$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437d3c38-c370-4afe-a444-07ee5ee1ed9f.roa File: 437d3c38-c370-4afe-a444-07ee5ee1ed9f.roa (raw, json) Hash identifier: LyMD6D/jXOGI2w+e04qGJQfnOQVfDQn4HpK1R4fvV+k= Subject key identifier: 8E:84:58:1A:D5:3E:96:66:D4:38:ED:0B:C7:C0:DE:EC:3D:8A:D1:FB Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0AD3318759C3DBE3397BBF2FDF05A302FA123725 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437d3c38-c370-4afe-a444-07ee5ee1ed9f.roa Signing time: Mon 05 May 2025 15:10:55 +0000 ROA not before: Mon 05 May 2025 15:10:55 +0000 ROA not after: Mon 09 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff1:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d3:31:87:59:c3:db:e3:39:7b:bf:2f:df:05:a3:02:fa:12:37:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 15:10:55 2025 GMT Not After : Jun 9 23:59:59 2025 GMT Subject: serialNumber=2c94e3b3eaa6968456d8a461b4e9591f48480d5ad792665ca8f2248a400702fb, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f3:a6:df:3f:f6:3f:5e:bc:5b:fe:a9:be:6a: 94:69:23:c8:93:af:70:83:be:86:7f:3a:fd:37:d2: 27:ca:c3:7f:d7:87:fa:3d:06:af:a9:66:5f:48:9c: 79:83:ff:57:52:3c:f0:03:40:95:72:3d:5a:77:65: af:f2:fc:b4:1c:48:ac:42:ae:b1:11:aa:86:ed:d4: 41:f4:53:9f:10:c6:7f:e8:77:91:62:55:56:05:0c: 9b:f6:8c:f1:a2:41:2a:b8:ec:a8:6a:c1:ff:2a:a4: 22:c0:f7:b2:0d:6f:8e:26:c5:64:ff:06:be:3b:35: f5:86:cc:ae:c3:91:46:c3:6b:fe:67:93:9c:dd:30: 19:aa:b8:62:4c:ce:04:6d:88:ed:e9:5b:4c:dd:96: f4:87:29:d1:ff:59:71:3e:aa:db:ae:4f:41:99:10: a2:ef:b4:12:f5:45:97:23:b6:84:aa:63:3e:f4:b3: 01:f3:3e:1a:d5:2d:72:8f:83:10:ca:ac:40:b9:a5: 98:0c:70:b5:a5:93:01:63:93:97:84:17:f2:b2:fb: eb:d9:72:f1:ec:ce:49:47:cb:c1:52:51:4a:b8:36: 69:bd:27:24:05:30:35:4c:17:42:64:fb:5f:d4:eb: e0:69:fb:b8:7d:03:f0:ee:0d:da:80:e3:20:a1:e8: e4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:84:58:1A:D5:3E:96:66:D4:38:ED:0B:C7:C0:DE:EC:3D:8A:D1:FB X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/437d3c38-c370-4afe-a444-07ee5ee1ed9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff1:2000::/40 Signature Algorithm: sha256WithRSAEncryption 80:3e:b0:f6:d3:62:23:ee:92:48:f1:b5:ee:95:28:4b:23:dd: a9:e6:a0:1f:b6:6f:ba:b7:53:f5:c0:35:45:93:93:3b:e6:cd: 4a:6b:e8:12:be:d3:80:9f:65:da:2e:9f:b4:4f:54:53:f7:4c: 7d:c8:81:b6:6c:53:f1:4e:26:76:4d:5e:39:f2:77:c3:fd:c4: fc:54:57:8e:6e:54:2d:d7:a3:af:17:b0:9c:35:5a:51:5a:bb: b3:ef:d5:00:7a:e9:8a:09:c8:98:81:f5:dd:29:36:50:49:2d: ef:24:6b:ee:dc:19:3c:de:86:f3:bc:dc:a9:e6:df:27:c1:8f: 9d:6c:7e:26:ca:f9:a3:5a:87:f2:06:8c:c4:c8:57:e5:a6:eb: 2f:92:52:50:ca:2c:d4:71:c1:8b:d3:8d:4d:35:fc:f6:43:6a: 5a:59:44:f5:e2:da:e6:34:d5:98:f6:02:43:dc:f2:42:ed:dd: d0:a0:a9:9a:ba:3e:2c:98:e8:4c:eb:6b:27:82:1a:8e:b9:33: 51:e3:51:5c:bf:e8:b4:76:0f:bf:2e:59:d2:93:24:92:f6:30: 30:e4:e1:d5:e5:35:ab:6d:ca:d2:7d:e7:e9:06:c9:57:ec:aa: 6f:d9:6e:02:21:1c:d6:13:6b:bf:6a:4a:fe:88:78:fe:87:4b: 83:40:40:87 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCtMxh1nD2+M5e78v3wWjAvoSNyUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTA1MTUxMDU1WhcNMjUwNjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzk0ZTNiM2VhYTY5Njg0NTZkOGE0NjFiNGU5NTkxZjQ4 NDgwZDVhZDc5MjY2NWNhOGYyMjQ4YTQwMDcwMmZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDb86bfP/Y/Xrxb/qm+apRpI8iTr3CDvoZ/Ov030ifKw3/X h/o9Bq+pZl9InHmD/1dSPPADQJVyPVp3Za/y/LQcSKxCrrERqobt1EH0U58Qxn/o d5FiVVYFDJv2jPGiQSq47Khqwf8qpCLA97INb44mxWT/Br47NfWGzK7DkUbDa/5n k5zdMBmquGJMzgRtiO3pW0zdlvSHKdH/WXE+qtuuT0GZEKLvtBL1RZcjtoSqYz70 swHzPhrVLXKPgxDKrEC5pZgMcLWlkwFjk5eEF/Ky++vZcvHszklHy8FSUUq4Nmm9 JyQFMDVMF0Jk+1/U6+Bp+7h9A/DuDdqA4yCh6OQ9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUjoRYGtU+lmbUOO0Lx8De7D2K0fswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzN2QzYzM4LWMzNzAtNGFmZS1hNDQ0LTA3ZWU1ZWUxZWQ5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/xIDANBgkqhkiG9w0BAQsFAAOCAQEAgD6w9tNiI+6SSPG17pUoSyPd qeagH7ZvurdT9cA1RZOTO+bNSmvoEr7TgJ9l2i6ftE9UU/dMfciBtmxT8U4mdk1e OfJ3w/3E/FRXjm5ULdejrxewnDVaUVq7s+/VAHrpignImIH13Sk2UEkt7yRr7twZ PN6G87zcqebfJ8GPnWx+Jsr5o1qH8gaMxMhX5abrL5JSUMos1HHBi9ONTTX89kNq WllE9eLa5jTVmPYCQ9zyQu3d0KCpmro+LJjoTOtrJ4IajrkzUeNRXL/otHYPvy5Z 0pMkkvYwMOTh1eU1q23K0n3n6QbJV+yqb9luAiEc1hNrv2pK/oh4/odLg0BAhw== -----END CERTIFICATE-----Generated at Fri May 9 02:28:47 2025 by rpki-client