$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66211771-006c-403c-9f59-8b5ea44be947.roa File: 66211771-006c-403c-9f59-8b5ea44be947.roa (raw, json) Hash identifier: UvErftghch1pil49lT7+PhlKLu1Z+gFbCoi4f2SqFvg= Subject key identifier: FB:F7:28:D9:81:49:81:91:73:9A:9B:3D:A4:9B:CA:EE:51:0E:43:8A Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 315A12AF5B9BCDE6505ABA6E9CBD0692E13C3770 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66211771-006c-403c-9f59-8b5ea44be947.roa Signing time: Tue 10 Jun 2025 16:31:27 +0000 ROA not before: Tue 10 Jun 2025 16:31:27 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5a:12:af:5b:9b:cd:e6:50:5a:ba:6e:9c:bd:06:92:e1:3c:37:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:31:27 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=212fd510dc6ea3b61453e636550e88055ee2203a80cdfaf8bf0806185e3bca37, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:08:7a:c7:4c:ae:8e:c0:00:66:9f:77:ea: ba:95:51:2e:13:9e:55:81:fe:ab:ee:f2:32:d8:c8: 8d:7e:1a:22:8a:68:84:dc:90:00:84:00:d9:6e:0d: c7:9e:3b:20:59:1e:c6:4f:51:5a:2b:5f:d1:99:c6: 19:7b:8c:7c:cf:bd:83:cb:be:3b:c7:d7:cf:f1:c6: f5:b2:38:e8:2e:43:ad:ce:cc:14:a0:04:59:50:60: 2e:95:c6:5b:55:11:03:e0:32:ae:5b:6c:9e:4a:cf: 59:41:69:f9:df:99:17:78:05:8a:e2:98:f7:60:0a: 4b:b3:47:65:c1:62:f1:b5:cf:b7:90:71:7b:ca:cc: e4:81:2a:3e:22:84:da:ab:bf:40:04:0f:b8:31:09: 02:76:8a:ad:6a:d5:9d:63:48:56:21:7d:3a:70:eb: e4:5d:69:dc:44:8b:dc:88:3a:e4:55:ca:3a:74:53: fa:f1:f4:24:5c:82:b5:80:a2:d7:83:f0:84:3a:37: 99:dc:4b:76:0c:86:b8:7a:97:d1:da:fc:ac:95:0b: 79:eb:e3:be:00:9b:b0:c2:40:ba:e7:4e:95:a6:22: cd:60:6b:a6:71:65:f5:46:7b:f1:cb:63:44:92:66: f2:ba:6c:5e:f5:4a:d5:ca:5e:4d:6e:75:30:20:e4: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F7:28:D9:81:49:81:91:73:9A:9B:3D:A4:9B:CA:EE:51:0E:43:8A X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66211771-006c-403c-9f59-8b5ea44be947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:8040::/48 Signature Algorithm: sha256WithRSAEncryption cf:63:8a:ad:90:4a:c6:37:30:cc:0d:04:9e:ce:f9:10:6c:70: 26:64:62:5f:f9:4e:7c:f8:ea:52:29:12:b6:fe:a6:02:c8:58: 89:1f:f1:82:fe:54:2a:36:d0:06:4e:e2:a8:2e:92:51:ff:4c: a1:30:e2:40:5b:fe:ce:80:f2:ec:d3:db:e4:ef:28:d5:1d:9c: eb:65:6f:3e:c5:8c:c4:f2:a7:a8:d2:ef:a2:d9:e2:e2:58:fd: a7:ad:5f:ec:0f:49:1e:8b:3e:19:2b:ac:60:f4:e7:7b:cc:ac: 5f:a1:a1:45:d5:f7:ae:93:1e:16:2c:8a:c8:e4:02:02:e1:52: ec:8d:a7:a0:4f:f9:e2:9b:40:46:79:96:bf:64:44:29:5a:ae: d3:ad:d4:fc:a4:75:5b:c8:49:f2:4c:ed:85:89:1a:68:6d:59: 23:aa:81:b1:00:81:84:95:22:79:ed:a8:30:b4:3e:c0:6e:5b: d6:1c:06:21:33:b4:b1:a6:6a:23:7b:ed:41:a9:2f:98:07:e6: 1a:af:b5:fe:c6:60:6c:ab:3e:de:bb:74:01:2f:a6:ba:a4:8b: 3b:bb:ab:05:71:e2:2d:83:73:72:48:b5:82:f0:b9:4a:ce:03: 3d:99:f8:61:c8:f1:d2:ab:45:0c:40:ff:31:f1:8e:77:0c:dc: 11:70:f0:e1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMVoSr1ubzeZQWrpunL0GkuE8N3AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTYzMTI3WhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTJmZDUxMGRjNmVhM2I2MTQ1M2U2MzY1NTBlODgwNTVl ZTIyMDNhODBjZGZhZjhiZjA4MDYxODVlM2JjYTM3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz0wh6x0yujsAAZp936rqVUS4TnlWB/qvu8jLYyI1+GiKK aITckACEANluDceeOyBZHsZPUVorX9GZxhl7jHzPvYPLvjvH18/xxvWyOOguQ63O zBSgBFlQYC6VxltVEQPgMq5bbJ5Kz1lBafnfmRd4BYrimPdgCkuzR2XBYvG1z7eQ cXvKzOSBKj4ihNqrv0AED7gxCQJ2iq1q1Z1jSFYhfTpw6+RdadxEi9yIOuRVyjp0 U/rx9CRcgrWAoteD8IQ6N5ncS3YMhrh6l9Ha/KyVC3nr474Am7DCQLrnTpWmIs1g a6ZxZfVGe/HLY0SSZvK6bF71StXKXk1udTAg5E3RAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+/co2YFJgZFzmps9pJvK7lEOQ4owHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY2MjExNzcxLTAwNmMtNDAzYy05ZjU5LThiNWVhNDRiZTk0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//gEAwDQYJKoZIhvcNAQELBQADggEBAM9jiq2QSsY3MMwNBJ7O+RBs cCZkYl/5Tnz46lIpErb+pgLIWIkf8YL+VCo20AZO4qguklH/TKEw4kBb/s6A8uzT 2+TvKNUdnOtlbz7FjMTyp6jS76LZ4uJY/aetX+wPSR6LPhkrrGD053vMrF+hoUXV 966THhYsisjkAgLhUuyNp6BP+eKbQEZ5lr9kRClartOt1PykdVvISfJM7YWJGmht WSOqgbEAgYSVInntqDC0PsBuW9YcBiEztLGmaiN77UGpL5gH5hqvtf7GYGyrPt67 dAEvprqkizu7qwVx4i2Dc3JItYLwuUrOAz2Z+GHI8dKrRQxA/zHxjncM3BFw8OE= -----END CERTIFICATE-----Generated at Sat Jun 14 06:46:32 2025 by rpki-client