$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/104fa4c4-c1fb-4354-abec-53fce1cea84e.roa File: 104fa4c4-c1fb-4354-abec-53fce1cea84e.roa (raw, json) Hash identifier: ZtBTHLWVPPi27KLeAKcyTVb0WRg7Kxl3uUI425t3HDs= Subject key identifier: 3C:BC:80:6A:4B:15:C0:F5:A5:84:F0:6B:C0:F1:2C:84:5E:C8:95:26 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0B28E0ACF6A3525C2566F6E8465BFF3316AA0840 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/104fa4c4-c1fb-4354-abec-53fce1cea84e.roa Signing time: Fri 13 Jun 2025 00:51:59 +0000 ROA not before: Fri 13 Jun 2025 00:51:59 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:1020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:28:e0:ac:f6:a3:52:5c:25:66:f6:e8:46:5b:ff:33:16:aa:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 00:51:59 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=1a3bae8c39604cc5f0ce21af1d5caf6619a56726ad9b9477cdf0e550c36081f6, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e4:0e:3c:9c:ac:7c:21:8d:2e:ac:de:35:2f: 57:c7:ee:2d:ea:1d:34:75:61:92:e1:e4:4c:f6:63: 70:2d:52:92:cf:a3:7e:ce:78:ed:f0:75:ae:f9:22: b0:2e:0f:5e:e0:04:af:bb:7b:0f:bd:97:fa:28:cf: 21:f2:85:48:76:28:84:9e:3a:dd:6d:8f:38:a2:be: 55:a8:fc:b2:10:28:bb:93:64:48:da:a4:7f:8f:b9: ac:61:2b:61:5f:34:0d:59:68:d6:11:01:63:68:86: 86:f6:a8:69:af:c7:ce:98:2c:e9:f9:e9:28:ab:07: 52:11:fa:3b:7c:eb:9b:27:42:4d:33:7e:ce:66:6a: fd:aa:8e:e2:72:75:28:41:69:dc:bf:03:80:af:b8: 70:5e:11:bf:37:0f:93:17:67:6c:c4:1a:22:5b:23: 94:43:b5:9f:09:bf:0c:0a:b3:87:99:db:43:ff:b7: da:0f:aa:48:d3:28:7a:27:20:c8:16:bb:ed:78:e4: 1e:33:11:98:fc:a2:c2:14:0b:66:30:8d:3a:83:98: 92:ef:7d:b1:fd:57:76:af:5d:af:30:93:59:5b:6e: d9:e2:1f:6e:99:d7:a3:74:17:61:1c:20:30:12:f1: a7:68:69:af:c5:9f:9e:5a:2d:71:81:18:8b:33:25: 1a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BC:80:6A:4B:15:C0:F5:A5:84:F0:6B:C0:F1:2C:84:5E:C8:95:26 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/104fa4c4-c1fb-4354-abec-53fce1cea84e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:1020::/46 Signature Algorithm: sha256WithRSAEncryption 10:59:c2:82:1a:da:d1:9e:56:bc:25:be:83:aa:22:5e:c2:31: 44:86:da:92:47:15:3c:f8:2b:f4:84:bd:65:73:56:8a:c4:32: c1:9c:72:b6:a4:fb:1e:7f:2b:6e:31:e0:25:ee:2a:ef:b5:5b: 85:3b:08:1d:59:d4:cf:65:3e:71:62:e5:8e:62:82:05:29:56: cd:f8:d2:d3:32:c7:a6:17:cc:72:bb:93:e4:04:97:4f:df:e7: 12:e5:4c:9c:ca:72:68:10:cc:11:93:12:61:84:4d:b9:b2:ff: 1a:9d:39:bf:e4:2f:86:98:ca:56:c7:76:03:a8:cf:4d:72:e9: 4e:85:d6:46:be:ae:4f:d9:3c:54:b2:88:58:b3:5c:d4:70:a0: ef:7d:2d:f7:78:eb:70:95:47:0e:af:d1:46:02:de:5a:7a:13: d9:c2:b7:c0:ab:2c:79:29:f9:d9:f9:2a:f1:17:b8:1c:6e:ea: 65:4c:92:ac:43:41:13:13:93:b4:19:7a:05:1c:5a:f9:43:5c: a8:6b:17:2d:73:f1:97:3a:16:3b:2c:3f:39:4b:5a:79:a0:64: f8:8f:b0:ea:a7:54:63:8f:dc:87:58:43:dc:b1:e8:5c:17:9a: 30:a8:8c:c8:c2:d9:f6:14:07:fe:29:c7:26:aa:5c:a1:b3:34: 7a:1f:00:97 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCyjgrPajUlwlZvboRlv/MxaqCEAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMDA1MTU5WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTNiYWU4YzM5NjA0Y2M1ZjBjZTIxYWYxZDVjYWY2NjE5 YTU2NzI2YWQ5Yjk0NzdjZGYwZTU1MGMzNjA4MWY2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDm5A48nKx8IY0urN41L1fH7i3qHTR1YZLh5Ez2Y3AtUpLP o37OeO3wda75IrAuD17gBK+7ew+9l/oozyHyhUh2KISeOt1tjziivlWo/LIQKLuT ZEjapH+PuaxhK2FfNA1ZaNYRAWNohob2qGmvx86YLOn56SirB1IR+jt865snQk0z fs5mav2qjuJydShBady/A4CvuHBeEb83D5MXZ2zEGiJbI5RDtZ8JvwwKs4eZ20P/ t9oPqkjTKHonIMgWu+145B4zEZj8osIUC2YwjTqDmJLvfbH9V3avXa8wk1lbbtni H26Z16N0F2EcIDAS8adoaa/Fn55aLXGBGIszJRqFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPLyAaksVwPWlhPBrwPEshF7IlSYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzEwNGZhNGM0LWMxZmItNDM1NC1hYmVjLTUzZmNlMWNlYTg0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3ECAwDQYJKoZIhvcNAQELBQADggEBABBZwoIa2tGeVrwlvoOqIl7C MUSG2pJHFTz4K/SEvWVzVorEMsGccrak+x5/K24x4CXuKu+1W4U7CB1Z1M9lPnFi 5Y5iggUpVs340tMyx6YXzHK7k+QEl0/f5xLlTJzKcmgQzBGTEmGETbmy/xqdOb/k L4aYylbHdgOoz01y6U6F1ka+rk/ZPFSyiFizXNRwoO99Lfd463CVRw6v0UYC3lp6 E9nCt8CrLHkp+dn5KvEXuBxu6mVMkqxDQRMTk7QZegUcWvlDXKhrFy1z8Zc6Fjss PzlLWnmgZPiPsOqnVGOP3IdYQ9yx6FwXmjCojMjC2fYUB/4pxyaqXKGzNHofAJc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:23:07 2025 by rpki-client