$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6a63971-980f-41ea-9872-abd64ff5639a.roa File: e6a63971-980f-41ea-9872-abd64ff5639a.roa (raw, json) Hash identifier: Qmvcsn80l35ozg9MAHrWfe+qDhvke9aMXTZB5AWSXLE= Subject key identifier: C2:E9:01:E2:A0:88:92:4C:83:52:7B:6F:78:9E:E1:D1:81:5C:E4:E3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6978C03D9D14C40B55F1C90FAC7E1F215BE512B0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6a63971-980f-41ea-9872-abd64ff5639a.roa Signing time: Fri 13 Jun 2025 16:30:15 +0000 ROA not before: Fri 13 Jun 2025 16:30:15 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff5:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:78:c0:3d:9d:14:c4:0b:55:f1:c9:0f:ac:7e:1f:21:5b:e5:12:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 16:30:15 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=21803abb2b4f68c4e75a3b56a3d2cd4240efdaca3128c61cc44727750252d283, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:26:51:11:08:ee:75:76:34:01:33:59:4d:2b: e2:00:fe:98:de:b2:c3:61:f2:d9:11:2c:ae:d2:25: 05:d6:e8:ff:46:c0:06:3c:3a:b0:ac:5b:d5:d9:75: d5:99:8e:7d:d7:77:5c:7d:bf:ab:c6:f3:2a:f1:eb: 06:3b:aa:98:a3:f0:ad:6e:86:07:e3:0a:e4:74:02: 01:21:ea:19:dd:9f:8c:4c:06:8c:b1:b4:02:c1:04: cd:81:16:54:d0:3f:40:58:c5:9b:c4:6d:79:1a:83: a8:21:9a:4a:b5:56:c6:2a:0a:bb:db:3e:8d:5b:c1: 5f:46:ef:82:0e:d4:2f:93:0d:d8:c2:0a:b8:05:1c: 7f:79:6e:0e:15:6a:1f:00:c0:f6:c5:41:84:c2:48: 4e:1b:bc:17:a3:34:81:f1:fd:6b:d7:a4:c8:45:fe: eb:55:98:55:e0:07:93:87:c2:66:45:ac:da:34:c7: 33:83:26:ee:76:1f:4d:c0:99:cb:3c:47:ac:47:35: 2f:df:52:29:9c:1c:d4:d5:c4:e1:18:77:cd:1e:9d: 64:c3:6c:d8:2b:aa:2e:a0:61:04:08:13:87:35:1a: 33:18:1d:c5:69:dd:97:bf:b4:3c:01:56:cf:9b:2d: 13:ff:6b:0c:bf:1d:3c:72:bf:24:6a:2f:61:02:55: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E9:01:E2:A0:88:92:4C:83:52:7B:6F:78:9E:E1:D1:81:5C:E4:E3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6a63971-980f-41ea-9872-abd64ff5639a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff5:2000::/40 Signature Algorithm: sha256WithRSAEncryption 59:39:9c:42:43:10:98:01:3a:f5:ce:bc:6e:f2:f1:07:21:37: f7:31:0c:f7:2e:e5:09:df:93:74:29:63:72:52:8a:90:24:6f: 6b:6d:59:11:8b:c6:3e:4a:20:f1:6f:36:d2:cc:fc:59:95:2a: c8:ef:02:a2:13:b6:f0:a7:d7:67:39:51:06:09:5d:6f:62:6f: 0c:91:6a:79:6c:d5:1b:9d:cd:d9:2b:95:04:ed:a0:67:37:73: 79:54:a8:f3:35:ca:96:db:5d:98:4d:ed:94:e2:47:35:96:e4: 02:85:1b:b5:ca:08:b5:f6:16:0d:d4:7f:2e:d5:17:f3:da:6c: ad:7b:e8:77:a0:e5:22:d0:6c:d8:6f:fb:f7:c9:61:14:fc:28: 82:0c:0b:41:70:a6:02:cf:26:5b:a3:66:15:59:13:04:d4:22: 43:0a:2e:85:c7:6e:3e:8a:b6:e6:bf:d9:0f:66:c2:22:e6:84: 47:7d:95:90:34:0b:da:23:97:91:07:df:8e:4c:0b:48:18:44: a0:96:45:af:bf:74:ed:ac:5e:a1:5d:d6:56:a5:50:b2:66:3d: 65:54:2b:94:a5:1a:78:ca:8d:4d:7d:01:47:7c:75:6b:51:70: 77:23:2b:c6:92:0e:7c:4c:df:87:9b:b6:26:c9:57:56:fe:b8: 34:9e:36:c1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaXjAPZ0UxAtV8ckPrH4fIVvlErAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTYzMDE1WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTgwM2FiYjJiNGY2OGM0ZTc1YTNiNTZhM2QyY2Q0MjQw ZWZkYWNhMzEyOGM2MWNjNDQ3Mjc3NTAyNTJkMjgzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtJlERCO51djQBM1lNK+IA/pjessNh8tkRLK7SJQXW6P9G wAY8OrCsW9XZddWZjn3Xd1x9v6vG8yrx6wY7qpij8K1uhgfjCuR0AgEh6hndn4xM BoyxtALBBM2BFlTQP0BYxZvEbXkag6ghmkq1VsYqCrvbPo1bwV9G74IO1C+TDdjC CrgFHH95bg4Vah8AwPbFQYTCSE4bvBejNIHx/WvXpMhF/utVmFXgB5OHwmZFrNo0 xzODJu52H03Amcs8R6xHNS/fUimcHNTVxOEYd80enWTDbNgrqi6gYQQIE4c1GjMY HcVp3Ze/tDwBVs+bLRP/awy/HTxyvyRqL2ECVSk7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUwukB4qCIkkyDUntveJ7h0YFc5OMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U2YTYzOTcxLTk4MGYtNDFlYS05ODcyLWFiZDY0ZmY1NjM5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/1IDANBgkqhkiG9w0BAQsFAAOCAQEAWTmcQkMQmAE69c68bvLxByE3 9zEM9y7lCd+TdCljclKKkCRva21ZEYvGPkog8W820sz8WZUqyO8CohO28KfXZzlR Bgldb2JvDJFqeWzVG53N2SuVBO2gZzdzeVSo8zXKlttdmE3tlOJHNZbkAoUbtcoI tfYWDdR/LtUX89psrXvod6DlItBs2G/798lhFPwoggwLQXCmAs8mW6NmFVkTBNQi QwouhcduPoq25r/ZD2bCIuaER32VkDQL2iOXkQffjkwLSBhEoJZFr7907axeoV3W VqVQsmY9ZVQrlKUaeMqNTX0BR3x1a1FwdyMrxpIOfEzfh5u2JslXVv64NJ42wQ== -----END CERTIFICATE-----Generated at Sat Jun 14 18:57:59 2025 by rpki-client