$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c79f04-473d-4841-b63b-2ae8818ab0b3.roa File: b7c79f04-473d-4841-b63b-2ae8818ab0b3.roa (raw, json) Hash identifier: 7AgU4p51QsQKqgltuR9GEIpt0OdcAsj5Hwg/KDgOWOk= Subject key identifier: D1:7A:FE:59:E4:EA:52:1E:0E:53:DD:76:17:88:97:D0:0B:BC:D9:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 33346F38AB9943631E5C4B044EC0BF030A2E1EF4 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c79f04-473d-4841-b63b-2ae8818ab0b3.roa Signing time: Wed 28 May 2025 00:10:33 +0000 ROA not before: Wed 28 May 2025 00:10:33 +0000 ROA not after: Wed 02 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f01:4804::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:34:6f:38:ab:99:43:63:1e:5c:4b:04:4e:c0:bf:03:0a:2e:1e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 28 00:10:33 2025 GMT Not After : Jul 2 23:59:59 2025 GMT Subject: serialNumber=043e0a9a1703bee3f6f8e3f40687caf3687045371af0aaad91a0f9778fc3bc29, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:05:df:28:7e:3f:c6:3a:0f:36:a0:d1:85: 8f:39:74:7b:78:2f:96:c9:6c:62:49:55:31:da:a5: 45:17:af:3d:7e:d6:52:5c:d2:01:85:5a:0c:54:90: 09:92:7e:3b:f6:a8:14:45:89:01:92:f2:d6:c2:65: 8c:1f:94:38:2c:7e:a0:63:f0:19:3e:b7:67:55:22: 49:4b:4e:01:e8:fe:23:e4:54:22:db:c7:3d:0a:2c: ca:5e:d7:f2:c0:ac:18:7e:59:f2:7a:4b:fa:d2:7c: 96:4f:f0:23:93:d1:28:04:99:a4:62:6d:23:ad:fa: 46:8f:16:b9:a8:cf:19:0a:7a:4b:e1:bc:cb:36:61: 62:d1:c9:a6:32:dc:14:36:c2:68:1d:25:e9:78:8d: 0c:a8:1d:5f:a5:13:0e:c4:c5:a3:57:22:6f:72:9e: c7:7a:22:7e:0a:2c:aa:fc:b7:50:3d:84:a7:ac:97: 3a:77:50:04:4f:09:2a:51:05:70:c4:e7:01:de:e4: ac:33:8a:eb:54:d3:b4:c0:c7:42:ee:39:20:0e:6d: 3d:14:05:32:ed:2b:94:97:7f:d3:0d:a3:34:fd:41: 39:f6:bd:7f:c5:bc:89:17:07:a5:ab:55:1c:1a:19: aa:70:26:d9:75:c2:3a:9a:8b:72:93:a4:00:26:73: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7A:FE:59:E4:EA:52:1E:0E:53:DD:76:17:88:97:D0:0B:BC:D9:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c79f04-473d-4841-b63b-2ae8818ab0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:4804::/47 Signature Algorithm: sha256WithRSAEncryption 09:a5:6c:04:e4:cb:55:a7:ea:12:d7:ef:57:0a:19:5b:5e:54: 32:87:91:b9:41:d8:c6:5a:5f:e4:6f:9b:eb:9d:8b:a6:6b:3f: 2e:3f:a5:21:b6:81:5e:1c:b7:d7:bd:73:de:34:f3:44:2c:ac: 46:6d:ae:ff:cb:a7:1f:e0:31:e3:06:33:1b:7c:a7:ed:81:f5: 0a:6c:54:db:b5:82:9f:a4:1b:4a:41:ee:e3:fd:9a:79:a8:40: c0:8e:1a:73:6b:b1:d4:49:05:ad:90:44:ba:22:8d:60:8a:1f: 4d:28:27:ea:3f:8b:89:a5:42:9f:b1:bc:83:53:68:84:c3:47: 2b:90:f2:66:b1:bd:44:5b:97:28:e5:d6:e0:98:0a:84:f7:67: 1f:a7:09:9f:81:41:2e:18:97:8d:04:e1:5b:29:45:aa:24:12: ea:8d:76:a8:8e:ea:c1:f3:20:b4:47:fd:26:cc:ed:22:ea:c1: 8f:30:3e:14:a4:a1:20:37:ba:cc:23:9f:eb:d6:1d:05:2f:6e: 6b:41:35:47:c7:1e:02:79:8d:b8:4a:33:69:d5:53:91:95:d8: 34:a0:68:74:90:e1:76:b3:9b:81:6c:9b:06:41:2b:67:24:93: ec:51:d0:55:dd:a1:7a:bd:16:71:e2:f7:63:e8:55:04:ec:e2: d9:c5:bb:8c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMzRvOKuZQ2MeXEsETsC/AwouHvQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTI4MDAxMDMzWhcNMjUwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDNlMGE5YTE3MDNiZWUzZjZmOGUzZjQwNjg3Y2FmMzY4 NzA0NTM3MWFmMGFhYWQ5MWEwZjk3NzhmYzNiYzI5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoCwXfKH4/xjoPNqDRhY85dHt4L5bJbGJJVTHapUUXrz1+ 1lJc0gGFWgxUkAmSfjv2qBRFiQGS8tbCZYwflDgsfqBj8Bk+t2dVIklLTgHo/iPk VCLbxz0KLMpe1/LArBh+WfJ6S/rSfJZP8COT0SgEmaRibSOt+kaPFrmozxkKekvh vMs2YWLRyaYy3BQ2wmgdJel4jQyoHV+lEw7ExaNXIm9ynsd6In4KLKr8t1A9hKes lzp3UARPCSpRBXDE5wHe5KwziutU07TAx0LuOSAObT0UBTLtK5SXf9MNozT9QTn2 vX/FvIkXB6WrVRwaGapwJtl1wjqai3KTpAAmcx6ZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0Xr+WeTqUh4OU912F4iX0Au82XQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3Yzc5ZjA0LTQ3M2QtNDg0MS1iNjNiLTJhZTg4MThhYjBiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSAQwDQYJKoZIhvcNAQELBQADggEBAAmlbATky1Wn6hLX71cKGVte VDKHkblB2MZaX+Rvm+udi6ZrPy4/pSG2gV4ct9e9c94080QsrEZtrv/Lpx/gMeMG Mxt8p+2B9QpsVNu1gp+kG0pB7uP9mnmoQMCOGnNrsdRJBa2QRLoijWCKH00oJ+o/ i4mlQp+xvINTaITDRyuQ8maxvURblyjl1uCYCoT3Zx+nCZ+BQS4Yl40E4VspRaok EuqNdqiO6sHzILRH/SbM7SLqwY8wPhSkoSA3uswjn+vWHQUvbmtBNUfHHgJ5jbhK M2nVU5GV2DSgaHSQ4Xazm4FsmwZBK2ckk+xR0FXdoXq9FnHi92PoVQTs4tnFu4w= -----END CERTIFICATE-----Generated at Sun Jun 1 04:59:40 2025 by rpki-client