$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce670738-d498-4176-afd2-5eae2a1ad57d.roa File: ce670738-d498-4176-afd2-5eae2a1ad57d.roa (raw, json) Hash identifier: /m5pUnP3NQ7QCl5YXibb59oHShI2j4+/wLMFtS52A2s= Subject key identifier: B1:4A:93:EE:E7:9C:48:B4:8C:81:E5:36:4E:5A:3E:ED:9B:67:85:B9 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 46F51A42FB1B00814AE4B5922782E96704B71F8B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce670738-d498-4176-afd2-5eae2a1ad57d.roa Signing time: Sat 14 Jun 2025 00:42:02 +0000 ROA not before: Sat 14 Jun 2025 00:42:02 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2620:107:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f5:1a:42:fb:1b:00:81:4a:e4:b5:92:27:82:e9:67:04:b7:1f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 14 00:42:02 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=1002302e822d97bc7cb453b90a3271e8a7f858744c86ea0de8b0b90dc0fbb1ab, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:60:a2:b2:b9:a9:6e:63:00:12:9a:3a:71:23: 0b:54:b3:26:46:7f:6a:e8:0f:f8:32:58:ec:5d:56: 2f:ad:93:f2:81:83:e5:56:e0:59:6e:09:6a:31:32: 5e:fc:0d:58:b7:16:80:57:54:92:ae:29:f6:00:85: e8:f2:8a:b9:2c:e5:a8:99:cc:62:2d:39:1b:82:2c: b6:8c:71:50:d4:1c:d5:4b:c9:b2:32:e0:74:65:c9: b3:d5:f7:2a:a6:05:a1:c0:6d:aa:a8:87:35:ab:96: a4:f4:52:57:e9:1b:e0:e7:0c:b1:8d:98:19:5d:f1: 27:90:db:e6:d5:c1:a3:64:40:4d:03:fa:71:d5:2a: 04:3e:18:00:e3:02:ea:d6:c7:1a:0d:2c:2d:dc:53: 20:da:a8:d9:f0:47:a4:b2:2d:ee:e1:f0:40:fc:18: 9c:c3:76:45:bd:d3:2a:c0:84:c4:1f:b6:c9:9c:75: a2:c2:59:07:e7:f1:15:ed:ab:99:7b:32:da:27:e1: 03:f3:d9:da:86:08:c9:bb:b7:ca:52:74:28:bd:71: 74:be:1a:c1:54:dd:bd:8d:b4:02:fc:98:cb:fb:42: 5c:32:2c:ff:c1:b5:b7:58:e9:dd:f2:ec:e3:a7:9f: 3e:94:30:d9:b1:6c:3f:07:e0:cc:1c:31:1c:6c:66: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4A:93:EE:E7:9C:48:B4:8C:81:E5:36:4E:5A:3E:ED:9B:67:85:B9 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce670738-d498-4176-afd2-5eae2a1ad57d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2620:107:4000::/48 Signature Algorithm: sha256WithRSAEncryption b2:4c:38:9c:27:b5:02:78:58:a0:eb:fc:95:82:c8:0b:02:9c: 67:41:62:27:a1:da:b0:f3:b2:10:2a:bf:75:fa:93:70:0a:ea: 03:9b:5f:fa:c3:36:6b:9b:bb:39:49:5a:95:ce:df:29:75:63: e6:1b:02:0f:d3:96:0b:7a:6f:10:84:e9:22:98:95:91:b5:9e: dd:fa:19:1e:54:a4:f6:6c:df:25:5d:14:86:19:f6:9f:0a:33: 54:32:6c:f2:0b:56:1d:93:99:d8:b4:46:84:49:0d:80:68:ea: 02:d7:bf:0e:ad:b1:9c:0b:78:c0:32:16:47:f0:bf:8a:8c:3a: 71:ba:0d:f0:60:7e:ce:a2:dd:11:f6:78:8a:0f:f4:e6:9b:af: 6d:c3:26:37:ef:ac:83:ca:ca:53:31:3f:de:b9:4d:ca:3d:b3: 7e:a8:3e:16:b4:24:5f:18:a9:1f:8e:2c:01:e9:a4:5c:e6:97: 55:cc:ff:b5:0a:df:c6:66:a7:e6:ca:b4:80:01:4d:55:20:09: 7f:1b:88:96:bf:04:6c:6e:ce:53:bb:72:22:b0:94:a0:24:cf: 63:99:6b:cb:b2:0e:35:f9:a4:9e:75:05:0d:b9:88:e9:75:03: 14:94:04:ea:b7:0f:4a:3a:a7:1d:ea:a5:05:8f:d2:0a:09:e2: b4:af:ba:55 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURvUaQvsbAIFK5LWSJ4LpZwS3H4swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE0MDA0MjAyWhcNMjUwNzE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDAyMzAyZTgyMmQ5N2JjN2NiNDUzYjkwYTMyNzFlOGE3 Zjg1ODc0NGM4NmVhMGRlOGIwYjkwZGMwZmJiMWFiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzYKKyualuYwASmjpxIwtUsyZGf2roD/gyWOxdVi+tk/KB g+VW4FluCWoxMl78DVi3FoBXVJKuKfYAhejyirks5aiZzGItORuCLLaMcVDUHNVL ybIy4HRlybPV9yqmBaHAbaqohzWrlqT0UlfpG+DnDLGNmBld8SeQ2+bVwaNkQE0D +nHVKgQ+GADjAurWxxoNLC3cUyDaqNnwR6SyLe7h8ED8GJzDdkW90yrAhMQftsmc daLCWQfn8RXtq5l7Mton4QPz2dqGCMm7t8pSdCi9cXS+GsFU3b2NtAL8mMv7Qlwy LP/BtbdY6d3y7OOnnz6UMNmxbD8H4MwcMRxsZgVHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsUqT7uecSLSMgeU2Tlo+7ZtnhbkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlNjcwNzM4LWQ0OTgtNDE3Ni1hZmQyLTVlYWUyYTFhZDU3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmIAEHQAAwDQYJKoZIhvcNAQELBQADggEBALJMOJwntQJ4WKDr/JWCyAsC nGdBYieh2rDzshAqv3X6k3AK6gObX/rDNmubuzlJWpXO3yl1Y+YbAg/Tlgt6bxCE 6SKYlZG1nt36GR5UpPZs3yVdFIYZ9p8KM1QybPILVh2Tmdi0RoRJDYBo6gLXvw6t sZwLeMAyFkfwv4qMOnG6DfBgfs6i3RH2eIoP9Oabr23DJjfvrIPKylMxP965Tco9 s36oPha0JF8YqR+OLAHppFzml1XM/7UK38Zmp+bKtIABTVUgCX8biJa/BGxuzlO7 ciKwlKAkz2OZa8uyDjX5pJ51BQ25iOl1AxSUBOq3D0o6px3qpQWP0goJ4rSvulU= -----END CERTIFICATE-----Generated at Sat Jun 14 06:45:39 2025 by rpki-client