$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78055da-d21e-4985-bee2-fe5b70f3c493.roa File: f78055da-d21e-4985-bee2-fe5b70f3c493.roa (raw, json) Hash identifier: knWKwtSv4e+hFdNbRq3iFDhd7KpEmt0pGSRPnygQApA= Subject key identifier: F4:D2:20:6E:91:E2:2B:B9:E5:82:9C:AB:88:F8:3D:7A:DE:FB:DF:F6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5A6EFBB6AFF3D17D9473F65299DFBFFDE8D4D0B6 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78055da-d21e-4985-bee2-fe5b70f3c493.roa Signing time: Fri 13 Jun 2025 17:21:11 +0000 ROA not before: Fri 13 Jun 2025 17:21:11 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f14:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6e:fb:b6:af:f3:d1:7d:94:73:f6:52:99:df:bf:fd:e8:d4:d0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 17:21:11 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=0bb7e456ac0ceb22ba80fed18e980b6ed4822d6bcd0769e030422f1c62e5b36e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:54:2e:f7:8a:88:38:4a:e7:99:4b:98:a9: 97:1e:30:06:28:32:05:e6:85:4f:67:e9:1e:d0:2c: 83:c3:19:6b:20:b6:45:ce:e7:4d:fc:d3:f2:bd:ab: 9e:c3:af:91:3e:1c:61:15:24:70:12:64:29:a8:d5: f1:36:c0:26:1d:7d:5a:41:19:45:ae:46:09:1e:8c: b0:b8:27:7b:f2:3f:ab:73:ea:98:bd:3a:0a:ec:6d: 8e:10:17:83:27:59:62:92:52:9f:60:f3:56:58:4e: d2:e1:05:de:79:b5:29:71:21:26:60:e6:f9:9b:53: 87:68:d0:f8:56:ac:5c:06:08:7a:db:0c:31:ca:aa: f6:e2:77:19:4e:b8:2e:71:8b:ec:61:80:f7:a9:d0: ad:a8:59:bc:09:6e:37:d5:ad:c4:d3:f7:db:41:98: 0e:a1:7e:52:76:fe:c6:17:dc:ef:e0:b0:8f:ca:a2: fc:18:1f:09:4f:8f:e1:6f:dc:79:d4:8d:c2:0e:bc: fb:9a:f4:1d:1b:ea:23:01:35:0a:45:9c:81:e4:03: 93:34:1c:a9:a3:ff:a1:6d:50:96:6f:7a:fe:50:c7: bf:50:66:e9:85:11:a0:f2:d3:76:c9:bf:e4:8a:03: e4:b9:d1:cd:f8:f9:34:dc:83:90:44:3d:03:48:1a: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D2:20:6E:91:E2:2B:B9:E5:82:9C:AB:88:F8:3D:7A:DE:FB:DF:F6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78055da-d21e-4985-bee2-fe5b70f3c493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f14:4000::/37 Signature Algorithm: sha256WithRSAEncryption 14:71:e8:df:9c:49:00:c9:48:d1:8b:18:83:bb:99:9c:2f:52: f2:ae:6c:3a:35:2b:e6:28:39:1c:32:b0:4a:37:16:07:16:06: 10:f0:44:4b:68:83:45:cc:5a:ab:f2:70:d9:fd:2a:97:4a:5e: 91:5c:9f:bf:f2:17:1a:b1:a1:6a:f4:cd:8a:1b:fa:10:78:2a: ad:ec:bd:39:42:d0:45:16:dd:ff:45:fa:43:1c:64:19:74:c1: 95:87:6c:b5:1a:9a:6b:16:f6:1a:27:62:6d:4b:ef:da:08:88: 9d:4f:34:60:4c:7b:92:a4:91:e0:9a:21:6c:70:7c:02:b6:49: 62:de:8a:ab:7e:9e:0c:34:9d:d9:4e:db:79:70:bc:1a:5a:25: a4:8a:ea:94:ab:5e:35:e5:31:93:9d:d9:83:8a:59:d7:c2:b7: dc:05:81:be:37:71:e3:4f:35:a7:65:b5:c3:c6:4e:93:67:dc: c7:46:84:86:0c:5d:89:83:11:f9:d6:b2:4a:fe:56:8a:33:6d: 01:3c:7e:79:2b:cb:31:06:e1:dc:3e:6a:f1:50:64:6c:0b:a5: c7:c0:84:b5:fd:f9:5a:c5:6b:5d:3b:ea:48:98:54:37:ea:76: 02:4d:91:c5:ee:a4:93:6c:e5:71:d9:06:9d:f7:58:5d:ef:9e: 33:4d:46:19 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWm77tq/z0X2Uc/ZSmd+//ejU0LYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTcyMTExWhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmI3ZTQ1NmFjMGNlYjIyYmE4MGZlZDE4ZTk4MGI2ZWQ0 ODIyZDZiY2QwNzY5ZTAzMDQyMmYxYzYyZTViMzZlMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl9VQu94qIOErnmUuYqZceMAYoMgXmhU9n6R7QLIPDGWsg tkXO50380/K9q57Dr5E+HGEVJHASZCmo1fE2wCYdfVpBGUWuRgkejLC4J3vyP6tz 6pi9OgrsbY4QF4MnWWKSUp9g81ZYTtLhBd55tSlxISZg5vmbU4do0PhWrFwGCHrb DDHKqvbidxlOuC5xi+xhgPep0K2oWbwJbjfVrcTT99tBmA6hflJ2/sYX3O/gsI/K ovwYHwlPj+Fv3HnUjcIOvPua9B0b6iMBNQpFnIHkA5M0HKmj/6FtUJZvev5Qx79Q ZumFEaDy03bJv+SKA+S50c34+TTcg5BEPQNIGvMxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU9NIgbpHiK7nlgpyriPg9et773/YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3ODA1NWRhLWQyMWUtNDk4NS1iZWUyLWZlNWI3MGYzYzQ5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8UQDANBgkqhkiG9w0BAQsFAAOCAQEAFHHo35xJAMlI0YsYg7uZnC9S 8q5sOjUr5ig5HDKwSjcWBxYGEPBES2iDRcxaq/Jw2f0ql0pekVyfv/IXGrGhavTN ihv6EHgqrey9OULQRRbd/0X6QxxkGXTBlYdstRqaaxb2GidibUvv2giInU80YEx7 kqSR4JohbHB8ArZJYt6Kq36eDDSd2U7beXC8GlolpIrqlKteNeUxk53Zg4pZ18K3 3AWBvjdx4081p2W1w8ZOk2fcx0aEhgxdiYMR+daySv5WijNtATx+eSvLMQbh3D5q 8VBkbAulx8CEtf35WsVrXTvqSJhUN+p2Ak2Rxe6kk2zlcdkGnfdYXe+eM01GGQ== -----END CERTIFICATE-----Generated at Sun Jun 15 01:15:20 2025 by rpki-client