$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b395dc86-1b36-4467-9052-5f1e6560d976.roa File: b395dc86-1b36-4467-9052-5f1e6560d976.roa (raw, json) Hash identifier: RvPDSpQsBTY41w6ouZUfI5CMRsk7Ri2uGmFAwHlXIA8= Subject key identifier: C3:B2:DF:02:38:04:A2:98:A2:83:F8:96:B4:19:FC:AF:CC:9C:DB:61 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B4A0240076DFB25977C1A0BDAB07931C620A271 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b395dc86-1b36-4467-9052-5f1e6560d976.roa Signing time: Mon 19 May 2025 18:30:22 +0000 ROA not before: Mon 19 May 2025 18:30:22 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f18:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4a:02:40:07:6d:fb:25:97:7c:1a:0b:da:b0:79:31:c6:20:a2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:30:22 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=2f6e202e4792660df62061e8934eedfc4d6992c7b3dc6920ec64101c3f94f2e5, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2b:ef:a3:24:16:10:0f:66:5e:cd:45:61:76: 35:0a:9a:a4:f6:70:94:a3:5b:4d:7b:c4:d6:d1:73: 56:da:d9:d5:a0:7c:05:49:35:cd:94:d0:2b:b6:56: 1e:32:b6:07:be:9b:9b:20:d3:35:ff:97:82:26:b9: eb:d8:e2:f0:3d:16:d8:2e:7e:38:e7:cd:89:65:f6: ab:c8:39:f2:ff:0c:45:6e:df:d2:60:bd:fc:a0:f9: 47:e6:3d:cc:33:5a:34:37:ab:02:98:b5:5f:38:88: 31:42:9c:f8:f8:d4:a7:e9:c4:e7:9b:e2:4f:96:41: 24:03:59:14:95:ad:61:13:89:27:77:70:f5:c4:07: e2:e6:bf:ae:f2:b3:c1:81:e0:8e:8a:92:8b:16:50: 0b:de:e7:20:16:d0:a1:a8:c9:39:0a:dd:c2:ef:21: 75:ae:85:09:7a:c0:b1:8e:ba:38:e9:3a:39:08:a7: bd:66:90:d2:4d:04:03:89:2a:8e:d4:76:2b:a2:86: 53:ac:7a:d6:0f:78:d3:0f:6f:af:07:51:f3:75:59: 04:a0:0a:ba:bd:b2:0b:eb:42:b2:6e:00:03:d5:9d: 0c:3e:2f:fd:7b:b0:4b:00:8f:f7:ce:2f:5c:46:6b: e2:f4:8c:d2:b0:5a:3f:cb:75:82:e8:ac:46:73:6f: 8f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B2:DF:02:38:04:A2:98:A2:83:F8:96:B4:19:FC:AF:CC:9C:DB:61 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b395dc86-1b36-4467-9052-5f1e6560d976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f18:8000::/36 Signature Algorithm: sha256WithRSAEncryption 8a:58:07:06:91:92:f9:0a:20:1f:26:c4:c5:4c:9d:2d:b6:f5: 6c:5a:1a:dc:5a:c9:d2:08:a9:dc:15:a7:d5:e4:e6:e3:0a:3b: 53:21:26:3d:cc:b6:e6:71:24:4d:46:57:21:d0:8d:e9:66:b9: 52:3c:f3:07:e0:f7:6a:cf:57:2e:5b:0e:02:51:62:17:fe:d3: 5b:ad:4e:a3:39:20:1c:72:61:7d:30:42:8a:17:1d:d7:75:d5: a6:17:f9:83:0f:ab:ae:0a:eb:57:2f:40:e3:6d:e3:1b:fa:1b: bb:8c:30:2b:8f:dc:72:90:21:e3:ef:44:9b:c9:af:ff:3e:46: 88:95:d6:5b:83:5e:d2:5b:79:40:2a:ba:4b:68:d0:63:3c:1e: 6c:21:53:11:f1:32:ce:28:63:ca:fa:6e:ee:fe:ff:f6:c9:a1: ee:65:50:09:f2:ef:80:ea:d7:84:2d:dd:07:51:59:64:90:18: 3d:4a:c8:e8:ae:0c:2c:cb:fc:66:e4:4d:5a:3b:35:b9:cd:b3: 68:2c:1a:08:5f:08:60:5e:04:38:41:93:11:0b:b8:cc:79:e4: 0e:3a:3e:7d:05:48:57:48:28:1a:da:19:09:e8:1f:f5:9c:76: a0:fe:8c:0a:42:05:7d:bb:8b:9a:9d:1e:6a:1f:46:39:20:e9: 84:4d:36:77 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUC0oCQAdt+yWXfBoL2rB5McYgonEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgzMDIyWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZjZlMjAyZTQ3OTI2NjBkZjYyMDYxZTg5MzRlZWRmYzRk Njk5MmM3YjNkYzY5MjBlYzY0MTAxYzNmOTRmMmU1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYK++jJBYQD2ZezUVhdjUKmqT2cJSjW017xNbRc1ba2dWg fAVJNc2U0Cu2Vh4ytge+m5sg0zX/l4ImuevY4vA9FtgufjjnzYll9qvIOfL/DEVu 39Jgvfyg+UfmPcwzWjQ3qwKYtV84iDFCnPj41KfpxOeb4k+WQSQDWRSVrWETiSd3 cPXEB+Lmv67ys8GB4I6KkosWUAve5yAW0KGoyTkK3cLvIXWuhQl6wLGOujjpOjkI p71mkNJNBAOJKo7UdiuihlOsetYPeNMPb68HUfN1WQSgCrq9sgvrQrJuAAPVnQw+ L/17sEsAj/fOL1xGa+L0jNKwWj/LdYLorEZzb4+zAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUw7LfAjgEopiig/iWtBn8r8yc22EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2IzOTVkYzg2LTFiMzYtNDQ2Ny05MDUyLTVmMWU2NTYwZDk3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8YgDANBgkqhkiG9w0BAQsFAAOCAQEAilgHBpGS+QogHybExUydLbb1 bFoa3FrJ0gip3BWn1eTm4wo7UyEmPcy25nEkTUZXIdCN6Wa5UjzzB+D3as9XLlsO AlFiF/7TW61OozkgHHJhfTBCihcd13XVphf5gw+rrgrrVy9A423jG/obu4wwK4/c cpAh4+9Em8mv/z5GiJXWW4Ne0lt5QCq6S2jQYzwebCFTEfEyzihjyvpu7v7/9smh 7mVQCfLvgOrXhC3dB1FZZJAYPUrI6K4MLMv8ZuRNWjs1uc2zaCwaCF8IYF4EOEGT EQu4zHnkDjo+fQVIV0goGtoZCegf9Zx2oP6MCkIFfbuLmp0eah9GOSDphE02dw== -----END CERTIFICATE-----Generated at Fri Jun 6 05:31:16 2025 by rpki-client