$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12ca119f-0b23-4ab3-beb8-09a790867548.roa File: 12ca119f-0b23-4ab3-beb8-09a790867548.roa (raw, json) Hash identifier: 4Y4nbb4/osHcdsQ6jJpcMsAS8aGS8SblKJJRrbgRhq8= Subject key identifier: 68:FC:D5:4F:64:67:4B:C7:86:9B:F7:8E:42:37:C9:97:0A:5F:82:9F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 356ADC05036AAA18A1D23F07575CDC5B962BBB01 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12ca119f-0b23-4ab3-beb8-09a790867548.roa Signing time: Sat 17 May 2025 00:10:51 +0000 ROA not before: Sat 17 May 2025 00:10:51 +0000 ROA not after: Sat 21 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff2:5080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6a:dc:05:03:6a:aa:18:a1:d2:3f:07:57:5c:dc:5b:96:2b:bb:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 17 00:10:51 2025 GMT Not After : Jun 21 23:59:59 2025 GMT Subject: serialNumber=9aac0dbeaaea7b15092c2168fdcdb68b6aa7cb16ad9092274a929ffe87b33f3a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:fc:b0:6e:af:a2:2e:62:70:3b:00:09:2f: 3a:7b:dc:d7:8d:00:fe:8f:80:84:61:bc:c6:69:09: c7:04:65:26:ba:4d:69:6f:7d:99:df:9f:94:05:12: 9b:e3:0d:23:b9:2e:fe:c7:98:9e:36:31:f5:e8:77: 16:a3:f6:e9:bd:29:3e:b0:34:2e:db:b5:ab:a1:ab: 67:3e:c9:d0:ab:8f:81:a8:73:c6:d3:f0:24:08:33: 5c:8f:d6:fa:f4:84:6a:e1:34:6e:06:bb:64:aa:e0: b2:de:c5:00:6e:91:a1:06:9c:f2:92:b8:be:06:c7: e2:96:13:f9:bd:8a:5c:1d:ae:42:86:07:ba:0f:1f: 6b:39:2c:e8:65:59:15:36:23:b9:a9:21:39:29:11: dc:e4:25:48:dc:58:58:22:91:cd:67:a9:0f:2c:6c: 0f:54:da:59:c0:b8:c0:18:10:c8:01:a6:da:03:1f: 31:80:cc:6d:94:cd:13:ff:78:76:61:7f:b6:ff:67: 09:e5:d5:14:00:ef:a6:d8:6b:26:67:83:bd:01:24: 57:8c:81:ba:a9:fc:1d:9f:25:af:0d:80:42:84:ac: d5:ac:85:df:40:fa:16:90:38:ae:f7:a4:52:48:f3: 29:6e:1e:c6:f5:2d:81:5f:da:34:eb:f4:58:06:5c: a0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FC:D5:4F:64:67:4B:C7:86:9B:F7:8E:42:37:C9:97:0A:5F:82:9F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12ca119f-0b23-4ab3-beb8-09a790867548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:5080::/48 Signature Algorithm: sha256WithRSAEncryption 43:79:13:8d:0e:76:11:3f:21:b7:12:67:9b:0d:52:d5:c3:4a: f8:ce:62:8a:3d:1c:01:3e:c1:ac:c7:36:63:04:c8:04:ae:81: 2a:18:a9:1b:cf:7b:81:fe:2b:98:ed:67:e0:68:51:4b:99:87: dc:28:4b:62:a7:c8:a6:ab:b3:a7:d8:0d:36:94:de:0d:55:46: d9:38:30:26:8e:a7:3c:e3:28:80:d9:a1:af:34:a3:34:98:dd: 79:18:98:19:07:86:87:96:f5:ec:62:58:d6:6b:1b:d8:df:f5: 26:a7:21:90:99:87:6a:56:7d:93:1e:ed:a4:3a:96:eb:19:fc: 26:8d:80:e5:1a:d1:04:87:d5:a0:26:d9:a0:69:e7:96:03:bd: 6d:0d:11:eb:62:b5:b4:c3:5c:6f:a9:ad:e4:96:37:e0:a5:55: 12:00:11:5f:77:0e:f8:ad:bd:34:56:42:19:f6:ac:e7:cc:e2: 65:4e:69:c3:72:18:d9:0e:74:cb:77:5a:6e:12:c1:83:99:cf: 60:6a:f8:1b:e1:18:aa:8f:38:df:86:75:6b:4f:69:65:45:a2: 72:cd:55:f7:cc:7c:90:2f:45:bc:ba:27:f7:e5:41:77:5a:d7: 34:fa:7d:89:fd:8b:e4:af:95:97:03:5a:4b:93:f0:09:a7:81: 6a:2b:59:04 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNWrcBQNqqhih0j8HV1zcW5YruwEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE3MDAxMDUxWhcNMjUwNjIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YWFjMGRiZWFhZWE3YjE1MDkyYzIxNjhmZGNkYjY4YjZh YTdjYjE2YWQ5MDkyMjc0YTkyOWZmZTg3YjMzZjNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5Lvywbq+iLmJwOwAJLzp73NeNAP6PgIRhvMZpCccEZSa6 TWlvfZnfn5QFEpvjDSO5Lv7HmJ42MfXodxaj9um9KT6wNC7btauhq2c+ydCrj4Go c8bT8CQIM1yP1vr0hGrhNG4Gu2Sq4LLexQBukaEGnPKSuL4Gx+KWE/m9ilwdrkKG B7oPH2s5LOhlWRU2I7mpITkpEdzkJUjcWFgikc1nqQ8sbA9U2lnAuMAYEMgBptoD HzGAzG2UzRP/eHZhf7b/Zwnl1RQA76bYayZng70BJFeMgbqp/B2fJa8NgEKErNWs hd9A+haQOK73pFJI8yluHsb1LYFf2jTr9FgGXKD7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaPzVT2RnS8eGm/eOQjfJlwpfgp8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEyY2ExMTlmLTBiMjMtNGFiMy1iZWI4LTA5YTc5MDg2NzU0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yUIAwDQYJKoZIhvcNAQELBQADggEBAEN5E40OdhE/IbcSZ5sNUtXD SvjOYoo9HAE+wazHNmMEyASugSoYqRvPe4H+K5jtZ+BoUUuZh9woS2KnyKars6fY DTaU3g1VRtk4MCaOpzzjKIDZoa80ozSY3XkYmBkHhoeW9exiWNZrG9jf9SanIZCZ h2pWfZMe7aQ6lusZ/CaNgOUa0QSH1aAm2aBp55YDvW0NEetitbTDXG+preSWN+Cl VRIAEV93DvitvTRWQhn2rOfM4mVOacNyGNkOdMt3Wm4SwYOZz2Bq+BvhGKqPON+G dWtPaWVFonLNVffMfJAvRby6J/flQXda1zT6fYn9i+SvlZcDWkuT8AmngWorWQQ= -----END CERTIFICATE-----Generated at Sun Jun 1 05:02:14 2025 by rpki-client