$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce4f6fb5-9c8f-40a2-ba65-57ed341b323c.roa File: ce4f6fb5-9c8f-40a2-ba65-57ed341b323c.roa (raw, json) Hash identifier: 4pcKSTziWXjCYKuLKW+3BY8aEAn+vtVtsGrsuiMsiME= Subject key identifier: CE:5C:1A:0C:CC:88:F7:A2:95:51:9D:BE:C1:83:15:77:18:26:26:16 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 554C67B22255C7EC3918C952DF7D1046F45DF562 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce4f6fb5-9c8f-40a2-ba65-57ed341b323c.roa Signing time: Sat 28 Jun 2025 00:40:22 +0000 ROA not before: Sat 28 Jun 2025 00:40:22 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb9:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4c:67:b2:22:55:c7:ec:39:18:c9:52:df:7d:10:46:f4:5d:f5:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 28 00:40:22 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=f14ed58c74eed0a300bf50f340b9d8af7801d9584acada749b4f1963602a3009, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:00:3a:48:a3:fd:5e:29:27:92:c8:8a:72:1e: db:27:bf:bf:df:57:b2:35:26:76:f3:4b:3c:88:6e: dd:5c:d5:a7:59:2e:13:9d:86:58:74:be:e1:ac:f3: 2e:ea:b9:ea:95:2d:07:02:28:b2:b7:02:31:d0:73: f8:89:89:d4:ea:b3:3a:a3:c8:b3:0c:c0:8e:9c:32: d8:af:eb:c0:76:eb:cb:d9:4d:ad:22:42:40:92:21: 5b:ef:94:a7:4e:36:0f:e9:b8:be:14:ee:54:b3:64: e1:db:e7:e4:f6:5b:40:b7:65:ce:da:4e:58:e3:dc: 32:52:aa:03:79:6f:d2:2f:cf:5c:e4:0b:09:ca:e0: f6:ac:f1:fa:ef:ef:5e:5c:41:ef:9e:ab:dd:a7:87: 32:e5:7f:2b:0d:9d:8e:ed:48:f1:d2:da:91:ac:f3: 9d:43:a0:2a:fb:4c:17:be:49:6d:af:75:8b:08:c3: ce:0f:90:c6:32:82:79:70:a1:44:17:1b:e4:c2:e2: 97:c8:10:ba:9a:59:a3:6e:27:11:44:1c:f8:9b:06: 01:31:27:50:29:de:fb:c8:38:53:2f:fe:6a:82:cc: 31:99:c2:33:b1:c3:50:f2:ee:54:9a:ab:dc:55:37: a2:35:8e:95:a1:8e:91:3d:d9:9e:a4:c9:a9:f9:32: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5C:1A:0C:CC:88:F7:A2:95:51:9D:BE:C1:83:15:77:18:26:26:16 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce4f6fb5-9c8f-40a2-ba65-57ed341b323c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb9:5000::/40 Signature Algorithm: sha256WithRSAEncryption a9:ed:dc:3d:3f:c3:f8:42:eb:e8:c1:c1:ae:aa:9c:22:da:cb: ab:8c:c6:f2:06:50:3e:dd:1f:cb:30:03:43:6d:eb:26:dd:64: f7:9c:24:fb:1e:e8:91:42:51:87:37:c9:24:d7:8a:1a:1e:bb: 42:e2:b0:d2:a8:55:b7:3d:a9:74:b5:e7:78:91:d6:29:ca:e0: fa:cf:68:02:15:9c:c6:40:84:3d:7e:3e:f8:f5:37:83:63:76: d1:2e:ff:60:bc:fa:d5:fb:cd:b3:f3:8d:5b:63:88:b1:c6:4e: 89:bc:4f:cd:b1:0e:61:b5:95:1a:6f:08:9c:bb:b0:f4:70:d4: 41:48:02:56:07:5f:66:b0:f7:25:a6:b7:6a:39:9f:b4:1c:e2: 4b:91:a5:b1:39:f4:75:a2:41:75:29:13:e8:be:05:7e:04:44: a7:67:34:52:ec:f6:17:1e:c5:90:22:b9:69:5e:fe:cc:62:89: f1:67:5d:40:3b:ae:2d:4c:7e:2d:b9:26:2e:b5:2e:d4:f5:3f: 04:1b:48:95:76:82:81:95:ea:b2:c5:5c:87:9a:96:81:e0:05: 2e:8d:77:70:c7:9e:b1:f3:35:f5:be:cd:27:d1:36:df:50:bb: 6d:4e:11:24:bc:3f:b4:d5:39:d7:39:a1:b0:9a:c0:0c:95:00: 6d:f2:05:95 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVUxnsiJVx+w5GMlS330QRvRd9WIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI4MDA0MDIyWhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTRlZDU4Yzc0ZWVkMGEzMDBiZjUwZjM0MGI5ZDhhZjc4 MDFkOTU4NGFjYWRhNzQ5YjRmMTk2MzYwMmEzMDA5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTADpIo/1eKSeSyIpyHtsnv7/fV7I1JnbzSzyIbt1c1adZ LhOdhlh0vuGs8y7queqVLQcCKLK3AjHQc/iJidTqszqjyLMMwI6cMtiv68B268vZ Ta0iQkCSIVvvlKdONg/puL4U7lSzZOHb5+T2W0C3Zc7aTljj3DJSqgN5b9Ivz1zk CwnK4Pas8frv715cQe+eq92nhzLlfysNnY7tSPHS2pGs851DoCr7TBe+SW2vdYsI w84PkMYygnlwoUQXG+TC4pfIELqaWaNuJxFEHPibBgExJ1Ap3vvIOFMv/mqCzDGZ wjOxw1Dy7lSaq9xVN6I1jpWhjpE92Z6kyan5Mhx1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUzlwaDMyI96KVUZ2+wYMVdxgmJhYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlNGY2ZmI1LTljOGYtNDBhMi1iYTY1LTU3ZWQzNDFiMzIzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB+5UDANBgkqhkiG9w0BAQsFAAOCAQEAqe3cPT/D+ELr6MHBrqqcItrL q4zG8gZQPt0fyzADQ23rJt1k95wk+x7okUJRhzfJJNeKGh67QuKw0qhVtz2pdLXn eJHWKcrg+s9oAhWcxkCEPX4++PU3g2N20S7/YLz61fvNs/ONW2OIscZOibxPzbEO YbWVGm8InLuw9HDUQUgCVgdfZrD3Jaa3ajmftBziS5GlsTn0daJBdSkT6L4FfgRE p2c0Uuz2Fx7FkCK5aV7+zGKJ8WddQDuuLUx+LbkmLrUu1PU/BBtIlXaCgZXqssVc h5qWgeAFLo13cMeesfM19b7NJ9E231C7bU4RJLw/tNU51zmhsJrADJUAbfIFlQ== -----END CERTIFICATE-----Generated at Sun Jun 29 07:02:40 2025 by rpki-client