$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab67b7d-0a4f-4571-a30b-9102eb413093.roa File: 0ab67b7d-0a4f-4571-a30b-9102eb413093.roa (raw, json) Hash identifier: +W7X/ZusaNY0tFrxDkkdPe56lRhSrM99w8MXIa23swc= Subject key identifier: 64:3D:DE:85:EC:A2:1F:CC:50:1D:9F:71:76:24:F2:7F:8D:2F:E5:0E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 79F2C1BD8B11439279B42B26B1BA7A6A28AD9068 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab67b7d-0a4f-4571-a30b-9102eb413093.roa Signing time: Mon 19 May 2025 16:11:17 +0000 ROA not before: Mon 19 May 2025 16:11:17 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f2:c1:bd:8b:11:43:92:79:b4:2b:26:b1:ba:7a:6a:28:ad:90:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 16:11:17 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=7cea81b1d32f3543c368cb6aa064a858dc487c0ede5bce9d945ab94e587157ad, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cf:1b:ec:87:e5:c8:3b:f6:ea:ef:92:1e:2b: 99:bf:ad:a3:47:c8:03:87:62:d8:a9:48:16:c5:78: 9c:53:ad:e0:93:5f:bb:e7:82:2b:c8:c6:f8:4b:da: 50:db:b6:5b:0e:47:a3:fd:48:e6:0d:0e:fa:51:d5: e1:ec:46:7d:f8:db:4e:cf:76:3d:ba:07:73:41:52: ba:99:6b:5e:bc:09:b0:75:4f:4c:28:61:2d:5a:b7: df:7e:26:50:76:9c:7f:f5:57:88:44:cb:fe:97:ef: 16:92:f7:ad:f1:61:dd:a0:15:9b:07:10:2a:8a:6b: 50:10:19:52:7d:06:0b:13:9b:b1:d3:14:e9:20:dc: bb:21:9e:48:0a:8f:72:84:9e:d2:03:87:52:2f:45: af:66:d7:56:31:55:22:1e:2b:26:ee:3e:fe:96:e4: 56:df:07:0e:c1:ab:25:b9:8f:d5:0b:1f:68:9f:3f: 6c:88:16:20:39:ee:db:c1:03:af:db:c5:03:d5:5b: 83:be:f1:af:5d:58:f3:84:0d:b7:99:69:97:11:15: d4:13:2b:96:74:97:69:7d:0b:ad:04:65:52:1d:44: 44:31:11:b9:59:14:da:fd:7d:08:d2:ae:6b:1f:f7: 0e:3b:97:49:47:bb:fe:64:fc:4b:94:31:c5:36:0c: 68:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3D:DE:85:EC:A2:1F:CC:50:1D:9F:71:76:24:F2:7F:8D:2F:E5:0E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab67b7d-0a4f-4571-a30b-9102eb413093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:1000::/40 Signature Algorithm: sha256WithRSAEncryption 12:f5:6e:44:95:7f:91:e5:d6:1c:1c:9b:cc:91:c4:5b:a1:a9: d0:05:c5:ec:d0:54:5c:70:86:5d:23:db:b6:cd:03:ad:bf:25: ab:3a:31:d4:e8:5d:95:4e:7d:37:ee:b1:5d:4a:55:8f:b0:a9: 16:a3:32:a5:2f:89:4d:b3:de:c7:7d:7c:fe:2e:13:22:db:07: 54:e4:f0:d0:c2:64:46:26:9b:c9:9b:e2:33:69:fb:c0:fa:da: f0:df:5f:11:94:a5:2d:fd:be:33:1c:43:53:d8:62:c6:22:17: d9:7c:8e:46:fb:5e:77:ee:a8:fc:e5:52:26:2c:b8:06:69:3a: 90:83:10:de:d9:55:ca:b9:af:9f:d5:1f:4e:a9:b6:51:47:88: d2:ff:b9:9f:17:48:2d:54:9e:6c:3d:74:00:e1:92:75:fc:fd: 5e:15:53:56:fe:fd:ad:5c:e0:35:aa:df:23:51:c9:c5:9b:4a: 5f:02:ed:ef:0d:f9:a2:7f:d7:b3:ee:70:27:8b:88:1d:4f:41: 48:35:cf:cb:5c:86:5d:c5:2b:b1:17:0c:21:27:f0:30:ef:0c: 46:35:e7:47:9f:25:ab:d7:af:11:0b:21:eb:da:cc:38:f3:4c: 35:19:31:9e:bd:84:33:30:80:7f:a1:3a:19:32:48:d1:50:a6: c6:fe:fe:fc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUefLBvYsRQ5J5tCsmsbp6aiitkGgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTYxMTE3WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2VhODFiMWQzMmYzNTQzYzM2OGNiNmFhMDY0YTg1OGRj NDg3YzBlZGU1YmNlOWQ5NDVhYjk0ZTU4NzE1N2FkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQzxvsh+XIO/bq75IeK5m/raNHyAOHYtipSBbFeJxTreCT X7vngivIxvhL2lDbtlsOR6P9SOYNDvpR1eHsRn34207Pdj26B3NBUrqZa168CbB1 T0woYS1at99+JlB2nH/1V4hEy/6X7xaS963xYd2gFZsHECqKa1AQGVJ9BgsTm7HT FOkg3LshnkgKj3KEntIDh1IvRa9m11YxVSIeKybuPv6W5FbfBw7BqyW5j9ULH2if P2yIFiA57tvBA6/bxQPVW4O+8a9dWPOEDbeZaZcRFdQTK5Z0l2l9C60EZVIdREQx EblZFNr9fQjSrmsf9w47l0lHu/5k/EuUMcU2DGgNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUZD3eheyiH8xQHZ9xdiTyf40v5Q4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhYjY3YjdkLTBhNGYtNDU3MS1hMzBiLTkxMDJlYjQxMzA5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/7EDANBgkqhkiG9w0BAQsFAAOCAQEAEvVuRJV/keXWHBybzJHEW6Gp 0AXF7NBUXHCGXSPbts0Drb8lqzox1OhdlU59N+6xXUpVj7CpFqMypS+JTbPex318 /i4TItsHVOTw0MJkRiabyZviM2n7wPra8N9fEZSlLf2+MxxDU9hixiIX2XyORvte d+6o/OVSJiy4Bmk6kIMQ3tlVyrmvn9UfTqm2UUeI0v+5nxdILVSebD10AOGSdfz9 XhVTVv79rVzgNarfI1HJxZtKXwLt7w35on/Xs+5wJ4uIHU9BSDXPy1yGXcUrsRcM ISfwMO8MRjXnR58lq9evEQsh69rMOPNMNRkxnr2EMzCAf6E6GTJI0VCmxv7+/A== -----END CERTIFICATE-----Generated at Tue Jun 10 09:46:54 2025 by rpki-client