$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ff80769-cd75-4ae7-b984-e78ca26cdc71.roa File: 2ff80769-cd75-4ae7-b984-e78ca26cdc71.roa (raw, json) Hash identifier: ngFiSLrT6Vv8upu4rQTUemFNEgHjSOc3FAU8pUKAlNA= Subject key identifier: 4A:C7:35:AE:46:81:7F:D9:E2:ED:12:8F:68:0A:F6:3F:CF:79:21:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 549C69D9B3DB8B63283F5759CFE6EA7D2ED07E2A Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ff80769-cd75-4ae7-b984-e78ca26cdc71.roa Signing time: Tue 10 Jun 2025 16:10:22 +0000 ROA not before: Tue 10 Jun 2025 16:10:22 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:34c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9c:69:d9:b3:db:8b:63:28:3f:57:59:cf:e6:ea:7d:2e:d0:7e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:10:22 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=599c4854f88792542bd9c22ef93ae91b5f9800008409814a90a074decc5413e7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:c1:4b:8a:f2:7b:20:c8:59:e3:a4:02:49: e3:b2:85:0a:73:e2:d7:ba:46:59:00:32:1e:b6:28: dc:f3:23:d2:75:ef:20:67:70:b8:83:a8:af:76:f4: d6:f3:ee:eb:47:68:67:12:91:7b:1b:13:cf:bc:e4: 1e:e5:ab:e6:6f:b1:8d:9e:3c:0d:24:be:d4:f9:5c: 2c:1b:52:c0:3f:fd:f7:ae:69:75:22:17:35:c9:4b: 22:c7:3a:0c:4a:e5:f9:76:f0:56:8f:47:de:2e:8b: dd:2a:8f:4c:ac:9f:af:f0:6d:fc:4a:57:ec:1a:38: 43:21:ce:5d:3c:86:f6:aa:07:b1:fc:19:92:5a:26: 17:a7:6f:90:ee:de:d6:8e:a4:44:f4:67:f1:a7:cc: ba:bd:36:53:bf:43:3b:31:c1:4d:4e:84:75:c3:97: 47:22:e7:19:ca:69:92:42:80:7c:57:3e:7b:e9:90: ed:42:fe:1d:6e:7d:b7:a8:90:3b:d5:a6:40:db:3f: 28:61:d7:01:3b:83:63:46:59:00:7b:30:3d:3b:79: 78:17:c2:00:f2:c5:52:73:cc:cf:43:96:20:09:1e: fe:b3:3e:69:34:0a:52:03:be:d8:ea:81:3b:70:2b: 99:2b:a5:05:d6:c3:3a:34:1b:c4:a4:b5:4a:f2:5b: dd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C7:35:AE:46:81:7F:D9:E2:ED:12:8F:68:0A:F6:3F:CF:79:21:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ff80769-cd75-4ae7-b984-e78ca26cdc71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:34c0::/48 Signature Algorithm: sha256WithRSAEncryption 42:53:e3:28:98:e3:00:df:57:e9:a1:f6:f6:cf:41:f4:71:45: 0e:ed:80:95:16:35:8d:de:02:2b:0c:a7:0e:5a:e9:b5:e5:db: 97:a5:8c:b0:40:5b:75:11:9d:70:62:a3:9a:e0:74:6b:b2:30: 47:3f:c2:ad:a5:70:56:5b:88:66:ea:fe:be:56:87:d9:49:94: 32:d3:41:a0:d0:68:ec:a4:34:3f:fd:be:81:6b:0c:9f:11:4e: df:77:72:97:9c:aa:ed:c2:7b:bf:c9:73:5f:c2:cc:0d:51:7b: e7:65:52:95:a0:ba:e6:2a:b3:c8:ab:6c:2f:4b:e5:01:54:e1: b3:29:2b:74:9e:23:bd:5a:37:83:30:a0:d1:74:53:93:16:f3: 8f:44:80:6e:69:94:b7:fd:85:88:a0:a4:3a:81:97:2a:28:95: d7:92:70:aa:54:40:3e:6b:a9:6d:49:70:1e:ac:30:cc:07:c6: 2c:28:8a:c3:aa:37:90:e1:64:c5:dc:60:eb:65:52:ff:42:ae: cd:4d:a9:50:e4:ad:1b:bf:36:e5:be:b6:69:06:63:24:9f:46: 65:3a:b6:1a:b2:99:38:b2:ba:fc:4a:c8:aa:cf:27:94:42:cd: cf:5d:1e:ae:60:ee:05:f2:c3:35:60:e1:98:e6:92:f4:38:ed: 1e:9f:c4:bd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVJxp2bPbi2MoP1dZz+bqfS7QfiowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTYxMDIyWhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTljNDg1NGY4ODc5MjU0MmJkOWMyMmVmOTNhZTkxYjVm OTgwMDAwODQwOTgxNGE5MGEwNzRkZWNjNTQxM2U3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzxMFLivJ7IMhZ46QCSeOyhQpz4te6RlkAMh62KNzzI9J1 7yBncLiDqK929Nbz7utHaGcSkXsbE8+85B7lq+ZvsY2ePA0kvtT5XCwbUsA//feu aXUiFzXJSyLHOgxK5fl28FaPR94ui90qj0ysn6/wbfxKV+waOEMhzl08hvaqB7H8 GZJaJhenb5Du3taOpET0Z/GnzLq9NlO/QzsxwU1OhHXDl0ci5xnKaZJCgHxXPnvp kO1C/h1ufbeokDvVpkDbPyhh1wE7g2NGWQB7MD07eXgXwgDyxVJzzM9DliAJHv6z Pmk0ClIDvtjqgTtwK5krpQXWwzo0G8SktUryW90tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSsc1rkaBf9ni7RKPaAr2P895IdEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJmZjgwNzY5LWNkNzUtNGFlNy1iOTg0LWU3OGNhMjZjZGM3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hNMAwDQYJKoZIhvcNAQELBQADggEBAEJT4yiY4wDfV+mh9vbPQfRx RQ7tgJUWNY3eAisMpw5a6bXl25eljLBAW3URnXBio5rgdGuyMEc/wq2lcFZbiGbq /r5Wh9lJlDLTQaDQaOykND/9voFrDJ8RTt93cpecqu3Ce7/Jc1/CzA1Re+dlUpWg uuYqs8irbC9L5QFU4bMpK3SeI71aN4MwoNF0U5MW849EgG5plLf9hYigpDqBlyoo ldeScKpUQD5rqW1JcB6sMMwHxiwoisOqN5DhZMXcYOtlUv9Crs1NqVDkrRu/NuW+ tmkGYySfRmU6thqymTiyuvxKyKrPJ5RCzc9dHq5g7gXywzVg4ZjmkvQ47R6fxL0= -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:05 2025 by rpki-client