$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0492de3-6dec-4437-b63c-91630e1f4dbe.roa File: c0492de3-6dec-4437-b63c-91630e1f4dbe.roa (raw, json) Hash identifier: L0uCsP03peCIoF9WZ01SfXzYkE86axpNATltvo2iv6E= Subject key identifier: 50:E1:21:72:39:A8:BD:A1:10:29:6B:7B:C1:F0:2B:63:54:23:DD:D6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7C01F42A28D9EE67AC0D0C8598E49F13B4967CEE Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0492de3-6dec-4437-b63c-91630e1f4dbe.roa Signing time: Mon 19 May 2025 18:22:22 +0000 ROA not before: Mon 19 May 2025 18:22:22 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f21:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:01:f4:2a:28:d9:ee:67:ac:0d:0c:85:98:e4:9f:13:b4:96:7c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:22:22 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=bbc46f853554dd7e175a64f01b3a6cfe455bbef1d0a52a26afa2a2256669ce4e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:25:5f:57:0e:ab:00:fa:e0:32:49:f4:3e: a7:86:73:63:55:21:15:c8:8a:44:6c:e0:8b:f3:07: 81:f0:8b:9c:ac:c0:2c:1e:c5:8a:cf:a4:a8:60:b4: 48:66:20:0b:ec:60:be:3b:75:80:fb:1d:b9:f4:ca: 71:ec:bf:e2:9c:81:50:a2:46:a8:18:6b:b8:d5:e2: e5:75:be:c5:fb:87:be:af:5c:29:c1:59:b5:21:17: 59:d4:f2:83:6a:20:b8:d8:0a:64:b5:50:1e:72:c7: f6:15:3c:f3:8b:03:98:20:33:32:75:88:03:e1:0d: 4a:1d:89:f8:e3:ba:ff:bc:f8:76:b4:15:64:aa:c8: bc:8e:bb:5e:6b:00:9b:f7:4e:bf:42:54:c2:e1:78: f2:29:f0:6e:6d:88:13:7e:7e:23:e8:2b:99:4c:88: b8:a6:a9:a9:1e:ae:c5:81:a6:07:ed:65:c8:8c:08: 11:a6:30:aa:03:73:e4:70:0d:4b:52:1a:8b:e5:ea: 5a:e2:d0:8d:68:d3:f2:67:fa:44:30:2d:41:58:d4: 43:48:94:8e:ed:b6:5a:b8:82:df:25:42:7e:af:d1: 44:90:63:d3:8c:b0:1c:2f:45:2c:17:77:ae:4c:d9: 7e:b3:f1:d1:5e:d0:6f:1d:ae:cb:25:6b:98:ba:b1: 43:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E1:21:72:39:A8:BD:A1:10:29:6B:7B:C1:F0:2B:63:54:23:DD:D6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0492de3-6dec-4437-b63c-91630e1f4dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f21:4000::/37 Signature Algorithm: sha256WithRSAEncryption 8e:25:ec:bb:ed:4d:42:cf:5f:66:86:67:c6:b8:d9:c1:f5:a5: aa:5c:d2:cb:93:fc:92:d2:ab:9a:a6:55:7a:09:7e:5a:bc:1d: 10:af:f4:4f:5d:43:e1:64:8a:d5:35:a9:85:3c:33:6d:9e:ea: 36:d2:d4:eb:82:d7:bb:88:90:56:e9:f7:2a:23:0f:dd:61:0c: 34:a6:2b:34:ee:bb:ca:d4:b8:38:24:ec:cb:22:d0:85:96:1d: c3:4c:de:06:2b:56:bb:5b:5f:ea:87:20:f6:af:c2:4d:c1:c8: 28:90:2e:46:67:56:b8:11:b1:8d:92:9d:15:12:20:36:39:81: 90:fb:ab:fa:f0:e8:8c:57:65:56:19:96:1b:5c:55:dc:c7:b5: c3:ed:52:c9:1a:b6:4a:5d:57:7c:86:26:57:f5:2b:18:c7:31: 31:6a:3b:3a:e4:82:b1:03:3d:a6:1a:e6:4e:95:9f:9c:e8:a6: 9f:81:6e:1f:c4:c1:57:9a:74:aa:85:a1:e0:36:9c:d1:7d:61: 81:eb:e0:45:33:26:7a:ac:27:ff:a3:45:ad:01:61:8a:ab:20: 15:ea:c6:42:da:44:06:0e:4a:94:3e:f6:ff:8d:36:ae:8b:d0: 9f:d4:7d:ce:ed:0d:ec:20:30:27:d4:b6:d0:13:f5:e6:fe:2f: a6:f7:6e:58 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfAH0KijZ7mesDQyFmOSfE7SWfO4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgyMjIyWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmM0NmY4NTM1NTRkZDdlMTc1YTY0ZjAxYjNhNmNmZTQ1 NWJiZWYxZDBhNTJhMjZhZmEyYTIyNTY2NjljZTRlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY8CVfVw6rAPrgMkn0PqeGc2NVIRXIikRs4IvzB4Hwi5ys wCwexYrPpKhgtEhmIAvsYL47dYD7Hbn0ynHsv+KcgVCiRqgYa7jV4uV1vsX7h76v XCnBWbUhF1nU8oNqILjYCmS1UB5yx/YVPPOLA5ggMzJ1iAPhDUodifjjuv+8+Ha0 FWSqyLyOu15rAJv3Tr9CVMLhePIp8G5tiBN+fiPoK5lMiLimqakersWBpgftZciM CBGmMKoDc+RwDUtSGovl6lri0I1o0/Jn+kQwLUFY1ENIlI7ttlq4gt8lQn6v0USQ Y9OMsBwvRSwXd65M2X6z8dFe0G8drssla5i6sUMhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUUOEhcjmovaEQKWt7wfArY1Qj3dYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwNDkyZGUzLTZkZWMtNDQzNy1iNjNjLTkxNjMwZTFmNGRiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8hQDANBgkqhkiG9w0BAQsFAAOCAQEAjiXsu+1NQs9fZoZnxrjZwfWl qlzSy5P8ktKrmqZVegl+WrwdEK/0T11D4WSK1TWphTwzbZ7qNtLU64LXu4iQVun3 KiMP3WEMNKYrNO67ytS4OCTsyyLQhZYdw0zeBitWu1tf6ocg9q/CTcHIKJAuRmdW uBGxjZKdFRIgNjmBkPur+vDojFdlVhmWG1xV3Me1w+1SyRq2Sl1XfIYmV/UrGMcx MWo7OuSCsQM9phrmTpWfnOimn4FuH8TBV5p0qoWh4Dac0X1hgevgRTMmeqwn/6NF rQFhiqsgFerGQtpEBg5KlD72/402rovQn9R9zu0N7CAwJ9S20BP15v4vpvduWA== -----END CERTIFICATE-----Generated at Sun Jun 1 05:07:32 2025 by rpki-client