$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf3c6d94-673e-412e-8e11-f4184005aa90.roa File: cf3c6d94-673e-412e-8e11-f4184005aa90.roa (raw, json) Hash identifier: UdqFmVRq7pZT2Wiu+bftDZXAiO5UIxZt+H8PB5kTqPk= Subject key identifier: 1C:62:76:52:4D:5E:BD:3A:2F:29:CC:AC:7B:32:C9:0E:0E:BE:DD:29 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F35A7EC3E0571E2EC1DA056AB4CF7AC47B36B0F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf3c6d94-673e-412e-8e11-f4184005aa90.roa Signing time: Mon 19 May 2025 16:20:17 +0000 ROA not before: Mon 19 May 2025 16:20:17 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:35:a7:ec:3e:05:71:e2:ec:1d:a0:56:ab:4c:f7:ac:47:b3:6b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:20:17 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=0bc247c12593f12ad878ed589af9b69027511cd60b50a984db1a519e90aa301f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:54:a7:c8:e3:77:35:a0:7d:f6:c9:e1:36:fa: e3:2c:97:f4:52:00:71:76:06:db:80:61:a5:e0:40: 63:2c:10:7e:be:b6:db:9d:78:b7:31:fd:e5:ac:78: 8b:78:21:a3:98:84:99:ff:e9:8e:f9:48:81:43:8f: 46:c6:dc:2c:07:b4:52:b4:9b:32:48:61:ff:d9:db: e6:f2:7a:45:a1:f0:2a:5b:1e:cc:74:e8:4c:d4:03: 04:5a:a3:8c:f2:dd:50:d5:11:20:15:d5:4d:0f:e7: 98:d8:70:76:c1:62:19:c3:1b:f6:ba:c7:9b:72:7c: bc:24:22:fb:a0:8e:45:2d:4d:f0:d6:78:80:f7:52: 53:0a:73:5b:86:a9:5c:41:73:4a:2f:72:57:dc:47: b9:f8:2b:6c:b5:08:9d:78:68:be:03:3d:05:2b:37: 42:10:5d:67:83:74:ba:27:2d:21:e9:93:e0:b8:1a: 02:af:b0:a1:f6:d7:99:18:54:66:9e:ec:95:72:fd: 1d:a5:83:9b:cf:89:74:1b:6a:34:f6:a9:ab:14:c3: 5a:a0:ea:cd:09:32:20:47:90:13:15:ea:01:5d:ab: 50:cb:dd:3c:df:6e:81:c7:e6:65:ea:34:04:72:91: f4:92:9c:45:2f:89:e0:d0:ce:f0:68:a7:3a:55:37: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:62:76:52:4D:5E:BD:3A:2F:29:CC:AC:7B:32:C9:0E:0E:BE:DD:29 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf3c6d94-673e-412e-8e11-f4184005aa90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 9d:52:72:20:19:5c:60:f1:18:8b:16:7b:ff:0d:ed:9c:89:8f: e6:88:91:b0:5d:ac:1e:66:53:bb:bf:1e:07:86:bb:b6:31:0f: 2d:bd:d7:c1:41:d6:20:5b:bf:a5:1a:b5:76:ab:73:60:15:23: 81:32:a2:34:9c:33:8d:a5:3c:4e:8a:32:ad:ee:81:09:95:c4: bb:68:37:1c:fe:d1:0e:63:25:45:ea:20:8c:70:14:a1:be:9a: 3a:19:a3:a5:c4:14:fc:24:64:d0:51:a2:a5:c4:e5:26:78:70: f2:c1:03:87:9b:59:db:e5:28:0e:51:20:77:61:38:e6:be:f0: d9:c1:39:9c:ae:f3:5c:36:23:ac:e1:5c:8b:68:c5:e2:17:8c: 60:ff:33:5c:68:5d:0d:85:36:2b:d7:b2:75:72:ed:c5:bc:ff: e8:c9:04:12:cc:6d:19:63:79:50:e7:04:ef:d2:a8:c2:64:bf: ff:b8:98:04:58:6d:b9:12:5a:92:7d:58:67:75:b3:94:94:77: bb:f6:e1:78:7d:1f:24:b4:ec:9d:81:0a:b2:cc:a0:b2:5e:e0: 72:6f:a3:e0:d2:d8:2d:d3:d0:f8:c9:33:1f:5e:5f:67:53:0b: 91:e4:bc:92:a0:8b:ba:d3:04:92:40:c1:ca:c6:62:32:e3:2b: a1:1a:c4:2c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbzWn7D4FceLsHaBWq0z3rEezaw8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTYyMDE3WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmMyNDdjMTI1OTNmMTJhZDg3OGVkNTg5YWY5YjY5MDI3 NTExY2Q2MGI1MGE5ODRkYjFhNTE5ZTkwYWEzMDFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVVKfI43c1oH32yeE2+uMsl/RSAHF2BtuAYaXgQGMsEH6+ ttudeLcx/eWseIt4IaOYhJn/6Y75SIFDj0bG3CwHtFK0mzJIYf/Z2+byekWh8Cpb Hsx06EzUAwRao4zy3VDVESAV1U0P55jYcHbBYhnDG/a6x5tyfLwkIvugjkUtTfDW eID3UlMKc1uGqVxBc0ovclfcR7n4K2y1CJ14aL4DPQUrN0IQXWeDdLonLSHpk+C4 GgKvsKH215kYVGae7JVy/R2lg5vPiXQbajT2qasUw1qg6s0JMiBHkBMV6gFdq1DL 3TzfboHH5mXqNARykfSSnEUvieDQzvBopzpVNw+dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHGJ2Uk1evTovKcysezLJDg6+3SkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmM2M2ZDk0LTY3M2UtNDEyZS04ZTExLWY0MTg0MDA1YWE5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84QMAwDQYJKoZIhvcNAQELBQADggEBAJ1SciAZXGDxGIsWe/8N7ZyJ j+aIkbBdrB5mU7u/HgeGu7YxDy2918FB1iBbv6UatXarc2AVI4EyojScM42lPE6K Mq3ugQmVxLtoNxz+0Q5jJUXqIIxwFKG+mjoZo6XEFPwkZNBRoqXE5SZ4cPLBA4eb WdvlKA5RIHdhOOa+8NnBOZyu81w2I6zhXItoxeIXjGD/M1xoXQ2FNivXsnVy7cW8 /+jJBBLMbRljeVDnBO/SqMJkv/+4mARYbbkSWpJ9WGd1s5SUd7v24Xh9HyS07J2B CrLMoLJe4HJvo+DS2C3T0PjJMx9eX2dTC5HkvJKgi7rTBJJAwcrGYjLjK6EaxCw= -----END CERTIFICATE-----Generated at Sun Jun 1 04:58:53 2025 by rpki-client