$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb63b58d-b028-4e5a-95f9-5d4ca97366d5.roa File: fb63b58d-b028-4e5a-95f9-5d4ca97366d5.roa (raw, json) Hash identifier: H0hYvLzQVfJBpn274ItXEj3IGJhhtD3KbLnpwNn6yHk= Subject key identifier: 40:78:36:A5:50:7A:D7:58:D2:68:CA:6F:F1:5F:91:34:6F:76:C0:AD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F0C8FC3AD0DE05E9E7ABA291F18CF5E2C5969A9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb63b58d-b028-4e5a-95f9-5d4ca97366d5.roa Signing time: Fri 16 May 2025 16:20:30 +0000 ROA not before: Fri 16 May 2025 16:20:30 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:80a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0c:8f:c3:ad:0d:e0:5e:9e:7a:ba:29:1f:18:cf:5e:2c:59:69:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 16 16:20:30 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=7f3e7665bae8fe0e4a5b852a9048057ff53106e35775cbbca8eeeeccd30cbc45, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:34:70:6a:92:ee:a2:45:55:81:ba:dd:d1:fc: 9e:8b:b5:2a:1b:77:f2:dc:ff:f6:c1:cc:bc:ed:26: 67:96:96:3d:0d:6e:cf:e6:29:60:9c:7a:b4:ee:c3: 8a:ce:9e:30:4f:a5:22:36:af:37:5e:7e:fa:33:0e: 4a:28:9b:fb:c4:14:c7:2c:d6:3f:ca:92:82:41:ef: bb:f8:bc:7b:5f:a5:be:1b:dc:7f:6d:7c:d8:1f:af: 79:6d:c3:91:0b:0e:a3:d2:68:e6:d9:74:17:a6:e6: 97:12:48:f7:73:8f:cf:8c:8b:1f:69:a9:ae:25:a9: 7a:db:57:c7:3a:b7:0f:01:b2:76:25:96:ea:6f:02: 09:df:31:c3:7c:fc:c7:d2:26:b5:35:e1:b7:2c:54: e5:08:ed:6e:b2:ae:14:ab:79:1f:25:85:e5:17:47: 1b:83:ad:37:1c:db:ab:3b:3e:e5:36:10:ff:27:78: 6c:16:fa:23:b1:a1:83:01:f7:21:0c:8d:61:09:42: 4e:e7:6b:63:3f:a4:fd:6e:67:3d:cb:f7:6f:ff:1a: fc:55:db:a7:0c:de:08:e3:70:67:eb:b5:6c:c4:d1: d0:47:ba:89:9c:e3:b0:38:fc:96:f9:cd:e8:fe:f5: b3:e7:17:12:dc:07:76:ec:17:2a:16:df:ae:41:8d: 77:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:78:36:A5:50:7A:D7:58:D2:68:CA:6F:F1:5F:91:34:6F:76:C0:AD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb63b58d-b028-4e5a-95f9-5d4ca97366d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:80a0::/48 Signature Algorithm: sha256WithRSAEncryption 93:ab:7f:cf:a3:6e:e3:ee:86:3b:d8:14:38:4f:e7:4f:07:55: cf:6a:a7:87:43:72:a3:56:00:0d:3e:6d:40:00:b6:1d:f3:c8: 69:46:d5:6e:92:dc:12:96:24:36:1a:a9:ba:9b:68:be:9a:82: 74:e9:63:95:9a:f9:a3:d2:43:9c:c1:cb:ea:68:10:3f:3b:9b: cb:b9:48:68:d7:bc:33:35:17:33:d9:03:89:93:4e:f8:f0:71: 67:3f:b9:4d:36:ac:65:0c:b1:39:6e:ea:9d:65:d8:43:c4:18: 66:26:09:48:7b:49:1d:70:c8:e9:11:10:50:fe:f8:42:7d:eb: 9d:62:3f:d6:36:a4:f8:2d:8e:a8:34:e3:80:d0:a1:4e:cb:5b: 13:16:85:3a:6d:b7:d4:a1:08:38:27:bd:19:0b:ff:0f:40:7e: 95:4f:a0:d7:7f:74:ee:3e:88:c4:22:c8:88:68:26:b2:9b:85: ac:e4:b2:dd:84:d8:14:43:57:7c:54:d1:bd:83:c4:db:4d:eb: fc:ee:49:33:b4:9a:74:f1:6f:ab:4a:f3:a2:be:90:94:15:55: 7b:13:99:41:92:f7:61:d8:53:8a:35:ea:5e:f9:90:67:14:fb: 20:fc:1d:e7:ca:2a:73:88:5a:1c:c1:46:74:32:15:e1:4a:67: 06:71:ff:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTwyPw60N4F6eeropHxjPXixZaakwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTE2MTYyMDMwWhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjNlNzY2NWJhZThmZTBlNGE1Yjg1MmE5MDQ4MDU3ZmY1 MzEwNmUzNTc3NWNiYmNhOGVlZWVjY2QzMGNiYzQ1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrNHBqku6iRVWBut3R/J6LtSobd/Lc//bBzLztJmeWlj0N bs/mKWCcerTuw4rOnjBPpSI2rzdefvozDkoom/vEFMcs1j/KkoJB77v4vHtfpb4b 3H9tfNgfr3ltw5ELDqPSaObZdBem5pcSSPdzj8+Mix9pqa4lqXrbV8c6tw8BsnYl lupvAgnfMcN8/MfSJrU14bcsVOUI7W6yrhSreR8lheUXRxuDrTcc26s7PuU2EP8n eGwW+iOxoYMB9yEMjWEJQk7na2M/pP1uZz3L92//GvxV26cM3gjjcGfrtWzE0dBH uomc47A4/Jb5zej+9bPnFxLcB3bsFyoW365BjXcBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQHg2pVB611jSaMpv8V+RNG92wK0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ZiNjNiNThkLWIwMjgtNGU1YS05NWY5LTVkNGNhOTczNjZkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gKAwDQYJKoZIhvcNAQELBQADggEBAJOrf8+jbuPuhjvYFDhP508H Vc9qp4dDcqNWAA0+bUAAth3zyGlG1W6S3BKWJDYaqbqbaL6agnTpY5Wa+aPSQ5zB y+poED87m8u5SGjXvDM1FzPZA4mTTvjwcWc/uU02rGUMsTlu6p1l2EPEGGYmCUh7 SR1wyOkREFD++EJ9651iP9Y2pPgtjqg044DQoU7LWxMWhTptt9ShCDgnvRkL/w9A fpVPoNd/dO4+iMQiyIhoJrKbhazkst2E2BRDV3xU0b2DxNtN6/zuSTO0mnTxb6tK 86K+kJQVVXsTmUGS92HYU4o16l75kGcU+yD8HefKKnOIWhzBRnQyFeFKZwZx/z8= -----END CERTIFICATE-----Generated at Sun Jun 1 04:43:09 2025 by rpki-client