$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa File: 2507f91f-043a-4d23-8241-7fcd43474bb7.roa (raw, json) Hash identifier: x/K0MY9EBXastagCOscxrHKTWl02aDI8fE39xW/EABc= Subject key identifier: 4C:A5:B3:76:23:73:17:93:FF:92:C9:D6:B2:D0:48:D1:D4:6B:A7:59 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 482DF09415B21B29C962CEA55B9C8636109F4974 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa Signing time: Mon 23 Jun 2025 15:20:33 +0000 ROA not before: Mon 23 Jun 2025 15:20:33 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f1d:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:2d:f0:94:15:b2:1b:29:c9:62:ce:a5:5b:9c:86:36:10:9f:49:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 15:20:33 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=2b50e8ab87e946eea15db5c78279577345f28f8986bb1fc1c00db6466f00d19d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:55:c0:4e:b8:ea:a7:1d:83:d4:df:76:d7:d6: cf:74:42:f2:ba:37:30:0e:ea:2f:71:86:3a:bc:1a: 91:7b:09:27:83:82:75:dd:9d:01:f4:8e:e5:3b:0c: ad:1d:2b:26:e9:94:80:48:b6:5b:f4:2a:b3:a9:02: d2:d0:96:e7:50:1a:62:57:5e:59:a0:81:27:6f:4b: cc:47:2c:0b:4c:c3:14:c4:bd:e4:c2:b7:47:a1:a3: 20:e2:16:1b:55:44:3d:4a:72:ac:7d:f4:98:6a:fb: 02:de:cb:ce:3a:81:57:35:bb:1e:ee:4d:52:7c:59: 31:ff:73:e3:38:21:e4:fa:a5:b1:aa:a7:aa:32:40: 70:45:6f:ac:0c:f8:fc:b2:cf:0d:8d:7b:cf:ed:25: a3:0f:26:9a:40:f1:76:51:58:62:63:d6:f3:fa:e8: dc:23:af:ec:a6:8e:66:1f:3a:bb:6d:52:cb:ba:12: be:9c:e3:83:43:ab:94:de:c3:0a:07:39:42:a7:14: 69:02:13:0d:3f:f5:14:f3:24:bf:2d:08:3f:88:55: 0b:fd:97:c4:3e:03:38:f4:4d:61:de:7c:8b:22:fc: e5:dd:bc:b7:96:85:71:43:1b:fc:0a:80:6d:b7:f0: 31:0b:72:dc:9a:c8:71:dd:06:a2:03:f9:3f:e1:54: 68:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A5:B3:76:23:73:17:93:FF:92:C9:D6:B2:D0:48:D1:D4:6B:A7:59 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1d:8000::/36 Signature Algorithm: sha256WithRSAEncryption 0b:88:69:82:ad:d9:5a:d3:41:17:34:fe:8d:23:0c:a0:9f:4a: 6f:48:89:3f:93:52:0a:01:a1:39:f0:2b:1f:ce:25:46:a2:77: ef:45:f9:d6:96:32:3c:5f:ca:07:96:3a:fb:e6:c6:df:e8:13: 7a:d8:71:7f:9e:c4:28:2e:7d:9b:e4:b5:a5:bf:74:cf:3e:3f: 23:6d:d9:8e:cf:91:bc:61:cd:34:89:90:f8:2f:73:43:e8:21: 95:d0:3b:41:7c:18:56:cc:ba:e2:48:38:f1:c4:06:cc:63:da: a7:25:97:06:05:4c:6e:94:82:ba:64:b3:89:59:4a:c1:76:bb: f8:b9:5c:f2:e0:28:5e:cb:0d:f4:7a:48:35:ad:97:d8:fd:20: 50:04:df:92:00:c1:3e:9a:91:66:90:23:06:29:43:ba:b8:b9: fe:cd:80:62:bf:06:e6:64:31:44:3d:5b:81:52:0f:e5:ee:65: a9:2c:8b:cb:2e:ff:0d:fb:7e:6b:e5:50:41:25:c3:72:90:e5: 71:d5:8e:0f:0d:c7:96:2e:c4:f9:27:53:14:06:07:37:ea:d2: fb:e6:c9:dc:ec:03:12:3b:f2:48:8a:2f:84:53:07:4a:10:bf: 66:7e:2b:53:20:6e:9f:da:07:71:25:a0:7b:84:de:10:8a:fa: 87:c7:c6:80 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUSC3wlBWyGynJYs6lW5yGNhCfSXQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIzMTUyMDMzWhcNMjUwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjUwZThhYjg3ZTk0NmVlYTE1ZGI1Yzc4Mjc5NTc3MzQ1 ZjI4Zjg5ODZiYjFmYzFjMDBkYjY0NjZmMDBkMTlkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUVcBOuOqnHYPU33bX1s90QvK6NzAO6i9xhjq8GpF7CSeD gnXdnQH0juU7DK0dKybplIBItlv0KrOpAtLQludQGmJXXlmggSdvS8xHLAtMwxTE veTCt0ehoyDiFhtVRD1Kcqx99Jhq+wLey846gVc1ux7uTVJ8WTH/c+M4IeT6pbGq p6oyQHBFb6wM+Pyyzw2Ne8/tJaMPJppA8XZRWGJj1vP66Nwjr+ymjmYfOrttUsu6 Er6c44NDq5TewwoHOUKnFGkCEw0/9RTzJL8tCD+IVQv9l8Q+Azj0TWHefIsi/OXd vLeWhXFDG/wKgG238DELctyayHHdBqID+T/hVGj3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUTKWzdiNzF5P/ksnWstBI0dRrp1kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzI1MDdmOTFmLTA0M2EtNGQyMy04MjQxLTdmY2Q0MzQ3NGJiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAB8dgDANBgkqhkiG9w0BAQsFAAOCAQEAC4hpgq3ZWtNBFzT+jSMMoJ9K b0iJP5NSCgGhOfArH84lRqJ370X51pYyPF/KB5Y6++bG3+gTethxf57EKC59m+S1 pb90zz4/I23Zjs+RvGHNNImQ+C9zQ+ghldA7QXwYVsy64kg48cQGzGPapyWXBgVM bpSCumSziVlKwXa7+Llc8uAoXssN9HpINa2X2P0gUATfkgDBPpqRZpAjBilDuri5 /s2AYr8G5mQxRD1bgVIP5e5lqSyLyy7/Dft+a+VQQSXDcpDlcdWODw3Hli7E+SdT FAYHN+rS++bJ3OwDEjvySIovhFMHShC/Zn4rUyBun9oHcSWge4TeEIr6h8fGgA== -----END CERTIFICATE-----Generated at Tue Jul 1 13:15:38 2025 by rpki-client