$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac2b0034-4b76-4f93-b423-ea6b7faf42e9.roa File: ac2b0034-4b76-4f93-b423-ea6b7faf42e9.roa (raw, json) Hash identifier: J0COLt1vj1qyMOl1VrJ6jydmgmul1mIuBCDQoMLQ5f0= Subject key identifier: DB:86:49:84:5F:17:E3:E7:2B:4E:04:4B:ED:C8:DA:50:FD:61:8A:64 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E33F8D57D8DD1A867D9E0011BF93A5C0E7B42E8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac2b0034-4b76-4f93-b423-ea6b7faf42e9.roa Signing time: Mon 19 May 2025 15:21:54 +0000 ROA not before: Mon 19 May 2025 15:21:54 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ffb:8020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:33:f8:d5:7d:8d:d1:a8:67:d9:e0:01:1b:f9:3a:5c:0e:7b:42:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 19 15:21:54 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=910eb5ac89c52c70fde5d4ea22a67227cb7939b78d662126dcddddf34e082f2e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:17:31:a2:a0:09:8d:59:f7:4d:bd:84:1f: 95:9c:a5:8d:4e:96:19:c9:f7:8e:da:8b:72:38:4c: 02:98:17:fb:2c:d9:22:72:93:65:89:78:02:c4:b7: 64:d4:3e:dc:53:26:78:cb:e2:94:82:6a:2c:c9:2f: 68:9f:f7:ba:f6:9b:7b:75:9d:59:11:17:0f:95:ec: d3:db:17:86:fc:af:23:79:3a:03:bb:b3:95:e9:61: df:19:e2:e6:96:7f:20:35:ef:a5:26:55:02:ff:28: 42:a5:99:89:d5:7d:9b:f7:c5:72:3d:15:f6:2c:c0: ac:df:0b:11:37:05:12:aa:7a:2f:d7:53:2f:af:df: 79:cf:67:d9:64:cc:6a:f9:a4:6c:63:2c:a4:46:d3: ae:04:8c:5e:57:42:53:5f:13:7a:d1:c3:84:0e:b0: 10:28:54:f9:34:a3:31:18:38:71:37:22:4e:9f:11: 7a:f2:1a:90:07:30:ac:3f:44:89:40:bc:30:5d:19: 52:f5:b1:72:c8:4e:5f:1e:50:32:0c:e9:02:62:cd: a7:06:9a:32:54:28:ae:f0:30:57:a8:4e:bc:cb:16: 7e:ca:fa:6d:73:5a:09:48:8e:4d:21:99:40:f2:82: 84:4c:29:34:cb:05:9b:aa:4a:21:0d:5c:7d:7d:c2: b1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:86:49:84:5F:17:E3:E7:2B:4E:04:4B:ED:C8:DA:50:FD:61:8A:64 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac2b0034-4b76-4f93-b423-ea6b7faf42e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:8020::/46 Signature Algorithm: sha256WithRSAEncryption cf:c8:29:8d:91:ff:e4:13:b6:55:6b:42:4e:60:59:b4:03:14: 4e:3c:c6:1a:79:a0:11:35:6c:9a:10:50:8d:f3:ca:ac:ce:0c: b2:b4:f4:b1:f6:78:97:ad:51:3f:44:93:15:d5:64:4b:d0:22: dd:39:d6:68:4d:6b:82:9a:e2:ae:81:40:b7:b3:36:88:3d:a3: bd:48:27:ff:07:a8:69:f9:36:9b:31:15:45:5b:9f:2c:15:99: c3:46:56:28:1b:0f:2a:86:66:54:6c:f2:0c:6f:00:4a:37:e9: 58:e3:17:55:7c:88:9d:ef:96:bc:4e:cd:71:0a:03:65:21:36: b5:7f:46:2a:55:b2:a4:a7:13:b2:1e:3a:59:3d:1b:6a:6e:8e: 4c:25:28:b7:fe:30:8e:20:ab:cb:84:bf:83:c3:04:ee:61:e1: 0d:e5:fe:ce:b5:2d:8e:e6:e3:4f:36:2b:3e:76:28:ce:04:ca: 04:e0:43:36:9b:a4:9e:f6:b2:47:26:ad:5d:21:91:90:ad:7a: 5f:6b:dd:15:a5:04:d3:2b:a1:bf:9d:d7:81:a0:d1:07:40:b5: 19:5f:5e:64:ed:ac:5c:93:e0:8e:d1:f4:3b:e5:15:af:07:af: 32:5a:1e:a0:78:c8:fe:b7:91:a0:ad:74:14:7c:22:80:8e:17: 6b:b0:2b:b1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTjP41X2N0ahn2eABG/k6XA57QugwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE5MTUyMTU0WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTBlYjVhYzg5YzUyYzcwZmRlNWQ0ZWEyMmE2NzIyN2Ni NzkzOWI3OGQ2NjIxMjZkY2RkZGRmMzRlMDgyZjJlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDP1RcxoqAJjVn3Tb2EH5WcpY1OlhnJ947ai3I4TAKYF/ss 2SJyk2WJeALEt2TUPtxTJnjL4pSCaizJL2if97r2m3t1nVkRFw+V7NPbF4b8ryN5 OgO7s5XpYd8Z4uaWfyA176UmVQL/KEKlmYnVfZv3xXI9FfYswKzfCxE3BRKqei/X Uy+v33nPZ9lkzGr5pGxjLKRG064EjF5XQlNfE3rRw4QOsBAoVPk0ozEYOHE3Ik6f EXryGpAHMKw/RIlAvDBdGVL1sXLITl8eUDIM6QJizacGmjJUKK7wMFeoTrzLFn7K +m1zWglIjk0hmUDygoRMKTTLBZuqSiENXH19wrGrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU24ZJhF8X4+crTgRL7cjaUP1himQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjMmIwMDM0LTRiNzYtNGY5My1iNDIzLWVhNmI3ZmFmNDJlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/7gCAwDQYJKoZIhvcNAQELBQADggEBAM/IKY2R/+QTtlVrQk5gWbQD FE48xhp5oBE1bJoQUI3zyqzODLK09LH2eJetUT9EkxXVZEvQIt051mhNa4Ka4q6B QLezNog9o71IJ/8HqGn5NpsxFUVbnywVmcNGVigbDyqGZlRs8gxvAEo36VjjF1V8 iJ3vlrxOzXEKA2UhNrV/RipVsqSnE7IeOlk9G2pujkwlKLf+MI4gq8uEv4PDBO5h 4Q3l/s61LY7m4082Kz52KM4EygTgQzabpJ72skcmrV0hkZCtel9r3RWlBNMrob+d 14Gg0QdAtRlfXmTtrFyT4I7R9DvlFa8HrzJaHqB4yP63kaCtdBR8IoCOF2uwK7E= -----END CERTIFICATE-----Generated at Sun Jun 1 05:03:07 2025 by rpki-client