$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5987d35-d2d1-4186-a515-eaf058a8679e.roa File: d5987d35-d2d1-4186-a515-eaf058a8679e.roa (raw, json) Hash identifier: PELrwOkHZ0ce7UR9TJPaSdX46sBKuj2jzI9LJHxKnZI= Subject key identifier: 95:0A:A3:46:62:A4:59:C1:B8:33:A9:6D:94:CD:D7:12:55:F4:5F:47 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 46410853F4B13FDF3BA3642F0F6073DEF70B71E8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5987d35-d2d1-4186-a515-eaf058a8679e.roa Signing time: Fri 16 May 2025 16:50:59 +0000 ROA not before: Fri 16 May 2025 16:50:59 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:41:08:53:f4:b1:3f:df:3b:a3:64:2f:0f:60:73:de:f7:0b:71:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 16:50:59 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=da9a887a84a408e0243032765c1e5a44b9c938019ebcd4e0d0a90dd404f261f6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:9a:83:9e:19:39:12:03:27:3f:d0:39:3f: 2d:cb:b5:3e:ec:93:ae:9e:9a:eb:24:ab:35:dd:09: 5a:78:f2:1c:ae:f2:9a:72:75:0b:4f:3b:cb:bf:73: 36:e5:28:e1:f3:81:94:0c:26:52:41:1f:e6:e6:ff: 8a:32:d8:87:6a:75:8a:be:32:24:bc:23:d5:17:df: 90:d4:3e:56:22:fd:ea:7c:ec:fc:3b:8f:c5:ff:bb: 7e:5c:73:c1:ec:3f:2d:7e:7e:23:09:3b:d2:ab:e4: d4:99:40:47:04:79:3a:23:57:f4:4b:75:97:44:30: 54:86:10:f0:e9:22:f6:aa:bc:c0:42:f1:2c:75:e8: e8:44:07:23:5c:ca:c3:01:44:62:39:94:f6:bc:c9: 52:9b:2f:c9:7f:99:21:24:0c:fb:ca:45:c1:b7:84: c6:c1:b2:69:ad:d5:df:b1:6b:35:a1:35:db:6e:f8: c6:99:0b:03:ec:53:22:96:a0:17:09:d9:7a:d9:d1: 7d:0b:cd:70:6f:18:a3:f2:72:79:3d:84:ce:01:51: 06:38:b6:ea:f6:cb:05:7c:74:34:86:bf:62:6c:20: 7e:0e:1a:3d:b1:b8:13:15:ee:da:8a:36:97:d5:26: c2:2a:72:cc:cd:03:b7:39:29:e6:a4:e3:2a:c2:ea: 39:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0A:A3:46:62:A4:59:C1:B8:33:A9:6D:94:CD:D7:12:55:F4:5F:47 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5987d35-d2d1-4186-a515-eaf058a8679e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:e080::/48 Signature Algorithm: sha256WithRSAEncryption 61:5d:ad:f4:6c:2f:22:94:ce:89:46:63:ea:83:6e:4b:d4:20: ac:44:eb:fc:ca:8e:0d:81:0b:84:3b:37:f2:cd:89:9a:bf:91: 53:e8:eb:8e:f6:48:2e:f5:f7:5a:9f:ff:01:fc:80:e2:96:e1: 3a:6d:88:b9:c7:f1:5a:10:6c:10:38:0e:44:c2:48:bb:f1:56: 22:93:dd:3f:ed:3d:19:73:63:cb:3b:cc:70:f8:05:13:38:2b: 3b:b7:20:a9:f4:d9:00:b7:86:03:36:fd:9d:7a:20:e1:70:57: d9:44:73:f6:bf:08:d3:08:55:05:e8:9f:32:91:bf:3d:ae:d5: 4f:15:76:e3:03:7d:2e:f1:c8:59:a6:d9:b8:b9:ad:4e:7f:7b: 1f:46:78:16:14:9f:96:c4:a2:eb:72:82:7e:92:a6:f6:f4:0b: 86:93:e8:51:a0:b0:80:a7:d2:8a:90:e7:ce:3b:52:fc:25:39: f7:d1:ba:0c:ed:18:58:de:76:8e:db:70:d8:01:18:62:8d:89: e2:50:6f:67:c3:92:70:90:28:fe:34:99:b1:9f:be:c9:8c:a6: a5:c6:2c:d6:fd:0c:25:06:bc:0d:d7:af:e3:09:bc:c6:0d:14: 1a:e1:76:93:82:e2:30:1e:03:2b:3b:8f:30:74:2d:66:d4:a6: 8b:8f:91:8d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURkEIU/SxP987o2QvD2Bz3vcLcegwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTY1MDU5WhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTlhODg3YTg0YTQwOGUwMjQzMDMyNzY1YzFlNWE0NGI5 YzkzODAxOWViY2Q0ZTBkMGE5MGRkNDA0ZjI2MWY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYeJqDnhk5EgMnP9A5Py3LtT7sk66emuskqzXdCVp48hyu 8ppydQtPO8u/czblKOHzgZQMJlJBH+bm/4oy2IdqdYq+MiS8I9UX35DUPlYi/ep8 7Pw7j8X/u35cc8HsPy1+fiMJO9Kr5NSZQEcEeTojV/RLdZdEMFSGEPDpIvaqvMBC 8Sx16OhEByNcysMBRGI5lPa8yVKbL8l/mSEkDPvKRcG3hMbBsmmt1d+xazWhNdtu +MaZCwPsUyKWoBcJ2XrZ0X0LzXBvGKPycnk9hM4BUQY4tur2ywV8dDSGv2JsIH4O Gj2xuBMV7tqKNpfVJsIqcszNA7c5Keak4yrC6jnJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlQqjRmKkWcG4M6ltlM3XElX0X0cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q1OTg3ZDM1LWQyZDEtNDE4Ni1hNTE1LWVhZjA1OGE4Njc5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/y4IAwDQYJKoZIhvcNAQELBQADggEBAGFdrfRsLyKUzolGY+qDbkvU IKxE6/zKjg2BC4Q7N/LNiZq/kVPo6472SC7191qf/wH8gOKW4TptiLnH8VoQbBA4 DkTCSLvxViKT3T/tPRlzY8s7zHD4BRM4Kzu3IKn02QC3hgM2/Z16IOFwV9lEc/a/ CNMIVQXonzKRvz2u1U8VduMDfS7xyFmm2bi5rU5/ex9GeBYUn5bEoutygn6Spvb0 C4aT6FGgsICn0oqQ5847UvwlOffRugztGFjedo7bcNgBGGKNieJQb2fDknCQKP40 mbGfvsmMpqXGLNb9DCUGvA3Xr+MJvMYNFBrhdpOC4jAeAys7jzB0LWbUpouPkY0= -----END CERTIFICATE-----Generated at Sun Jun 1 04:59:44 2025 by rpki-client