$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5adca02c-6787-4a0f-ae64-8edefab86421.roa File: 5adca02c-6787-4a0f-ae64-8edefab86421.roa (raw, json) Hash identifier: XhFcXdoaHlHKXEVfgoWypHCoXSkTSjzF2d852uJW9nE= Subject key identifier: D1:1C:08:FB:DF:84:C2:23:4D:3E:C7:50:35:F3:E0:F1:57:69:73:B0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15CF7BEC33860CD2EBAB3CCCABED2D6B62738624 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5adca02c-6787-4a0f-ae64-8edefab86421.roa Signing time: Mon 19 May 2025 18:31:59 +0000 ROA not before: Mon 19 May 2025 18:31:59 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f25:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cf:7b:ec:33:86:0c:d2:eb:ab:3c:cc:ab:ed:2d:6b:62:73:86:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:31:59 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=5696ad1df727a522670d160cd6ca507bb669bed77d3ba8d9f6d8ed399839360f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:c9:82:da:d7:58:6e:76:76:26:9e:c6:e3: 3a:a7:6a:02:72:f5:d2:85:66:f0:c8:d4:ec:ad:b8: 56:6a:d6:98:de:eb:44:09:6e:ec:08:aa:20:70:d2: 02:4c:7d:a6:6b:a5:25:48:42:ad:76:27:9a:ca:54: b8:80:b7:5e:d6:41:34:81:23:aa:2f:b0:b2:6f:8e: 99:33:0b:70:56:e9:ad:8a:83:2a:9b:96:cb:6e:94: 5f:86:28:4f:46:06:a9:22:a7:61:5b:4d:d6:4b:93: 73:91:a7:f1:ed:f2:c4:f5:eb:72:a8:91:70:5e:58: 6d:fe:7d:2c:fa:9f:8b:b8:bd:d4:3c:4d:d8:89:d5: be:26:0e:36:df:15:d7:18:aa:b1:62:1b:8f:95:e9: 86:74:b5:f8:85:8e:8a:da:ff:1a:4e:10:88:bd:c4: 59:18:2e:e4:77:b7:cf:fd:60:a5:75:7d:ff:3f:b8: 40:fb:a1:84:9f:27:f5:b0:c5:4b:07:3a:f1:57:ce: 50:1f:c7:f0:18:42:24:15:ae:ff:54:ee:91:a3:09: b1:f7:91:66:21:d5:cb:83:f4:3c:cf:fe:85:7a:15: 5b:fe:5d:0a:78:ee:55:92:53:03:cd:4a:86:78:77: 7d:20:24:9b:5c:b4:52:69:a3:49:18:9e:b7:19:cb: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1C:08:FB:DF:84:C2:23:4D:3E:C7:50:35:F3:E0:F1:57:69:73:B0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5adca02c-6787-4a0f-ae64-8edefab86421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f25:4000::/37 Signature Algorithm: sha256WithRSAEncryption 62:5e:eb:fd:72:70:0c:1b:6c:e2:b5:e7:9f:74:55:84:d6:3e: 90:57:b7:66:35:ad:f8:54:fe:fe:45:c6:13:85:2e:88:22:98: f5:61:db:ce:41:40:c1:cd:1c:6f:26:d4:ba:4b:98:7d:40:60: 41:72:c3:ca:db:27:92:f1:13:9f:ca:af:f2:96:db:76:6f:ef: 6a:43:2b:c2:da:08:33:2d:16:bf:1a:bb:dc:b3:77:f0:5c:c3: 8e:c1:e7:c8:9e:13:ac:da:ab:65:c3:0f:5f:36:e6:dc:b6:70: d0:43:7a:fe:8e:a7:28:f0:48:2d:97:77:cf:67:1a:e4:99:78: 58:8f:76:3f:1a:66:45:3b:cc:34:d5:56:66:90:ce:27:0f:65: 5f:45:ce:e3:11:7d:55:ab:52:0b:02:45:ba:5d:7a:8c:91:50: eb:e9:2d:a8:ce:86:2f:2a:db:44:ff:41:8d:b0:7e:94:aa:60: 15:bf:d4:ba:95:64:69:9b:fe:19:b0:34:7d:ac:f9:dd:5e:ea: 4e:03:19:6e:9a:fc:08:7e:15:36:55:d7:bf:fe:95:b9:39:a3: d3:7f:24:49:f2:be:05:eb:db:55:93:84:55:92:95:45:df:4b: cb:26:b6:5a:7e:b6:f1:51:79:4a:66:59:e1:43:23:b8:d2:2a: 23:75:83:35 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUFc977DOGDNLrqzzMq+0ta2JzhiQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgzMTU5WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Njk2YWQxZGY3MjdhNTIyNjcwZDE2MGNkNmNhNTA3YmI2 NjliZWQ3N2QzYmE4ZDlmNmQ4ZWQzOTk4MzkzNjBmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwFMmC2tdYbnZ2Jp7G4zqnagJy9dKFZvDI1OytuFZq1pje 60QJbuwIqiBw0gJMfaZrpSVIQq12J5rKVLiAt17WQTSBI6ovsLJvjpkzC3BW6a2K gyqblstulF+GKE9GBqkip2FbTdZLk3ORp/Ht8sT163KokXBeWG3+fSz6n4u4vdQ8 TdiJ1b4mDjbfFdcYqrFiG4+V6YZ0tfiFjora/xpOEIi9xFkYLuR3t8/9YKV1ff8/ uED7oYSfJ/WwxUsHOvFXzlAfx/AYQiQVrv9U7pGjCbH3kWYh1cuD9DzP/oV6FVv+ XQp47lWSUwPNSoZ4d30gJJtctFJpo0kYnrcZy7PfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU0RwI+9+EwiNNPsdQNfPg8Vdpc7AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzVhZGNhMDJjLTY3ODctNGEwZi1hZTY0LThlZGVmYWI4NjQyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8lQDANBgkqhkiG9w0BAQsFAAOCAQEAYl7r/XJwDBts4rXnn3RVhNY+ kFe3ZjWt+FT+/kXGE4UuiCKY9WHbzkFAwc0cbybUukuYfUBgQXLDytsnkvETn8qv 8pbbdm/vakMrwtoIMy0Wvxq73LN38FzDjsHnyJ4TrNqrZcMPXzbm3LZw0EN6/o6n KPBILZd3z2ca5Jl4WI92PxpmRTvMNNVWZpDOJw9lX0XO4xF9VatSCwJFul16jJFQ 6+ktqM6GLyrbRP9BjbB+lKpgFb/UupVkaZv+GbA0faz53V7qTgMZbpr8CH4VNlXX v/6VuTmj038kSfK+BevbVZOEVZKVRd9Lyya2Wn628VF5SmZZ4UMjuNIqI3WDNQ== -----END CERTIFICATE-----Generated at Sun Jun 1 05:18:51 2025 by rpki-client