$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79a08982-5194-4b4d-8be7-6d940279e284.roa File: 79a08982-5194-4b4d-8be7-6d940279e284.roa (raw, json) Hash identifier: j6Hr3xHyg7Q18b6CGU1cFqx8ehke/Yo8NPA54Smw250= Subject key identifier: B7:09:9D:CB:5E:8A:34:B8:73:67:01:C7:E4:DD:8B:3E:F4:83:A1:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 441CA7446256C6133327EB14A7388E2E22DC29D9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79a08982-5194-4b4d-8be7-6d940279e284.roa Signing time: Mon 12 May 2025 15:21:59 +0000 ROA not before: Mon 12 May 2025 15:21:59 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff4:4000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:1c:a7:44:62:56:c6:13:33:27:eb:14:a7:38:8e:2e:22:dc:29:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 15:21:59 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=a071ac8614aa2c38ebfe06abc8724c064442524ec25ae35145d4773052df4306, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7d:bd:7a:0f:6f:e3:29:a6:ba:e2:e9:19:f8: a6:b5:2f:8f:fd:ed:bf:bd:c8:5e:ed:a1:61:3c:52: 78:f6:6e:ad:c5:39:a1:6b:23:c7:2e:93:fd:6a:7b: 1a:34:9f:d7:10:ea:43:e9:bf:e2:bf:37:ed:47:73: 9c:7d:41:eb:59:fe:4a:2f:30:03:45:da:f2:56:30: 3f:67:75:cc:8d:59:fd:fa:f5:b1:dd:e8:95:b7:d2: 8d:b4:30:b2:ed:c0:c4:59:98:cb:e3:76:37:47:c0: f7:4c:79:85:83:80:e3:05:b9:8a:0a:8f:c7:40:44: 80:3d:2c:9f:47:ef:80:1e:bd:67:51:7e:ff:9c:b0: 98:8f:18:60:19:7b:01:a1:50:a6:5f:b3:aa:72:72: 62:78:5c:21:23:57:c6:be:68:b0:f2:40:b3:91:46: 53:4b:a0:81:df:4c:7d:87:11:0e:77:dc:b4:1f:6e: 24:b0:f3:48:b2:b5:80:f0:77:3d:43:2c:0b:7e:96: 08:15:03:e6:e8:a2:2a:6e:4a:d1:a7:4f:05:3b:9c: b8:54:3a:b6:21:ad:91:92:f8:3c:70:59:74:0f:6d: 82:6e:c4:26:ab:9e:82:48:4d:e0:a0:69:e6:0f:4c: 38:9f:be:ae:f7:76:1d:7e:8a:ca:ed:5f:4b:8c:6e: 17:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:09:9D:CB:5E:8A:34:B8:73:67:01:C7:E4:DD:8B:3E:F4:83:A1:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79a08982-5194-4b4d-8be7-6d940279e284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:4000::/39 Signature Algorithm: sha256WithRSAEncryption a2:e5:23:49:98:5c:a6:22:73:70:8d:00:03:b0:35:ff:9e:3b: c8:95:db:72:88:24:29:78:1c:3b:ad:82:55:25:4a:5b:12:7e: 87:f0:70:96:26:ab:df:06:e8:70:6f:c0:c4:98:e5:eb:52:66: 7f:5a:4b:35:41:b5:91:e3:9a:bc:e5:a2:0e:1c:89:f6:b9:ed: 46:5b:7c:a3:3b:de:4d:13:38:08:9f:b8:5b:0a:04:ea:3a:08: 91:7b:6b:0c:1d:1f:da:d8:66:f1:84:b0:57:84:f1:5d:a8:43: cb:90:bc:1d:30:65:5d:23:40:b3:f6:7e:ae:26:26:24:e0:6d: e8:7a:01:dd:97:71:54:be:1c:b5:f7:f1:c0:55:25:56:c6:44: bf:27:48:c1:62:42:fd:5e:03:fd:90:2a:e8:3c:48:c0:76:e7: 3c:30:67:9a:4b:8b:ba:98:b9:26:d9:fe:0c:83:1e:fd:9f:0c: e4:f9:e5:63:b1:8b:ee:e7:0a:ba:1a:81:5d:18:33:ec:fd:89: f6:12:24:fa:67:9a:be:41:29:b2:14:52:c7:8d:dc:8b:7d:b2: b7:b2:78:53:35:f3:b5:29:96:c5:4f:ae:02:ee:47:33:fb:4a: fc:8d:7b:a0:b6:a2:f2:f4:9d:56:bd:02:1c:a8:c3:73:c3:15: 1e:47:d1:86 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURBynRGJWxhMzJ+sUpziOLiLcKdkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEyMTUyMTU5WhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDcxYWM4NjE0YWEyYzM4ZWJmZTA2YWJjODcyNGMwNjQ0 NDI1MjRlYzI1YWUzNTE0NWQ0NzczMDUyZGY0MzA2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0fb16D2/jKaa64ukZ+Ka1L4/97b+9yF7toWE8Unj2bq3F OaFrI8cuk/1qexo0n9cQ6kPpv+K/N+1Hc5x9QetZ/kovMANF2vJWMD9ndcyNWf36 9bHd6JW30o20MLLtwMRZmMvjdjdHwPdMeYWDgOMFuYoKj8dARIA9LJ9H74AevWdR fv+csJiPGGAZewGhUKZfs6pycmJ4XCEjV8a+aLDyQLORRlNLoIHfTH2HEQ533LQf biSw80iytYDwdz1DLAt+lggVA+booipuStGnTwU7nLhUOrYhrZGS+DxwWXQPbYJu xCarnoJITeCgaeYPTDifvq73dh1+isrtX0uMbhevAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUtwmdy16KNLhzZwHH5N2LPvSDoZEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzc5YTA4OTgyLTUxOTQtNGI0ZC04YmU3LTZkOTQwMjc5ZTI4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/0QDANBgkqhkiG9w0BAQsFAAOCAQEAouUjSZhcpiJzcI0AA7A1/547 yJXbcogkKXgcO62CVSVKWxJ+h/Bwliar3wbocG/AxJjl61Jmf1pLNUG1keOavOWi DhyJ9rntRlt8ozveTRM4CJ+4WwoE6joIkXtrDB0f2thm8YSwV4TxXahDy5C8HTBl XSNAs/Z+riYmJOBt6HoB3ZdxVL4ctffxwFUlVsZEvydIwWJC/V4D/ZAq6DxIwHbn PDBnmkuLupi5Jtn+DIMe/Z8M5PnlY7GL7ucKuhqBXRgz7P2J9hIk+meavkEpshRS x43ci32yt7J4UzXztSmWxU+uAu5HM/tK/I17oLai8vSdVr0CHKjDc8MVHkfRhg== -----END CERTIFICATE-----Generated at Sun Jun 1 05:20:31 2025 by rpki-client