$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b3424f-9bad-4599-a0a2-6507f7c70050.roa File: 24b3424f-9bad-4599-a0a2-6507f7c70050.roa (raw, json) Hash identifier: P/ZzBQKLASnhABmPWONt8qGXFqPRC33fV6qY1mBwmc8= Subject key identifier: 1A:98:6F:68:33:A0:70:32:F8:02:83:88:5D:1E:82:75:15:48:ED:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2D50D2E8259785AF7C27C767D3F434E787DADBFD Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b3424f-9bad-4599-a0a2-6507f7c70050.roa Signing time: Fri 13 Jun 2025 17:30:24 +0000 ROA not before: Fri 13 Jun 2025 17:30:24 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f11:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:50:d2:e8:25:97:85:af:7c:27:c7:67:d3:f4:34:e7:87:da:db:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 13 17:30:24 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=bd2d4300ac4a8eca1d51cce31d1a09b238dd3a14842c94fdb4f75f811a0e3e86, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:d7:a5:48:22:f5:ad:a6:fc:6e:2f:e4:83: 0e:98:dc:8c:3e:9a:35:c2:58:ec:6f:81:ec:53:4e: d0:3c:e3:03:b9:80:15:10:41:7d:6a:e0:fd:01:bc: c2:ee:fe:66:f3:06:2f:cc:c3:1f:64:b4:b3:c3:0f: fc:92:e3:e2:ee:08:70:eb:94:76:6b:28:6f:dd:13: d4:20:08:a4:ac:e3:28:8e:20:0c:2d:e9:12:5a:d4: dc:d0:6c:88:b2:0e:81:5d:87:55:7d:6a:a3:0b:0e: a4:34:24:f6:64:58:74:33:f0:c2:d9:32:65:eb:f8: 5a:46:ea:48:57:63:02:4a:f1:f4:2e:84:8a:3e:6a: 2e:8f:eb:e3:a3:e4:a8:24:bb:ae:a6:94:8d:51:92: cd:b2:a5:91:c2:f1:54:95:05:8d:e0:61:55:87:50: 44:0b:b3:fb:92:0a:cf:8b:64:e0:e6:ca:b3:6b:d0: d2:38:ee:3b:7a:d9:27:34:fe:5b:20:b3:e6:be:6e: 02:66:f4:75:b0:aa:04:f4:45:86:28:4b:82:17:62: 31:6b:7c:18:df:c0:b6:d0:0d:84:f5:21:a1:36:fc: d2:6d:1e:02:32:03:b0:bf:ad:1c:5f:79:14:f1:41: 91:b3:0a:8d:f8:8b:49:bd:9c:a0:03:97:2b:fd:d1: 07:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:98:6F:68:33:A0:70:32:F8:02:83:88:5D:1E:82:75:15:48:ED:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b3424f-9bad-4599-a0a2-6507f7c70050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f11:8000::/36 Signature Algorithm: sha256WithRSAEncryption 20:86:9c:9b:9a:91:97:b5:51:1c:4e:cd:b3:0c:ed:08:8f:9a: 45:e9:0b:57:f0:dc:bb:ef:fc:89:6a:49:63:86:e8:cc:76:9b: 19:ed:b1:e8:39:36:63:03:90:2d:03:a2:3d:c1:63:98:42:e5: 99:2a:b2:d1:0e:95:da:36:25:83:26:6a:5c:67:16:55:1f:f2: ec:d5:31:a4:5d:ae:74:9f:eb:f7:61:91:68:47:e1:63:d1:c5: 18:d9:3e:66:c1:7e:c6:33:1c:98:4d:11:79:f6:58:a7:af:d5: c5:67:c7:b8:6e:bb:a2:06:fc:91:1b:49:f1:2b:59:06:9e:ac: e7:d3:b5:32:73:f6:aa:1a:d9:5d:b0:3c:ba:a7:ac:f7:25:ce: 7d:ad:67:9a:1f:e1:e9:2e:5f:3e:8a:97:3d:4f:17:11:40:7e: d8:a4:c9:66:ee:ed:5d:81:d4:8d:c8:60:2e:95:bc:a8:01:dc: 6c:31:90:04:8e:ee:1e:4e:c5:3f:0d:97:7a:40:50:c5:ed:7f: 94:ef:e5:3b:e1:3f:27:db:45:d3:0d:36:b0:70:ca:9b:e2:09: 61:35:35:96:e4:de:60:fd:64:26:42:eb:e8:ee:77:90:87:74: 1e:37:88:74:22:23:3e:30:c5:8e:f7:f0:b3:01:c6:39:4f:30: c3:14:33:5a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULVDS6CWXha98J8dn0/Q054fa2/0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEzMTczMDI0WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDJkNDMwMGFjNGE4ZWNhMWQ1MWNjZTMxZDFhMDliMjM4 ZGQzYTE0ODQyYzk0ZmRiNGY3NWY4MTFhMGUzZTg2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChFNelSCL1rab8bi/kgw6Y3Iw+mjXCWOxvgexTTtA84wO5 gBUQQX1q4P0BvMLu/mbzBi/Mwx9ktLPDD/yS4+LuCHDrlHZrKG/dE9QgCKSs4yiO IAwt6RJa1NzQbIiyDoFdh1V9aqMLDqQ0JPZkWHQz8MLZMmXr+FpG6khXYwJK8fQu hIo+ai6P6+Oj5Kgku66mlI1Rks2ypZHC8VSVBY3gYVWHUEQLs/uSCs+LZODmyrNr 0NI47jt62Sc0/lsgs+a+bgJm9HWwqgT0RYYoS4IXYjFrfBjfwLbQDYT1IaE2/NJt HgIyA7C/rRxfeRTxQZGzCo34i0m9nKADlyv90QfhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUGphvaDOgcDL4AoOIXR6CdRVI7VAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI0YjM0MjRmLTliYWQtNDU5OS1hMGEyLTY1MDdmN2M3MDA1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8RgDANBgkqhkiG9w0BAQsFAAOCAQEAIIacm5qRl7VRHE7NswztCI+a RekLV/Dcu+/8iWpJY4bozHabGe2x6Dk2YwOQLQOiPcFjmELlmSqy0Q6V2jYlgyZq XGcWVR/y7NUxpF2udJ/r92GRaEfhY9HFGNk+ZsF+xjMcmE0RefZYp6/VxWfHuG67 ogb8kRtJ8StZBp6s59O1MnP2qhrZXbA8uqes9yXOfa1nmh/h6S5fPoqXPU8XEUB+ 2KTJZu7tXYHUjchgLpW8qAHcbDGQBI7uHk7FPw2XekBQxe1/lO/lO+E/J9tF0w02 sHDKm+IJYTU1luTeYP1kJkLr6O53kId0HjeIdCIjPjDFjvfwswHGOU8wwxQzWg== -----END CERTIFICATE-----Generated at Tue Jul 1 03:40:56 2025 by rpki-client