$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df1f645b-7149-4d7b-940f-c466984da166.roa File: df1f645b-7149-4d7b-940f-c466984da166.roa (raw, json) Hash identifier: AE1B8cCSxjFORA5bayQvE2dSzk+yQGNGdWmdVTeLu+s= Subject key identifier: 53:35:48:11:4E:70:1F:0D:32:F2:04:19:2C:4C:19:94:0E:E2:43:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0AA9F18234A867963CA228B0FE6124E5D7CB70E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df1f645b-7149-4d7b-940f-c466984da166.roa Signing time: Tue 10 Jun 2025 16:20:57 +0000 ROA not before: Tue 10 Jun 2025 16:20:57 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:8110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a9:f1:82:34:a8:67:96:3c:a2:28:b0:fe:61:24:e5:d7:cb:70:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:20:57 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=7ff92e3925841672f4759b6534edc22f875e4b03e674009eda86fb6cb50d59c1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:d1:9e:ef:49:3a:3c:d4:fe:4f:7f:3e:43: d8:8b:7a:67:cd:d1:b7:56:52:ae:f4:3a:7c:fa:9b: db:88:a5:3a:b6:e1:a4:a6:b4:f1:ec:d9:87:af:bb: fe:72:a0:35:09:04:aa:f1:53:5f:60:61:d9:fb:7e: 85:2a:9e:ea:9c:dc:07:78:29:50:1a:87:7b:ff:96: 3e:e6:e2:86:1b:6b:75:ce:f1:3d:63:2d:21:24:31: 79:ea:a1:2e:95:af:0f:e6:32:6d:8b:9f:4a:ab:96: 66:ea:ec:2a:9e:93:b5:64:6b:25:e3:dc:d6:87:7a: 26:d9:3d:22:ae:25:89:67:9f:53:5c:e7:87:29:8a: ff:61:e0:87:3f:a1:fd:9c:7f:fb:88:81:52:ed:30: 15:5b:8d:50:e5:ba:9b:dd:04:f0:c0:76:89:97:73: c0:ea:fc:96:58:ef:33:01:20:fa:7a:ea:20:af:03: 7f:44:a2:f4:86:2f:37:de:98:3c:3c:75:3a:ca:b9: b7:d7:b6:7d:37:a7:e0:99:71:54:c6:86:93:fd:75: 5b:fb:69:0a:72:69:2f:e0:8b:d6:e5:e7:ad:a7:fc: d1:12:b9:44:66:2e:7f:cb:b1:4a:2e:80:58:2a:c1: f0:32:0d:8e:0e:9f:66:26:f9:e6:fb:00:38:67:ba: f2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:35:48:11:4E:70:1F:0D:32:F2:04:19:2C:4C:19:94:0E:E2:43:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df1f645b-7149-4d7b-940f-c466984da166.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8110::/48 Signature Algorithm: sha256WithRSAEncryption 4c:51:fe:1d:ac:8a:bd:1a:bc:b5:e2:d0:7b:8a:a2:3d:bb:3e: a0:2b:0c:22:eb:4a:33:bf:d9:70:bb:bd:19:3e:a2:21:29:0d: 04:f6:c4:b1:83:ac:c7:07:83:88:31:05:50:35:5e:17:83:3d: 0c:ca:f7:e3:e9:33:20:bb:2f:92:3d:da:7a:5a:d3:ef:3b:38: 67:aa:78:d8:db:5c:84:1c:05:0d:09:dc:f8:46:fe:c8:82:a2: 1a:a4:b3:a4:25:29:ff:57:b1:f3:86:86:0d:82:45:62:3e:70: e5:cf:c2:29:f9:57:d8:5c:fb:66:5f:92:5d:cc:d9:b8:d7:17: af:93:64:9b:34:7e:a3:6e:6a:0a:16:b4:21:10:3a:b9:70:12: 53:b0:f6:88:aa:5d:8c:af:87:ac:6b:fe:77:22:0c:2b:8f:a4: fe:06:70:0e:bc:2c:31:c2:37:4f:c7:37:38:aa:a0:44:6a:7b: 06:40:14:bd:b0:17:6d:49:a6:68:c6:dd:3d:3b:26:24:d9:4e: 02:0e:50:d2:4d:38:37:5c:e4:51:fa:f9:a0:42:ec:cd:f5:ed: 36:6d:f4:99:97:68:ae:89:f2:1d:da:35:ee:a5:10:d6:01:98: 28:7e:bb:d7:91:c0:99:98:23:0c:85:04:40:f4:b7:b1:6b:55: e3:c0:ad:bd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCqnxgjSoZ5Y8oiiw/mEk5dfLcOAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTYyMDU3WhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZmY5MmUzOTI1ODQxNjcyZjQ3NTliNjUzNGVkYzIyZjg3 NWU0YjAzZTY3NDAwOWVkYTg2ZmI2Y2I1MGQ1OWMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+uNGe70k6PNT+T38+Q9iLemfN0bdWUq70Onz6m9uIpTq2 4aSmtPHs2Yevu/5yoDUJBKrxU19gYdn7foUqnuqc3Ad4KVAah3v/lj7m4oYba3XO 8T1jLSEkMXnqoS6Vrw/mMm2Ln0qrlmbq7Cqek7VkayXj3NaHeibZPSKuJYlnn1Nc 54cpiv9h4Ic/of2cf/uIgVLtMBVbjVDlupvdBPDAdomXc8Dq/JZY7zMBIPp66iCv A39EovSGLzfemDw8dTrKubfXtn03p+CZcVTGhpP9dVv7aQpyaS/gi9bl562n/NES uURmLn/LsUougFgqwfAyDY4On2Ym+eb7ADhnuvIlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUzVIEU5wHw0y8gQZLEwZlA7iQ3YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2RmMWY2NDViLTcxNDktNGQ3Yi05NDBmLWM0NjY5ODRkYTE2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgRAwDQYJKoZIhvcNAQELBQADggEBAExR/h2sir0avLXi0HuKoj27 PqArDCLrSjO/2XC7vRk+oiEpDQT2xLGDrMcHg4gxBVA1XheDPQzK9+PpMyC7L5I9 2npa0+87OGeqeNjbXIQcBQ0J3PhG/siCohqks6QlKf9XsfOGhg2CRWI+cOXPwin5 V9hc+2Zfkl3M2bjXF6+TZJs0fqNuagoWtCEQOrlwElOw9oiqXYyvh6xr/nciDCuP pP4GcA68LDHCN0/HNziqoERqewZAFL2wF21JpmjG3T07JiTZTgIOUNJNODdc5FH6 +aBC7M317TZt9JmXaK6J8h3aNe6lENYBmCh+u9eRwJmYIwyFBED0t7FrVePArb0= -----END CERTIFICATE-----Generated at Tue Jul 1 17:42:30 2025 by rpki-client