$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78869b8-e98d-457e-8d22-548597cc5303.roa File: f78869b8-e98d-457e-8d22-548597cc5303.roa (raw, json) Hash identifier: HDQiKn4o6iV8qslTuOhI6YMGYk1PMnaxS+QcFCPq74o= Subject key identifier: 3E:20:09:67:AA:FD:AD:66:79:00:AF:1B:9D:C8:B2:5C:44:6B:B2:B4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 1E3EEC1A073E9B3E5A56A5EB0C7A6802565E7CEF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78869b8-e98d-457e-8d22-548597cc5303.roa Signing time: Sat 28 Jun 2025 00:30:36 +0000 ROA not before: Sat 28 Jun 2025 00:30:36 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f00:8130::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3e:ec:1a:07:3e:9b:3e:5a:56:a5:eb:0c:7a:68:02:56:5e:7c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 28 00:30:36 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=a4cc30da507faeeb640e30a3fc7dd14b5288a24f81799180118b0d322b78796d, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:47:7e:7b:22:ad:03:1d:30:c5:c8:e8:93:21: cd:f5:58:4b:05:6a:40:fe:e3:76:20:08:71:65:55: 44:92:18:b3:3f:f4:0d:aa:5a:7d:e4:46:a6:49:50: c1:67:22:07:61:4f:d9:1f:1a:93:4d:10:0d:89:cc: b0:07:88:cd:fc:4f:be:a3:d7:ea:52:77:1e:dd:1f: fb:ea:51:1f:7a:3b:75:71:94:b3:23:6b:47:83:a7: c8:12:cf:a9:ab:84:6d:61:62:ea:c3:a4:12:50:d3: 4d:08:0c:b1:b6:85:7f:a0:6d:7e:26:96:25:f9:86: f4:00:47:bb:fd:ee:b5:63:f1:e8:6e:be:d7:e7:42: 9b:92:19:4f:10:80:9c:0a:d6:7e:d0:ef:84:3e:5a: b8:00:cd:bd:d4:38:ff:38:da:b0:14:5f:ac:e2:cd: 74:2c:64:c5:90:c7:32:66:9e:e4:24:0d:15:cf:6b: c2:91:a2:ba:0f:1c:22:c1:4f:c3:df:70:41:20:15: 3e:8e:ba:ea:4d:e0:5f:b9:50:a2:4b:0b:eb:7c:53: 1b:e9:97:b3:96:67:da:45:74:15:a6:8a:33:b2:89: a9:50:6c:b3:61:9d:3c:85:39:fa:73:7d:18:ed:ff: 1d:36:d4:4d:15:69:fc:c8:a2:23:48:b7:91:39:32: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:20:09:67:AA:FD:AD:66:79:00:AF:1B:9D:C8:B2:5C:44:6B:B2:B4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78869b8-e98d-457e-8d22-548597cc5303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8130::/48 Signature Algorithm: sha256WithRSAEncryption 29:6f:6a:b1:c3:20:b7:d9:f0:d9:0e:9b:85:b9:84:d8:94:df: 50:59:2c:72:7f:80:c3:d7:ab:f7:2e:b1:88:9b:4e:32:b8:4d: 5a:00:d4:51:3a:df:f9:1b:e4:a8:b0:19:01:34:a4:79:5b:f5: 5e:ca:a4:36:c0:78:4c:2d:cd:0d:19:07:b2:d2:9a:f0:08:f9: 8c:1b:83:d3:d9:87:8d:0b:0a:f0:d6:57:4f:38:1e:03:fa:f3: 02:df:bd:82:1f:cf:37:c5:09:aa:d8:61:e1:f5:39:23:2a:c9: 37:ea:f9:a3:4a:75:af:4e:86:ca:bd:5c:6d:b1:ca:b4:f1:1e: 73:ba:11:c7:17:a3:b7:40:a7:0a:74:f7:26:1b:dd:f0:30:b0: ec:9c:80:37:3f:8c:34:59:02:c8:ae:a6:80:52:33:5f:33:3a: ff:b8:9c:cd:a5:9b:ad:76:2f:d5:36:9b:2b:d9:80:76:02:09: 02:d7:7c:a5:3a:d1:66:34:ab:3e:fa:32:fd:6b:69:f3:a9:ea: 67:b2:c9:c9:51:45:51:42:a3:62:68:2a:01:3a:5a:69:e9:12: 99:5e:91:e8:be:d8:e2:a9:0f:91:fb:09:89:46:f0:7b:90:e8: 6a:a3:1b:00:3b:83:39:f8:9c:6a:0a:3b:98:aa:51:f1:5f:db: 03:e2:b6:c0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHj7sGgc+mz5aVqXrDHpoAlZefO8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI4MDAzMDM2WhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNGNjMzBkYTUwN2ZhZWViNjQwZTMwYTNmYzdkZDE0YjUy ODhhMjRmODE3OTkxODAxMThiMGQzMjJiNzg3OTZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGR357Iq0DHTDFyOiTIc31WEsFakD+43YgCHFlVUSSGLM/ 9A2qWn3kRqZJUMFnIgdhT9kfGpNNEA2JzLAHiM38T76j1+pSdx7dH/vqUR96O3Vx lLMja0eDp8gSz6mrhG1hYurDpBJQ000IDLG2hX+gbX4mliX5hvQAR7v97rVj8ehu vtfnQpuSGU8QgJwK1n7Q74Q+WrgAzb3UOP842rAUX6zizXQsZMWQxzJmnuQkDRXP a8KRoroPHCLBT8PfcEEgFT6OuupN4F+5UKJLC+t8Uxvpl7OWZ9pFdBWmijOyialQ bLNhnTyFOfpzfRjt/x021E0VafzIoiNIt5E5MjCnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPiAJZ6r9rWZ5AK8bnciyXERrsrQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Y3ODg2OWI4LWU5OGQtNDU3ZS04ZDIyLTU0ODU5N2NjNTMwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgTAwDQYJKoZIhvcNAQELBQADggEBAClvarHDILfZ8NkOm4W5hNiU 31BZLHJ/gMPXq/cusYibTjK4TVoA1FE63/kb5KiwGQE0pHlb9V7KpDbAeEwtzQ0Z B7LSmvAI+Ywbg9PZh40LCvDWV084HgP68wLfvYIfzzfFCarYYeH1OSMqyTfq+aNK da9Ohsq9XG2xyrTxHnO6EccXo7dApwp09yYb3fAwsOycgDc/jDRZAsiupoBSM18z Ov+4nM2lm612L9U2myvZgHYCCQLXfKU60WY0qz76Mv1rafOp6meyyclRRVFCo2Jo KgE6WmnpEplekei+2OKpD5H7CYlG8HuQ6GqjGwA7gzn4nGoKO5iqUfFf2wPitsA= -----END CERTIFICATE-----Generated at Sun Jun 29 20:52:29 2025 by rpki-client