$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa File: 089a9530-fe26-4bbb-b150-6e821d16225e.roa (raw, json) Hash identifier: 8eXzOxGIJ41UVKscVPspJwdllll7qPUoC+GUsAL7IY0= Subject key identifier: 49:2D:EB:D6:6A:8C:7A:A1:53:3C:B0:54:0F:55:2A:44:44:06:FB:C3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0D2078100ADD8F1FE2C1A3799AD5EC3942767888 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa Signing time: Tue 10 Jun 2025 16:40:31 +0000 ROA not before: Tue 10 Jun 2025 16:40:31 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f38:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:20:78:10:0a:dd:8f:1f:e2:c1:a3:79:9a:d5:ec:39:42:76:78:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:40:31 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=f0edb55f2d3b7507ea18879d34885514d5c97caf9d9a04694fba501827a6586d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6b:69:5f:39:b2:90:5a:f2:c0:79:fb:81:02: 26:33:06:75:4a:c6:4e:da:01:b1:09:81:b5:9f:e5: 4b:0e:64:88:c2:31:65:0a:8c:09:0b:4c:59:fe:21: b2:99:d9:86:74:58:6f:72:2c:55:c1:46:98:42:93: f0:3a:22:7c:d0:da:ab:a1:52:18:dd:51:b4:77:85: 6e:bf:59:c9:66:9c:b0:92:1e:c0:bd:83:10:47:e8: df:d0:8a:8f:c1:50:61:d9:be:42:ec:5c:9b:39:52: 1c:5e:e0:a1:df:29:98:39:86:10:9d:21:4a:12:67: 2e:ee:0e:6b:21:6f:b6:db:9f:c4:9b:13:53:20:60: 0f:c5:5b:73:cb:3e:56:98:af:1c:5a:05:12:ac:5d: 74:68:e8:fc:f9:69:99:c4:58:34:20:91:9a:18:2c: ab:84:6b:04:74:38:b6:62:e0:e1:7a:8b:f4:fe:f8: eb:c9:26:29:9e:08:6e:2c:7b:e6:53:60:12:ab:7c: e4:0d:f4:7e:1f:55:3f:08:53:6c:f7:32:96:c3:53: 36:72:93:64:e4:25:0c:65:94:19:13:98:95:c3:cd: bd:ac:fa:62:43:4f:d3:ac:dc:35:4b:30:41:5a:a0: dc:54:61:66:94:f9:de:b2:6b:5a:26:f1:3e:2e:2d: e0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2D:EB:D6:6A:8C:7A:A1:53:3C:B0:54:0F:55:2A:44:44:06:FB:C3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 26:0a:c9:83:27:ca:09:25:b5:c8:8d:f2:ea:6e:a6:e6:78:a1: e1:d6:47:0e:92:ba:2e:05:12:58:8f:1e:18:7f:1c:65:92:46: 3b:df:57:ed:b0:39:75:48:21:cf:69:4a:7f:cb:44:39:05:55: a0:30:f1:46:de:5d:0c:2f:50:8e:af:f2:7e:d7:70:29:25:f0: 60:95:47:22:4a:5c:48:75:fc:0f:9a:ff:48:d8:2d:e7:5e:9b: 5d:d1:14:76:af:ef:ce:20:d9:6c:c9:c1:a4:b4:3f:4a:47:d1: 25:56:5e:4d:4c:21:4c:6e:97:60:ae:83:48:bd:4a:f8:05:fb: 9d:37:29:03:62:11:b6:e9:b4:dc:86:75:75:64:54:d6:38:e4: 1f:b2:a0:95:bf:11:50:a8:07:fd:c6:47:60:0a:7e:22:96:b9: ef:3b:3b:1e:73:eb:65:7f:e8:be:ca:74:46:be:e3:a6:08:ac: ff:c5:cb:f5:f3:02:ae:2d:56:8c:5f:25:5c:c7:36:56:ba:7e: ac:77:8d:95:f3:dd:3b:44:e5:5e:83:2d:8f:f6:e7:9f:e0:18: 53:6e:57:fe:ec:36:d3:f2:13:b2:5d:ef:ef:dc:35:a7:0a:81: 15:e9:a8:2b:cc:92:81:ba:79:fe:de:ec:82:83:02:87:46:95: f8:43:78:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDSB4EArdjx/iwaN5mtXsOUJ2eIgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTY0MDMxWhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMGVkYjU1ZjJkM2I3NTA3ZWExODg3OWQzNDg4NTUxNGQ1 Yzk3Y2FmOWQ5YTA0Njk0ZmJhNTAxODI3YTY1ODZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoa2lfObKQWvLAefuBAiYzBnVKxk7aAbEJgbWf5UsOZIjC MWUKjAkLTFn+IbKZ2YZ0WG9yLFXBRphCk/A6InzQ2quhUhjdUbR3hW6/WclmnLCS HsC9gxBH6N/Qio/BUGHZvkLsXJs5Uhxe4KHfKZg5hhCdIUoSZy7uDmshb7bbn8Sb E1MgYA/FW3PLPlaYrxxaBRKsXXRo6Pz5aZnEWDQgkZoYLKuEawR0OLZi4OF6i/T+ +OvJJimeCG4se+ZTYBKrfOQN9H4fVT8IU2z3MpbDUzZyk2TkJQxllBkTmJXDzb2s +mJDT9Os3DVLMEFaoNxUYWaU+d6ya1om8T4uLeC7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSS3r1mqMeqFTPLBUD1UqREQG+8MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzA4OWE5NTMwLWZlMjYtNGJiYi1iMTUwLTZlODIxZDE2MjI1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84gMAwDQYJKoZIhvcNAQELBQADggEBACYKyYMnygkltciN8upupuZ4 oeHWRw6Sui4FEliPHhh/HGWSRjvfV+2wOXVIIc9pSn/LRDkFVaAw8UbeXQwvUI6v 8n7XcCkl8GCVRyJKXEh1/A+a/0jYLedem13RFHav784g2WzJwaS0P0pH0SVWXk1M IUxul2Cug0i9SvgF+503KQNiEbbptNyGdXVkVNY45B+yoJW/EVCoB/3GR2AKfiKW ue87Ox5z62V/6L7KdEa+46YIrP/Fy/XzAq4tVoxfJVzHNla6fqx3jZXz3TtE5V6D LY/255/gGFNuV/7sNtPyE7Jd7+/cNacKgRXpqCvMkoG6ef7e7IKDAodGlfhDeFA= -----END CERTIFICATE-----Generated at Thu Jun 19 14:51:16 2025 by rpki-client