$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9be70d8-4469-4777-9d26-b4cb918733a8.roa File: f9be70d8-4469-4777-9d26-b4cb918733a8.roa (raw, json) Hash identifier: OEKUfJIgBK8JqC1tctkbzLx0fcp1nndEcXoQdHZdS3w= Subject key identifier: CD:C0:9F:DB:4D:45:F0:AA:40:CD:9F:AC:74:3D:36:8B:58:F6:F6:B1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 02DC14AB827ABF51371C8B116370192641C28E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9be70d8-4469-4777-9d26-b4cb918733a8.roa Signing time: Fri 13 Jun 2025 15:40:14 +0000 ROA not before: Fri 13 Jun 2025 15:40:14 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ffb:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:dc:14:ab:82:7a:bf:51:37:1c:8b:11:63:70:19:26:41:c2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 15:40:14 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=73c32d9d802c7fd5d38e71edb1bcf2b5b7dd6debf9d5a15baa767dee45d9a77a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:47:2a:c8:62:ad:8f:0c:8c:f1:9d:ad:29: 4e:c6:02:ec:86:c4:91:5c:1d:68:84:3f:a7:e7:4f: a1:17:ad:7b:13:c2:4c:24:bb:21:e6:0e:d8:9e:75: 65:e3:64:eb:42:ad:11:85:0c:49:63:ef:21:fc:ae: 8e:6b:c9:c4:4a:85:a0:43:51:33:16:04:3f:35:38: 22:4d:73:4a:32:1f:a6:fb:78:e9:dd:c4:69:ff:e7: c6:52:34:3a:a9:96:7e:63:10:36:b6:12:89:9f:65: 47:e6:68:e7:0d:f4:ec:36:3e:64:7b:6e:d7:a0:17: 7a:1c:68:6a:d0:98:3d:c7:2c:9c:68:33:48:ca:43: 52:f1:8b:c6:d4:d8:e9:2d:10:13:fe:8e:4b:30:96: 59:2b:29:d2:89:b5:9e:a0:39:08:71:1d:a6:dd:89: e3:78:18:6b:d6:db:07:56:e4:f0:f5:46:f9:02:55: 65:16:73:94:e5:ee:0d:b6:e6:21:8a:91:7a:80:8d: d0:44:72:f5:a7:3f:58:e3:5a:b9:83:bd:17:91:79: 3d:07:f5:d5:55:e2:b6:35:4c:0a:d6:04:1e:ac:3a: 88:6a:7b:4d:79:8b:d2:ee:e1:3a:ca:79:18:5f:a3: 09:ba:63:59:7a:7c:0e:4f:e9:65:40:30:50:4a:80: c7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C0:9F:DB:4D:45:F0:AA:40:CD:9F:AC:74:3D:36:8B:58:F6:F6:B1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9be70d8-4469-4777-9d26-b4cb918733a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ffb:8080::/48 Signature Algorithm: sha256WithRSAEncryption 94:9a:42:e2:05:e9:05:ad:1a:57:af:47:40:07:5d:9a:38:f3: 83:99:33:de:21:6b:d9:0e:22:2f:48:80:e7:c6:b2:10:05:fe: 14:8d:06:b4:87:46:6b:63:5b:49:8c:02:48:e6:ef:47:a3:a5: 2f:a9:23:4b:d5:43:ff:fa:a8:9f:03:64:6f:96:0c:31:a1:e8: 7b:55:86:b3:d6:1c:1c:92:df:52:7f:35:75:03:af:cb:a7:d7: 11:2e:4a:49:82:ba:0e:ea:3e:d1:d4:da:41:6a:af:a2:ef:14: 95:78:26:a4:e5:5b:29:f4:71:6f:e4:3e:10:de:af:e6:63:2c: 1f:ac:74:75:fa:31:57:27:2c:b9:a5:b6:23:e6:b7:6c:90:0c: 9c:bf:2a:24:e7:67:05:b8:7d:0e:cc:ab:04:6f:0c:a5:02:0a: 83:af:36:ee:1b:ce:4e:2d:2e:b0:01:c4:69:a7:8f:7c:44:fa: aa:17:fb:c8:1c:4e:f2:8c:c5:2d:3d:5f:50:fe:0a:5d:ee:e7: e0:a6:69:0b:ec:0a:e9:d1:5f:9a:9e:f6:90:9f:b5:e3:e6:8d: 65:f4:18:80:70:8c:33:e6:79:43:5b:5d:d4:70:8c:3d:5a:da: 6a:4d:da:90:3a:95:01:2b:63:c1:83:ae:83:18:42:cd:c2:1f: 32:ca:38:24 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITAtwUq4J6v1E3HIsRY3AZJkHCjjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz NzEwN2RiZThjYjcxZDBhNzAeFw0yNTA2MTMxNTQwMTRaFw0yNTA3MTgyMzU5NTla MHoxSTBHBgNVBAUTQDczYzMyZDlkODAyYzdmZDVkMzhlNzFlZGIxYmNmMmI1Yjdk ZDZkZWJmOWQ1YTE1YmFhNzY3ZGVlNDVkOWE3N2ExLTArBgNVBAMTJGIyNWM5NzBm LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAL2sRyrIYq2PDIzxna0pTsYC7IbEkVwdaIQ/p+dPoRetexPC TCS7IeYO2J51ZeNk60KtEYUMSWPvIfyujmvJxEqFoENRMxYEPzU4Ik1zSjIfpvt4 6d3Eaf/nxlI0OqmWfmMQNrYSiZ9lR+Zo5w307DY+ZHtu16AXehxoatCYPccsnGgz SMpDUvGLxtTY6S0QE/6OSzCWWSsp0om1nqA5CHEdpt2J43gYa9bbB1bk8PVG+QJV ZRZzlOXuDbbmIYqReoCN0ERy9ac/WONauYO9F5F5PQf11VXitjVMCtYEHqw6iGp7 TXmL0u7hOsp5GF+jCbpjWXp8Dk/pZUAwUEqAx2sCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBTNwJ/bTUXwqkDNn6x0PTaLWPb2sTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy NWMwNDI5NDIvZjliZTcwZDgtNDQ2OS00Nzc3LTlkMjYtYjRjYjkxODczM2E4LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACYAH/uAgDANBgkqhkiG9w0BAQsFAAOCAQEAlJpC4gXpBa0aV69HQAddmjjz g5kz3iFr2Q4iL0iA58ayEAX+FI0GtIdGa2NbSYwCSObvR6OlL6kjS9VD//qonwNk b5YMMaHoe1WGs9YcHJLfUn81dQOvy6fXES5KSYK6Duo+0dTaQWqvou8UlXgmpOVb KfRxb+Q+EN6v5mMsH6x0dfoxVycsuaW2I+a3bJAMnL8qJOdnBbh9DsyrBG8MpQIK g6827hvOTi0usAHEaaePfET6qhf7yBxO8ozFLT1fUP4KXe7n4KZpC+wK6dFfmp72 kJ+14+aNZfQYgHCMM+Z5Q1td1HCMPVraak3akDqVAStjwYOugxhCzcIfMso4JA== -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:54 2025 by rpki-client