$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4ae4400-d755-410a-8030-0c3ce316310d.roa File: d4ae4400-d755-410a-8030-0c3ce316310d.roa (raw, json) Hash identifier: iEZxMLTGc/M/+cT3tEWUhinoMYONxvpIPLnW+cRqke0= Subject key identifier: 4D:17:54:F4:F7:F1:F9:CD:11:61:C7:0B:37:31:F3:11:9D:47:87:28 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2BC4B5FEEEEDB72382A40D82D4100CA1717E518E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4ae4400-d755-410a-8030-0c3ce316310d.roa Signing time: Tue 10 Jun 2025 17:01:34 +0000 ROA not before: Tue 10 Jun 2025 17:01:34 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1fff:8140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c4:b5:fe:ee:ed:b7:23:82:a4:0d:82:d4:10:0c:a1:71:7e:51:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 17:01:34 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=14405fda54ca0d077d78942b4d5f4383fee23786f84a519c78f4e0cf68c965b4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:71:4d:b9:82:fd:3d:2d:60:49:96:59:12:0c: 56:e9:4d:4d:db:26:e7:cb:1c:1d:ba:ea:bb:35:53: 1a:18:24:23:e8:0d:a5:0e:82:6e:66:58:d6:d4:8e: 02:57:56:e2:1d:99:fa:3d:e5:aa:db:16:82:2e:08: e6:2a:fd:7f:55:a8:e1:db:47:5a:ff:49:6e:ee:fa: c1:b4:f6:05:3c:e3:df:ef:e2:9e:3c:4e:4f:7b:c9: ca:32:20:c4:54:b5:eb:42:2b:b3:0d:64:93:c6:c2: 5f:a6:98:54:7f:9c:10:22:b7:a6:4b:2c:18:48:38: a4:2c:a9:33:66:9c:d0:aa:19:8e:af:15:93:25:7e: 3a:b3:83:1e:5b:28:db:99:22:02:28:7e:f7:fd:84: dc:54:f4:23:37:77:0e:31:72:0a:3b:d3:ae:d6:cf: 42:56:3e:d4:a7:c8:8b:70:81:8b:fc:f8:2b:d3:40: 98:99:a7:ff:0a:25:ad:33:75:53:8e:1a:4d:34:ca: 31:03:c6:38:1c:8a:f4:0a:96:43:0a:a0:e5:a9:4d: 07:a3:e3:87:44:fc:e9:5c:1d:4f:fa:f4:ff:6a:0d: f1:9a:f8:f6:a0:93:e4:63:43:17:c9:f6:56:d5:58: 49:17:7b:66:a6:77:61:72:c9:74:9c:34:d8:53:1f: 0d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:17:54:F4:F7:F1:F9:CD:11:61:C7:0B:37:31:F3:11:9D:47:87:28 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4ae4400-d755-410a-8030-0c3ce316310d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8140::/48 Signature Algorithm: sha256WithRSAEncryption 20:53:b8:b7:b3:d9:09:96:b4:0e:51:c2:8c:1f:23:87:a8:da: 40:8c:d1:b8:74:3c:6d:7a:d6:53:ad:36:79:2c:43:be:1a:74: 90:d1:53:ad:8d:d6:43:e0:2b:fb:32:46:d9:2c:fe:9c:6a:c5: 76:90:8c:8d:9b:56:89:a2:dd:69:d9:15:d4:e5:85:1a:cb:92: 47:8c:20:41:14:98:53:5b:5e:76:2a:fc:10:41:2d:bc:9e:ce: bb:99:f2:0c:71:e4:b8:a3:a8:6a:db:a1:62:ce:f6:59:a7:ca: 35:fe:60:10:11:21:25:95:7b:28:e5:6b:a4:3e:34:c3:e6:a9: 21:a5:cf:1d:65:37:70:47:3d:1b:9f:46:43:2e:d7:39:49:ee: bb:8b:e9:29:b4:0c:a9:48:4d:9d:a2:4c:8a:d1:7e:29:99:41: fe:32:26:67:02:5a:1b:cc:7c:89:01:95:2d:a0:a6:dc:20:06: e3:d7:ed:62:7f:24:b9:7c:ea:e8:bd:15:c6:0e:62:cc:f4:9d: 48:0b:b0:8b:80:da:c0:7d:a6:a3:51:8a:b5:47:6b:c6:ef:63: 6a:e2:63:c6:2c:8b:58:e8:0b:96:c0:94:ec:83:7e:9e:db:38: e4:39:17:8d:c4:42:bc:dc:30:e4:7a:75:ef:3f:90:f7:99:f8: 35:49:5b:c0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK8S1/u7ttyOCpA2C1BAMoXF+UY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTcwMTM0WhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDQwNWZkYTU0Y2EwZDA3N2Q3ODk0MmI0ZDVmNDM4M2Zl ZTIzNzg2Zjg0YTUxOWM3OGY0ZTBjZjY4Yzk2NWI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQcU25gv09LWBJllkSDFbpTU3bJufLHB266rs1UxoYJCPo DaUOgm5mWNbUjgJXVuIdmfo95arbFoIuCOYq/X9VqOHbR1r/SW7u+sG09gU849/v 4p48Tk97ycoyIMRUtetCK7MNZJPGwl+mmFR/nBAit6ZLLBhIOKQsqTNmnNCqGY6v FZMlfjqzgx5bKNuZIgIofvf9hNxU9CM3dw4xcgo7067Wz0JWPtSnyItwgYv8+CvT QJiZp/8KJa0zdVOOGk00yjEDxjgcivQKlkMKoOWpTQej44dE/OlcHU/69P9qDfGa +Pagk+RjQxfJ9lbVWEkXe2amd2FyyXScNNhTHw2rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTRdU9Pfx+c0RYccLNzHzEZ1HhygwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q0YWU0NDAwLWQ3NTUtNDEwYS04MDMwLTBjM2NlMzE2MzEwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gUAwDQYJKoZIhvcNAQELBQADggEBACBTuLez2QmWtA5RwowfI4eo 2kCM0bh0PG161lOtNnksQ74adJDRU62N1kPgK/syRtks/pxqxXaQjI2bVomi3WnZ FdTlhRrLkkeMIEEUmFNbXnYq/BBBLbyezruZ8gxx5LijqGrboWLO9lmnyjX+YBAR ISWVeyjla6Q+NMPmqSGlzx1lN3BHPRufRkMu1zlJ7ruL6Sm0DKlITZ2iTIrRfimZ Qf4yJmcCWhvMfIkBlS2gptwgBuPX7WJ/JLl86ui9FcYOYsz0nUgLsIuA2sB9pqNR irVHa8bvY2riY8Ysi1joC5bAlOyDfp7bOOQ5F43EQrzcMOR6de8/kPeZ+DVJW8A= -----END CERTIFICATE-----Generated at Thu Jul 3 05:14:19 2025 by rpki-client