$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b09d1c80-5418-4f11-a90d-0841bcef791c.roa File: b09d1c80-5418-4f11-a90d-0841bcef791c.roa (raw, json) Hash identifier: FaZaeCvPKw4QBs/TetceP81tXXBpxGw3K2jUpu/0Mi8= Subject key identifier: E2:62:65:CC:93:93:A5:58:64:45:35:A3:93:BB:BD:09:98:39:BD:36 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 533BCE2441094BB571054EE76B74A57692EF250A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b09d1c80-5418-4f11-a90d-0841bcef791c.roa Signing time: Mon 19 May 2025 18:11:39 +0000 ROA not before: Mon 19 May 2025 18:11:39 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f14:1800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:3b:ce:24:41:09:4b:b5:71:05:4e:e7:6b:74:a5:76:92:ef:25:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:11:39 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=d70dbc78cf2adc673ed438cdbb7c5d3bcc0f6be1840a2acb343cdde73bb1dcaa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:5e:bf:1e:ac:3e:8a:95:5c:4f:e4:e0:5d: e8:72:31:91:36:62:71:24:2f:c3:6f:55:1d:4f:3b: cd:a1:c3:05:f9:d5:8c:07:1e:7b:1d:4c:d6:84:10: 9a:4c:34:33:c6:23:68:64:8f:4d:08:bd:8b:39:8c: 8d:19:dc:90:41:fd:37:49:ea:02:91:ae:8e:fe:86: 7e:6e:07:93:89:c0:1e:4f:e1:23:e8:3e:0f:98:b9: 37:d3:ce:e9:9d:1b:7f:db:15:0e:a6:c1:f3:24:3b: a7:ac:57:2d:9d:30:02:25:c0:1b:b9:6d:db:2e:6d: 06:dc:98:f7:b4:5a:c6:4f:f3:76:ae:25:9a:14:e8: 9a:57:b3:2f:e5:96:91:40:1b:3e:58:cd:b4:9f:b8: f7:01:bf:fe:62:e9:5a:37:00:14:17:29:67:1b:ed: b0:bf:09:03:cc:3f:83:9c:bd:78:e4:1a:52:ef:f0: 23:71:c6:38:19:f4:67:69:19:07:c9:ec:1b:ab:15: 5c:43:40:6d:c1:fb:00:60:2e:70:37:ba:3e:4e:e7: e1:6e:ba:d7:75:9a:99:60:f0:4f:b2:88:e1:15:4e: 52:4a:19:17:03:4e:42:67:5a:c4:09:a3:60:90:32: 57:68:a2:95:6d:64:e7:32:06:1d:29:20:e9:be:98: 75:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:62:65:CC:93:93:A5:58:64:45:35:A3:93:BB:BD:09:98:39:BD:36 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b09d1c80-5418-4f11-a90d-0841bcef791c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14:1800::/37 Signature Algorithm: sha256WithRSAEncryption 64:e2:13:ab:14:80:08:4f:b1:1b:f8:0a:82:dc:01:1c:d8:6b: 73:e7:67:40:05:9e:7b:02:c4:09:04:50:20:ad:5c:d9:de:63: e0:b6:f3:32:3f:38:4e:3e:8e:c1:ec:28:dc:3d:07:c9:69:d1: 6b:ae:5b:ef:5a:68:07:70:2a:9f:42:d5:50:71:64:11:1f:ca: d0:ba:d6:e3:1f:a9:e1:ab:50:ff:00:6d:30:66:0f:a8:59:60: 2b:b5:58:ea:5d:17:3b:f3:0b:bf:cd:a6:62:63:3b:94:7d:57: ae:3b:4b:30:59:d9:42:a5:2f:98:7e:70:e5:ac:8f:a5:af:5b: af:a2:41:30:00:a9:68:5b:ac:f9:98:db:93:17:44:91:e2:12: 45:d4:d5:69:91:85:6f:14:a4:1f:85:20:41:8f:f5:4b:9c:4b: 5b:25:fb:46:21:a8:77:46:44:93:3a:92:ed:4b:29:d7:73:db: 8a:25:5d:c7:50:e9:97:0d:ab:27:85:d8:b6:03:51:ac:e6:59: e2:1b:0d:6c:86:ef:ae:38:e0:09:07:12:f6:c4:2f:69:76:3a: 6f:f9:ed:83:e0:41:80:6f:8e:1c:12:f9:db:44:39:96:d5:05: 4b:a5:7c:5c:75:23:f8:57:2a:f4:71:63:37:07:e8:41:f2:f9: 08:2e:c3:14 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUzvOJEEJS7VxBU7na3SldpLvJQowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgxMTM5WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzBkYmM3OGNmMmFkYzY3M2VkNDM4Y2RiYjdjNWQzYmNj MGY2YmUxODQwYTJhY2IzNDNjZGRlNzNiYjFkY2FhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1rF6/Hqw+ipVcT+TgXehyMZE2YnEkL8NvVR1PO82hwwX5 1YwHHnsdTNaEEJpMNDPGI2hkj00IvYs5jI0Z3JBB/TdJ6gKRro7+hn5uB5OJwB5P 4SPoPg+YuTfTzumdG3/bFQ6mwfMkO6esVy2dMAIlwBu5bdsubQbcmPe0WsZP83au JZoU6JpXsy/llpFAGz5YzbSfuPcBv/5i6Vo3ABQXKWcb7bC/CQPMP4OcvXjkGlLv 8CNxxjgZ9GdpGQfJ7BurFVxDQG3B+wBgLnA3uj5O5+Fuutd1mplg8E+yiOEVTlJK GRcDTkJnWsQJo2CQMldoopVtZOcyBh0pIOm+mHUhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU4mJlzJOTpVhkRTWjk7u9CZg5vTYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IwOWQxYzgwLTU0MTgtNGYxMS1hOTBkLTA4NDFiY2VmNzkxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8UGDANBgkqhkiG9w0BAQsFAAOCAQEAZOITqxSACE+xG/gKgtwBHNhr c+dnQAWeewLECQRQIK1c2d5j4LbzMj84Tj6Owewo3D0HyWnRa65b71poB3Aqn0LV UHFkER/K0LrW4x+p4atQ/wBtMGYPqFlgK7VY6l0XO/MLv82mYmM7lH1XrjtLMFnZ QqUvmH5w5ayPpa9br6JBMACpaFus+ZjbkxdEkeISRdTVaZGFbxSkH4UgQY/1S5xL WyX7RiGod0ZEkzqS7Usp13PbiiVdx1Dplw2rJ4XYtgNRrOZZ4hsNbIbvrjjgCQcS 9sQvaXY6b/ntg+BBgG+OHBL520Q5ltUFS6V8XHUj+Fcq9HFjNwfoQfL5CC7DFA== -----END CERTIFICATE-----Generated at Sun Jun 1 04:24:16 2025 by rpki-client