$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd1ad95b-f3a9-44ac-aa3b-30c0aa5e39d2.roa File: cd1ad95b-f3a9-44ac-aa3b-30c0aa5e39d2.roa (raw, json) Hash identifier: MNhKexwC/M3vSKaeU9klUpDjGOugNEmD5Bc35Opfiqw= Subject key identifier: 21:A8:8C:97:45:A2:57:26:EE:8F:25:9A:57:12:6C:6D:20:6A:64:33 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 473711B63FCC1A3B3CC6D7BEAA0695DBB08F5A34 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd1ad95b-f3a9-44ac-aa3b-30c0aa5e39d2.roa Signing time: Mon 23 Jun 2025 15:22:21 +0000 ROA not before: Mon 23 Jun 2025 15:22:21 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff9:8000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:37:11:b6:3f:cc:1a:3b:3c:c6:d7:be:aa:06:95:db:b0:8f:5a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 15:22:21 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=03569902dbe78dde6fc0ab36c8c258da4eed63195e0ac2ff26f14236d387eae9, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:1e:0e:f9:53:18:10:04:a8:91:2d:a0:f2: cc:f6:b9:88:c0:37:d3:7d:67:61:08:69:86:3f:6c: 36:27:ff:69:15:45:55:46:ec:1c:c3:d7:10:63:cb: e9:c4:38:3b:b2:42:d5:68:30:3c:c2:4a:9e:9c:52: 1d:fa:7e:51:1e:b9:b3:d2:17:a1:22:e7:55:96:17: 4f:28:ec:ab:12:7e:76:f5:8c:d0:25:7f:bd:48:95: f5:33:95:7d:9d:9d:36:4e:ad:fa:e8:dc:e7:3b:98: a8:44:7e:c7:c9:db:92:45:b9:74:60:9d:46:76:d0: ce:d5:49:3b:a6:f5:f6:18:17:e2:00:5d:7e:2f:f8: 7a:40:43:81:87:ee:f3:d5:f0:c7:bb:cb:ac:43:ce: 88:dd:95:a0:99:15:33:21:b6:bb:7f:ea:66:f6:b9: 55:ac:8c:2d:57:4e:64:a8:5e:13:2a:14:d0:35:69: 09:6a:f1:8f:bb:53:e5:d7:de:b6:95:62:d8:7d:0c: 1d:34:f8:44:25:ad:bb:e3:de:4d:ae:35:20:63:e7: ad:52:b9:86:a3:c1:01:d0:ed:96:82:72:98:a0:56: 23:ca:bb:65:6c:fe:7c:bc:25:be:b0:6e:1c:8c:73: 5c:42:b5:67:b9:05:d7:83:aa:a3:65:10:9c:5c:ee: db:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A8:8C:97:45:A2:57:26:EE:8F:25:9A:57:12:6C:6D:20:6A:64:33 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd1ad95b-f3a9-44ac-aa3b-30c0aa5e39d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff9:8000::/39 Signature Algorithm: sha256WithRSAEncryption 90:cb:0f:23:83:b1:90:04:16:9a:bf:12:68:e6:3a:33:b2:8c: 0c:cd:28:42:f7:56:d5:f7:4b:a9:d1:cc:90:62:9c:a6:26:b0: 36:55:72:a6:3b:0c:fa:91:59:51:d0:40:e5:d6:45:3a:c2:32: 02:48:f5:a0:40:26:21:d4:60:d9:1b:24:53:46:d8:4a:00:a2: 5a:be:b2:57:e1:bd:02:a6:c9:5c:dd:85:c6:79:d8:e3:56:c0: 7b:ba:cf:85:06:49:d9:a7:c2:d5:82:06:73:24:a5:92:9c:68: 10:74:a9:4d:40:a6:a6:d9:27:c9:de:84:c2:96:02:30:c9:7f: bd:8e:e9:2a:f7:6f:9e:d2:5d:1b:d3:2c:1d:f9:74:98:3f:f5: 92:81:18:e2:e9:10:fa:e2:96:f7:7f:c1:48:7b:61:11:21:6c: 50:84:19:15:27:66:43:64:e8:18:4e:2a:b6:b8:aa:2f:d0:a5: e6:23:a1:3b:3d:9e:21:ab:bc:28:03:72:37:fc:ff:60:a5:08: 45:6e:64:84:3c:1c:c5:23:18:93:66:0c:50:84:13:cd:30:e7: ec:a5:aa:9b:41:3c:77:cb:8c:8d:e3:7a:84:45:65:87:9a:01: 2f:1d:d1:be:7f:4b:ee:58:85:be:a7:76:a9:f7:85:0a:ef:ec: 37:79:8c:2f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURzcRtj/MGjs8xte+qgaV27CPWjQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIzMTUyMjIxWhcNMjUwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzU2OTkwMmRiZTc4ZGRlNmZjMGFiMzZjOGMyNThkYTRl ZWQ2MzE5NWUwYWMyZmYyNmYxNDIzNmQzODdlYWU5MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxMx4O+VMYEASokS2g8sz2uYjAN9N9Z2EIaYY/bDYn/2kV RVVG7BzD1xBjy+nEODuyQtVoMDzCSp6cUh36flEeubPSF6Ei51WWF08o7KsSfnb1 jNAlf71IlfUzlX2dnTZOrfro3Oc7mKhEfsfJ25JFuXRgnUZ20M7VSTum9fYYF+IA XX4v+HpAQ4GH7vPV8Me7y6xDzojdlaCZFTMhtrt/6mb2uVWsjC1XTmSoXhMqFNA1 aQlq8Y+7U+XX3raVYth9DB00+EQlrbvj3k2uNSBj561SuYajwQHQ7ZaCcpigViPK u2Vs/ny8Jb6wbhyMc1xCtWe5BdeDqqNlEJxc7tt7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUIaiMl0WiVybujyWaVxJsbSBqZDMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkMWFkOTViLWYzYTktNDRhYy1hYTNiLTMwYzBhYTVlMzlkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB/5gDANBgkqhkiG9w0BAQsFAAOCAQEAkMsPI4OxkAQWmr8SaOY6M7KM DM0oQvdW1fdLqdHMkGKcpiawNlVypjsM+pFZUdBA5dZFOsIyAkj1oEAmIdRg2Rsk U0bYSgCiWr6yV+G9AqbJXN2FxnnY41bAe7rPhQZJ2afC1YIGcySlkpxoEHSpTUCm ptknyd6EwpYCMMl/vY7pKvdvntJdG9MsHfl0mD/1koEY4ukQ+uKW93/BSHthESFs UIQZFSdmQ2ToGE4qtriqL9Cl5iOhOz2eIau8KANyN/z/YKUIRW5khDwcxSMYk2YM UIQTzTDn7KWqm0E8d8uMjeN6hEVlh5oBLx3Rvn9L7liFvqd2qfeFCu/sN3mMLw== -----END CERTIFICATE-----Generated at Sun Jun 29 06:36:11 2025 by rpki-client