$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa File: b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa (raw, json) Hash identifier: G7cwdnxCPl+1Ze0ekP2wdEKpTWIANYOppF41pC5+0zQ= Subject key identifier: 51:52:2E:A3:18:0E:30:06:BF:52:C6:DF:06:14:85:71:3A:CB:72:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 128A6A37F02AAA81E969F172413E1A29AA4E77F5 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa Signing time: Tue 10 Jun 2025 16:32:02 +0000 ROA not before: Tue 10 Jun 2025 16:32:02 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:74c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8a:6a:37:f0:2a:aa:81:e9:69:f1:72:41:3e:1a:29:aa:4e:77:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:32:02 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=6b8c90f6637fedfaec4356026c2bdd39cb7797b092e6dec84a1f836180e463ea, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a1:91:6e:d9:f6:ed:3f:4e:6c:56:47:38:3a: 75:5f:7c:8f:63:d2:b5:b6:74:07:ef:34:e1:95:56: 46:2f:81:b5:d6:45:d7:4b:99:10:e6:4c:75:ea:4b: 2d:17:9f:13:fe:cb:d2:6c:25:e9:00:2a:e5:20:10: 21:b4:d8:57:8d:7b:03:11:86:3a:10:06:d6:20:22: 74:71:55:cf:a0:1c:4b:5c:27:f1:f1:94:98:cd:46: 51:a6:ef:d3:90:f1:43:51:3f:91:49:7c:c7:c8:b9: cf:00:38:b4:f5:8f:3c:31:e3:62:2a:fe:72:a2:84: c5:cc:75:43:58:a0:a6:6b:b8:40:19:54:cd:17:83: c1:19:e9:d8:2b:45:a2:d9:38:04:b5:65:a4:27:ce: f5:0a:e5:46:f2:6b:da:7b:87:c2:7c:75:47:ec:14: e9:6b:a6:18:3d:6d:0c:d9:53:af:db:38:9d:8d:b1: 77:ef:13:0c:2e:70:23:74:a9:0c:0a:67:32:cd:e6: 28:a0:f9:ae:a3:2b:85:c5:9c:9e:9d:cc:a3:31:c6: 14:9c:fc:e0:27:06:7c:7d:6d:a2:f0:2c:77:59:32: 44:79:f8:be:19:3b:57:d4:db:46:9e:11:47:ae:5d: 21:27:e8:2b:2e:a8:b3:6b:06:84:63:10:b3:1b:57: 85:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:52:2E:A3:18:0E:30:06:BF:52:C6:DF:06:14:85:71:3A:CB:72:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 85:dd:60:c6:4b:c5:43:56:a5:10:08:20:5c:4e:5d:4d:2a:6d: 52:a9:c2:4e:7f:35:21:37:e0:b2:0f:72:98:36:5c:11:89:86: 7a:ea:b7:a7:fe:6b:8d:0f:2d:ab:fe:22:4e:f1:b2:17:2c:1a: b0:7d:48:be:8c:de:42:69:6c:53:1b:9f:71:f8:20:3d:24:67: 0d:ad:34:b9:61:0e:87:56:44:87:1f:3b:ed:f5:a5:c3:f0:a1: 05:ec:10:6d:08:da:14:eb:a6:a4:e8:c8:ef:63:ab:b6:20:1f: 18:b0:b1:38:76:b3:ca:63:8e:18:22:38:16:28:e9:5d:04:a0: e2:b7:0e:5e:d8:74:a2:d2:40:d6:e7:ec:0b:89:a2:19:13:24: db:64:fd:e5:1d:15:a1:81:66:9e:28:88:47:7f:0d:e3:a3:5e: c9:30:1d:1c:e3:22:e8:8f:29:2e:2c:81:5e:86:f0:f4:4d:57: 08:3f:23:bb:32:ec:c7:6f:a1:15:52:bf:c7:a5:5a:84:75:5c: 47:f1:6b:60:b4:de:67:d0:36:f0:87:22:8b:fa:3b:9d:56:13: 5f:a8:82:69:9e:e5:a2:74:b3:d2:2e:d5:76:3c:88:e1:0c:68: 48:03:bc:72:46:60:d9:4f:9a:ed:72:13:87:ab:68:c8:7f:d7: ec:4f:16:85 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEopqN/AqqoHpafFyQT4aKapOd/UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTYzMjAyWhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjhjOTBmNjYzN2ZlZGZhZWM0MzU2MDI2YzJiZGQzOWNi Nzc5N2IwOTJlNmRlYzg0YTFmODM2MTgwZTQ2M2VhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXoZFu2fbtP05sVkc4OnVffI9j0rW2dAfvNOGVVkYvgbXW RddLmRDmTHXqSy0XnxP+y9JsJekAKuUgECG02FeNewMRhjoQBtYgInRxVc+gHEtc J/HxlJjNRlGm79OQ8UNRP5FJfMfIuc8AOLT1jzwx42Iq/nKihMXMdUNYoKZruEAZ VM0Xg8EZ6dgrRaLZOAS1ZaQnzvUK5Ubya9p7h8J8dUfsFOlrphg9bQzZU6/bOJ2N sXfvEwwucCN0qQwKZzLN5iig+a6jK4XFnJ6dzKMxxhSc/OAnBnx9baLwLHdZMkR5 +L4ZO1fU20aeEUeuXSEn6CsuqLNrBoRjELMbV4UHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUVIuoxgOMAa/UsbfBhSFcTrLcrwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I0ZmU3ZjRlLTA3YzAtNGU4ZS04Nzg1LTcwZjQyMWI1MjU2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//dMAwDQYJKoZIhvcNAQELBQADggEBAIXdYMZLxUNWpRAIIFxOXU0q bVKpwk5/NSE34LIPcpg2XBGJhnrqt6f+a40PLav+Ik7xshcsGrB9SL6M3kJpbFMb n3H4ID0kZw2tNLlhDodWRIcfO+31pcPwoQXsEG0I2hTrpqToyO9jq7YgHxiwsTh2 s8pjjhgiOBYo6V0EoOK3Dl7YdKLSQNbn7AuJohkTJNtk/eUdFaGBZp4oiEd/DeOj XskwHRzjIuiPKS4sgV6G8PRNVwg/I7sy7MdvoRVSv8elWoR1XEfxa2C03mfQNvCH Iov6O51WE1+ogmme5aJ0s9Iu1XY8iOEMaEgDvHJGYNlPmu1yE4eraMh/1+xPFoU= -----END CERTIFICATE-----Generated at Sat Jun 14 06:42:34 2025 by rpki-client