$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a43f299-a34f-4946-9b1f-2f259ed620be.roa File: 3a43f299-a34f-4946-9b1f-2f259ed620be.roa (raw, json) Hash identifier: 9qkt7fSCpEqkxn2MpW1Ea++HzRfCUAaobxoOvPy4XW0= Subject key identifier: 2C:00:76:6B:B0:F1:BC:2A:B5:CE:E1:19:0A:23:9B:D0:31:F9:66:92 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6D65BBFAF1A9EC50D6178601C554B5CED0CD605F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a43f299-a34f-4946-9b1f-2f259ed620be.roa Signing time: Fri 16 May 2025 17:20:27 +0000 ROA not before: Fri 16 May 2025 17:20:27 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff2:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:65:bb:fa:f1:a9:ec:50:d6:17:86:01:c5:54:b5:ce:d0:cd:60:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 17:20:27 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=3439d2c40822318e198ad6d58b3c315a62836ec467a3bfdf4d480b4f9996c293, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:52:84:3e:87:59:fb:e8:6b:73:20:32:e8: 20:b9:31:5f:9a:c0:5d:82:5d:fa:50:21:e1:3a:b9: d6:86:ba:bd:98:a1:53:57:95:59:0c:0c:ba:17:77: 7a:22:4f:93:40:78:67:a6:ec:0e:4b:2c:d7:2b:e6: 34:c3:c5:e7:c4:df:ec:1e:6d:07:0e:40:c5:64:da: 76:24:2b:df:4d:bf:12:8e:66:37:dd:80:50:ff:72: cf:2f:08:3e:3a:64:70:29:69:25:e7:23:29:9c:9b: 7c:1c:5e:e6:3a:62:4a:30:91:da:8c:ec:68:39:10: 6d:f2:73:ee:42:9f:4a:12:74:f3:52:f2:a9:17:17: b9:00:63:01:da:f9:18:27:be:dc:a0:9e:ed:b4:0c: 6a:df:1a:78:49:87:de:46:b9:60:07:ad:1d:21:3e: 78:35:7c:ac:ae:3e:db:43:ba:3e:46:c1:eb:64:bf: 78:8d:51:0e:35:d1:a2:5c:10:29:2e:4c:95:f6:e3: 12:61:bc:e0:bf:f4:b2:35:a6:1c:18:47:55:92:62: c1:b2:20:04:d9:01:e7:ab:b8:32:43:fe:a4:93:9a: 6c:17:55:64:da:75:4c:4b:b1:5a:74:2c:95:ca:e5: 79:8b:84:b8:b1:bc:b6:b0:f8:dd:ea:71:ca:26:9a: ed:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:00:76:6B:B0:F1:BC:2A:B5:CE:E1:19:0A:23:9B:D0:31:F9:66:92 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a43f299-a34f-4946-9b1f-2f259ed620be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff2:1080::/48 Signature Algorithm: sha256WithRSAEncryption 16:46:f6:33:d1:ed:36:bc:6b:9d:be:84:7f:1c:77:63:3e:37: 65:fb:14:84:23:77:4d:e8:de:40:df:1f:1b:c0:e6:56:60:99: 67:38:bd:36:d9:66:32:8c:99:e3:9c:1f:9a:26:ba:b6:d0:89: 28:45:f2:f5:67:de:a7:c3:c5:52:7e:da:3c:78:53:7f:27:f7: 7a:54:59:04:9d:ac:0e:d6:c3:2c:2b:4f:15:e6:e1:8b:16:47: 07:35:40:2d:32:07:be:e3:05:32:c7:ce:c3:78:8a:5c:f8:0c: a3:2d:67:62:b0:3c:bb:66:41:d5:97:e9:92:71:11:62:85:da: ec:bb:4f:8a:58:d9:70:cc:8b:e3:43:23:83:8c:eb:f4:60:24: 89:ea:e0:39:83:b2:db:c8:9c:89:f7:a8:73:bf:32:1b:16:8d: c2:de:41:ec:6c:b2:80:dd:a1:ce:97:d7:ab:5f:c0:5c:e0:16: e0:ad:77:52:d3:6b:77:29:71:d5:86:47:3f:b7:a5:ba:b6:79: 8a:35:5b:f5:85:00:ec:7c:c0:bc:da:c1:25:9d:52:4b:5e:b5: 20:c9:a5:b6:17:f7:4c:21:cc:43:3c:72:24:7e:53:d4:df:d1: a4:0e:68:71:4b:ce:d2:82:12:93:d1:0e:04:cf:a3:41:e7:4b: 73:ba:09:d9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbWW7+vGp7FDWF4YBxVS1ztDNYF8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTcyMDI3WhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDM5ZDJjNDA4MjIzMThlMTk4YWQ2ZDU4YjNjMzE1YTYy ODM2ZWM0NjdhM2JmZGY0ZDQ4MGI0Zjk5OTZjMjkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuLFKEPodZ++hrcyAy6CC5MV+awF2CXfpQIeE6udaGur2Y oVNXlVkMDLoXd3oiT5NAeGem7A5LLNcr5jTDxefE3+webQcOQMVk2nYkK99NvxKO ZjfdgFD/cs8vCD46ZHApaSXnIymcm3wcXuY6YkowkdqM7Gg5EG3yc+5Cn0oSdPNS 8qkXF7kAYwHa+Rgnvtygnu20DGrfGnhJh95GuWAHrR0hPng1fKyuPttDuj5Gwetk v3iNUQ410aJcECkuTJX24xJhvOC/9LI1phwYR1WSYsGyIATZAeeruDJD/qSTmmwX VWTadUxLsVp0LJXK5XmLhLixvLaw+N3qccommu3LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULAB2a7DxvCq1zuEZCiOb0DH5ZpIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzNhNDNmMjk5LWEzNGYtNDk0Ni05YjFmLTJmMjU5ZWQ2MjBiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/yEIAwDQYJKoZIhvcNAQELBQADggEBABZG9jPR7Ta8a52+hH8cd2M+ N2X7FIQjd03o3kDfHxvA5lZgmWc4vTbZZjKMmeOcH5omurbQiShF8vVn3qfDxVJ+ 2jx4U38n93pUWQSdrA7WwywrTxXm4YsWRwc1QC0yB77jBTLHzsN4ilz4DKMtZ2Kw PLtmQdWX6ZJxEWKF2uy7T4pY2XDMi+NDI4OM6/RgJInq4DmDstvInIn3qHO/MhsW jcLeQexssoDdoc6X16tfwFzgFuCtd1LTa3cpcdWGRz+3pbq2eYo1W/WFAOx8wLza wSWdUktetSDJpbYX90whzEM8ciR+U9Tf0aQOaHFLztKCEpPRDgTPo0HnS3O6Cdk= -----END CERTIFICATE-----Generated at Wed Jun 4 11:14:57 2025 by rpki-client