$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9222ea42-a8d2-4777-9833-1b122c425c55.roa File: 9222ea42-a8d2-4777-9833-1b122c425c55.roa (raw, json) Hash identifier: iUtSmzGGVfJG7hDB/CDym38PA+rN4yooIgLANF+lgBk= Subject key identifier: 8C:D6:E8:53:8A:A9:AB:3C:64:DF:C9:C8:49:B9:8E:0B:F9:66:56:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2928424A658215972BE2BDA51B390D6C6AC224ED Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9222ea42-a8d2-4777-9833-1b122c425c55.roa Signing time: Mon 19 May 2025 16:10:17 +0000 ROA not before: Mon 19 May 2025 16:10:17 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:28:42:4a:65:82:15:97:2b:e2:bd:a5:1b:39:0d:6c:6a:c2:24:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:10:17 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=2aeb86a5d15e17941c0858e1508a8d5a96c56b09f2a3185f79ef7f3b249e693b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0a:83:03:f1:3a:ba:2e:13:30:36:38:20:db: cf:51:38:62:ac:d2:0c:a8:2a:b8:c9:d3:4c:6d:d3: ef:2a:e8:42:b6:32:0d:e4:32:a8:cf:6e:7f:b6:57: 42:ec:ff:b6:2c:48:11:f7:04:40:2a:ae:d0:53:1f: 2c:77:55:7a:5d:2a:d0:1b:21:20:8d:b4:15:22:17: 8a:7b:8a:d7:7f:2d:a3:99:6e:27:1b:a8:1c:d0:64: ee:1e:2d:6a:5c:0e:1d:ee:e8:96:ca:dc:4f:5b:e4: 00:dc:3a:db:b0:a5:32:32:8e:ce:e0:f4:43:39:f5: d5:f2:eb:5c:60:77:0a:45:9d:94:bd:86:f5:b9:5e: bd:ee:11:57:c8:27:7d:52:a4:00:38:36:eb:43:47: 85:cf:e9:4f:59:ec:26:c3:2b:e2:17:2e:1c:31:0b: 40:28:7b:eb:9a:11:ea:f1:96:21:90:d1:b7:24:14: 25:2a:ec:ad:19:0e:09:a6:97:19:d3:0b:15:5d:1e: f1:85:a0:f4:7e:35:5e:1a:9a:5a:81:52:8f:3d:b3: 56:da:cd:e5:60:30:89:4a:4f:b6:22:63:3b:c5:55: 03:ed:cf:8f:02:15:5e:40:65:8f:15:72:8e:d9:aa: 41:a4:89:2c:79:e9:fc:37:e7:68:02:0d:99:cb:72: ba:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D6:E8:53:8A:A9:AB:3C:64:DF:C9:C8:49:B9:8E:0B:F9:66:56:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9222ea42-a8d2-4777-9833-1b122c425c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:1000::/40 Signature Algorithm: sha256WithRSAEncryption 33:99:fd:90:e0:ad:02:c8:8d:86:c5:13:99:78:df:ee:73:2d: 38:5b:22:42:4c:32:a5:fa:ca:15:73:90:62:9c:d5:1d:9d:34: e0:49:44:aa:3b:e1:0d:38:f2:fe:18:99:24:40:20:f0:fe:62: 87:c9:ce:65:30:37:d5:3b:1a:24:63:27:c5:7a:da:aa:82:3f: a5:74:4f:86:d5:44:28:d2:8a:08:5e:09:97:9d:65:b3:3c:f8: 56:9e:78:f8:cb:b6:dc:4d:f8:c9:c6:b2:f9:5f:6b:8f:e0:b8: b1:db:63:68:96:5a:9f:82:36:06:21:c5:7c:c6:d5:a5:97:7d: ad:a1:b5:cd:83:85:21:a5:93:8e:73:02:de:45:bf:18:8f:e9: ab:43:86:9d:f0:2c:9c:7c:de:e4:27:6e:3c:26:b6:14:b7:bd: 57:4a:cc:e0:20:22:0a:71:75:08:70:92:2d:82:c3:9e:99:63: de:59:8d:32:5c:4a:45:47:75:4c:a0:4d:92:ea:98:f8:2f:36: da:51:c4:47:ea:2a:9a:07:87:35:3a:e4:88:08:56:af:cc:0e: 67:e4:47:78:21:9a:eb:dc:e3:c4:90:ad:ee:3c:4b:03:97:f7: 1c:2b:cb:89:cc:f9:42:ec:ad:a2:45:ab:be:0b:18:a9:9f:5b: f7:54:b2:14 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKShCSmWCFZcr4r2lGzkNbGrCJO0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTYxMDE3WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYWViODZhNWQxNWUxNzk0MWMwODU4ZTE1MDhhOGQ1YTk2 YzU2YjA5ZjJhMzE4NWY3OWVmN2YzYjI0OWU2OTNiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChCoMD8Tq6LhMwNjgg289ROGKs0gyoKrjJ00xt0+8q6EK2 Mg3kMqjPbn+2V0Ls/7YsSBH3BEAqrtBTHyx3VXpdKtAbISCNtBUiF4p7itd/LaOZ bicbqBzQZO4eLWpcDh3u6JbK3E9b5ADcOtuwpTIyjs7g9EM59dXy61xgdwpFnZS9 hvW5Xr3uEVfIJ31SpAA4NutDR4XP6U9Z7CbDK+IXLhwxC0Aoe+uaEerxliGQ0bck FCUq7K0ZDgmmlxnTCxVdHvGFoPR+NV4amlqBUo89s1bazeVgMIlKT7YiYzvFVQPt z48CFV5AZY8Vco7ZqkGkiSx56fw352gCDZnLcrrDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUjNboU4qpqzxk38nISbmOC/lmVpEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzkyMjJlYTQyLWE4ZDItNDc3Ny05ODMzLTFiMTIyYzQyNWM1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/3EDANBgkqhkiG9w0BAQsFAAOCAQEAM5n9kOCtAsiNhsUTmXjf7nMt OFsiQkwypfrKFXOQYpzVHZ004ElEqjvhDTjy/hiZJEAg8P5ih8nOZTA31TsaJGMn xXraqoI/pXRPhtVEKNKKCF4Jl51lszz4Vp54+Mu23E34ycay+V9rj+C4sdtjaJZa n4I2BiHFfMbVpZd9raG1zYOFIaWTjnMC3kW/GI/pq0OGnfAsnHze5CduPCa2FLe9 V0rM4CAiCnF1CHCSLYLDnplj3lmNMlxKRUd1TKBNkuqY+C822lHER+oqmgeHNTrk iAhWr8wOZ+RHeCGa69zjxJCt7jxLA5f3HCvLicz5QuytokWrvgsYqZ9b91SyFA== -----END CERTIFICATE-----Generated at Sun Jun 1 05:23:34 2025 by rpki-client