$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd929a8-008d-4a9f-82fa-61b37285a49d.roa File: acd929a8-008d-4a9f-82fa-61b37285a49d.roa (raw, json) Hash identifier: tYXVXZFRujL/aimFRZvgDEiKVTQH9R7bIYGl3ED8wQk= Subject key identifier: A5:31:D8:2B:72:4A:06:40:86:95:21:4C:5A:4E:CA:F7:8B:C1:7B:A8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 552C1CE7EB3B3AA90F53D2F2B674CB1363151FBA Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd929a8-008d-4a9f-82fa-61b37285a49d.roa Signing time: Fri 13 Jun 2025 15:52:00 +0000 ROA not before: Fri 13 Jun 2025 15:52:00 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2c:1c:e7:eb:3b:3a:a9:0f:53:d2:f2:b6:74:cb:13:63:15:1f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 15:52:00 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=8e8d73473ff2edb76235862a022c62ecdb7668fce48b46275f7863802c319390, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:5e:18:c0:3a:17:7c:75:c7:a6:67:73:d6: ac:47:1d:1c:f4:8d:0a:50:0c:d5:38:0f:c3:4a:a7: ea:b3:80:64:96:ff:dd:eb:5a:50:47:0f:e9:8a:07: 17:7b:3c:28:7e:ee:27:3d:32:16:4b:9a:84:03:b0: ff:6f:15:45:0b:d4:91:f0:87:5e:7d:93:4c:34:34: b2:2c:a9:bc:9e:83:ad:c5:a7:a0:03:16:fc:5d:c0: 53:e1:2e:28:cb:47:3a:7e:6f:33:5a:54:5a:56:03: 47:76:45:70:b6:3a:1c:9c:e2:22:0a:1a:e2:7c:07: f5:da:22:de:72:f1:4b:5a:5c:61:c9:9c:1f:e5:d4: 22:77:7c:26:92:b9:fd:86:b5:5d:39:ed:29:17:02: d2:05:04:b5:1f:d9:f0:07:e4:37:18:6b:26:ac:a5: 15:94:7b:d3:fc:ce:7c:22:2e:8a:6b:04:17:9c:d5: ee:07:37:4a:46:fc:b1:87:dc:11:ca:66:31:f2:54: 34:a6:e2:8e:db:00:e2:ba:85:7a:89:79:57:1b:fe: 7b:0f:0c:2e:57:b8:56:bf:21:1f:4e:da:b7:d4:05: 77:fa:39:92:16:60:90:96:9e:27:5a:8b:c8:d9:85: 11:92:73:95:82:3d:c7:fe:3d:f6:40:2e:a3:e0:d2: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:31:D8:2B:72:4A:06:40:86:95:21:4C:5A:4E:CA:F7:8B:C1:7B:A8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd929a8-008d-4a9f-82fa-61b37285a49d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:3440::/48 Signature Algorithm: sha256WithRSAEncryption 09:ed:b5:b2:db:52:fa:9c:73:56:ed:6a:a8:c9:5f:cd:5e:d1: 0c:5d:9e:cc:ba:e8:e1:ae:da:3e:88:73:47:b1:08:8f:8c:34: b5:c2:b7:b0:dd:df:fe:d3:28:85:e0:55:6d:c7:ac:a5:c0:89: 4e:8d:86:14:c7:b2:92:58:aa:e8:b8:6f:dd:dd:83:77:1d:3a: 48:31:01:23:95:be:2c:9b:26:65:e7:4f:80:43:bb:db:73:81: 61:96:c1:50:2c:fa:4b:f8:bf:9c:36:4b:26:9f:34:c2:c4:12: 83:b2:84:8b:6b:f8:58:49:6f:e9:75:59:14:5b:36:b9:6c:40: 3f:c3:22:66:68:f1:6c:bf:5c:36:32:3f:b5:39:70:c9:a0:9f: c3:95:06:af:9e:b9:8c:60:87:75:6a:5b:ec:0b:13:5f:96:3e: 33:32:6c:f2:31:c3:f9:58:7c:14:6b:e5:dd:f5:29:dc:b7:a9: fd:44:00:48:c9:c8:3b:06:7c:83:fa:ae:1f:f7:a0:c4:9f:f2: c2:01:c1:02:6b:3c:c1:f9:eb:74:1b:ae:03:f0:82:ea:ed:bf: aa:ba:88:96:87:27:13:3c:32:5f:9f:91:f0:64:56:30:44:04: 9f:ee:a3:d1:0c:a4:ed:62:9e:59:42:5c:cc:2d:e9:6f:6a:0f: 10:71:9f:82 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVSwc5+s7OqkPU9LytnTLE2MVH7owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTU1MjAwWhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZThkNzM0NzNmZjJlZGI3NjIzNTg2MmEwMjJjNjJlY2Ri NzY2OGZjZTQ4YjQ2Mjc1Zjc4NjM4MDJjMzE5MzkwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxCV4YwDoXfHXHpmdz1qxHHRz0jQpQDNU4D8NKp+qzgGSW /93rWlBHD+mKBxd7PCh+7ic9MhZLmoQDsP9vFUUL1JHwh159k0w0NLIsqbyeg63F p6ADFvxdwFPhLijLRzp+bzNaVFpWA0d2RXC2Ohyc4iIKGuJ8B/XaIt5y8UtaXGHJ nB/l1CJ3fCaSuf2GtV057SkXAtIFBLUf2fAH5DcYayaspRWUe9P8znwiLoprBBec 1e4HN0pG/LGH3BHKZjHyVDSm4o7bAOK6hXqJeVcb/nsPDC5XuFa/IR9O2rfUBXf6 OZIWYJCWnidai8jZhRGSc5WCPcf+PfZALqPg0uLXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpTHYK3JKBkCGlSFMWk7K94vBe6gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FjZDkyOWE4LTAwOGQtNGE5Zi04MmZhLTYxYjM3Mjg1YTQ5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84NEAwDQYJKoZIhvcNAQELBQADggEBAAnttbLbUvqcc1btaqjJX81e 0Qxdnsy66OGu2j6Ic0exCI+MNLXCt7Dd3/7TKIXgVW3HrKXAiU6NhhTHspJYqui4 b93dg3cdOkgxASOVviybJmXnT4BDu9tzgWGWwVAs+kv4v5w2SyafNMLEEoOyhItr +FhJb+l1WRRbNrlsQD/DImZo8Wy/XDYyP7U5cMmgn8OVBq+euYxgh3VqW+wLE1+W PjMybPIxw/lYfBRr5d31Kdy3qf1EAEjJyDsGfIP6rh/3oMSf8sIBwQJrPMH563Qb rgPwgurtv6q6iJaHJxM8Ml+fkfBkVjBEBJ/uo9EMpO1inllCXMwt6W9qDxBxn4I= -----END CERTIFICATE-----Generated at Sat Jun 14 06:19:10 2025 by rpki-client