$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c14b7b73-ea2f-4b07-9959-69bc47cb7da5.roa File: c14b7b73-ea2f-4b07-9959-69bc47cb7da5.roa (raw, json) Hash identifier: AVuNVebQwrCmNlgdKaLbGcaDQ744xxtcYtHFTv5CTR8= Subject key identifier: 54:67:E0:36:79:BD:61:36:E1:05:10:75:0B:89:A4:72:D8:31:B6:84 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0C27FD394719BB6812D90ADB6A26076AB7BBF423 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c14b7b73-ea2f-4b07-9959-69bc47cb7da5.roa Signing time: Thu 22 May 2025 00:53:27 +0000 ROA not before: Thu 22 May 2025 00:53:27 +0000 ROA not after: Thu 26 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fb9:20c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:27:fd:39:47:19:bb:68:12:d9:0a:db:6a:26:07:6a:b7:bb:f4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 22 00:53:27 2025 GMT Not After : Jun 26 23:59:59 2025 GMT Subject: serialNumber=aae3d16ab29a230fbc45b1bb0ffa679c243f0201094512f1ce43bcaa12e43c28, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0e:94:b4:e8:92:29:67:a6:40:89:38:e9:f7: 6d:19:da:ce:c3:87:9e:25:91:19:85:cc:0e:1c:ff: 69:d7:38:43:6e:27:a4:7e:e1:ed:d1:e7:83:33:05: 51:ac:f6:f3:18:de:84:d8:61:22:65:15:e9:65:a6: 59:67:4f:01:2e:f9:13:4a:50:31:2a:5c:ec:15:32: c7:53:f7:06:de:17:c8:00:49:cc:31:a9:92:12:a5: 5e:a2:55:5a:1c:2e:17:6a:6e:5b:b6:88:b9:f9:b2: 9c:a7:cc:8e:61:39:0d:c7:56:95:89:af:11:90:84: d9:e4:18:62:b6:ca:e7:16:15:a3:35:19:34:0b:68: e5:47:94:54:83:2a:2f:86:3a:9d:de:f3:4c:24:38: f1:76:ef:5e:50:ba:2a:3c:4a:97:c6:e0:00:55:24: e9:45:32:9f:ee:28:86:db:13:71:29:7d:03:a3:92: 99:d8:9c:62:73:28:fc:63:38:97:ca:ea:cf:b8:a8: 10:c6:5f:bf:a1:db:63:cc:6a:1f:9e:a5:7c:11:0c: 13:ea:06:29:17:01:3a:f9:47:75:88:a6:1f:15:32: d4:a5:8b:7e:db:1c:1c:56:df:69:f9:83:70:be:5a: e7:66:4e:3f:ec:6a:1d:f3:3c:15:b1:2b:28:89:0c: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:67:E0:36:79:BD:61:36:E1:05:10:75:0B:89:A4:72:D8:31:B6:84 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c14b7b73-ea2f-4b07-9959-69bc47cb7da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb9:20c0::/48 Signature Algorithm: sha256WithRSAEncryption 2c:65:3c:8c:e3:f1:fe:d1:97:55:cc:c4:67:54:ed:54:48:88: a6:17:96:a0:e0:a7:fc:93:49:09:4c:de:18:35:e2:e6:4e:12: 3c:f6:97:93:75:cd:d0:80:66:c5:2f:1e:e6:5b:c2:01:78:31: fa:a9:aa:fc:77:7b:9a:af:72:1f:0b:24:b3:9d:11:1f:8e:d0: 7a:c7:a3:1e:22:77:16:7a:f8:e5:7a:bd:f2:40:b1:74:a8:1a: af:61:f8:1d:f6:33:b8:6c:4f:63:75:56:80:5e:ac:8b:44:47: 10:26:5a:fe:c8:63:f8:e7:3f:32:57:db:99:d7:d0:fd:24:89: c0:c4:6b:be:26:7d:8b:62:61:9a:a8:ea:f3:b3:dd:a0:ae:0c: 0d:6a:7a:81:2d:d2:7a:4c:15:0e:84:f5:31:c4:64:ea:32:ae: c4:6c:b2:59:11:d7:41:e8:7a:43:51:4e:fc:21:65:95:92:51: e8:b6:a4:39:9b:96:83:51:14:71:d2:50:3f:5f:eb:91:46:8d: e9:d9:fa:f2:48:66:12:b8:a0:ee:4e:bf:b9:30:ce:ad:49:6c: 0f:de:b3:3d:98:e0:b9:ba:44:6c:23:34:40:fa:14:09:02:a2: 27:6b:fb:d0:1a:5a:d6:05:7b:b0:be:d3:d4:70:01:e3:8b:28: b9:bc:87:57 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDCf9OUcZu2gS2QrbaiYHare79CMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTIyMDA1MzI3WhcNMjUwNjI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYWUzZDE2YWIyOWEyMzBmYmM0NWIxYmIwZmZhNjc5YzI0 M2YwMjAxMDk0NTEyZjFjZTQzYmNhYTEyZTQzYzI4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnDpS06JIpZ6ZAiTjp920Z2s7Dh54lkRmFzA4c/2nXOENu J6R+4e3R54MzBVGs9vMY3oTYYSJlFellpllnTwEu+RNKUDEqXOwVMsdT9wbeF8gA ScwxqZISpV6iVVocLhdqblu2iLn5spynzI5hOQ3HVpWJrxGQhNnkGGK2yucWFaM1 GTQLaOVHlFSDKi+GOp3e80wkOPF2715Quio8SpfG4ABVJOlFMp/uKIbbE3EpfQOj kpnYnGJzKPxjOJfK6s+4qBDGX7+h22PMah+epXwRDBPqBikXATr5R3WIph8VMtSl i37bHBxW32n5g3C+WudmTj/sah3zPBWxKyiJDH4xAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVGfgNnm9YTbhBRB1C4mkctgxtoQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MxNGI3YjczLWVhMmYtNGIwNy05OTU5LTY5YmM0N2NiN2RhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB+5IMAwDQYJKoZIhvcNAQELBQADggEBACxlPIzj8f7Rl1XMxGdU7VRI iKYXlqDgp/yTSQlM3hg14uZOEjz2l5N1zdCAZsUvHuZbwgF4Mfqpqvx3e5qvch8L JLOdER+O0HrHox4idxZ6+OV6vfJAsXSoGq9h+B32M7hsT2N1VoBerItERxAmWv7I Y/jnPzJX25nX0P0kicDEa74mfYtiYZqo6vOz3aCuDA1qeoEt0npMFQ6E9THEZOoy rsRsslkR10HoekNRTvwhZZWSUei2pDmbloNRFHHSUD9f65FGjenZ+vJIZhK4oO5O v7kwzq1JbA/esz2Y4Lm6RGwjNED6FAkCoidr+9AaWtYFe7C+09RwAeOLKLm8h1c= -----END CERTIFICATE-----Generated at Sun Jun 1 04:32:52 2025 by rpki-client