$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f86ba14-ad5b-430e-a38d-fd5a48004721.roa File: 9f86ba14-ad5b-430e-a38d-fd5a48004721.roa (raw, json) Hash identifier: 5AU0HR09U3caEo1sFBtZ0b/ZmTMIV4bduBhkZ9zioIY= Subject key identifier: AC:24:67:82:53:0A:BA:04:3F:98:7F:CB:93:9F:1B:5F:BF:A9:B4:2A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 449F9256FB4BAA6A18EDA5AC258E00E093797C3D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f86ba14-ad5b-430e-a38d-fd5a48004721.roa Signing time: Sat 24 May 2025 00:11:50 +0000 ROA not before: Sat 24 May 2025 00:11:50 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffe:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:9f:92:56:fb:4b:aa:6a:18:ed:a5:ac:25:8e:00:e0:93:79:7c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 24 00:11:50 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=d3dcfd674220915a9b7f2047b9078c97c2c8f87b9bab17a3737e16e7ee815e18, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:20:59:cb:f3:0a:50:b7:3c:0d:78:7a:d6:c7: 61:25:b9:ec:32:59:73:b6:ea:3d:43:89:93:5a:0c: da:a1:ed:b0:26:13:cb:9c:8a:21:2b:06:92:55:fd: 5b:0e:53:b3:c6:76:36:21:23:d8:f7:84:9b:8a:31: ac:f4:a3:e3:21:95:06:ab:ac:6f:f2:22:5a:39:8f: e4:27:72:68:c7:66:e2:29:03:f9:69:5c:c9:26:11: cb:5c:c6:c9:fe:66:16:72:b1:f3:88:9a:01:ae:27: 58:d6:f2:c0:1a:45:d6:08:9f:03:15:2f:71:5b:78: 3e:37:dd:a1:b3:86:aa:67:5a:a1:5d:1a:e3:bc:db: 33:c2:6f:7c:43:66:ed:dd:46:3a:83:47:06:93:7d: 85:64:27:66:2a:64:fb:d9:d4:ca:e0:41:98:a2:70: 58:ec:93:07:91:be:39:8f:99:ca:f9:51:0d:84:7d: 4f:0c:c4:56:4a:50:b9:c4:97:02:63:6c:8d:44:a3: dd:c3:1f:51:af:07:66:d9:52:58:b6:25:ab:08:32: 82:40:09:75:d0:eb:33:7b:6d:dc:77:65:b8:d9:de: 5c:f5:20:01:9d:92:2f:17:b3:6d:1e:ad:f2:bd:cb: fa:a0:47:35:d4:36:e6:15:b8:c1:d1:90:fd:31:64: 68:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:24:67:82:53:0A:BA:04:3F:98:7F:CB:93:9F:1B:5F:BF:A9:B4:2A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f86ba14-ad5b-430e-a38d-fd5a48004721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffe:6000::/40 Signature Algorithm: sha256WithRSAEncryption d9:77:4e:f4:a3:f1:65:63:af:8e:da:47:33:31:9c:43:8e:aa: f6:a2:0b:41:ce:ef:7a:4c:eb:74:b3:99:25:31:41:bd:ee:6c: d5:45:4d:10:95:ae:6c:73:d3:f9:97:4b:a8:91:9e:58:d9:df: 64:0b:9e:7f:9c:61:10:95:ab:1c:a6:3b:6d:30:cb:ea:8e:64: 37:02:dc:7e:ec:4b:7d:e1:2c:c0:84:c1:0c:3c:95:ea:b6:fb: 0f:93:f7:b2:33:6f:d0:5e:56:20:c9:f1:37:fd:bc:52:e1:a6: e5:4c:81:9a:0f:c4:f8:5c:eb:fb:c2:97:ca:dd:cb:14:49:5d: b6:02:4e:fa:ba:8d:0d:1a:8b:1b:fa:7e:74:43:f2:a5:58:b8: c6:aa:d7:72:44:2b:20:d2:7e:d0:ed:aa:cb:e1:44:8b:be:93: 93:d3:f5:eb:8b:aa:52:ef:fb:5b:ab:31:6d:1e:e2:14:fc:89: a2:a3:66:c1:d1:ea:d5:d7:d2:e6:83:61:df:53:0b:b0:af:44: 03:28:38:b0:72:2c:d1:1d:26:d8:81:d9:4a:53:7e:15:e1:03: 60:e6:13:86:2b:a6:d4:a4:44:96:e7:8e:5d:3f:93:59:f9:0a: 0d:a9:3c:1c:75:46:9b:a5:b8:50:db:12:63:e3:ce:f7:19:4e: 40:e1:3b:7a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURJ+SVvtLqmoY7aWsJY4A4JN5fD0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI0MDAxMTUwWhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkM2RjZmQ2NzQyMjA5MTVhOWI3ZjIwNDdiOTA3OGM5N2My YzhmODdiOWJhYjE3YTM3MzdlMTZlN2VlODE1ZTE4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRIFnL8wpQtzwNeHrWx2EluewyWXO26j1DiZNaDNqh7bAm E8uciiErBpJV/VsOU7PGdjYhI9j3hJuKMaz0o+MhlQarrG/yIlo5j+QncmjHZuIp A/lpXMkmEctcxsn+ZhZysfOImgGuJ1jW8sAaRdYInwMVL3FbeD433aGzhqpnWqFd GuO82zPCb3xDZu3dRjqDRwaTfYVkJ2YqZPvZ1MrgQZiicFjskweRvjmPmcr5UQ2E fU8MxFZKULnElwJjbI1Eo93DH1GvB2bZUli2JasIMoJACXXQ6zN7bdx3ZbjZ3lz1 IAGdki8Xs20erfK9y/qgRzXUNuYVuMHRkP0xZGjTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUrCRnglMKugQ/mH/Lk58bX7+ptCowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlmODZiYTE0LWFkNWItNDMwZS1hMzhkLWZkNWE0ODAwNDcyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/+YDANBgkqhkiG9w0BAQsFAAOCAQEA2XdO9KPxZWOvjtpHMzGcQ46q 9qILQc7vekzrdLOZJTFBve5s1UVNEJWubHPT+ZdLqJGeWNnfZAuef5xhEJWrHKY7 bTDL6o5kNwLcfuxLfeEswITBDDyV6rb7D5P3sjNv0F5WIMnxN/28UuGm5UyBmg/E +Fzr+8KXyt3LFEldtgJO+rqNDRqLG/p+dEPypVi4xqrXckQrINJ+0O2qy+FEi76T k9P164uqUu/7W6sxbR7iFPyJoqNmwdHq1dfS5oNh31MLsK9EAyg4sHIs0R0m2IHZ SlN+FeEDYOYThium1KRElueOXT+TWfkKDak8HHVGm6W4UNsSY+PO9xlOQOE7eg== -----END CERTIFICATE-----Generated at Sun Jun 1 04:29:30 2025 by rpki-client