$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e387299a-04d8-42c1-9699-2ad613d75732.roa File: e387299a-04d8-42c1-9699-2ad613d75732.roa (raw, json) Hash identifier: V9D7zSDQshAuPXNNpsMZ622JfXpa2vQ3somnRCmW8T8= Subject key identifier: 90:CA:F0:07:84:9C:01:18:2F:57:CE:A8:CB:D2:9E:B3:D9:29:CA:75 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0425B4485B5335498591C5F18928ED60F1C1A7D0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e387299a-04d8-42c1-9699-2ad613d75732.roa Signing time: Mon 12 May 2025 15:20:10 +0000 ROA not before: Mon 12 May 2025 15:20:10 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff4:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:25:b4:48:5b:53:35:49:85:91:c5:f1:89:28:ed:60:f1:c1:a7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 12 15:20:10 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=60e3b84f21c416d28b46a58855cb273b515643f564c3a6683cc50cbf898ca901, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:88:3e:00:a4:2f:71:df:d4:14:4e:9f:61: 39:69:2e:51:b4:2c:3c:f3:34:dd:9a:70:9d:87:88: 5f:02:19:72:50:55:ed:d0:a3:c7:bf:7d:4f:c7:aa: 2b:7c:f6:1f:03:cc:3b:1a:71:5b:75:d2:52:39:cb: d6:70:0e:7d:4b:81:81:b9:5e:1f:a1:1b:3c:bd:2e: a5:01:9a:98:d6:19:20:93:98:6d:fd:e0:9a:c6:dc: f6:7b:32:5a:67:7e:9f:75:5a:2f:78:3f:87:67:eb: 2f:67:b3:3f:80:c9:67:48:a7:4b:47:14:ad:cf:a0: 1d:75:cd:44:53:26:20:9f:cd:3f:4a:29:af:c9:71: 21:ae:f4:30:3f:22:56:b0:1f:b4:65:0f:ab:08:86: 78:e2:3f:24:70:72:cb:39:ba:ea:2a:8c:a8:25:2d: ad:8d:39:59:2f:a6:6d:e0:e6:de:43:c4:09:28:fd: cb:a1:c1:ec:79:2e:78:1a:d3:b3:58:47:c1:d1:24: 1c:45:e4:36:33:d5:04:8d:0a:c3:9f:c0:64:37:18: c0:b4:81:6f:a5:c2:a4:89:89:17:1d:b4:49:0d:73: c3:a6:bd:0f:05:ae:d0:e2:de:b1:a1:89:4b:52:0f: b4:f6:66:67:50:20:2d:cf:7b:70:47:9c:c5:4c:38: 2b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CA:F0:07:84:9C:01:18:2F:57:CE:A8:CB:D2:9E:B3:D9:29:CA:75 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e387299a-04d8-42c1-9699-2ad613d75732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff4:6000::/40 Signature Algorithm: sha256WithRSAEncryption a3:59:e2:19:f3:1d:d3:5c:bc:85:44:ed:36:6b:2f:36:1f:ac: 07:0b:84:0b:22:b6:ed:59:c9:40:29:f8:5c:23:f4:1e:79:84: cd:98:3e:55:a5:88:02:18:f8:28:a2:20:4f:69:c8:3a:42:d5: cf:77:9c:84:78:9a:07:ae:b7:ef:75:4a:f9:91:1a:d8:01:09: 15:24:0a:a3:f8:30:d9:e2:6c:ed:8b:b1:91:44:be:64:28:7c: f5:a3:ba:ab:9a:d7:15:74:37:ce:39:69:3b:a5:3c:8f:8f:e7: a0:80:24:44:90:98:b9:dd:45:81:5f:e7:28:b5:bb:87:2b:c8: de:f5:5a:97:8f:c0:93:24:2a:11:e0:81:f1:a5:a8:51:03:c3: d8:31:f4:61:46:0f:49:a6:c1:fb:d9:19:23:74:1d:a2:02:f5: 63:84:e3:88:ef:84:e0:7d:8d:35:8b:e8:3a:9b:5f:f0:d1:f1: 08:7b:a5:d6:3b:b7:af:6b:0a:c3:a8:79:7d:b2:42:21:09:02: a7:1d:78:ad:39:03:d2:28:bc:9d:e8:2e:43:50:a3:70:6e:5d: d7:79:c1:7c:d9:71:39:cb:57:41:59:17:6e:a9:75:8b:76:aa: bd:6d:cf:e7:57:b6:f5:46:af:82:94:8c:10:b2:51:da:8d:b4: de:ba:67:85 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBCW0SFtTNUmFkcXxiSjtYPHBp9AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEyMTUyMDEwWhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MGUzYjg0ZjIxYzQxNmQyOGI0NmE1ODg1NWNiMjczYjUx NTY0M2Y1NjRjM2E2NjgzY2M1MGNiZjg5OGNhOTAxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1QYg+AKQvcd/UFE6fYTlpLlG0LDzzNN2acJ2HiF8CGXJQ Ve3Qo8e/fU/Hqit89h8DzDsacVt10lI5y9ZwDn1LgYG5Xh+hGzy9LqUBmpjWGSCT mG394JrG3PZ7Mlpnfp91Wi94P4dn6y9nsz+AyWdIp0tHFK3PoB11zURTJiCfzT9K Ka/JcSGu9DA/IlawH7RlD6sIhnjiPyRwcss5uuoqjKglLa2NOVkvpm3g5t5DxAko /cuhwex5Lnga07NYR8HRJBxF5DYz1QSNCsOfwGQ3GMC0gW+lwqSJiRcdtEkNc8Om vQ8FrtDi3rGhiUtSD7T2ZmdQIC3Pe3BHnMVMOCtzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUkMrwB4ScARgvV86oy9Kes9kpynUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2UzODcyOTlhLTA0ZDgtNDJjMS05Njk5LTJhZDYxM2Q3NTczMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/0YDANBgkqhkiG9w0BAQsFAAOCAQEAo1niGfMd01y8hUTtNmsvNh+s BwuECyK27VnJQCn4XCP0HnmEzZg+VaWIAhj4KKIgT2nIOkLVz3echHiaB66373VK +ZEa2AEJFSQKo/gw2eJs7YuxkUS+ZCh89aO6q5rXFXQ3zjlpO6U8j4/noIAkRJCY ud1FgV/nKLW7hyvI3vVal4/AkyQqEeCB8aWoUQPD2DH0YUYPSabB+9kZI3QdogL1 Y4TjiO+E4H2NNYvoOptf8NHxCHul1ju3r2sKw6h5fbJCIQkCpx14rTkD0ii8negu Q1CjcG5d13nBfNlxOctXQVkXbql1i3aqvW3P51e29UavgpSMELJR2o203rpnhQ== -----END CERTIFICATE-----Generated at Sun Jun 1 05:10:59 2025 by rpki-client