$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5241e690-a3db-46b2-8f15-2711eef6d7a4.roa File: 5241e690-a3db-46b2-8f15-2711eef6d7a4.roa (raw, json) Hash identifier: +N2ohy2jT36FXZZUiUTUubtD5x7JsGmXsOV/vDrpFIU= Subject key identifier: B7:81:70:86:30:AA:70:42:5E:9C:BB:93:A0:4F:CC:A1:6A:76:43:06 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 26347AD94F69607B9E10E20C2DD6029BE84D8C50 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5241e690-a3db-46b2-8f15-2711eef6d7a4.roa Signing time: Wed 11 Jun 2025 00:10:26 +0000 ROA not before: Wed 11 Jun 2025 00:10:26 +0000 ROA not after: Wed 16 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8090::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:34:7a:d9:4f:69:60:7b:9e:10:e2:0c:2d:d6:02:9b:e8:4d:8c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 11 00:10:26 2025 GMT Not After : Jul 16 23:59:59 2025 GMT Subject: serialNumber=b5df7fcc15532dd44e307277078dc8cc7c2f4da7dab00666b8b569c7d1dd6830, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:55:ef:3a:26:9c:6b:1b:d6:6f:1b:59:39: 17:f0:44:af:63:30:0b:8f:d4:a3:16:52:37:98:00: f3:61:e7:51:cc:7e:67:d9:0b:47:b9:28:70:9e:99: 85:ce:85:15:bc:c7:47:64:b5:3a:ac:32:22:c2:3f: 9c:23:65:a2:bb:da:7a:8c:bb:72:ad:19:d1:44:81: 67:3a:0e:47:ba:3a:42:64:d1:64:38:16:d6:cb:a6: 3b:68:aa:c2:b2:43:0f:bf:9c:50:7f:6b:69:89:3b: 62:16:1b:03:f9:76:6b:f6:ae:0f:1d:a1:bc:5e:41: d0:68:42:de:58:62:bc:fe:06:d1:6e:69:1f:87:bc: 80:31:61:39:d6:91:e2:19:ce:62:eb:40:a2:5a:eb: 28:48:9d:88:55:82:de:f3:ab:09:3e:7d:3e:2a:13: 28:08:40:e5:bb:6d:16:22:35:5c:8b:39:93:9c:8f: 91:e0:a7:40:80:58:51:56:be:84:9a:ee:69:9a:62: 1c:6b:1b:3b:4a:69:7d:b9:6f:6c:3c:0d:7f:83:2d: a0:ba:fc:79:2e:2c:c3:f2:f5:14:d3:78:19:3c:ba: 4a:b6:2c:48:7f:b1:ac:89:a2:3b:63:41:6e:2f:0e: 6a:c4:ed:0d:6b:3c:c4:0d:9a:28:54:43:91:39:73: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:81:70:86:30:AA:70:42:5E:9C:BB:93:A0:4F:CC:A1:6A:76:43:06 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5241e690-a3db-46b2-8f15-2711eef6d7a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8090::/48 Signature Algorithm: sha256WithRSAEncryption 18:fc:c4:f7:22:2d:05:fa:c8:ea:18:66:31:90:77:df:0e:77: 8c:bd:ae:76:7c:1b:b9:b0:ed:07:28:ed:7a:00:5f:df:05:60: 6e:a0:0f:a0:68:42:ca:eb:10:fe:24:c0:9c:9d:dc:53:e6:f4: 9c:51:d4:c3:22:a8:01:fb:20:b0:7f:1f:eb:c6:09:9f:ab:b8: 99:ce:70:87:c4:d4:fd:f0:92:02:f6:85:35:a8:3d:98:bb:b9: 33:e0:7f:d5:1b:53:d6:36:d0:89:3c:34:4f:99:67:db:03:b3: ad:96:4d:33:e3:dd:8f:48:4a:e2:2a:4a:31:1e:65:6f:c4:94: d2:76:91:52:28:a9:f7:96:5b:1b:c3:20:16:5a:89:32:a5:e5: f5:15:fd:66:af:21:8a:67:75:d3:9d:bd:ab:f6:ed:a2:4c:43: dd:1d:44:df:a2:81:58:5c:35:da:68:f9:18:58:f4:95:03:d6: 03:b6:a0:fe:56:00:1c:5d:90:68:28:99:a0:f5:17:0b:70:2d: 16:2d:7f:de:2d:10:d6:ed:81:05:5a:04:35:b2:58:bd:6c:bd: 81:d8:77:cf:62:42:c8:53:f6:6f:e5:9e:fc:2c:86:2e:63:41: d7:54:a1:39:d7:24:fb:49:e9:7a:40:f7:8f:1d:33:79:c4:c1: 2f:ef:c2:f9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJjR62U9pYHueEOIMLdYCm+hNjFAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDAxMDI2WhcNMjUwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNWRmN2ZjYzE1NTMyZGQ0NGUzMDcyNzcwNzhkYzhjYzdj MmY0ZGE3ZGFiMDA2NjZiOGI1NjljN2QxZGQ2ODMwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrIFXvOiacaxvWbxtZORfwRK9jMAuP1KMWUjeYAPNh51HM fmfZC0e5KHCemYXOhRW8x0dktTqsMiLCP5wjZaK72nqMu3KtGdFEgWc6Dke6OkJk 0WQ4FtbLpjtoqsKyQw+/nFB/a2mJO2IWGwP5dmv2rg8dobxeQdBoQt5YYrz+BtFu aR+HvIAxYTnWkeIZzmLrQKJa6yhInYhVgt7zqwk+fT4qEygIQOW7bRYiNVyLOZOc j5Hgp0CAWFFWvoSa7mmaYhxrGztKaX25b2w8DX+DLaC6/HkuLMPy9RTTeBk8ukq2 LEh/sayJojtjQW4vDmrE7Q1rPMQNmihUQ5E5c1HBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUt4FwhjCqcEJenLuToE/MoWp2QwYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUyNDFlNjkwLWEzZGItNDZiMi04ZjE1LTI3MTFlZWY2ZDdhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gJAwDQYJKoZIhvcNAQELBQADggEBABj8xPciLQX6yOoYZjGQd98O d4y9rnZ8G7mw7Qco7XoAX98FYG6gD6BoQsrrEP4kwJyd3FPm9JxR1MMiqAH7ILB/ H+vGCZ+ruJnOcIfE1P3wkgL2hTWoPZi7uTPgf9UbU9Y20Ik8NE+ZZ9sDs62WTTPj 3Y9ISuIqSjEeZW/ElNJ2kVIoqfeWWxvDIBZaiTKl5fUV/WavIYpnddOdvav27aJM Q90dRN+igVhcNdpo+RhY9JUD1gO2oP5WABxdkGgomaD1FwtwLRYtf94tENbtgQVa BDWyWL1svYHYd89iQshT9m/lnvwshi5jQddUoTnXJPtJ6XpA948dM3nEwS/vwvk= -----END CERTIFICATE-----Generated at Sat Jun 14 06:17:30 2025 by rpki-client