$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3720b08-99f6-4690-a4ae-55aae1b75988.roa File: d3720b08-99f6-4690-a4ae-55aae1b75988.roa (raw, json) Hash identifier: p/v7YQEH51doFW2JchyRsJVOXYZf3SiWRg7GQZsVZb0= Subject key identifier: 6B:8D:AA:17:8C:4B:95:2E:4C:60:1D:E5:49:D7:EC:9F:83:5F:04:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 118764AC8C150E3F0D837EBC5BD4F8F69B4C2FB0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3720b08-99f6-4690-a4ae-55aae1b75988.roa Signing time: Tue 24 Jun 2025 00:21:02 +0000 ROA not before: Tue 24 Jun 2025 00:21:02 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff5:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:87:64:ac:8c:15:0e:3f:0d:83:7e:bc:5b:d4:f8:f6:9b:4c:2f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:21:02 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=20bd38470ee78ff328a94474fa33e741644010ae4975fdf0d17b6c4b1d497eb4, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c9:2e:07:5f:76:5d:bd:14:84:79:6f:82:9c: f0:bb:d3:a5:9e:72:eb:53:ff:b8:c3:10:a1:cf:5f: 0d:5d:69:f7:02:b0:c5:c6:4e:f7:a5:e1:60:17:7b: 02:ee:e9:2b:0a:0f:3f:2e:fa:11:cc:c6:cd:b1:cb: fe:f3:49:1e:1e:8a:89:e4:8d:6b:c5:df:87:24:1b: 4f:72:2c:b7:ac:bd:e8:77:f9:5d:35:7c:3f:56:df: f8:db:d5:7d:09:23:d3:24:ab:92:ab:d8:0f:f5:e7: e4:5f:21:d6:88:74:55:e3:db:ef:a1:52:1f:97:e1: b5:89:d0:63:87:f3:49:65:22:cf:79:a8:d2:bb:ed: c1:41:99:a0:de:ed:8b:38:8f:80:8d:43:3f:41:0f: b3:1a:16:44:ec:d1:60:a7:f6:c8:15:d1:4d:b9:e5: f1:ad:d3:b9:45:17:d1:bf:13:36:3c:04:94:fe:fd: ef:b4:a3:48:f0:e2:94:f0:d1:e3:37:5f:25:7a:a8: 8b:a1:71:ce:06:9a:81:cd:6e:e8:dd:3b:49:53:57: ce:57:cc:4b:dc:df:8b:ca:2a:bf:9e:60:03:3c:d4: 80:72:f7:ed:6d:73:8f:5f:1c:3d:2b:f3:f3:a4:47: c5:37:e4:9e:bc:3a:d9:7a:1d:95:9e:18:27:e9:cc: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8D:AA:17:8C:4B:95:2E:4C:60:1D:E5:49:D7:EC:9F:83:5F:04:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3720b08-99f6-4690-a4ae-55aae1b75988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff5:6000::/40 Signature Algorithm: sha256WithRSAEncryption 1b:e5:26:9e:04:14:ae:60:dd:cd:f2:4b:7f:89:b9:7d:aa:c0: e7:40:8b:26:ae:d6:19:00:a6:cc:90:8d:67:2b:12:ba:6a:92: 45:7a:ce:30:88:99:8d:89:02:f7:e0:16:4c:de:3d:1e:ef:0c: 99:35:66:c0:e1:b6:e2:32:ba:d4:ef:c1:5c:2c:9d:86:e3:86: a6:dc:b1:89:b6:6e:be:15:3c:6f:9c:a6:57:3b:9c:ee:e9:71: 29:47:58:0e:d6:2e:c6:a7:c8:bb:9b:dd:5a:83:5c:ea:10:20: 75:70:f4:22:a1:47:9f:8e:a7:89:38:b0:79:04:eb:0a:57:94: 65:35:a6:7f:09:6d:ed:b5:89:d3:12:4c:e3:77:51:b2:ef:0e: 88:2c:60:51:16:40:b2:36:a3:90:b3:f0:3a:9b:fa:1c:0b:a8: 6b:01:e0:2b:68:b1:8e:11:13:a0:00:f5:4e:f7:7c:15:a8:87: 4c:70:5c:c2:96:e2:e2:7e:c6:d6:dc:96:bc:29:7c:6d:08:2e: fe:43:1f:f0:1c:33:d4:7a:8b:b2:00:b3:ce:b1:a7:67:a9:db: 38:86:f3:51:78:46:cf:65:b1:76:e8:7e:17:21:12:3b:c3:49: 02:e7:5a:e1:e0:68:fd:b9:2e:c2:d2:25:f6:a4:9f:90:55:f9: b7:55:e9:f4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEYdkrIwVDj8Ng368W9T49ptML7AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDAyMTAyWhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGJkMzg0NzBlZTc4ZmYzMjhhOTQ0NzRmYTMzZTc0MTY0 NDAxMGFlNDk3NWZkZjBkMTdiNmM0YjFkNDk3ZWI0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlyS4HX3ZdvRSEeW+CnPC706WecutT/7jDEKHPXw1dafcC sMXGTvel4WAXewLu6SsKDz8u+hHMxs2xy/7zSR4eionkjWvF34ckG09yLLesveh3 +V01fD9W3/jb1X0JI9Mkq5Kr2A/15+RfIdaIdFXj2++hUh+X4bWJ0GOH80llIs95 qNK77cFBmaDe7Ys4j4CNQz9BD7MaFkTs0WCn9sgV0U255fGt07lFF9G/EzY8BJT+ /e+0o0jw4pTw0eM3XyV6qIuhcc4GmoHNbujdO0lTV85XzEvc34vKKr+eYAM81IBy 9+1tc49fHD0r8/OkR8U35J68Otl6HZWeGCfpzNA/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUa42qF4xLlS5MYB3lSdfsn4NfBIAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2QzNzIwYjA4LTk5ZjYtNDY5MC1hNGFlLTU1YWFlMWI3NTk4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/1YDANBgkqhkiG9w0BAQsFAAOCAQEAG+UmngQUrmDdzfJLf4m5farA 50CLJq7WGQCmzJCNZysSumqSRXrOMIiZjYkC9+AWTN49Hu8MmTVmwOG24jK61O/B XCydhuOGptyxibZuvhU8b5ymVzuc7ulxKUdYDtYuxqfIu5vdWoNc6hAgdXD0IqFH n46niTiweQTrCleUZTWmfwlt7bWJ0xJM43dRsu8OiCxgURZAsjajkLPwOpv6HAuo awHgK2ixjhEToAD1Tvd8FaiHTHBcwpbi4n7G1tyWvCl8bQgu/kMf8Bwz1HqLsgCz zrGnZ6nbOIbzUXhGz2Wxduh+FyESO8NJAuda4eBo/bkuwtIl9qSfkFX5t1Xp9A== -----END CERTIFICATE-----Generated at Thu Jul 3 10:22:13 2025 by rpki-client