$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c4878f2-b016-4f09-bdf1-2aaa57eacb0d.roa File: 9c4878f2-b016-4f09-bdf1-2aaa57eacb0d.roa (raw, json) Hash identifier: qe2iQ5UECsqjsQk52XRq8jm/Qjd0cSGQV99lV7/2KfI= Subject key identifier: C2:18:0E:66:B4:6C:AE:61:C0:96:C6:25:FD:C5:B2:62:E4:2F:08:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 284EA6D15169FEE6451310B8FE7D075F65252EBD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c4878f2-b016-4f09-bdf1-2aaa57eacb0d.roa Signing time: Mon 19 May 2025 16:32:14 +0000 ROA not before: Mon 19 May 2025 16:32:14 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:4000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4e:a6:d1:51:69:fe:e6:45:13:10:b8:fe:7d:07:5f:65:25:2e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:32:14 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=54334793b1b664c8437786fa95d417d7671c5ad1d10b1c2bf79ad733bbb63337, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:b9:78:b0:c8:dc:02:af:86:ce:c3:95:de: 45:7b:9d:52:9c:95:33:2c:dd:87:28:34:a2:69:f4: 79:75:b7:de:bd:6a:6d:d9:ea:7b:a9:38:c4:08:88: ed:8b:ad:5e:9e:74:3e:99:79:bd:5d:53:46:47:bf: 29:6e:ab:dc:56:18:ea:88:33:d5:b7:fd:4a:a0:ba: e0:16:7b:c2:a4:b6:da:9a:42:79:8b:40:23:cf:6e: 1a:b8:39:8e:5f:84:66:ba:bf:de:59:5f:b0:40:4b: 20:8e:be:6c:fd:2e:e9:dc:66:36:8d:eb:59:81:85: 3c:e2:9b:e5:3c:fc:dd:58:fd:be:92:e1:21:7a:09: 3f:06:34:a1:4f:b9:8c:3a:cd:14:41:87:f0:3b:e2: 76:79:b0:19:fd:f7:1b:df:a0:f8:53:ac:8b:9d:13: ba:39:25:24:5c:c2:45:6a:9c:28:71:e3:7f:51:f9: 59:af:64:f8:8e:af:fc:23:03:24:bc:4c:28:85:85: d7:cc:c0:0f:53:40:13:a9:81:68:40:4c:8e:c2:6b: 94:63:ae:4e:a1:be:e5:c5:7a:d6:6d:b1:22:d7:de: 3c:62:a2:51:dc:1b:3e:fe:75:e6:37:c2:24:05:85: a7:d1:59:58:12:54:76:2f:22:9c:f7:5f:4e:80:4a: 87:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:18:0E:66:B4:6C:AE:61:C0:96:C6:25:FD:C5:B2:62:E4:2F:08:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c4878f2-b016-4f09-bdf1-2aaa57eacb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:4000::/39 Signature Algorithm: sha256WithRSAEncryption 06:aa:f0:ef:e6:84:59:3f:cd:c3:9b:60:b2:69:4f:7d:58:58: 90:9c:67:29:2f:94:af:8b:d6:1c:fb:a2:fb:7a:82:d2:0b:7e: 46:a7:a1:07:0f:8c:29:ba:ba:86:29:28:7e:4e:bc:4a:30:76: cc:01:61:f0:66:70:23:96:12:a0:e5:80:dd:67:f5:c6:d5:a7: d7:3e:d0:12:f1:19:bf:6d:74:7b:b7:58:9d:93:c8:c6:65:50: c5:92:7d:7f:12:c6:63:b9:88:72:80:87:4f:8d:c9:d8:7d:0f: 25:8f:21:9e:d2:5f:13:93:0f:68:e2:2e:7f:0b:06:bb:fa:ab: fc:7d:f2:f3:ff:3e:4f:20:18:ea:de:b0:5e:92:a2:63:80:70: 86:d0:03:57:df:69:b5:40:72:bb:81:bb:f8:83:9d:f7:a4:3e: 09:34:35:d1:b6:8e:72:d4:d2:b3:51:ab:03:c6:e0:04:01:1a: af:a5:86:72:a0:9a:c6:a9:6b:6c:d7:bd:65:1b:78:10:ea:90: 9b:eb:d3:94:df:3a:3b:81:ef:cf:34:0d:1f:15:3a:3a:5c:8d: 19:9f:78:d7:26:6b:bf:50:8e:03:f4:f2:e6:0a:fd:82:0d:ff: da:91:2f:57:74:b0:5f:2e:9a:b4:28:1e:dc:7b:f3:82:65:cb: 22:a0:76:3f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKE6m0VFp/uZFExC4/n0HX2UlLr0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTYzMjE0WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDMzNDc5M2IxYjY2NGM4NDM3Nzg2ZmE5NWQ0MTdkNzY3 MWM1YWQxZDEwYjFjMmJmNzlhZDczM2JiYjYzMzM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEy7l4sMjcAq+GzsOV3kV7nVKclTMs3YcoNKJp9Hl1t969 am3Z6nupOMQIiO2LrV6edD6Zeb1dU0ZHvyluq9xWGOqIM9W3/UqguuAWe8Kkttqa QnmLQCPPbhq4OY5fhGa6v95ZX7BASyCOvmz9LuncZjaN61mBhTzim+U8/N1Y/b6S 4SF6CT8GNKFPuYw6zRRBh/A74nZ5sBn99xvfoPhTrIudE7o5JSRcwkVqnChx439R +VmvZPiOr/wjAyS8TCiFhdfMwA9TQBOpgWhATI7Ca5Rjrk6hvuXFetZtsSLX3jxi olHcGz7+deY3wiQFhafRWVgSVHYvIpz3X06ASofJAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUwhgOZrRsrmHAlsYl/cWyYuQvCLQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzljNDg3OGYyLWIwMTYtNGYwOS1iZGYxLTJhYWE1N2VhY2IwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB8AQDANBgkqhkiG9w0BAQsFAAOCAQEABqrw7+aEWT/Nw5tgsmlPfVhY kJxnKS+Ur4vWHPui+3qC0gt+RqehBw+MKbq6hikofk68SjB2zAFh8GZwI5YSoOWA 3Wf1xtWn1z7QEvEZv210e7dYnZPIxmVQxZJ9fxLGY7mIcoCHT43J2H0PJY8hntJf E5MPaOIufwsGu/qr/H3y8/8+TyAY6t6wXpKiY4BwhtADV99ptUByu4G7+IOd96Q+ CTQ10baOctTSs1GrA8bgBAEar6WGcqCaxqlrbNe9ZRt4EOqQm+vTlN86O4HvzzQN HxU6OlyNGZ941yZrv1COA/Ty5gr9gg3/2pEvV3SwXy6atCge3HvzgmXLIqB2Pw== -----END CERTIFICATE-----Generated at Sun Jun 1 04:40:53 2025 by rpki-client