$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a7fd0c2-492b-475d-bd3f-725b41f8d294.roa File: 0a7fd0c2-492b-475d-bd3f-725b41f8d294.roa (raw, json) Hash identifier: 3E1dK5LgLu55bDLp8lqGB5RTa13vHopWHbED0uw9UUQ= Subject key identifier: 0D:51:67:75:B3:F7:95:33:78:E5:95:F1:F6:02:4B:D3:B8:B2:F4:6F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4E5EBA2E1A530CF61B9A3378F0F6BBD30EDC7588 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a7fd0c2-492b-475d-bd3f-725b41f8d294.roa Signing time: Mon 30 Jun 2025 15:11:11 +0000 ROA not before: Mon 30 Jun 2025 15:11:11 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f60:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5e:ba:2e:1a:53:0c:f6:1b:9a:33:78:f0:f6:bb:d3:0e:dc:75:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 30 15:11:11 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=b39dfd07ddda560c37cf16047b75a6dc97ab7b9049c5a7da8e54f4b24d11622f, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:26:b4:49:76:2b:b0:73:12:12:28:15:2b:ef: e4:3f:ae:79:8f:19:97:c8:3c:26:34:bf:e3:8c:98: 33:52:6b:84:5c:c4:81:e5:69:b9:dc:22:eb:01:ca: d6:93:bb:53:48:6f:b8:29:e1:86:b7:2f:6d:f0:7e: 78:8a:d6:81:53:79:2c:b1:bf:61:c4:62:38:ff:55: f3:a7:82:8a:f1:da:e0:e6:e6:ce:16:24:e2:14:30: 4e:be:f7:e3:72:cc:0d:ab:23:93:be:ec:44:1e:c2: d8:9d:97:a9:0c:9e:df:be:b5:be:b4:06:00:42:34: 6d:f2:f0:10:54:d4:37:7e:64:79:de:b8:c9:fd:d8: 3d:be:f7:ea:da:6c:41:f2:9a:6d:70:fa:2c:d3:f0: 13:9d:9a:27:1f:14:1b:13:41:e1:72:66:48:b9:25: 8d:72:19:02:a5:ad:a4:4d:50:47:90:a7:7a:49:5d: e4:97:01:3c:4c:ce:e1:5b:e5:59:30:ef:98:ef:30: db:0e:6e:69:7a:8b:89:02:9b:93:ac:bf:10:eb:73: 88:30:c0:76:13:ee:d7:e1:7a:48:03:ba:55:e6:3c: d2:75:1c:10:02:25:16:68:57:9d:d5:02:f5:5b:15: 68:f6:74:de:87:8f:8c:ef:93:a1:9f:8b:ee:12:47: ac:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:51:67:75:B3:F7:95:33:78:E5:95:F1:F6:02:4B:D3:B8:B2:F4:6F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a7fd0c2-492b-475d-bd3f-725b41f8d294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f60:c000::/40 Signature Algorithm: sha256WithRSAEncryption 57:a0:b2:c6:39:6f:ae:b1:95:57:b6:92:ef:47:7b:88:53:b7: 91:27:bf:85:76:d1:5a:bb:f7:01:7a:e3:a9:1d:e0:f2:bd:67: 92:0e:12:28:4e:4b:59:eb:3c:f0:29:02:bb:a8:73:3c:ba:8f: 47:9d:67:77:96:18:33:49:d7:3c:4c:4f:2d:3a:56:65:eb:1a: b1:d6:3c:52:d0:5b:1b:61:50:1c:58:06:4f:f9:89:d0:e4:6f: 89:9b:55:57:b5:97:15:13:75:68:87:38:b2:e1:10:bf:25:3b: a9:a7:cc:84:9b:3c:6d:33:79:00:a9:b0:4d:85:4b:86:12:1b: 91:08:ed:f9:eb:a6:52:c5:ed:50:95:d5:2c:54:4c:2b:38:69: d4:6a:60:48:22:e1:e9:e9:b4:aa:ac:d6:df:4d:22:07:28:e1: 92:30:6e:cb:86:b0:4a:a0:0e:75:f5:ca:69:e7:29:1c:24:69: 26:0a:4e:d6:94:82:5e:1d:d2:af:54:f5:7b:2f:17:5e:b5:22: da:b6:b2:15:b9:b1:89:67:e6:ce:db:fb:08:20:8b:ef:17:c2: 86:bd:64:b6:10:48:ec:18:f7:2a:01:0f:5f:fc:76:f1:ef:76: 7e:d3:5f:63:5c:d7:cd:5a:00:9b:9f:99:82:05:73:1a:98:00: 2c:ca:ad:ec -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTl66LhpTDPYbmjN48Pa70w7cdYgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjMwMTUxMTExWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzlkZmQwN2RkZGE1NjBjMzdjZjE2MDQ3Yjc1YTZkYzk3 YWI3YjkwNDljNWE3ZGE4ZTU0ZjRiMjRkMTE2MjJmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD6JrRJdiuwcxISKBUr7+Q/rnmPGZfIPCY0v+OMmDNSa4Rc xIHlabncIusBytaTu1NIb7gp4Ya3L23wfniK1oFTeSyxv2HEYjj/VfOngorx2uDm 5s4WJOIUME6+9+NyzA2rI5O+7EQewtidl6kMnt++tb60BgBCNG3y8BBU1Dd+ZHne uMn92D2+9+rabEHymm1w+izT8BOdmicfFBsTQeFyZki5JY1yGQKlraRNUEeQp3pJ XeSXATxMzuFb5Vkw75jvMNsObml6i4kCm5OsvxDrc4gwwHYT7tfhekgDulXmPNJ1 HBACJRZoV53VAvVbFWj2dN6Hj4zvk6Gfi+4SR6yfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUDVFndbP3lTN45ZXx9gJL07iy9G8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBhN2ZkMGMyLTQ5MmItNDc1ZC1iZDNmLTcyNWI0MWY4ZDI5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9gwDANBgkqhkiG9w0BAQsFAAOCAQEAV6CyxjlvrrGVV7aS70d7iFO3 kSe/hXbRWrv3AXrjqR3g8r1nkg4SKE5LWes88CkCu6hzPLqPR51nd5YYM0nXPExP LTpWZesasdY8UtBbG2FQHFgGT/mJ0ORviZtVV7WXFRN1aIc4suEQvyU7qafMhJs8 bTN5AKmwTYVLhhIbkQjt+eumUsXtUJXVLFRMKzhp1GpgSCLh6em0qqzW300iByjh kjBuy4awSqAOdfXKaecpHCRpJgpO1pSCXh3Sr1T1ey8XXrUi2rayFbmxiWfmztv7 CCCL7xfChr1kthBI7Bj3KgEPX/x28e92ftNfY1zXzVoAm5+ZggVzGpgALMqt7A== -----END CERTIFICATE-----Generated at Mon Jun 30 20:24:57 2025 by rpki-client