$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a2495a-b565-4518-8d91-a9fb127abca6.roa File: e9a2495a-b565-4518-8d91-a9fb127abca6.roa (raw, json) Hash identifier: f3UcGGScFJJtd5kD492rJsAAEuoJpNzn84X5la9/y/k= Subject key identifier: 2D:A9:11:35:5E:74:0C:CB:18:95:DE:AA:E8:5D:F9:E8:92:CC:C6:EF Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 37B2A9BE285BE8B4BF516CBD7F48C8061F51EE71 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a2495a-b565-4518-8d91-a9fb127abca6.roa Signing time: Tue 10 Jun 2025 16:51:03 +0000 ROA not before: Tue 10 Jun 2025 16:51:03 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f61:1020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b2:a9:be:28:5b:e8:b4:bf:51:6c:bd:7f:48:c8:06:1f:51:ee:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:51:03 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=ea6b08c4fc1675d215c567d079dd8fc603abbfa2a0443762b7b82b2102c90811, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:63:3c:07:e6:4a:40:59:3b:ea:a8:b2:3e:a0: f0:eb:07:f4:64:4f:87:22:d3:ca:c6:b7:06:a2:e6: ca:cf:73:4d:85:36:ab:04:a5:9a:37:c7:70:83:c0: 26:25:ae:0e:e6:b3:a2:4d:2f:65:8d:ab:9d:e7:d8: 78:45:28:75:72:59:d7:f6:f9:50:7c:3d:df:0d:03: a9:66:8a:f9:7a:92:15:9e:eb:a3:ce:90:78:b2:2c: 2e:28:f5:f6:13:36:a0:16:44:5f:4e:a1:3c:71:de: 47:ee:12:6c:70:01:d9:ef:1c:c4:e1:17:d7:2d:23: e6:7b:25:3e:e5:43:a0:0c:f2:f9:bd:96:e2:97:26: 3c:2c:ba:24:f9:e4:59:78:e9:26:24:b8:57:a2:bc: 8f:d4:ab:0c:36:7f:1a:72:b4:23:62:98:65:a3:96: 1f:e9:26:9f:c3:f7:fb:f6:92:6e:70:21:26:c6:f9: e3:3e:53:52:12:53:91:32:f3:d8:6d:58:50:90:11: dc:cb:cb:c0:c1:67:95:cf:7c:7a:91:cf:46:be:0c: 4f:ec:0a:5e:69:ed:08:36:7f:03:3f:09:bd:0b:bd: a6:86:0d:56:a1:4b:02:fa:c2:91:e2:bd:a3:73:13: 94:ca:ed:51:44:15:03:f9:f0:02:9a:f2:5b:8e:91: 73:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A9:11:35:5E:74:0C:CB:18:95:DE:AA:E8:5D:F9:E8:92:CC:C6:EF X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9a2495a-b565-4518-8d91-a9fb127abca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f61:1020::/48 Signature Algorithm: sha256WithRSAEncryption c9:c0:15:77:77:a2:9a:cb:d3:24:49:03:26:2c:0e:4e:12:a8: ad:50:98:7f:7b:7f:36:ab:0b:37:7d:11:57:27:c4:78:b8:2d: 03:e1:1d:b0:23:4e:88:6d:61:cf:e9:3d:a4:97:ea:ef:bb:de: ef:14:36:9b:92:d5:32:e6:e7:71:43:4c:73:5f:3e:55:ab:21: 84:d0:5a:c1:2f:52:74:64:f5:f9:f1:fd:03:d5:ea:6b:3a:6b: 21:13:83:73:10:9e:88:54:6b:da:5e:b8:1a:e1:a7:7d:70:e0: b4:01:b2:5d:7e:cf:07:24:ad:a5:65:86:82:39:0d:eb:49:34: d4:9f:e4:24:e1:ec:f1:1c:b1:2a:77:a1:08:6d:ed:cd:0a:39: cf:e2:a9:e5:78:4d:36:b4:62:fa:ae:26:20:0d:8d:2c:c3:35: 7c:97:74:02:df:6f:91:cb:c1:44:33:43:2e:66:d0:93:01:bd: 2d:51:cc:05:28:16:15:d0:02:7e:7c:32:87:38:fb:b1:07:db: b3:36:00:87:c8:e3:1e:b2:f2:3e:d9:1f:75:2d:fe:e4:0d:61: 18:1b:2d:4c:b9:32:03:26:cf:8c:32:bb:4d:8a:5d:fa:f3:87: 6a:34:01:95:5f:57:64:2b:9d:a7:e0:0a:5d:35:8e:7d:9f:f5: af:26:82:a2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUN7Kpvihb6LS/UWy9f0jIBh9R7nEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTY1MTAzWhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTZiMDhjNGZjMTY3NWQyMTVjNTY3ZDA3OWRkOGZjNjAz YWJiZmEyYTA0NDM3NjJiN2I4MmIyMTAyYzkwODExMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVYzwH5kpAWTvqqLI+oPDrB/RkT4ci08rGtwai5srPc02F NqsEpZo3x3CDwCYlrg7ms6JNL2WNq53n2HhFKHVyWdf2+VB8Pd8NA6lmivl6khWe 66POkHiyLC4o9fYTNqAWRF9OoTxx3kfuEmxwAdnvHMThF9ctI+Z7JT7lQ6AM8vm9 luKXJjwsuiT55Fl46SYkuFeivI/Uqww2fxpytCNimGWjlh/pJp/D9/v2km5wISbG +eM+U1ISU5Ey89htWFCQEdzLy8DBZ5XPfHqRz0a+DE/sCl5p7Qg2fwM/Cb0LvaaG DVahSwL6wpHivaNzE5TK7VFEFQP58AKa8luOkXMrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULakRNV50DMsYld6q6F356JLMxu8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U5YTI0OTVhLWI1NjUtNDUxOC04ZDkxLWE5ZmIxMjdhYmNhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB9hECAwDQYJKoZIhvcNAQELBQADggEBAMnAFXd3oprL0yRJAyYsDk4S qK1QmH97fzarCzd9EVcnxHi4LQPhHbAjTohtYc/pPaSX6u+73u8UNpuS1TLm53FD THNfPlWrIYTQWsEvUnRk9fnx/QPV6ms6ayETg3MQnohUa9peuBrhp31w4LQBsl1+ zwckraVlhoI5DetJNNSf5CTh7PEcsSp3oQht7c0KOc/iqeV4TTa0YvquJiANjSzD NXyXdALfb5HLwUQzQy5m0JMBvS1RzAUoFhXQAn58Moc4+7EH27M2AIfI4x6y8j7Z H3Ut/uQNYRgbLUy5MgMmz4wyu02KXfrzh2o0AZVfV2QrnafgCl01jn2f9a8mgqI= -----END CERTIFICATE-----Generated at Sat Jun 14 06:48:57 2025 by rpki-client