$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43e1122b-e590-46ca-8737-991bed4a2254.roa File: 43e1122b-e590-46ca-8737-991bed4a2254.roa (raw, json) Hash identifier: 54HCkY+KXo2OpZAuUWaIO2PHWCNN3R35XFrSoEUhpJc= Subject key identifier: 0A:F2:47:67:D8:15:BC:E2:87:46:44:5F:C7:7F:1E:72:31:3D:1F:05 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6341F6EFCBE969F7DF2A7D95D3BCD6399342FE24 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43e1122b-e590-46ca-8737-991bed4a2254.roa Signing time: Mon 16 Jun 2025 19:22:13 +0000 ROA not before: Mon 16 Jun 2025 19:22:13 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff3:8020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:41:f6:ef:cb:e9:69:f7:df:2a:7d:95:d3:bc:d6:39:93:42:fe:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 19:22:13 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=6b3f340f62b37aff2117183801189b1e04eed0b716b6a4a6a762f28a3ade1e5b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:ca:6d:fe:fc:33:b2:26:fc:f7:fc:33:1c: b7:b8:a8:a8:fc:e7:85:bf:da:6a:a7:8f:41:8b:f4: 1e:19:3e:64:a7:ee:23:97:2f:0b:54:80:12:14:43: 91:78:fc:eb:b4:38:6a:bb:68:e5:11:53:43:79:bf: 30:22:c0:7d:07:fb:c4:16:e2:47:9c:0e:c5:d9:ad: ba:7c:f3:a9:b2:34:3f:7e:74:e1:73:ca:1e:4b:73: c1:a3:78:2e:f1:e6:ac:27:cc:b6:70:17:3d:87:56: 35:6a:24:5f:cc:7a:a2:41:11:0e:7b:67:69:1c:36: 53:a1:da:b4:cf:19:ac:3b:29:9d:ca:d9:8e:cf:01: 10:0b:84:9a:f5:45:87:39:fe:7f:20:2e:c7:ab:59: 1c:82:83:22:73:d5:3e:c2:10:53:b9:b0:95:73:79: 0d:43:bb:13:57:67:57:83:81:44:d9:62:94:ec:4a: 06:c6:08:f4:88:4a:94:5d:a3:7d:81:8a:1f:a2:77: e5:6c:b1:f1:2b:8d:15:5a:63:13:c7:9e:e4:46:14: 4f:c1:75:54:e9:1f:bb:03:14:90:5a:1e:22:a2:b3: 4d:e4:b1:f5:7a:74:0e:8e:1d:d8:e9:59:7e:cc:cf: a4:ab:2e:77:6e:82:84:a5:ef:9e:95:b6:f9:fc:10: cd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F2:47:67:D8:15:BC:E2:87:46:44:5F:C7:7F:1E:72:31:3D:1F:05 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43e1122b-e590-46ca-8737-991bed4a2254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:8020::/46 Signature Algorithm: sha256WithRSAEncryption 2a:31:f4:7d:b4:3e:cd:1d:87:34:24:da:c0:88:07:65:d5:fd: d2:0d:50:b9:76:a3:6f:aa:85:35:05:7b:39:a9:67:7a:c4:4d: 08:14:0e:8c:32:ed:9b:06:81:e9:1f:6d:ec:c3:05:68:0f:d3: 38:92:ac:29:58:4d:73:74:e6:53:30:6d:2b:a1:a8:71:24:fc: 23:92:12:8e:0f:cb:57:c0:5b:d0:6f:09:a3:be:f8:62:08:6c: d3:10:2d:93:5f:dc:09:8e:bf:80:fa:7f:ef:5c:ad:a1:d0:2b: e6:40:32:87:15:08:b3:0b:4c:16:bb:c8:d2:7f:ce:0b:c3:12: f0:67:e9:55:35:0a:02:bd:ec:35:b5:6c:77:59:46:35:2f:c8: f1:c4:76:3f:e3:3c:09:87:47:4e:9d:04:da:64:8c:d0:a1:56: 9c:c4:ee:38:1d:be:89:0e:f2:1d:cc:c7:91:f9:5a:fa:18:c4: a9:26:36:f6:10:8d:9c:18:61:04:7d:05:dc:96:63:b0:da:b9: cd:be:60:43:2b:1f:6d:df:6d:76:64:c9:93:82:45:ed:ea:2b: 25:c4:e2:90:12:e2:1f:c4:c5:8f:ad:74:9b:51:7e:f5:ac:b5: c3:c1:a1:b7:91:e0:55:80:9b:d6:ef:c7:40:40:ff:36:90:ea: ab:fc:a1:4c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY0H278vpafffKn2V07zWOZNC/iQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTkyMjEzWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjNmMzQwZjYyYjM3YWZmMjExNzE4MzgwMTE4OWIxZTA0 ZWVkMGI3MTZiNmE0YTZhNzYyZjI4YTNhZGUxZTViMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4O8pt/vwzsib89/wzHLe4qKj854W/2mqnj0GL9B4ZPmSn 7iOXLwtUgBIUQ5F4/Ou0OGq7aOURU0N5vzAiwH0H+8QW4kecDsXZrbp886myND9+ dOFzyh5Lc8GjeC7x5qwnzLZwFz2HVjVqJF/MeqJBEQ57Z2kcNlOh2rTPGaw7KZ3K 2Y7PARALhJr1RYc5/n8gLserWRyCgyJz1T7CEFO5sJVzeQ1DuxNXZ1eDgUTZYpTs SgbGCPSISpRdo32Bih+id+VssfErjRVaYxPHnuRGFE/BdVTpH7sDFJBaHiKis03k sfV6dA6OHdjpWX7Mz6SrLndugoSl756Vtvn8EM0lAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCvJHZ9gVvOKHRkRfx38ecjE9HwUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQzZTExMjJiLWU1OTAtNDZjYS04NzM3LTk5MWJlZDRhMjI1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zgCAwDQYJKoZIhvcNAQELBQADggEBACox9H20Ps0dhzQk2sCIB2XV /dINULl2o2+qhTUFezmpZ3rETQgUDowy7ZsGgekfbezDBWgP0ziSrClYTXN05lMw bSuhqHEk/COSEo4Py1fAW9BvCaO++GIIbNMQLZNf3AmOv4D6f+9craHQK+ZAMocV CLMLTBa7yNJ/zgvDEvBn6VU1CgK97DW1bHdZRjUvyPHEdj/jPAmHR06dBNpkjNCh VpzE7jgdvokO8h3Mx5H5WvoYxKkmNvYQjZwYYQR9BdyWY7Dauc2+YEMrH23fbXZk yZOCRe3qKyXE4pAS4h/ExY+tdJtRfvWstcPBobeR4FWAm9bvx0BA/zaQ6qv8oUw= -----END CERTIFICATE-----Generated at Thu Jul 3 06:16:58 2025 by rpki-client