$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4966cf4-6152-416b-a346-1c6569529a9e.roa File: b4966cf4-6152-416b-a346-1c6569529a9e.roa (raw, json) Hash identifier: BHDZ1xBOwbu5A/9OekcQ9Ku6QXHmXrAHLFEoDFQqEMs= Subject key identifier: F0:FD:CC:8F:51:BE:0A:06:D7:5F:18:B6:80:98:0F:D1:EC:5C:A3:23 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 177C98BA63A3C6D6A6D6E4266458895A49430F7D Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4966cf4-6152-416b-a346-1c6569529a9e.roa Signing time: Fri 16 May 2025 17:21:09 +0000 ROA not before: Fri 16 May 2025 17:21:09 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7c:98:ba:63:a3:c6:d6:a6:d6:e4:26:64:58:89:5a:49:43:0f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 17:21:09 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=2e04c3e4e595f35bdc2399a71ad2f941d06828f75938a12029bf002f49eef6d9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:20:43:ae:97:00:05:63:48:5b:f9:28:6c: f2:6a:a5:32:27:bf:41:2d:e6:e7:ad:9b:5f:08:ec: e6:15:0c:cd:98:d3:d8:75:27:72:5a:69:c2:44:44: 05:3e:24:60:29:45:e3:92:e8:d4:97:6c:80:c7:0b: 17:c4:c8:c0:33:9e:ec:84:39:9f:a5:ad:43:c4:b1: 43:80:1c:e8:97:b9:a9:d0:e3:bd:4c:96:65:ce:4d: e0:46:84:3e:2a:cb:bb:ff:a9:e5:2f:41:2b:77:fc: 11:45:23:37:28:8a:f1:32:db:22:aa:90:48:e5:ac: 47:89:76:6a:1a:2f:0c:d3:ff:04:45:02:15:a8:22: 73:70:8a:af:78:e1:12:60:64:74:48:ad:37:51:7a: 85:28:53:9d:76:0b:eb:df:4a:d1:b4:a1:60:34:05: b4:dc:63:f8:be:a4:a4:f7:70:09:99:77:37:f5:f0: 1e:ad:bb:1b:45:85:40:62:12:69:15:82:b9:21:f4: 78:a8:f8:8d:d0:21:c0:85:0d:75:99:c3:17:4b:d9: e1:72:29:02:8a:b7:f8:01:fc:25:2b:82:30:7b:2a: bc:2e:ce:10:61:5d:5e:10:39:0a:35:8c:15:4d:24: d2:75:7f:3d:ef:94:c9:93:d2:ba:88:54:45:f5:9d: f4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FD:CC:8F:51:BE:0A:06:D7:5F:18:B6:80:98:0F:D1:EC:5C:A3:23 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4966cf4-6152-416b-a346-1c6569529a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:2040::/48 Signature Algorithm: sha256WithRSAEncryption c0:23:0c:7a:52:d8:bc:9d:cd:8c:1e:4b:5a:66:7e:43:4c:f4: 85:c4:34:ba:33:cf:ad:0f:85:9e:7a:bc:dd:ee:8c:66:f5:b6: 54:a0:cc:80:75:ab:8f:aa:1f:34:79:24:cc:24:fc:bd:e0:e9: 10:ec:21:d8:af:85:66:1c:c7:6a:4c:81:2d:1d:58:d9:8d:9f: f5:8b:ab:4a:ac:ba:00:5c:bc:55:ed:70:40:dd:f0:b6:65:cd: 2b:9e:bd:e6:49:ea:04:34:95:37:fd:fa:19:a8:49:fc:d9:9a: 4e:f3:25:b9:4c:01:08:f1:38:ae:f0:1d:b7:77:7d:3d:7f:68: aa:58:df:d3:34:22:af:00:a6:0f:2c:fc:ac:44:c0:a9:7c:31: a1:f6:ac:c8:a5:78:5e:64:d2:c4:39:1b:a4:d1:04:e5:09:e8: 3f:32:3e:75:28:ac:6f:da:e2:23:04:ff:ec:c8:07:3e:e7:e4: 2e:c4:fb:29:f3:2c:d9:ba:1a:d5:b8:d4:de:5e:d2:1d:18:6a: d9:01:0b:f3:63:eb:1b:da:99:81:b9:a1:ba:36:79:fe:18:9b: 94:5e:e4:f6:61:70:c7:52:27:e1:f1:15:38:7d:75:0d:ca:ac: 62:13:ba:af:bc:73:44:18:06:36:7b:ce:d3:26:4c:23:47:9d: 21:22:63:c7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF3yYumOjxtam1uQmZFiJWklDD30wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTcyMTA5WhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTA0YzNlNGU1OTVmMzViZGMyMzk5YTcxYWQyZjk0MWQw NjgyOGY3NTkzOGExMjAyOWJmMDAyZjQ5ZWVmNmQ5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9DyBDrpcABWNIW/kobPJqpTInv0Et5uetm18I7OYVDM2Y 09h1J3JaacJERAU+JGApReOS6NSXbIDHCxfEyMAznuyEOZ+lrUPEsUOAHOiXuanQ 471MlmXOTeBGhD4qy7v/qeUvQSt3/BFFIzcoivEy2yKqkEjlrEeJdmoaLwzT/wRF AhWoInNwiq944RJgZHRIrTdReoUoU512C+vfStG0oWA0BbTcY/i+pKT3cAmZdzf1 8B6tuxtFhUBiEmkVgrkh9Hio+I3QIcCFDXWZwxdL2eFyKQKKt/gB/CUrgjB7Krwu zhBhXV4QOQo1jBVNJNJ1fz3vlMmT0rqIVEX1nfRRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8P3Mj1G+CgbXXxi2gJgP0excoyMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0OTY2Y2Y0LTYxNTItNDE2Yi1hMzQ2LTFjNjU2OTUyOWE5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84IEAwDQYJKoZIhvcNAQELBQADggEBAMAjDHpS2LydzYweS1pmfkNM 9IXENLozz60PhZ56vN3ujGb1tlSgzIB1q4+qHzR5JMwk/L3g6RDsIdivhWYcx2pM gS0dWNmNn/WLq0qsugBcvFXtcEDd8LZlzSueveZJ6gQ0lTf9+hmoSfzZmk7zJblM AQjxOK7wHbd3fT1/aKpY39M0Iq8Apg8s/KxEwKl8MaH2rMileF5k0sQ5G6TRBOUJ 6D8yPnUorG/a4iME/+zIBz7n5C7E+ynzLNm6GtW41N5e0h0YatkBC/Nj6xvamYG5 obo2ef4Ym5Re5PZhcMdSJ+HxFTh9dQ3KrGITuq+8c0QYBjZ7ztMmTCNHnSEiY8c= -----END CERTIFICATE-----Generated at Sun Jun 1 04:47:02 2025 by rpki-client