$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddbe11ef-0576-467f-971e-c7af8a31af5a.roa File: ddbe11ef-0576-467f-971e-c7af8a31af5a.roa (raw, json) Hash identifier: fGaJW1ACeR5PO6WuapmuaocnQwOGYGXRH35CctXeqEo= Subject key identifier: FE:63:00:3D:7E:63:BF:7D:0A:EC:6B:5A:8D:7B:BE:13:17:9A:07:B5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 56BE8EB98D2D32EE857DFDD92F5C91E66410C390 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddbe11ef-0576-467f-971e-c7af8a31af5a.roa Signing time: Tue 10 Jun 2025 17:12:12 +0000 ROA not before: Tue 10 Jun 2025 17:12:12 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1f00:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:be:8e:b9:8d:2d:32:ee:85:7d:fd:d9:2f:5c:91:e6:64:10:c3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 17:12:12 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=ec60ef5fd6371984486bebc4ab29fbf6ca8f1e182a324a2381ae3cc06269d81e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:0c:fe:20:ed:f5:11:d1:84:c6:d8:43:df: 5a:ba:f2:f8:06:06:bf:16:d7:0a:1e:89:45:0a:fe: 35:a7:0f:b4:41:e8:9d:57:f6:dd:ae:d0:b9:c0:11: f9:45:1d:a7:fe:09:0d:82:5c:c1:cb:d9:2e:c3:c2: 47:6e:19:14:d7:5e:b5:33:5c:39:11:cf:85:0a:4c: 04:19:07:10:1b:57:38:1f:46:78:16:ef:ca:2d:55: 24:fd:e7:87:63:a9:7b:01:cf:55:95:55:e0:24:45: e3:9e:bb:21:13:c2:f8:68:0f:ce:71:33:2d:10:d9: a3:81:ae:e8:19:5c:3b:2c:2e:0c:94:43:7d:52:39: 3c:03:6e:36:93:de:21:67:8c:e1:90:73:3b:c6:15: f3:39:b4:38:fe:41:34:73:3e:ee:de:d0:d5:da:c8: 1e:50:6f:45:76:6c:dc:3b:e8:ec:81:42:d6:95:3b: ea:79:30:5e:77:35:98:97:5f:1e:93:2f:e4:bc:8a: a6:39:b0:ab:46:7a:56:31:93:55:75:34:b3:f7:ac: a9:6b:27:38:2d:a1:d6:cc:24:78:00:0c:19:f9:30: 86:fa:49:15:ee:de:12:4b:a4:4e:1d:18:c4:bf:63: 0f:d8:4f:07:2f:7e:95:0c:37:16:27:00:24:cf:84: 6f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:63:00:3D:7E:63:BF:7D:0A:EC:6B:5A:8D:7B:BE:13:17:9A:07:B5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ddbe11ef-0576-467f-971e-c7af8a31af5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:2040::/48 Signature Algorithm: sha256WithRSAEncryption c0:dc:f8:f0:6e:bb:98:8d:b2:95:bb:30:95:c1:b7:eb:c4:da: a5:85:76:82:e9:46:7d:f4:f1:61:1e:a5:d0:25:19:ce:e9:a7: d3:3a:85:c4:03:22:51:e5:50:28:b1:3a:de:30:68:a0:50:4b: 1e:14:3b:ba:d6:ec:bf:53:8f:2c:af:8b:c5:a8:07:95:b9:aa: df:d9:11:99:35:f8:04:5e:e8:e3:7f:9a:e0:8b:97:9d:27:8b: 26:fd:4a:10:07:d5:d3:6f:fe:80:50:68:08:28:9c:98:cf:06: 16:57:47:d1:af:24:22:3f:98:59:bd:45:6b:d0:91:d7:19:91: 63:03:c1:53:8f:76:92:21:10:63:88:ad:23:1b:1c:1b:c4:25: b4:6c:8e:16:78:21:49:ae:9e:3b:89:ef:a5:3d:d7:2d:5f:65: e9:99:98:a3:e4:34:64:99:fd:16:c7:97:43:bf:99:af:37:ca: 66:43:fe:b8:e7:da:31:00:d9:ba:e2:cc:a4:58:f3:06:3c:bc: 16:e4:91:09:a3:15:e1:36:71:2a:f5:10:13:3b:fa:59:a4:cc: b7:73:ee:dd:1d:b3:ed:cd:b8:31:2f:ae:4f:f0:a0:bf:ad:ae: 6f:21:75:0b:20:44:e3:bd:49:3c:37:24:50:36:2d:09:48:35: 26:85:0a:ea -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVr6OuY0tMu6Fff3ZL1yR5mQQw5AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTcxMjEyWhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzYwZWY1ZmQ2MzcxOTg0NDg2YmViYzRhYjI5ZmJmNmNh OGYxZTE4MmEzMjRhMjM4MWFlM2NjMDYyNjlkODFlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZ2Qz+IO31EdGExthD31q68vgGBr8W1woeiUUK/jWnD7RB 6J1X9t2u0LnAEflFHaf+CQ2CXMHL2S7DwkduGRTXXrUzXDkRz4UKTAQZBxAbVzgf RngW78otVST954djqXsBz1WVVeAkReOeuyETwvhoD85xMy0Q2aOBrugZXDssLgyU Q31SOTwDbjaT3iFnjOGQczvGFfM5tDj+QTRzPu7e0NXayB5Qb0V2bNw76OyBQtaV O+p5MF53NZiXXx6TL+S8iqY5sKtGelYxk1V1NLP3rKlrJzgtodbMJHgADBn5MIb6 SRXu3hJLpE4dGMS/Yw/YTwcvfpUMNxYnACTPhG/PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/mMAPX5jv30K7GtajXu+ExeaB7UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RkYmUxMWVmLTA1NzYtNDY3Zi05NzFlLWM3YWY4YTMxYWY1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AIEAwDQYJKoZIhvcNAQELBQADggEBAMDc+PBuu5iNspW7MJXBt+vE 2qWFdoLpRn308WEepdAlGc7pp9M6hcQDIlHlUCixOt4waKBQSx4UO7rW7L9Tjyyv i8WoB5W5qt/ZEZk1+ARe6ON/muCLl50niyb9ShAH1dNv/oBQaAgonJjPBhZXR9Gv JCI/mFm9RWvQkdcZkWMDwVOPdpIhEGOIrSMbHBvEJbRsjhZ4IUmunjuJ76U91y1f ZemZmKPkNGSZ/RbHl0O/ma83ymZD/rjn2jEA2brizKRY8wY8vBbkkQmjFeE2cSr1 EBM7+lmkzLdz7t0ds+3NuDEvrk/woL+trm8hdQsgROO9STw3JFA2LQlINSaFCuo= -----END CERTIFICATE-----Generated at Sun Jun 15 23:35:18 2025 by rpki-client