$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb6119d1-0a33-47fe-8be0-34dfa2a6d433.roa File: eb6119d1-0a33-47fe-8be0-34dfa2a6d433.roa (raw, json) Hash identifier: yY9JwnXFZGRq+kLuHyK9qUcY83PZT6uMkFHM+ARnBKU= Subject key identifier: 85:B8:E9:CB:39:B0:3D:DA:B1:C5:95:BC:1E:3A:03:3A:71:59:01:85 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 421A3755210E45746387C234045B3CE9FB76320B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb6119d1-0a33-47fe-8be0-34dfa2a6d433.roa Signing time: Mon 23 Jun 2025 15:22:09 +0000 ROA not before: Mon 23 Jun 2025 15:22:09 +0000 ROA not after: Mon 28 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff0:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:1a:37:55:21:0e:45:74:63:87:c2:34:04:5b:3c:e9:fb:76:32:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 23 15:22:09 2025 GMT Not After : Jul 28 23:59:59 2025 GMT Subject: serialNumber=300e5086d5817ada25ee5623477092bac2ff5636a46228f43ae0007bc5ba71b7, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:1a:81:06:c4:cb:26:79:da:bb:ab:d8:0a: 6f:94:cc:66:ad:ab:e4:06:e4:db:0d:75:c3:86:a5: ae:e7:6b:49:91:6c:62:36:78:72:66:6c:7f:13:dd: 20:ea:c3:05:d4:51:18:25:a2:f2:9b:51:c2:0c:85: ed:da:d9:4b:62:77:95:b0:dd:ae:ef:09:c3:01:9e: a1:d3:3e:3d:25:be:c6:f7:fc:f6:cb:03:51:17:0b: 76:82:88:89:d1:1b:d0:1f:54:f5:e0:78:45:2a:5e: 5f:a1:c8:19:60:e2:0d:db:1b:d9:fe:1b:0e:59:aa: d4:ea:36:76:6a:64:54:42:78:24:df:8c:57:28:36: fe:ce:a7:2a:c9:65:5c:90:f6:cc:9b:81:60:3d:92: ad:6e:ec:d7:15:4b:e1:63:50:6d:3f:39:5b:0a:a4: dd:c6:8d:f2:60:5b:d1:05:00:9f:4a:94:13:d2:81: c6:82:b9:ae:2d:e3:36:60:6c:52:3a:41:b8:83:06: fa:ab:6d:03:f7:92:8c:23:6e:80:ff:0e:2e:b8:34: a0:f6:7d:37:f9:07:53:30:f2:f7:25:db:14:8a:ef: bd:09:47:f9:c4:a5:95:29:43:b1:98:cf:33:03:69: 37:6f:6d:c8:c5:4c:db:cd:14:e7:bd:2b:d6:ae:b4: a5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B8:E9:CB:39:B0:3D:DA:B1:C5:95:BC:1E:3A:03:3A:71:59:01:85 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb6119d1-0a33-47fe-8be0-34dfa2a6d433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff0:5000::/40 Signature Algorithm: sha256WithRSAEncryption 53:d2:4e:ff:53:92:76:f4:94:41:c6:94:74:12:18:6c:10:8a: 02:c4:af:92:ba:e3:2e:1f:f6:61:6e:bc:54:14:dd:3b:fb:b6: 64:e1:4c:e0:c6:12:7f:ed:92:cb:f8:b6:f3:e1:b8:24:0c:6d: 25:09:93:8a:b7:2f:ec:54:71:ab:0d:10:48:f8:77:7e:cc:af: 10:35:dd:62:5e:29:17:a7:d9:bf:42:38:dd:d5:a8:bc:f6:3a: 29:04:8c:6d:27:44:3a:ad:b0:40:05:14:ae:20:52:d8:f0:9f: cd:e7:9d:e5:b2:40:b0:22:a4:02:51:92:75:6a:18:67:14:41: 44:fd:a9:de:d6:14:12:d7:d9:60:5d:2c:19:8f:70:b7:16:85: b7:a8:00:ec:bd:b1:7a:b3:ea:87:23:c1:bf:50:c1:c0:49:42: 48:26:fb:0b:a7:55:6e:61:27:f6:fa:9d:30:6d:6a:93:24:a3: 9b:5b:8e:e2:ca:b3:77:4b:e6:67:b5:38:20:28:8d:4c:1d:0b: d8:af:dd:e0:9b:33:a3:8c:23:70:a2:14:57:49:41:f0:19:90: f3:71:af:77:60:26:bb:21:1b:c9:fa:d1:c3:a8:38:8a:05:57: 22:31:1e:6f:b8:4c:6a:4b:a4:d3:0e:d9:58:02:17:02:93:9e: c4:8b:99:04 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQho3VSEORXRjh8I0BFs86ft2MgswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjIzMTUyMjA5WhcNMjUwNzI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDBlNTA4NmQ1ODE3YWRhMjVlZTU2MjM0NzcwOTJiYWMy ZmY1NjM2YTQ2MjI4ZjQzYWUwMDA3YmM1YmE3MWI3MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxJBqBBsTLJnnau6vYCm+UzGatq+QG5NsNdcOGpa7na0mR bGI2eHJmbH8T3SDqwwXUURglovKbUcIMhe3a2Utid5Ww3a7vCcMBnqHTPj0lvsb3 /PbLA1EXC3aCiInRG9AfVPXgeEUqXl+hyBlg4g3bG9n+Gw5ZqtTqNnZqZFRCeCTf jFcoNv7OpyrJZVyQ9sybgWA9kq1u7NcVS+FjUG0/OVsKpN3GjfJgW9EFAJ9KlBPS gcaCua4t4zZgbFI6QbiDBvqrbQP3kowjboD/Di64NKD2fTf5B1Mw8vcl2xSK770J R/nEpZUpQ7GYzzMDaTdvbcjFTNvNFOe9K9autKWNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUhbjpyzmwPdqxxZW8HjoDOnFZAYUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2ViNjExOWQxLTBhMzMtNDdmZS04YmUwLTM0ZGZhMmE2ZDQzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/wUDANBgkqhkiG9w0BAQsFAAOCAQEAU9JO/1OSdvSUQcaUdBIYbBCK AsSvkrrjLh/2YW68VBTdO/u2ZOFM4MYSf+2Sy/i28+G4JAxtJQmTircv7FRxqw0Q SPh3fsyvEDXdYl4pF6fZv0I43dWovPY6KQSMbSdEOq2wQAUUriBS2PCfzeed5bJA sCKkAlGSdWoYZxRBRP2p3tYUEtfZYF0sGY9wtxaFt6gA7L2xerPqhyPBv1DBwElC SCb7C6dVbmEn9vqdMG1qkySjm1uO4sqzd0vmZ7U4ICiNTB0L2K/d4Jszo4wjcKIU V0lB8BmQ83Gvd2AmuyEbyfrRw6g4igVXIjEeb7hMakuk0w7ZWAIXApOexIuZBA== -----END CERTIFICATE-----Generated at Sun Jun 29 11:28:30 2025 by rpki-client