$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1df7e4e3-11e9-457d-8c33-353a0845dc63.roa File: 1df7e4e3-11e9-457d-8c33-353a0845dc63.roa (raw, json) Hash identifier: NjNSFZIj6utC9jVjRleTZgjVCK+e0UUg3P0548eS+aM= Subject key identifier: 81:41:21:19:BC:B5:A1:83:23:44:D1:53:FF:3E:41:2C:2E:21:34:9C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 15F303E42F159BEEE11B0A75E1C2D3E2421086B0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1df7e4e3-11e9-457d-8c33-353a0845dc63.roa Signing time: Tue 10 Jun 2025 16:21:52 +0000 ROA not before: Tue 10 Jun 2025 16:21:52 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:8060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f3:03:e4:2f:15:9b:ee:e1:1b:0a:75:e1:c2:d3:e2:42:10:86:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:21:52 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=b33097b6fc3f05b71328aa7fa2daf5db6ef37d0842444cfe93534fd8b4edf80d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:64:1f:b0:5f:e0:c5:53:24:96:f5:c4:81:6a: fd:26:b1:07:cd:7d:ee:5d:52:c9:a0:c4:45:65:03: f3:34:dd:b0:4d:49:8b:9b:4c:e6:5c:06:7c:7d:d3: c4:48:ef:72:1c:22:06:7f:5f:a1:12:21:28:04:4e: 55:40:45:af:24:38:b4:f1:a2:3d:86:bc:03:bd:b1: 9b:22:66:ac:cc:33:e9:0c:36:dd:ea:17:e2:0b:2f: f3:58:10:7d:91:ec:3e:b9:df:b6:cc:fa:62:5b:ab: cc:c3:a5:13:b4:02:4c:09:3f:b4:57:a1:c7:18:27: 38:ed:1e:2c:a9:e7:a6:10:07:98:69:2c:87:b8:e9: 07:f6:37:e2:0d:5f:6f:98:fa:da:18:d3:f7:bd:92: 22:6b:dd:15:ef:49:7f:b8:ab:e1:42:d4:84:f6:70: b7:e4:86:e3:ae:b8:92:ac:6f:0a:3b:8e:a4:5f:0d: 48:60:c9:d5:6d:da:ff:4d:9c:cc:7e:a1:e5:77:3d: 7a:54:e4:2b:b5:76:fe:12:cf:a1:9c:d9:ba:78:86: 3e:fb:f4:a8:14:a9:03:95:36:dc:53:ca:43:72:07: ff:6c:76:7a:c5:1a:dc:9a:33:72:e0:7c:9d:44:b6: de:7b:59:a3:03:fc:ff:eb:5a:39:0a:72:4f:84:fd: b7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:41:21:19:BC:B5:A1:83:23:44:D1:53:FF:3E:41:2C:2E:21:34:9C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1df7e4e3-11e9-457d-8c33-353a0845dc63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8060::/48 Signature Algorithm: sha256WithRSAEncryption 1b:3c:fd:20:1d:c9:e0:93:89:c0:f7:f9:d6:1e:bd:b7:bd:6a: 94:c1:24:4c:ce:fa:87:2b:d6:5e:d8:bd:44:3b:7c:68:40:d8: 1a:3e:fa:b1:0e:4e:ed:60:41:0f:6c:d6:91:9a:1c:a1:5e:68: db:40:cf:d3:c4:94:16:cf:3b:5f:bb:2f:8e:e7:82:17:ae:9c: 8d:7e:85:94:43:f3:17:0c:a3:d0:d6:4c:d5:f6:3f:4b:b2:4d: c3:4a:c3:96:d8:32:4f:c0:13:c9:55:14:54:22:2e:f8:1b:ff: d3:03:c6:7e:f3:44:c5:08:f4:43:d5:64:6d:ab:c7:15:3d:5b: 5d:4c:95:76:bd:29:ff:e0:49:53:ef:72:19:5a:73:da:27:67: 94:16:95:ea:11:37:c5:29:97:a1:c1:dc:1f:df:6b:7c:6f:46: 34:9c:b2:cf:b0:b1:86:d6:9d:3d:e3:73:b5:8c:fc:69:8e:21: a6:57:ef:28:09:da:ed:6f:8c:9d:7c:83:ab:93:98:1a:12:84: 5c:b9:b0:56:ae:59:bb:73:f5:ae:ec:b7:94:05:c3:56:b2:d9: 48:a8:41:2e:a0:be:df:d1:08:d3:e3:ab:63:1f:a4:4a:c7:b7: 71:d0:88:3e:81:22:28:3d:d1:d5:9b:00:3f:61:48:96:ca:51: 50:8f:21:3c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFfMD5C8Vm+7hGwp14cLT4kIQhrAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTYyMTUyWhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzMwOTdiNmZjM2YwNWI3MTMyOGFhN2ZhMmRhZjVkYjZl ZjM3ZDA4NDI0NDRjZmU5MzUzNGZkOGI0ZWRmODBkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsZB+wX+DFUySW9cSBav0msQfNfe5dUsmgxEVlA/M03bBN SYubTOZcBnx908RI73IcIgZ/X6ESISgETlVARa8kOLTxoj2GvAO9sZsiZqzMM+kM Nt3qF+ILL/NYEH2R7D6537bM+mJbq8zDpRO0AkwJP7RXoccYJzjtHiyp56YQB5hp LIe46Qf2N+INX2+Y+toY0/e9kiJr3RXvSX+4q+FC1IT2cLfkhuOuuJKsbwo7jqRf DUhgydVt2v9NnMx+oeV3PXpU5Cu1dv4Sz6Gc2bp4hj779KgUqQOVNtxTykNyB/9s dnrFGtyaM3LgfJ1Ett57WaMD/P/rWjkKck+E/bcRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgUEhGby1oYMjRNFT/z5BLC4hNJwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFkZjdlNGUzLTExZTktNDU3ZC04YzMzLTM1M2EwODQ1ZGM2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgGAwDQYJKoZIhvcNAQELBQADggEBABs8/SAdyeCTicD3+dYevbe9 apTBJEzO+ocr1l7YvUQ7fGhA2Bo++rEOTu1gQQ9s1pGaHKFeaNtAz9PElBbPO1+7 L47ngheunI1+hZRD8xcMo9DWTNX2P0uyTcNKw5bYMk/AE8lVFFQiLvgb/9MDxn7z RMUI9EPVZG2rxxU9W11MlXa9Kf/gSVPvchlac9onZ5QWleoRN8Upl6HB3B/fa3xv RjScss+wsYbWnT3jc7WM/GmOIaZX7ygJ2u1vjJ18g6uTmBoShFy5sFauWbtz9a7s t5QFw1ay2UioQS6gvt/RCNPjq2MfpErHt3HQiD6BIig90dWbAD9hSJbKUVCPITw= -----END CERTIFICATE-----Generated at Sun Jun 15 00:35:42 2025 by rpki-client