$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8dd8af6-08d5-49b1-8425-477edba3254f.roa File: b8dd8af6-08d5-49b1-8425-477edba3254f.roa (raw, json) Hash identifier: D6GwL0H+dPrM809pEZuhXCmvHXuU0jByAJy57p5qViY= Subject key identifier: A5:1C:04:FF:1C:2D:8A:90:89:33:96:FD:FE:68:78:EB:7D:E7:DF:08 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 69886B752A9383B5E2557A009CC685D3A1AF4AD7 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8dd8af6-08d5-49b1-8425-477edba3254f.roa Signing time: Wed 28 May 2025 00:20:12 +0000 ROA not before: Wed 28 May 2025 00:20:12 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:4005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:88:6b:75:2a:93:83:b5:e2:55:7a:00:9c:c6:85:d3:a1:af:4a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:20:12 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=23db3cbe8bb891c6e7e7b7eeaf5d257b0d690fb35a405552426816715252a446, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:e1:18:9d:67:62:26:9a:df:b7:57:6a:7d: 5f:5e:b1:af:c0:65:db:67:d7:36:28:82:d8:36:94: e7:b1:cd:5f:fb:13:a3:e4:26:58:64:52:8d:91:ab: 1a:ab:05:51:ee:3b:ba:66:9d:1f:79:6a:30:94:be: 17:38:1f:10:fa:ec:d9:eb:3c:ea:aa:7c:9d:a3:1f: 56:3c:fe:a1:13:f6:f6:0e:bc:47:c9:3f:93:0a:a5: d0:03:9f:88:14:b9:ae:73:df:42:ad:14:61:c8:f5: a4:d4:61:fb:10:8d:c3:75:a6:27:dd:75:b2:a5:c6: 34:54:09:f5:55:92:ec:53:d7:17:7d:31:44:0d:e6: 35:12:d7:ce:e6:89:6f:60:93:3e:39:df:c8:16:8b: 8b:86:26:0a:29:49:27:a4:7a:6c:02:e8:2b:c5:d7: 69:9e:f2:74:73:7e:c5:e2:17:74:e1:02:cd:97:de: cb:45:bc:10:05:6c:4f:da:2f:b0:bd:fa:e2:ab:04: 2c:ba:4a:27:46:c8:36:f2:c1:54:55:50:51:45:28: 41:d7:d9:61:86:d9:2d:00:87:79:bb:6d:d7:88:30: 8d:50:0e:3d:20:37:67:18:8c:bd:28:6d:46:61:84: b4:bc:90:74:15:cf:74:70:1a:a2:4a:e9:5c:20:5f: 6e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1C:04:FF:1C:2D:8A:90:89:33:96:FD:FE:68:78:EB:7D:E7:DF:08 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8dd8af6-08d5-49b1-8425-477edba3254f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:4005::/48 Signature Algorithm: sha256WithRSAEncryption 28:3a:b0:13:01:75:29:38:18:ec:11:f8:83:89:8d:f8:6a:cc: dd:e1:99:ae:13:81:ae:4e:6a:a0:23:9e:f1:0b:51:f0:11:54: 66:ed:3e:7f:08:b5:d9:6c:06:13:19:ab:e5:90:be:6c:7e:13: 60:be:e2:c0:80:57:b9:d8:92:3f:4c:64:78:d8:5c:87:b3:47: 72:1b:11:05:46:7f:6a:ee:c7:1d:76:bd:94:d2:b8:d5:8d:cd: 7a:94:0c:71:b3:99:b4:05:30:51:bc:b3:d9:c9:ea:44:29:96: 02:a7:b7:44:4d:6f:b6:a2:bd:d9:e1:b9:3a:f3:3a:e4:a3:2a: 67:1a:5d:8a:c3:c6:34:26:98:f4:43:ff:53:63:21:e9:c7:28: 04:81:4d:09:30:7e:3e:c7:67:d9:58:e8:b1:2e:e5:07:a5:01: 3f:4c:81:4e:a1:d8:f1:c1:c3:3d:ac:45:4f:2a:ef:0e:54:5c: 98:07:60:42:59:ea:19:87:7d:98:31:82:b6:13:e4:82:4f:21: 27:c2:06:b0:24:fd:2d:5b:67:ae:db:61:05:c2:d0:dc:b2:0a: 48:2a:5d:81:92:14:3b:ae:3b:80:be:34:47:b2:ac:e0:57:62: 69:37:c8:85:fb:48:f3:e5:b7:02:d9:a0:c9:11:1b:14:57:62: 48:a9:36:59 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaYhrdSqTg7XiVXoAnMaF06GvStcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAyMDEyWhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2RiM2NiZThiYjg5MWM2ZTdlN2I3ZWVhZjVkMjU3YjBk NjkwZmIzNWE0MDU1NTI0MjY4MTY3MTUyNTJhNDQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJtOEYnWdiJprft1dqfV9esa/AZdtn1zYogtg2lOexzV/7 E6PkJlhkUo2RqxqrBVHuO7pmnR95ajCUvhc4HxD67NnrPOqqfJ2jH1Y8/qET9vYO vEfJP5MKpdADn4gUua5z30KtFGHI9aTUYfsQjcN1pifddbKlxjRUCfVVkuxT1xd9 MUQN5jUS187miW9gkz4538gWi4uGJgopSSekemwC6CvF12me8nRzfsXiF3ThAs2X 3stFvBAFbE/aL7C9+uKrBCy6SidGyDbywVRVUFFFKEHX2WGG2S0Ah3m7bdeIMI1Q Dj0gN2cYjL0obUZhhLS8kHQVz3RwGqJK6VwgX26HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpRwE/xwtipCJM5b9/mh4633n3wgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I4ZGQ4YWY2LTA4ZDUtNDliMS04NDI1LTQ3N2VkYmEzMjU0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHQAUwDQYJKoZIhvcNAQELBQADggEBACg6sBMBdSk4GOwR+IOJjfhq zN3hma4Tga5OaqAjnvELUfARVGbtPn8ItdlsBhMZq+WQvmx+E2C+4sCAV7nYkj9M ZHjYXIezR3IbEQVGf2ruxx12vZTSuNWNzXqUDHGzmbQFMFG8s9nJ6kQplgKnt0RN b7aivdnhuTrzOuSjKmcaXYrDxjQmmPRD/1NjIenHKASBTQkwfj7HZ9lY6LEu5Qel AT9MgU6h2PHBwz2sRU8q7w5UXJgHYEJZ6hmHfZgxgrYT5IJPISfCBrAk/S1bZ67b YQXC0NyyCkgqXYGSFDuuO4C+NEeyrOBXYmk3yIX7SPPltwLZoMkRGxRXYkipNlk= -----END CERTIFICATE-----Generated at Sun Jun 8 23:12:47 2025 by rpki-client