$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4721d24c-123f-457b-b6b0-0d3132bc017d.roa File: 4721d24c-123f-457b-b6b0-0d3132bc017d.roa (raw, json) Hash identifier: +G19s3jcDwZVm4cnhzsc6lQZOuMYPVwzTiPJfT7lxgk= Subject key identifier: F5:7C:CF:CA:FF:2A:62:E7:68:2C:DA:ED:8B:DF:B9:3B:5D:F1:16:25 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 40F93F01F185E8E6937A16D11CDEA3FB6CB9BEE6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4721d24c-123f-457b-b6b0-0d3132bc017d.roa Signing time: Sat 10 May 2025 00:10:25 +0000 ROA not before: Sat 10 May 2025 00:10:25 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:4000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f9:3f:01:f1:85:e8:e6:93:7a:16:d1:1c:de:a3:fb:6c:b9:be:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:10:25 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=076231a677de6d4a8a9a499c80531e5e709c0f76ed1ea3df13052a4c1956b3d0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:18:50:a2:2a:b1:22:17:08:5a:7e:51:ce:52: 20:67:8d:89:97:a0:5e:79:7c:77:09:b7:c6:72:40: 74:a0:c1:ac:70:e1:9d:d2:9a:d9:1a:4a:12:6d:cb: c4:cc:03:1b:d2:45:cf:cf:da:42:02:35:91:ac:52: a1:36:62:8f:fa:48:2d:1f:bf:f9:d2:57:c7:5e:c8: 7b:c0:92:ac:a6:80:c3:bd:e7:9e:4b:ab:4f:55:4b: 62:1d:8d:4c:d6:6c:3b:45:e5:71:a4:81:c7:db:51: f5:81:03:86:42:17:76:8c:32:e7:51:56:0b:75:e6: 5f:b6:58:d6:9e:9a:03:56:f9:03:3a:2f:7e:27:5d: 81:a2:e7:ef:81:01:54:14:c8:0b:db:77:7e:b5:c4: 65:98:ea:4b:e8:e6:ee:d9:e3:79:50:52:d0:21:ee: cb:bc:dc:cb:d2:b1:2c:57:83:4c:a9:21:95:d9:0d: 0b:ac:ce:1c:dd:d2:eb:96:8d:92:ce:cc:27:7b:3f: 74:dc:18:04:3e:f2:00:c9:d0:93:b1:d1:37:64:9f: c4:b5:42:b0:f5:82:88:60:c5:6f:04:86:be:71:14: 51:ae:6f:17:db:bc:f5:35:fc:03:0a:70:77:71:3d: 46:21:f8:25:d5:84:4b:bc:5e:de:7c:4f:ab:cb:5a: 44:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7C:CF:CA:FF:2A:62:E7:68:2C:DA:ED:8B:DF:B9:3B:5D:F1:16:25 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4721d24c-123f-457b-b6b0-0d3132bc017d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:4000::/39 Signature Algorithm: sha256WithRSAEncryption 27:a1:2d:89:ad:55:a3:32:8f:92:a3:69:06:77:68:61:43:aa: 01:91:cc:fa:cc:ba:f9:ff:dd:8c:5e:11:2c:bc:50:e9:f3:03: 0e:1d:ad:70:27:bb:ff:19:b5:3f:50:13:fc:95:10:58:88:0f: e1:2d:7a:2f:79:03:0d:ba:fc:54:57:60:7c:4c:97:ab:24:51: 1d:6f:93:3b:8d:0d:29:77:19:c6:88:68:3b:58:d5:59:24:b5: 1b:10:e6:e3:cb:72:75:d1:c0:94:8d:8e:3a:97:e4:7a:30:2d: 52:1c:21:86:8b:d6:32:3f:a4:64:ee:9c:0c:c7:36:05:14:4a: 87:75:fd:1c:0f:5e:65:c8:a6:e7:bd:50:5f:19:5e:a3:4b:b7: 31:d6:f1:de:7e:ff:12:0f:d1:ed:13:b3:09:49:60:b5:7a:75: 0b:e2:6f:5d:48:94:fd:33:a8:24:da:d4:ab:e8:84:ec:c4:88: 5f:6b:8c:61:d4:82:d0:fd:42:0f:3f:2c:0d:07:9a:30:b8:e9: 37:cf:73:1a:5a:08:ea:97:91:81:47:6b:e2:af:e9:a0:1a:e3: 60:3b:62:30:e7:5a:ec:82:b6:df:ea:2e:89:f3:8d:2e:83:fe: ad:82:5f:38:12:b1:0a:98:43:51:08:66:f8:c2:dd:5c:aa:dd: f5:fa:f8:58 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQPk/AfGF6OaTehbRHN6j+2y5vuYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDAxMDI1WhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzYyMzFhNjc3ZGU2ZDRhOGE5YTQ5OWM4MDUzMWU1ZTcw OWMwZjc2ZWQxZWEzZGYxMzA1MmE0YzE5NTZiM2QwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmGFCiKrEiFwhaflHOUiBnjYmXoF55fHcJt8ZyQHSgwaxw 4Z3SmtkaShJty8TMAxvSRc/P2kICNZGsUqE2Yo/6SC0fv/nSV8deyHvAkqymgMO9 555Lq09VS2IdjUzWbDtF5XGkgcfbUfWBA4ZCF3aMMudRVgt15l+2WNaemgNW+QM6 L34nXYGi5++BAVQUyAvbd361xGWY6kvo5u7Z43lQUtAh7su83MvSsSxXg0ypIZXZ DQuszhzd0uuWjZLOzCd7P3TcGAQ+8gDJ0JOx0Tdkn8S1QrD1gohgxW8Ehr5xFFGu bxfbvPU1/AMKcHdxPUYh+CXVhEu8Xt58T6vLWkRHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9XzPyv8qYudoLNrti9+5O13xFiUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ3MjFkMjRjLTEyM2YtNDU3Yi1iNmIwLTBkMzEzMmJjMDE3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB+4QDANBgkqhkiG9w0BAQsFAAOCAQEAJ6Etia1VozKPkqNpBndoYUOq AZHM+sy6+f/djF4RLLxQ6fMDDh2tcCe7/xm1P1AT/JUQWIgP4S16L3kDDbr8VFdg fEyXqyRRHW+TO40NKXcZxohoO1jVWSS1GxDm48tyddHAlI2OOpfkejAtUhwhhovW Mj+kZO6cDMc2BRRKh3X9HA9eZcim571QXxleo0u3Mdbx3n7/Eg/R7ROzCUlgtXp1 C+JvXUiU/TOoJNrUq+iE7MSIX2uMYdSC0P1CDz8sDQeaMLjpN89zGloI6peRgUdr 4q/poBrjYDtiMOda7IK23+ouifONLoP+rYJfOBKxCphDUQhm+MLdXKrd9fr4WA== -----END CERTIFICATE-----Generated at Sun Jun 1 04:41:52 2025 by rpki-client