$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa File: f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa (raw, json) Hash identifier: dPOHveSURx0b2qXvlI2IBtBGwOfSpWoRWqRcBIX1JR0= Subject key identifier: 66:CD:0A:98:94:01:40:82:A5:5C:22:D1:6B:50:91:D1:D7:99:63:D8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67D1A86279D467C2B7E0C3EE146C89CEA5D50A0E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa Signing time: Tue 10 Jun 2025 17:01:24 +0000 ROA not before: Tue 10 Jun 2025 17:01:24 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:4070::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d1:a8:62:79:d4:67:c2:b7:e0:c3:ee:14:6c:89:ce:a5:d5:0a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 17:01:24 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=7b16a2d1ab4c3c36756f75df7336a46c37281e315fef4aa7c83f32e834428b96, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2a:8c:e2:bc:e0:e3:9c:34:1b:47:51:80:14: ae:88:39:f9:f5:07:d4:33:2e:fa:a7:16:44:7f:e4: 0f:c9:8b:83:64:fb:44:f9:b1:7c:98:6f:ac:75:64: 2a:54:5e:4e:36:9d:b4:a6:cf:cf:44:bc:60:fa:53: 0a:f7:8b:c5:6a:01:2d:1d:f7:39:d9:79:a1:ad:bf: c0:2d:f5:d4:9b:bf:3e:45:da:e9:e1:64:e4:22:0a: 9d:ec:81:98:84:06:76:ed:46:3d:53:23:96:bf:f8: b0:c3:22:e9:91:0b:50:e8:a0:86:ee:70:10:58:0e: ac:c9:8a:19:40:71:9d:ba:a4:e9:51:64:3f:e7:80: 50:95:95:dd:e7:dc:23:91:8b:3f:ce:97:27:ce:f0: 1c:3e:26:b8:fa:c0:c5:91:71:48:5a:77:71:12:89: 90:f5:87:fb:aa:c6:df:e2:3d:c5:53:f8:7f:5f:cc: 9f:34:c9:47:3e:82:5e:e0:48:f0:88:30:10:25:c8: 41:c0:33:44:57:de:c5:7d:da:3c:5e:56:21:dc:02: 70:1e:15:cc:20:ad:a3:ec:3a:bc:cb:98:6c:1b:3b: 1d:41:fa:70:ac:ac:60:60:51:15:9d:9c:c6:a2:bb: 14:f8:e0:8b:31:8d:4d:82:56:88:6a:8e:e1:74:25: af:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CD:0A:98:94:01:40:82:A5:5C:22:D1:6B:50:91:D1:D7:99:63:D8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f70919ec-f6ef-4ba5-a2b7-c04c9a2fc45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:4070::/48 Signature Algorithm: sha256WithRSAEncryption bb:1a:c5:51:89:05:1b:02:c3:9e:ea:60:9f:57:d0:de:96:4d: bf:12:1e:71:e7:00:7c:b3:70:89:0d:f8:a1:6a:db:a2:bb:d3: 9e:53:a4:ab:94:be:61:68:8e:62:0f:67:d5:25:b2:7b:08:9a: c0:7c:ac:c9:0d:be:37:71:1a:94:6f:61:82:5f:50:60:90:7a: 39:f1:29:54:4b:58:fc:7a:d9:06:78:b0:59:81:90:83:8e:45: 4a:f0:99:74:07:cd:ce:c8:0d:fc:0f:5d:ae:61:ed:16:f8:48: 3d:67:ee:3a:af:1d:ac:1e:29:22:c6:39:c8:98:24:fb:f9:92: 90:75:03:8d:96:af:5f:3c:e4:bd:0f:41:11:4e:46:c2:d9:0c: b6:e3:50:ab:1a:0a:a4:c8:58:bc:ec:36:39:10:86:7b:10:2b: f6:d4:39:9c:c1:14:0f:57:29:fa:62:17:d1:9e:17:2a:39:13: 80:b3:e3:71:d4:31:35:f6:95:d6:49:c0:0a:ef:61:99:7d:7f: 56:33:8c:c5:5e:cd:73:5a:e6:5a:29:72:dd:6d:a8:a6:d2:b5: 8f:85:2e:d5:03:8f:97:34:a7:ce:8a:58:44:4b:d2:58:54:ee: 8f:50:41:d1:ed:72:7b:54:01:a1:1f:61:51:8b:56:8b:30:3e: 10:44:59:5d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZ9GoYnnUZ8K34MPuFGyJzqXVCg4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTcwMTI0WhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjE2YTJkMWFiNGMzYzM2NzU2Zjc1ZGY3MzM2YTQ2YzM3 MjgxZTMxNWZlZjRhYTdjODNmMzJlODM0NDI4Yjk2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKKozivODjnDQbR1GAFK6IOfn1B9QzLvqnFkR/5A/Ji4Nk +0T5sXyYb6x1ZCpUXk42nbSmz89EvGD6Uwr3i8VqAS0d9znZeaGtv8At9dSbvz5F 2unhZOQiCp3sgZiEBnbtRj1TI5a/+LDDIumRC1DooIbucBBYDqzJihlAcZ26pOlR ZD/ngFCVld3n3CORiz/OlyfO8Bw+Jrj6wMWRcUhad3ESiZD1h/uqxt/iPcVT+H9f zJ80yUc+gl7gSPCIMBAlyEHAM0RX3sV92jxeViHcAnAeFcwgraPsOrzLmGwbOx1B +nCsrGBgURWdnMaiuxT44IsxjU2CVohqjuF0Ja/RAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZs0KmJQBQIKlXCLRa1CR0deZY9gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3MDkxOWVjLWY2ZWYtNGJhNS1hMmI3LWMwNGM5YTJmYzQ1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AQHAwDQYJKoZIhvcNAQELBQADggEBALsaxVGJBRsCw57qYJ9X0N6W Tb8SHnHnAHyzcIkN+KFq26K7055TpKuUvmFojmIPZ9UlsnsImsB8rMkNvjdxGpRv YYJfUGCQejnxKVRLWPx62QZ4sFmBkIOORUrwmXQHzc7IDfwPXa5h7Rb4SD1n7jqv HaweKSLGOciYJPv5kpB1A42Wr1885L0PQRFORsLZDLbjUKsaCqTIWLzsNjkQhnsQ K/bUOZzBFA9XKfpiF9GeFyo5E4Cz43HUMTX2ldZJwArvYZl9f1YzjMVezXNa5lop ct1tqKbStY+FLtUDj5c0p86KWERL0lhU7o9QQdHtcntUAaEfYVGLVoswPhBEWV0= -----END CERTIFICATE-----Generated at Sat Jun 14 06:15:12 2025 by rpki-client