$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4538ad52-4310-4fd4-a85b-c27eb48f8d22.roa File: 4538ad52-4310-4fd4-a85b-c27eb48f8d22.roa (raw, json) Hash identifier: zEen3acR2wz0CidSNO4kqfXq23tBoz+d01RHH22stb4= Subject key identifier: BA:DE:F3:AA:64:6B:01:BC:0F:A4:B8:C2:A9:EA:4F:5B:69:86:8E:30 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 51C29428A5519144C03F148D3CA7F734D8249759 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4538ad52-4310-4fd4-a85b-c27eb48f8d22.roa Signing time: Fri 16 May 2025 16:10:22 +0000 ROA not before: Fri 16 May 2025 16:10:22 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c2:94:28:a5:51:91:44:c0:3f:14:8d:3c:a7:f7:34:d8:24:97:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 16:10:22 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=f081acb2208b76fa4fcebcd51949c1d0daf15864267efbe2e62cbc6a1c9d36e4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:cc:4d:6b:99:a7:b0:b6:4e:34:28:7a:11: 50:37:89:09:31:ea:51:28:80:41:8d:9a:0b:2b:7c: 03:4d:f1:62:28:67:e4:23:1e:23:85:89:b4:91:38: 24:d7:9e:81:84:4a:0f:78:98:2a:ec:59:db:34:be: d6:86:5b:74:d8:79:d4:14:84:df:82:11:be:d3:cd: 1b:f7:61:76:6b:51:71:75:37:83:87:e3:7f:3f:63: b5:82:20:91:a4:29:f4:b0:23:6d:7c:10:65:37:25: 79:bd:ee:36:8c:4e:83:24:23:7d:fb:43:e8:8f:17: 12:7e:c9:9f:f4:45:3a:87:28:3a:63:11:d4:2b:d1: a2:62:33:12:14:a4:66:92:59:94:05:ca:53:a1:dd: 85:67:c3:cb:91:80:1c:64:f1:f7:c1:80:29:94:38: 99:4c:30:51:93:d4:d3:70:eb:ee:b3:7a:e8:ba:51: d6:02:98:4f:f4:23:34:9d:d9:a6:d2:3e:3a:95:39: c3:11:82:f0:b2:57:ca:64:38:44:72:53:d9:d7:e9: c4:8f:39:76:a2:c7:0f:9a:82:9e:01:32:8c:13:e6: 5e:af:d1:6c:06:e2:ed:41:de:eb:55:66:06:e5:b2: 06:f2:76:c6:e3:e3:c4:f4:d5:c6:b4:57:e4:fe:e6: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DE:F3:AA:64:6B:01:BC:0F:A4:B8:C2:A9:EA:4F:5B:69:86:8E:30 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4538ad52-4310-4fd4-a85b-c27eb48f8d22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption b2:6e:08:d4:c3:64:70:99:9c:f9:33:bd:e6:3f:ae:41:eb:c8: 5b:7b:58:11:20:b7:c1:67:14:57:74:0e:3e:55:d7:00:f4:fb: 76:70:51:be:64:69:bb:23:fe:46:05:1c:73:ad:04:a0:fe:e6: 27:40:0a:8e:5f:b6:a7:6a:6b:70:75:5f:20:30:b8:f9:a8:02: 25:70:34:02:ad:25:0b:b3:1a:85:97:96:41:37:fe:7c:ce:11: f3:0d:b2:30:d4:ca:0d:9b:fb:2a:64:ab:d1:d0:e6:2e:0f:dc: 29:9a:dc:ef:9f:f0:ac:d6:26:6c:cd:e9:0a:8b:83:d8:eb:94: 73:e3:95:db:f9:fe:61:ca:ba:b0:7b:06:2f:42:2f:5a:27:cd: 1a:a6:d2:65:b2:8f:92:94:ad:28:34:09:02:9e:90:8d:91:f6: 58:31:dd:5c:5e:fe:ba:32:e0:f5:cb:04:ac:be:fa:92:3f:55: d2:66:08:ff:a3:7e:dd:02:b7:45:d6:02:f8:e4:17:0c:ad:28: e9:8b:fe:cc:a6:da:a4:77:6a:bc:b2:48:b9:1f:62:1e:05:05: 80:f5:fc:aa:a7:97:5b:12:dd:30:97:77:98:fe:b3:cc:4e:76: e9:5f:ee:17:29:6d:09:c4:09:25:fe:99:20:2a:bc:92:fd:10: 8f:05:2c:6d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUcKUKKVRkUTAPxSNPKf3NNgkl1kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTYxMDIyWhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDgxYWNiMjIwOGI3NmZhNGZjZWJjZDUxOTQ5YzFkMGRh ZjE1ODY0MjY3ZWZiZTJlNjJjYmM2YTFjOWQzNmU0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6+cxNa5mnsLZONCh6EVA3iQkx6lEogEGNmgsrfANN8WIo Z+QjHiOFibSROCTXnoGESg94mCrsWds0vtaGW3TYedQUhN+CEb7TzRv3YXZrUXF1 N4OH438/Y7WCIJGkKfSwI218EGU3JXm97jaMToMkI337Q+iPFxJ+yZ/0RTqHKDpj EdQr0aJiMxIUpGaSWZQFylOh3YVnw8uRgBxk8ffBgCmUOJlMMFGT1NNw6+6zeui6 UdYCmE/0IzSd2abSPjqVOcMRgvCyV8pkOERyU9nX6cSPOXaixw+agp4BMowT5l6v 0WwG4u1B3utVZgblsgbydsbj48T01ca0V+T+5kuNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUut7zqmRrAbwPpLjCqepPW2mGjjAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ1MzhhZDUyLTQzMTAtNGZkNC1hODViLWMyN2ViNDhmOGQyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AwMAwDQYJKoZIhvcNAQELBQADggEBALJuCNTDZHCZnPkzveY/rkHr yFt7WBEgt8FnFFd0Dj5V1wD0+3ZwUb5kabsj/kYFHHOtBKD+5idACo5ftqdqa3B1 XyAwuPmoAiVwNAKtJQuzGoWXlkE3/nzOEfMNsjDUyg2b+ypkq9HQ5i4P3Cma3O+f 8KzWJmzN6QqLg9jrlHPjldv5/mHKurB7Bi9CL1onzRqm0mWyj5KUrSg0CQKekI2R 9lgx3Vxe/roy4PXLBKy++pI/VdJmCP+jft0Ct0XWAvjkFwytKOmL/sym2qR3aryy SLkfYh4FBYD1/Kqnl1sS3TCXd5j+s8xOdulf7hcpbQnECSX+mSAqvJL9EI8FLG0= -----END CERTIFICATE-----Generated at Sun Jun 1 04:47:49 2025 by rpki-client