d2-4d20-b7f1-d2d46838c237.roa File: 10eee66f-24d2-4d20-b7f1-d2d46838c237.roa (raw, json) Hash identifier: c4l2Z5ERtDzmj1emyFC+IPxQX8mcIWSDMW0p+vOpjls= Subject key identifier: DF:36:66:16:4C:A3:52:C9:E0:95:AB:C7:BE:CF:4E:18:40:F2:E9:79 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4ADA6E973FA45D8D3DCF28FDF522E38917548535 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10eee66f-24d2-4d20-b7f1-d2d46838c237.roa Signing time: Fri 23 May 2025 00:21:31 +0000 ROA not before: Fri 23 May 2025 00:21:31 +0000 ROA not after: Fri 27 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fef:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:da:6e:97:3f:a4:5d:8d:3d:cf:28:fd:f5:22:e3:89:17:54:85:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 23 00:21:31 2025 GMT Not After : Jun 27 23:59:59 2025 GMT Subject: serialNumber=311f4bb5c831e67f7c3098602aad0b142f6571cd4b5f23e50f5e8fb203889ab8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:ff:9c:08:b7:f8:d3:59:b4:40:5c:ca:f0: 03:5c:64:69:70:af:fe:6d:60:02:ce:83:90:80:4c: d5:b1:b2:41:84:09:64:aa:7a:1d:4b:8d:ab:d3:85: 19:56:7e:2c:d1:c2:1a:47:1e:43:0a:01:e1:41:1b: d0:b3:9e:7b:fd:69:4a:ca:b1:54:6a:52:ef:0d:39: 4b:aa:2b:37:eb:f9:39:65:a8:43:6c:00:9f:79:5d: 03:c1:9e:b2:9c:14:fa:23:7e:e5:49:27:bf:fb:3e: 25:8e:67:d3:d0:7d:39:fc:1b:f9:5a:23:d7:ba:85: 27:50:a2:77:ac:09:41:d4:8f:da:e2:82:77:89:28: 7e:32:07:63:ef:17:9b:ab:2d:75:69:35:23:2d:0c: ff:e1:59:1d:04:a0:4b:7b:87:1f:cb:f7:8d:15:29: d0:f8:aa:73:75:b3:4e:4b:bc:66:11:a4:fb:b6:ad: 8a:b1:66:dd:70:e6:6a:28:41:6a:2f:0c:bb:e0:f5: 30:66:a0:dd:39:15:d4:7e:22:d2:70:9e:3a:1d:57: 83:3e:7c:ba:80:68:d1:e9:68:21:ac:16:47:e0:a8: c9:e1:5d:9a:4f:a9:80:c6:2e:78:f8:90:cb:30:30: 05:ac:86:5d:9c:cb:ab:bd:20:fd:89:2c:ad:c6:0c: e2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:36:66:16:4C:A3:52:C9:E0:95:AB:C7:BE:CF:4E:18:40:F2:E9:79 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10eee66f-24d2-4d20-b7f1-d2d46838c237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:2000::/40 Signature Algorithm: sha256WithRSAEncryption bc:26:4e:1c:c5:58:ab:82:38:e0:76:f3:87:bc:36:75:d7:2a: 24:14:11:23:53:15:f4:8c:16:1b:c8:7d:88:f6:31:7f:f6:5a: 59:b8:07:af:d1:a6:a8:90:a4:9e:5e:24:54:90:8f:3e:1a:40: e1:52:4a:a8:92:0b:39:b4:1a:5c:20:77:73:1b:4d:56:73:96: 00:be:7c:c4:6f:14:d8:b7:23:5f:b3:f8:11:dd:00:8f:c1:0c: 57:d2:09:96:01:fc:aa:90:82:5b:07:ed:30:77:43:55:b3:5d: d9:5b:de:2b:68:f5:be:7b:d6:ab:38:65:0c:4b:ff:a5:cb:cb: 99:c8:45:60:50:7e:49:3c:07:2a:96:c1:6a:49:e2:be:49:b6: b0:3f:81:4d:94:87:27:00:a8:4c:30:04:fd:0c:47:80:66:fd: 50:89:3d:20:5a:13:20:e9:ab:4f:52:5f:7d:e2:04:d6:eb:07: 62:d6:ce:8d:07:fa:56:47:b9:5b:43:39:ef:79:90:9e:b8:56: 43:7d:d9:fc:a3:7b:c9:38:09:eb:b1:8d:fa:e1:02:d4:6c:75: 94:8e:70:c3:a0:96:fa:72:20:83:43:02:09:8a:87:6e:60:71: 64:6b:0b:93:e7:69:e1:df:46:12:97:22:77:09:7f:18:4b:13: 55:0e:80:0b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUStpulz+kXY09zyj99SLjiRdUhTUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIzMDAyMTMxWhcNMjUwNjI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTFmNGJiNWM4MzFlNjdmN2MzMDk4NjAyYWFkMGIxNDJm NjU3MWNkNGI1ZjIzZTUwZjVlOGZiMjAzODg5YWI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnL/+cCLf401m0QFzK8ANcZGlwr/5tYALOg5CATNWxskGE CWSqeh1LjavThRlWfizRwhpHHkMKAeFBG9Cznnv9aUrKsVRqUu8NOUuqKzfr+Tll qENsAJ95XQPBnrKcFPojfuVJJ7/7PiWOZ9PQfTn8G/laI9e6hSdQonesCUHUj9ri gneJKH4yB2PvF5urLXVpNSMtDP/hWR0EoEt7hx/L940VKdD4qnN1s05LvGYRpPu2 rYqxZt1w5mooQWovDLvg9TBmoN05FdR+ItJwnjodV4M+fLqAaNHpaCGsFkfgqMnh XZpPqYDGLnj4kMswMAWshl2cy6u9IP2JLK3GDOJbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU3zZmFkyjUsnglavHvs9OGEDy6XkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEwZWVlNjZmLTI0ZDItNGQyMC1iN2YxLWQyZDQ2ODM4YzIzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vIDANBgkqhkiG9w0BAQsFAAOCAQEAvCZOHMVYq4I44Hbzh7w2ddcq JBQRI1MV9IwWG8h9iPYxf/ZaWbgHr9GmqJCknl4kVJCPPhpA4VJKqJILObQaXCB3 cxtNVnOWAL58xG8U2LcjX7P4Ed0Aj8EMV9IJlgH8qpCCWwftMHdDVbNd2VveK2j1 vnvWqzhlDEv/pcvLmchFYFB+STwHKpbBaknivkm2sD+BTZSHJwCoTDAE/QxHgGb9 UIk9IFoTIOmrT1JffeIE1usHYtbOjQf6Vke5W0M573mQnrhWQ33Z/KN7yTgJ67GN +uEC1Gx1lI5ww6CW+nIgg0MCCYqHbmBxZGsLk+dp4d9GEpcidwl/GEsTVQ6ACw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:25:09 2025 by rpki-client