$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0ba95f7-f662-491c-8d5f-68532e494cdd.roa File: c0ba95f7-f662-491c-8d5f-68532e494cdd.roa (raw, json) Hash identifier: njWrYMseVbWgU9+4SRZxzMAef3mme0TPS37Ev1UxRTs= Subject key identifier: 89:AB:1F:CF:0F:9D:36:36:42:7F:30:5B:76:AE:87:86:97:07:9E:C9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 077DBA36EB3C11DA77B82178E28D83CD3FC4A98E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0ba95f7-f662-491c-8d5f-68532e494cdd.roa Signing time: Mon 19 May 2025 18:01:06 +0000 ROA not before: Mon 19 May 2025 18:01:06 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f17:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:7d:ba:36:eb:3c:11:da:77:b8:21:78:e2:8d:83:cd:3f:c4:a9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 18:01:06 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=5f0ac1492c919a8dfeaabce4db9abcad25a67cb808db7754c14496c8252ed250, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:2c:58:44:fa:3d:c5:13:76:7d:b0:3a:ca: a3:fc:37:5e:42:85:15:aa:33:b8:55:ae:99:b3:1d: 4e:c6:34:d2:aa:d2:a4:6b:25:06:f4:be:14:2c:d1: ff:6d:ad:8e:00:cd:eb:2f:4c:21:50:0a:53:b7:e6: 64:a7:08:2a:1c:88:f4:5e:12:af:50:c1:d9:48:75: ff:bc:0e:90:42:f6:00:43:d9:7b:86:08:0c:66:b1: 82:60:bd:43:d1:60:36:ce:b6:26:c4:07:de:f6:ae: 18:c5:eb:8b:d2:05:e5:14:14:fd:9f:ec:6c:b2:68: e4:f0:16:89:35:21:c6:9d:e1:57:a2:4d:51:0b:db: c4:f7:75:a8:2f:e6:96:ee:81:f9:3a:2c:d8:38:5d: fa:9e:7a:42:c9:ef:94:3c:33:ce:7d:bf:42:64:2a: 2f:3b:de:3f:97:43:c9:45:b7:51:46:3f:81:15:79: 28:8f:56:9e:17:38:82:01:e7:60:bb:96:37:3b:f8: 1b:9d:37:f4:44:6d:39:f8:2b:01:e7:19:24:7c:3f: a7:bf:0c:34:5c:cb:78:7f:ac:b7:eb:31:d1:63:79: d6:e5:f6:0e:86:ce:ee:b1:6d:d8:83:b0:de:6a:32: 8d:d1:a3:90:80:87:50:42:78:3f:94:37:6d:a4:f0: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AB:1F:CF:0F:9D:36:36:42:7F:30:5B:76:AE:87:86:97:07:9E:C9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c0ba95f7-f662-491c-8d5f-68532e494cdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f17:4000::/36 Signature Algorithm: sha256WithRSAEncryption 40:4c:9a:de:6e:9d:7b:59:ae:a4:c1:32:92:94:20:5b:f5:ae: 1f:38:34:68:e9:77:5e:69:be:36:1d:92:d4:b4:f1:b0:d4:cb: 96:ed:17:79:f8:0f:e3:11:9a:10:51:96:6b:3c:6d:c3:e7:57: 79:05:de:0e:80:dc:4a:5d:37:14:5d:08:ea:7d:46:b8:b9:96: 87:e5:36:91:26:25:84:64:36:ce:5c:ed:5c:cc:0d:65:32:ac: df:2b:dc:de:41:cf:3c:1d:e1:bc:a7:c6:4d:56:94:a9:17:1f: f8:75:70:b7:b3:fd:b9:07:28:eb:fa:95:f3:4c:fe:d5:5b:7f: be:6a:9f:d8:30:80:e7:78:e0:a5:9b:62:5f:3c:94:ad:52:e0: 5e:66:3a:e3:6f:06:41:6e:08:54:ff:61:a1:96:65:24:88:d8: 40:8c:6a:1b:5c:05:36:ec:8c:d2:a2:41:33:3d:f7:26:40:c3: f3:10:de:03:14:1a:aa:ae:d3:a2:47:86:30:d6:20:9b:df:c9: ea:56:a5:51:7e:27:94:15:3c:70:f0:6f:bf:d0:55:f6:1d:40: 3b:b8:6e:87:d4:68:5e:90:5f:27:f4:92:45:73:21:ec:78:9b: cb:bc:57:bd:ea:46:8f:f3:f4:86:44:9d:86:1a:c2:5b:86:68: 07:30:b4:e9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUB326Nus8Edp3uCF44o2DzT/EqY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTgwMTA2WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZjBhYzE0OTJjOTE5YThkZmVhYWJjZTRkYjlhYmNhZDI1 YTY3Y2I4MDhkYjc3NTRjMTQ0OTZjODI1MmVkMjUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBfCxYRPo9xRN2fbA6yqP8N15ChRWqM7hVrpmzHU7GNNKq 0qRrJQb0vhQs0f9trY4AzesvTCFQClO35mSnCCociPReEq9QwdlIdf+8DpBC9gBD 2XuGCAxmsYJgvUPRYDbOtibEB972rhjF64vSBeUUFP2f7GyyaOTwFok1Icad4Vei TVEL28T3dagv5pbugfk6LNg4XfqeekLJ75Q8M859v0JkKi873j+XQ8lFt1FGP4EV eSiPVp4XOIIB52C7ljc7+BudN/REbTn4KwHnGSR8P6e/DDRcy3h/rLfrMdFjedbl 9g6Gzu6xbdiDsN5qMo3Ro5CAh1BCeD+UN22k8AifAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUiasfzw+dNjZCfzBbdq6HhpcHnskwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MwYmE5NWY3LWY2NjItNDkxYy04ZDVmLTY4NTMyZTQ5NGNkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8XQDANBgkqhkiG9w0BAQsFAAOCAQEAQEya3m6de1mupMEykpQgW/Wu Hzg0aOl3Xmm+Nh2S1LTxsNTLlu0XefgP4xGaEFGWazxtw+dXeQXeDoDcSl03FF0I 6n1GuLmWh+U2kSYlhGQ2zlztXMwNZTKs3yvc3kHPPB3hvKfGTVaUqRcf+HVwt7P9 uQco6/qV80z+1Vt/vmqf2DCA53jgpZtiXzyUrVLgXmY6428GQW4IVP9hoZZlJIjY QIxqG1wFNuyM0qJBMz33JkDD8xDeAxQaqq7TokeGMNYgm9/J6lalUX4nlBU8cPBv v9BV9h1AO7huh9RoXpBfJ/SSRXMh7Hiby7xXvepGj/P0hkSdhhrCW4ZoBzC06Q== -----END CERTIFICATE-----Generated at Sun Jun 1 04:43:10 2025 by rpki-client