$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04334486-364d-42d9-ae11-747401f80814.roa File: 04334486-364d-42d9-ae11-747401f80814.roa (raw, json) Hash identifier: wXUDvMLxM+MI8L1JhrmjG1kpBkMlqCgkwBhvXOJP+gc= Subject key identifier: 2A:2D:5B:C3:75:93:F0:8D:ED:5C:99:4E:DD:A7:03:45:C3:06:E0:8D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3B6B0B00716D395D11C043C6F8111AA83F3938C2 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04334486-364d-42d9-ae11-747401f80814.roa Signing time: Sat 28 Jun 2025 00:40:26 +0000 ROA not before: Sat 28 Jun 2025 00:40:26 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fbb:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6b:0b:00:71:6d:39:5d:11:c0:43:c6:f8:11:1a:a8:3f:39:38:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 28 00:40:26 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=712d0036f03e7e8719e329712ffedd502bc4a66d896a2f9e18995aeeb7bc3071, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:49:93:30:8a:42:63:b5:b7:01:74:71:e3: 8b:44:35:89:e0:32:02:88:71:92:25:37:df:d9:05: 6e:bd:e4:4b:0f:68:03:bc:9d:b5:7d:d0:08:01:7b: fc:40:0f:da:2d:97:ef:49:7c:66:c1:47:1c:fa:bd: d8:5b:9a:ba:46:18:40:08:59:e2:4d:e5:d3:a7:81: b0:48:d0:87:29:fb:b4:b0:63:12:87:c1:7b:5f:81: 1e:c3:75:0b:bc:68:ea:94:a7:42:a9:f2:d6:3d:a9: fb:02:85:7e:9f:8b:ec:3d:bd:f0:e9:9f:f0:bf:1a: 57:40:13:03:33:1e:9b:31:23:a9:6c:8d:c4:a0:7e: 21:90:fb:b1:72:94:16:e2:f7:f2:ac:40:d0:43:21: 06:75:1a:e2:d3:1e:f1:4d:65:c0:bd:ee:87:f0:82: a9:07:7c:ad:8d:d2:b8:8c:cb:4d:6a:cc:ab:47:bf: 24:f7:29:44:f1:79:70:11:b1:eb:8a:be:23:eb:7d: eb:b2:c6:59:d1:5c:d6:ec:3e:b5:91:a3:3d:6d:bf: f4:2c:88:51:0e:71:ad:49:b9:5e:c3:82:a0:45:cf: 2d:35:22:60:5c:4d:bb:22:51:ac:47:00:19:46:5f: 03:63:9a:92:e8:b5:4d:32:0b:ff:a6:88:94:5e:0b: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2D:5B:C3:75:93:F0:8D:ED:5C:99:4E:DD:A7:03:45:C3:06:E0:8D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04334486-364d-42d9-ae11-747401f80814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fbb:2000::/40 Signature Algorithm: sha256WithRSAEncryption 50:e0:69:52:17:9e:1f:29:fa:57:de:31:15:bc:a9:4b:5a:0e: 43:cd:c1:d7:12:2c:65:d4:9a:dc:47:a8:bd:bd:33:65:25:a1: 04:1b:e1:8d:c9:f3:ba:b3:ca:35:d6:a3:8a:06:4f:9c:49:fb: 2d:5f:85:15:0d:f0:90:14:f1:ce:36:c8:6e:1b:aa:1a:1c:4f: 75:f8:dd:84:c1:e7:28:94:19:54:eb:f1:76:25:88:a3:d1:37: 5e:7c:e1:7b:df:a4:44:10:b1:52:1d:69:f5:77:6d:e4:32:ca: 95:b5:8b:6d:10:a3:4a:25:b7:a5:bb:79:7c:58:c9:2a:9d:79: 2e:02:94:c8:75:9f:5d:4d:db:e4:04:95:2f:73:1b:1c:30:b0: 10:ab:ea:d8:60:b5:ae:94:ca:61:ce:eb:69:45:f2:28:94:f0: 54:9d:13:10:cf:a8:bb:ae:17:62:cc:43:2a:e2:86:56:db:86: d4:c4:7e:60:12:10:77:53:f0:82:bb:a5:5e:2e:da:58:8b:ac: bd:ba:48:87:fe:65:95:d2:c6:10:24:1d:ff:a6:dd:de:28:27: 94:94:aa:e2:40:11:ad:eb:f8:4a:66:c4:94:54:fd:88:90:27: b8:73:30:e5:b0:eb:a8:79:b4:de:98:e5:49:e9:57:84:c8:e5: 5a:84:4e:05 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUO2sLAHFtOV0RwEPG+BEaqD85OMIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI4MDA0MDI2WhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTJkMDAzNmYwM2U3ZTg3MTllMzI5NzEyZmZlZGQ1MDJi YzRhNjZkODk2YTJmOWUxODk5NWFlZWI3YmMzMDcxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtuUmTMIpCY7W3AXRx44tENYngMgKIcZIlN9/ZBW695EsP aAO8nbV90AgBe/xAD9otl+9JfGbBRxz6vdhbmrpGGEAIWeJN5dOngbBI0Icp+7Sw YxKHwXtfgR7DdQu8aOqUp0Kp8tY9qfsChX6fi+w9vfDpn/C/GldAEwMzHpsxI6ls jcSgfiGQ+7FylBbi9/KsQNBDIQZ1GuLTHvFNZcC97ofwgqkHfK2N0riMy01qzKtH vyT3KUTxeXARseuKviPrfeuyxlnRXNbsPrWRoz1tv/QsiFEOca1JuV7DgqBFzy01 ImBcTbsiUaxHABlGXwNjmpLotU0yC/+miJReC0wHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUKi1bw3WT8I3tXJlO3acDRcMG4I0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA0MzM0NDg2LTM2NGQtNDJkOS1hZTExLTc0NzQwMWY4MDgxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+7IDANBgkqhkiG9w0BAQsFAAOCAQEAUOBpUheeHyn6V94xFbypS1oO Q83B1xIsZdSa3Eeovb0zZSWhBBvhjcnzurPKNdajigZPnEn7LV+FFQ3wkBTxzjbI bhuqGhxPdfjdhMHnKJQZVOvxdiWIo9E3Xnzhe9+kRBCxUh1p9Xdt5DLKlbWLbRCj SiW3pbt5fFjJKp15LgKUyHWfXU3b5ASVL3MbHDCwEKvq2GC1rpTKYc7raUXyKJTw VJ0TEM+ou64XYsxDKuKGVtuG1MR+YBIQd1PwgrulXi7aWIusvbpIh/5lldLGECQd /6bd3ignlJSq4kARrev4SmbElFT9iJAnuHMw5bDrqHm03pjlSelXhMjlWoROBQ== -----END CERTIFICATE-----Generated at Sat Jul 5 01:46:17 2025 by rpki-client