$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa File: aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa (raw, json) Hash identifier: w84v6da1uq4B3rw/vE/InujUzlkW9FeEhME0BqyRFVI= Subject key identifier: 7E:93:F4:70:A2:F8:8F:B2:91:EB:BA:A2:11:22:42:97:CA:2F:95:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7DD23FADE70BFBEA6E5704C4BF0F5B251A06BA8F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa Signing time: Wed 11 Jun 2025 00:21:20 +0000 ROA not before: Wed 11 Jun 2025 00:21:20 +0000 ROA not after: Wed 16 Jul 2025 23:59:59 +0000 asID: 7224 IP address blocks: 2600:1ffd:1008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d2:3f:ad:e7:0b:fb:ea:6e:57:04:c4:bf:0f:5b:25:1a:06:ba:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 11 00:21:20 2025 GMT Not After : Jul 16 23:59:59 2025 GMT Subject: serialNumber=e889e83ae4fd96026155b32c9ffdbacecdd4ab9af64eb6d796dcd4253b5bdb19, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:af:42:be:ed:fb:97:cb:2f:23:09:cf:d1:5f: 49:cc:66:e4:32:35:38:83:f5:0c:34:4f:3b:27:c5: 23:aa:4a:8a:e0:0b:87:28:21:5b:d2:e3:66:31:16: 55:7a:61:d6:07:8f:c5:93:c5:e1:23:ac:f0:1e:9c: 60:05:b7:2b:3e:57:56:bc:2b:17:3d:8c:f0:f9:65: 0c:90:8d:b0:0d:8e:96:02:1c:ea:5e:20:fe:9e:73: 08:5f:9e:e8:22:05:6b:f2:21:02:f9:39:bf:e7:f2: 52:cf:95:70:21:2f:08:4d:63:d8:f1:10:e4:33:ef: 92:ac:fe:9e:56:d5:1c:a3:53:88:5a:95:0c:25:f9: 41:cf:c1:5e:e4:34:b4:27:5d:54:1d:80:69:59:34: c1:06:3d:b7:12:62:5b:1b:62:96:b2:a6:f1:f1:be: 6f:fe:41:23:3b:e9:96:90:f9:f5:ed:b6:fe:e0:a4: fd:70:c8:75:f6:8c:27:2f:46:08:1e:76:95:7f:09: 31:cd:de:e1:26:59:d1:9f:9d:07:60:aa:6b:af:24: 81:9e:bd:21:56:a8:26:76:0c:a8:91:85:3f:4e:31: bf:9c:41:56:18:b7:99:bc:c7:ba:7c:65:67:d8:49: cf:12:6d:48:3a:c0:20:ea:32:6e:91:c5:f8:ac:e6: 83:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:93:F4:70:A2:F8:8F:B2:91:EB:BA:A2:11:22:42:97:CA:2F:95:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa4b93c4-5123-4d2f-a2e4-dd98abc19e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffd:1008::/48 Signature Algorithm: sha256WithRSAEncryption c5:94:64:47:76:16:ba:38:20:26:6d:f0:20:0c:c7:80:89:9c: 38:d3:71:37:eb:f6:09:da:66:2f:52:cb:86:1b:67:69:74:34: 98:30:cf:80:2f:8c:51:d5:0c:13:b1:a9:ef:a9:7b:9a:42:e0: a9:1f:41:eb:31:40:25:2e:67:95:26:dc:de:7f:e2:23:f0:18: 72:cd:35:2b:82:56:3b:9f:a6:49:20:b7:09:c3:18:82:58:c6: 95:ea:e8:d7:ec:f1:03:e6:be:86:b7:bc:0b:52:e9:88:c1:8b: 29:43:1e:7e:fe:5f:c6:a9:1b:cd:75:b7:11:0f:ea:40:c2:c6: dc:ec:79:32:2f:5e:08:f0:7d:77:af:f5:96:3d:6a:35:4e:ef: 62:72:18:07:c8:50:cc:ad:79:b9:d4:b3:1a:ab:b6:72:be:ff: 6e:53:60:3a:79:ab:d6:8a:38:35:3f:e0:d9:5d:7f:a8:f3:0b: 34:e8:24:31:8c:3a:b0:47:99:cf:a9:0e:4b:c4:a8:bd:c5:83: b1:9a:d5:de:5e:17:69:be:42:10:23:82:d2:14:4f:e2:cc:1e: f0:91:41:ca:7b:f0:37:40:4f:02:28:dc:70:76:33:02:6a:f8: f6:f4:be:3a:21:72:73:91:de:85:26:54:1c:78:40:76:4d:f5: 60:55:8f:fa -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfdI/recL++puVwTEvw9bJRoGuo8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjExMDAyMTIwWhcNMjUwNzE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlODg5ZTgzYWU0ZmQ5NjAyNjE1NWIzMmM5ZmZkYmFjZWNk ZDRhYjlhZjY0ZWI2ZDc5NmRjZDQyNTNiNWJkYjE5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQr0K+7fuXyy8jCc/RX0nMZuQyNTiD9Qw0TzsnxSOqSorg C4coIVvS42YxFlV6YdYHj8WTxeEjrPAenGAFtys+V1a8Kxc9jPD5ZQyQjbANjpYC HOpeIP6ecwhfnugiBWvyIQL5Ob/n8lLPlXAhLwhNY9jxEOQz75Ks/p5W1RyjU4ha lQwl+UHPwV7kNLQnXVQdgGlZNMEGPbcSYlsbYpaypvHxvm/+QSM76ZaQ+fXttv7g pP1wyHX2jCcvRggedpV/CTHN3uEmWdGfnQdgqmuvJIGevSFWqCZ2DKiRhT9OMb+c QVYYt5m8x7p8ZWfYSc8SbUg6wCDqMm6Rxfis5oPHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfpP0cKL4j7KR67qiESJCl8ovlbMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FhNGI5M2M0LTUxMjMtNGQyZi1hMmU0LWRkOThhYmMxOWU3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB/9EAgwDQYJKoZIhvcNAQELBQADggEBAMWUZEd2Fro4ICZt8CAMx4CJ nDjTcTfr9gnaZi9Sy4YbZ2l0NJgwz4AvjFHVDBOxqe+pe5pC4KkfQesxQCUuZ5Um 3N5/4iPwGHLNNSuCVjufpkkgtwnDGIJYxpXq6Nfs8QPmvoa3vAtS6YjBiylDHn7+ X8apG811txEP6kDCxtzseTIvXgjwfXev9ZY9ajVO72JyGAfIUMytebnUsxqrtnK+ /25TYDp5q9aKODU/4Nldf6jzCzToJDGMOrBHmc+pDkvEqL3Fg7Ga1d5eF2m+QhAj gtIUT+LMHvCRQcp78DdATwIo3HB2MwJq+Pb0vjohcnOR3oUmVBx4QHZN9WBVj/o= -----END CERTIFICATE-----Generated at Sun Jun 15 21:31:35 2025 by rpki-client