$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d15509-4877-4cec-b806-5464e3b5087b.roa File: 28d15509-4877-4cec-b806-5464e3b5087b.roa (raw, json) Hash identifier: bQ/z1yTEfX2k4ewAPq5n2mzv/+VdbZit1+0zmriOF7k= Subject key identifier: F7:6C:78:7B:70:14:7F:4F:CA:55:A5:E1:F8:A4:E4:5C:60:B7:D2:71 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5FB7326CA9BC977E28E1D9B0658970CB526E1829 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d15509-4877-4cec-b806-5464e3b5087b.roa Signing time: Fri 06 Jun 2025 00:10:22 +0000 ROA not before: Fri 06 Jun 2025 00:10:22 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff6:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b7:32:6c:a9:bc:97:7e:28:e1:d9:b0:65:89:70:cb:52:6e:18:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 6 00:10:22 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=d41fc78fa881b967113598852f5459bed291fff39f3a5345a389f27a9549d9ef, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:5e:44:c6:53:3e:d6:3b:5f:c5:eb:5c:bd: 16:90:53:a7:02:37:40:f8:83:ee:5d:6d:5a:40:f8: 00:b8:ec:9c:d3:a4:00:a6:01:b3:7e:e9:d0:4f:83: fe:f4:29:87:dd:c6:d1:54:a7:6e:44:67:8b:21:56: d4:b3:2d:1e:e3:40:38:fe:40:58:a5:c2:27:a2:8e: 79:4b:71:72:5e:fc:00:7b:1f:b5:ae:fb:f8:19:03: 9f:92:46:3a:b0:f2:33:ab:aa:87:b3:c6:4a:c7:f5: de:99:e5:c3:d8:e3:37:e1:50:26:ed:f3:9a:15:46: c9:cc:30:73:52:3b:90:99:22:f8:af:f0:fd:17:ab: 38:78:7f:79:96:c9:06:91:76:9c:dd:2f:96:09:ad: 76:4c:dd:10:ce:47:43:11:4e:dc:07:97:cb:e9:fc: de:4c:4d:36:e2:c0:33:b7:c6:3d:1d:1a:f1:6f:e3: 4a:93:5d:ff:d8:73:eb:ee:56:79:c2:f0:df:a1:69: af:aa:eb:89:5b:ab:5b:87:0e:c0:07:bf:2f:52:03: ca:1c:af:05:ec:77:93:b5:8b:de:67:18:07:86:3e: d1:d5:2e:9f:0c:e8:ac:6e:69:71:1d:85:13:8d:75: d0:ea:55:a3:74:88:42:db:bf:1f:4a:d4:b9:de:eb: 01:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6C:78:7B:70:14:7F:4F:CA:55:A5:E1:F8:A4:E4:5C:60:B7:D2:71 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28d15509-4877-4cec-b806-5464e3b5087b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff6:4000::/48 Signature Algorithm: sha256WithRSAEncryption c4:75:8f:b1:68:19:60:07:78:83:b8:61:d0:44:48:2c:06:24: 88:b1:a1:00:d0:f0:fb:76:e5:ae:e0:b1:4d:1e:01:cc:62:5c: 6e:60:09:53:51:f8:9c:0f:54:8b:b0:4a:9d:9c:9d:f2:a2:63: 7f:fc:9a:f1:2a:03:ce:06:37:d9:62:c4:b0:15:03:13:48:8e: cf:9e:9d:a0:16:00:0e:f7:17:e9:4e:da:c4:d2:45:2f:c0:d0: c1:fb:9b:bc:d8:0e:9f:cd:8c:68:11:c6:27:d4:ae:5a:16:52: a1:bd:67:90:1d:37:2f:55:a5:60:f2:0a:6f:16:67:87:10:26: b0:6c:05:34:a6:41:41:11:87:35:54:da:68:e0:07:77:c8:9f: 6f:8c:01:23:a4:65:c7:db:6d:31:05:7a:82:80:39:72:8e:6c: df:2e:96:32:27:91:b9:c7:6c:45:5c:58:50:c8:e7:db:33:34: 44:d2:63:61:95:73:d9:d1:7d:57:f2:15:c4:4a:24:38:b9:1a: a6:bc:b5:ba:6d:9b:22:78:c4:99:ae:7c:69:7b:57:1e:f1:44: e7:68:43:7a:8d:54:bc:df:ae:2b:60:01:bc:6f:35:1f:cb:b4: 03:92:99:b5:d1:3d:d7:65:48:bb:56:29:ed:bb:5b:ec:07:72: 6c:51:ff:28 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUX7cybKm8l34o4dmwZYlwy1JuGCkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjA2MDAxMDIyWhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDFmYzc4ZmE4ODFiOTY3MTEzNTk4ODUyZjU0NTliZWQy OTFmZmYzOWYzYTUzNDVhMzg5ZjI3YTk1NDlkOWVmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvV15ExlM+1jtfxetcvRaQU6cCN0D4g+5dbVpA+AC47JzT pACmAbN+6dBPg/70KYfdxtFUp25EZ4shVtSzLR7jQDj+QFilwieijnlLcXJe/AB7 H7Wu+/gZA5+SRjqw8jOrqoezxkrH9d6Z5cPY4zfhUCbt85oVRsnMMHNSO5CZIviv 8P0Xqzh4f3mWyQaRdpzdL5YJrXZM3RDOR0MRTtwHl8vp/N5MTTbiwDO3xj0dGvFv 40qTXf/Yc+vuVnnC8N+haa+q64lbq1uHDsAHvy9SA8ocrwXsd5O1i95nGAeGPtHV Lp8M6KxuaXEdhRONddDqVaN0iELbvx9K1Lne6wF/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU92x4e3AUf0/KVaXh+KTkXGC30nEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI4ZDE1NTA5LTQ4NzctNGNlYy1iODA2LTU0NjRlM2I1MDg3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/2QAAwDQYJKoZIhvcNAQELBQADggEBAMR1j7FoGWAHeIO4YdBESCwG JIixoQDQ8Pt25a7gsU0eAcxiXG5gCVNR+JwPVIuwSp2cnfKiY3/8mvEqA84GN9li xLAVAxNIjs+enaAWAA73F+lO2sTSRS/A0MH7m7zYDp/NjGgRxifUrloWUqG9Z5Ad Ny9VpWDyCm8WZ4cQJrBsBTSmQUERhzVU2mjgB3fIn2+MASOkZcfbbTEFeoKAOXKO bN8uljInkbnHbEVcWFDI59szNETSY2GVc9nRfVfyFcRKJDi5Gqa8tbptmyJ4xJmu fGl7Vx7xROdoQ3qNVLzfritgAbxvNR/LtAOSmbXRPddlSLtWKe27W+wHcmxR/yg= -----END CERTIFICATE-----Generated at Sat Jun 14 06:33:24 2025 by rpki-client