$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aea1a8c4-9623-482e-bac8-7f47ab2e6116.roa File: aea1a8c4-9623-482e-bac8-7f47ab2e6116.roa (raw, json) Hash identifier: FaXgvzAoXNMrMVL1wbyMEJ585zlaH/HA2GLxq7PUFjM= Subject key identifier: E4:1D:37:51:39:40:1E:06:5A:2F:8F:CB:05:58:4F:69:86:E3:B9:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2394A3E4E6926329E74BA3E98C130AA725CD98F0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aea1a8c4-9623-482e-bac8-7f47ab2e6116.roa Signing time: Sat 14 Jun 2025 00:41:57 +0000 ROA not before: Sat 14 Jun 2025 00:41:57 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f23:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:94:a3:e4:e6:92:63:29:e7:4b:a3:e9:8c:13:0a:a7:25:cd:98:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:41:57 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=b68203cd1d216c1ba5a790a8003dc6755e49046bd1ccf5f5754b78b373338b72, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:d7:d2:13:2c:8c:8d:79:f2:fe:1a:09:16: 95:34:fa:ed:49:ce:90:76:e6:15:1c:f8:5b:26:aa: 1f:93:a6:a2:04:91:0d:15:fc:f7:93:58:db:f3:13: dc:32:67:ed:71:fe:df:86:b6:b5:8c:e7:1e:28:86: b6:95:e8:ab:22:d7:de:93:4f:7b:1e:6d:5d:11:c6: aa:4a:b8:66:71:ee:9f:ff:29:f0:c4:10:11:48:85: c9:db:06:25:c2:05:2e:2b:42:c8:ac:6a:da:f0:25: 09:55:5a:cb:3e:ed:0d:bb:3e:65:33:38:6d:b5:a2: bd:2b:bc:27:f0:de:aa:c6:16:7e:a7:09:09:21:65: f6:4e:65:79:e0:a9:21:2f:6e:c8:aa:6a:44:59:0b: ce:db:dd:07:65:5e:b1:e9:0f:5a:a2:d6:f0:8d:56: 31:a6:0d:a3:b8:b6:27:a9:e3:f6:c9:6a:e1:27:fa: 2e:25:17:e8:ec:a1:7e:72:ce:3d:82:20:9a:85:47: 1a:51:fd:59:35:d1:3e:38:96:7d:ff:70:ef:54:b9: 60:cf:ed:f2:ed:a2:65:e5:2a:b3:ab:43:e4:12:2b: 90:ae:60:78:c5:bd:fe:79:56:8a:c6:10:41:98:34: ab:82:26:c3:2c:74:53:52:92:e8:5b:a2:1e:1b:0b: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1D:37:51:39:40:1E:06:5A:2F:8F:CB:05:58:4F:69:86:E3:B9:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aea1a8c4-9623-482e-bac8-7f47ab2e6116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f23:8000::/36 Signature Algorithm: sha256WithRSAEncryption 8a:77:32:77:e8:f0:b0:f3:e0:77:ec:70:5d:50:2d:c5:eb:89: c9:b3:33:b7:1a:f3:78:23:9f:29:7f:55:29:b4:c1:52:6d:21: 9a:89:33:03:07:92:d0:13:c7:03:54:a2:21:21:44:4e:27:f7: 3e:06:55:74:5f:9e:bd:b4:d2:ac:fe:11:f9:35:ae:dc:9d:94: c5:24:ea:ab:09:ce:a1:f1:89:8d:12:bc:95:34:08:d1:69:18: f5:37:b4:b6:71:fa:c3:0a:c6:66:42:45:6c:3a:74:f3:44:d5: ca:0d:08:13:47:81:2b:e1:69:86:e8:4a:91:74:ef:cc:11:a9: c5:37:bb:ec:7d:d1:63:2c:8d:a6:37:2a:e0:47:d6:dc:eb:1d: 43:1c:2f:0c:f0:9d:1b:ca:7f:82:28:4d:62:8d:c2:62:b9:21: e6:5e:91:a0:85:a9:33:d7:fa:dc:fc:6e:2a:7a:5e:d7:3a:6f: 1f:0d:e3:fb:8a:15:ce:9a:43:6c:53:ee:f8:14:cb:0a:5a:6e: aa:4a:49:ed:fb:bc:c9:48:9d:ec:b7:74:f9:9a:ea:3d:73:fb: f4:0a:31:3f:62:4a:6a:76:8a:33:dd:9d:c4:8e:d0:2e:94:fe: d1:97:47:07:b0:77:b9:57:38:fd:de:42:77:f2:73:2b:3c:89: 2e:05:c1:94 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUI5Sj5OaSYynnS6PpjBMKpyXNmPAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDA0MTU3WhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjgyMDNjZDFkMjE2YzFiYTVhNzkwYTgwMDNkYzY3NTVl NDkwNDZiZDFjY2Y1ZjU3NTRiNzhiMzczMzM4YjcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC55NfSEyyMjXny/hoJFpU0+u1JzpB25hUc+Fsmqh+TpqIE kQ0V/PeTWNvzE9wyZ+1x/t+GtrWM5x4ohraV6Ksi196TT3sebV0RxqpKuGZx7p// KfDEEBFIhcnbBiXCBS4rQsisatrwJQlVWss+7Q27PmUzOG21or0rvCfw3qrGFn6n CQkhZfZOZXngqSEvbsiqakRZC87b3QdlXrHpD1qi1vCNVjGmDaO4tiep4/bJauEn +i4lF+jsoX5yzj2CIJqFRxpR/Vk10T44ln3/cO9UuWDP7fLtomXlKrOrQ+QSK5Cu YHjFvf55VorGEEGYNKuCJsMsdFNSkuhboh4bC87hAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU5B03UTlAHgZaL4/LBVhPaYbjuRIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlYTFhOGM0LTk2MjMtNDgyZS1iYWM4LTdmNDdhYjJlNjExNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8jgDANBgkqhkiG9w0BAQsFAAOCAQEAincyd+jwsPPgd+xwXVAtxeuJ ybMztxrzeCOfKX9VKbTBUm0hmokzAweS0BPHA1SiISFETif3PgZVdF+evbTSrP4R +TWu3J2UxSTqqwnOofGJjRK8lTQI0WkY9Te0tnH6wwrGZkJFbDp080TVyg0IE0eB K+FphuhKkXTvzBGpxTe77H3RYyyNpjcq4EfW3OsdQxwvDPCdG8p/gihNYo3CYrkh 5l6RoIWpM9f63PxuKnpe1zpvHw3j+4oVzppDbFPu+BTLClpuqkpJ7fu8yUid7Ld0 +ZrqPXP79AoxP2JKanaKM92dxI7QLpT+0ZdHB7B3uVc4/d5Cd/JzKzyJLgXBlA== -----END CERTIFICATE-----Generated at Sat Jun 14 06:42:33 2025 by rpki-client