$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6352e220-cec8-412c-9a38-a2b74750551e.roa File: 6352e220-cec8-412c-9a38-a2b74750551e.roa (raw, json) Hash identifier: lQdNI97sNsPTYTyXz4SR7Qqm+hOBrK9WYDeFJIpWsHY= Subject key identifier: 7D:83:9F:95:72:5F:95:7D:79:A8:68:2D:0C:61:09:2B:8C:C8:96:CC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 523ACA7695CAB152A2744B98ADF350822FA3A1CF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6352e220-cec8-412c-9a38-a2b74750551e.roa Signing time: Fri 16 May 2025 16:21:13 +0000 ROA not before: Fri 16 May 2025 16:21:13 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:7440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3a:ca:76:95:ca:b1:52:a2:74:4b:98:ad:f3:50:82:2f:a3:a1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 16:21:13 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=c7143c4fe45b38254da0549fd18b74ac13de76c1c68b205696890668121b94ca, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bc:23:59:63:7f:46:fe:13:0a:25:c1:5b:de: ce:e8:a5:b8:71:7e:66:3c:7f:7e:d7:ae:1d:8e:8b: c1:34:87:c3:32:f0:fc:ad:01:56:50:69:fa:ef:17: 98:5e:bf:2a:c0:e1:6b:3b:88:a5:51:e5:20:74:5f: d4:0a:fa:ed:1e:60:0f:3f:22:af:25:80:03:de:f5: 46:a0:18:e9:e3:cb:8f:4b:ee:ae:e6:d1:08:99:ab: 7c:5b:c6:cc:d5:a4:4e:5a:2f:44:7e:a8:dd:b4:5e: ae:7b:45:97:8b:3e:d1:c0:f8:47:3d:8a:6a:24:01: 5b:00:7f:3d:32:ac:2b:e5:93:9b:ae:0e:0a:09:ae: c5:ab:f6:5f:f7:92:c1:dd:57:e5:b5:bb:db:b3:5c: 38:ce:e3:ad:8f:0c:44:b2:3a:0d:72:43:29:f9:fb: b0:81:c1:51:95:22:29:2d:ec:25:26:5f:5c:ed:5a: c0:49:20:2e:42:50:67:47:b0:47:c6:e2:53:0f:17: 51:63:70:14:81:f3:8f:8e:80:02:84:ba:02:05:9c: 7c:ba:e0:f9:5d:c0:db:20:80:7e:2c:4a:a6:fe:37: 00:fb:31:d1:12:98:b3:e3:b3:57:34:40:61:cc:40: 68:6b:94:d4:e0:40:58:ac:ce:3b:65:4e:8f:c8:78: 26:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:83:9F:95:72:5F:95:7D:79:A8:68:2D:0C:61:09:2B:8C:C8:96:CC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6352e220-cec8-412c-9a38-a2b74750551e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:7440::/48 Signature Algorithm: sha256WithRSAEncryption 37:6a:8a:20:6b:73:54:54:e3:e0:13:2c:07:0a:86:81:8f:6b: f7:c3:d5:07:8e:33:84:77:31:9a:19:e5:19:9d:ba:0b:c6:25: 83:25:61:94:e8:cb:a3:e3:07:7a:e7:72:f0:c1:f3:b6:a1:c5: 90:ef:ce:3d:57:1c:ac:d9:89:9d:f5:ca:3c:2c:c2:ba:7b:0e: 25:b1:f2:6e:38:07:6d:ce:f9:78:07:ee:37:64:ac:12:68:1e: a0:28:a0:63:44:9e:40:6c:c4:f6:25:a7:40:a4:87:37:bf:af: 64:d8:6d:12:13:fc:43:03:00:2b:e2:3c:50:68:9a:b2:db:0c: be:2b:6b:f5:ad:cb:87:82:f1:66:f6:e6:cf:4e:ec:e7:d7:49: df:fb:2e:0c:2c:27:51:cc:02:b3:c7:26:b6:98:82:e1:4d:9b: d3:79:74:51:27:95:1c:72:81:24:5b:cf:8f:96:f9:63:29:63: 95:3f:65:2f:e7:b2:3e:5a:cb:12:eb:15:4f:1f:14:7b:3a:1f: 87:87:a4:e4:7b:dd:e4:b4:15:dd:ce:69:e9:05:13:d1:b6:8a: 90:cd:4d:91:77:c6:12:cc:57:2b:bd:dc:ad:56:f1:6f:12:5b: e0:57:b6:59:93:d8:f6:b6:24:67:17:73:e2:c0:47:6f:cf:22: a7:f7:01:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUjrKdpXKsVKidEuYrfNQgi+joc8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTYyMTEzWhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzE0M2M0ZmU0NWIzODI1NGRhMDU0OWZkMThiNzRhYzEz ZGU3NmMxYzY4YjIwNTY5Njg5MDY2ODEyMWI5NGNhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLvCNZY39G/hMKJcFb3s7opbhxfmY8f37Xrh2Oi8E0h8My 8PytAVZQafrvF5hevyrA4Ws7iKVR5SB0X9QK+u0eYA8/Iq8lgAPe9UagGOnjy49L 7q7m0QiZq3xbxszVpE5aL0R+qN20Xq57RZeLPtHA+Ec9imokAVsAfz0yrCvlk5uu DgoJrsWr9l/3ksHdV+W1u9uzXDjO462PDESyOg1yQyn5+7CBwVGVIikt7CUmX1zt WsBJIC5CUGdHsEfG4lMPF1FjcBSB84+OgAKEugIFnHy64PldwNsggH4sSqb+NwD7 MdESmLPjs1c0QGHMQGhrlNTgQFiszjtlTo/IeCatAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfYOflXJflX15qGgtDGEJK4zIlswwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYzNTJlMjIwLWNlYzgtNDEyYy05YTM4LWEyYjc0NzUwNTUxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/ydEAwDQYJKoZIhvcNAQELBQADggEBADdqiiBrc1RU4+ATLAcKhoGP a/fD1QeOM4R3MZoZ5RmdugvGJYMlYZToy6PjB3rncvDB87ahxZDvzj1XHKzZiZ31 yjwswrp7DiWx8m44B23O+XgH7jdkrBJoHqAooGNEnkBsxPYlp0Ckhze/r2TYbRIT /EMDACviPFBomrLbDL4ra/Wty4eC8Wb25s9O7OfXSd/7LgwsJ1HMArPHJraYguFN m9N5dFEnlRxygSRbz4+W+WMpY5U/ZS/nsj5ayxLrFU8fFHs6H4eHpOR73eS0Fd3O aekFE9G2ipDNTZF3xhLMVyu93K1W8W8SW+BXtlmT2Pa2JGcXc+LAR2/PIqf3AeI= -----END CERTIFICATE-----Generated at Sun Jun 1 05:05:09 2025 by rpki-client