$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a731ed6c-81fc-4e80-bf99-3fb86822d2cc.roa File: a731ed6c-81fc-4e80-bf99-3fb86822d2cc.roa (raw, json) Hash identifier: vWQLDrjagxF/1D32FG+ZPbm5eM6cSEOmabB1QEc+DS8= Subject key identifier: C1:72:E8:7C:09:6E:F1:6A:73:8B:D3:D5:54:99:84:40:CD:30:36:1C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 78C5B6BBF32C9DBEBF2B08E8F27E835085BD7C37 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a731ed6c-81fc-4e80-bf99-3fb86822d2cc.roa Signing time: Tue 17 Jun 2025 00:21:45 +0000 ROA not before: Tue 17 Jun 2025 00:21:45 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fef:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c5:b6:bb:f3:2c:9d:be:bf:2b:08:e8:f2:7e:83:50:85:bd:7c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 00:21:45 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=dfff971fae082e52bd3134ab428484738b10b89899ef75349ebd0e740a712860, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:40:2d:cb:ed:19:e0:1a:d5:68:16:67:e2: a6:0a:a9:cb:be:f0:fa:fd:c5:db:fe:a9:50:f4:0d: 55:15:bc:84:54:fd:50:36:8b:41:24:0d:c1:de:58: 13:4f:76:82:49:ae:e0:0a:3f:af:13:83:c0:c7:ad: d5:e5:53:2d:6d:7b:bc:25:17:84:f0:43:35:fe:ad: 9e:0e:2c:8c:4f:8a:fd:07:b7:13:65:1f:c1:80:a8: b2:f5:ed:7e:85:1b:93:a8:b7:3d:f0:3d:49:4c:ae: c8:ae:07:27:97:4c:cd:52:c6:22:d6:20:47:3b:a0: d4:ea:45:b4:02:6b:cd:e3:6c:b7:0b:f8:9d:ec:38: 3e:bf:63:1d:a5:d2:d2:d4:46:43:8c:4d:19:ab:0b: 14:67:f6:d5:57:57:7f:20:81:64:7b:6c:12:48:b2: de:26:26:11:c9:02:74:72:c2:69:8c:e7:e3:99:f4: f4:a8:bd:fd:87:c7:49:f5:2b:9f:62:dc:a8:ac:d2: 46:4d:d1:51:60:0f:ab:0d:7a:89:bb:1a:a6:8e:09: 55:4d:79:93:01:f4:46:65:e9:5e:da:0f:2a:f8:78: 1c:6f:c0:a0:a5:e6:4b:87:ea:d3:46:1b:64:55:46: 07:b4:d5:ba:ee:0a:f7:c7:17:76:78:d4:61:e9:17: 6c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:72:E8:7C:09:6E:F1:6A:73:8B:D3:D5:54:99:84:40:CD:30:36:1C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a731ed6c-81fc-4e80-bf99-3fb86822d2cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fef:5000::/40 Signature Algorithm: sha256WithRSAEncryption 68:11:e7:88:2b:9d:10:9f:90:75:18:96:52:ca:6a:dc:d6:1b: cf:29:83:c5:92:4f:d1:32:1b:94:9d:87:59:ea:7d:28:be:4e: a4:50:d0:8b:5e:61:42:91:08:e5:0d:fc:67:81:3e:fb:a3:f6: 88:52:b5:d7:98:66:dc:7f:81:dd:ab:11:7f:d6:dd:19:77:3b: d5:a9:d9:ad:3f:a4:ee:9a:ac:72:18:44:42:ea:4b:80:fe:df: 69:54:2c:09:dc:f3:d6:b6:54:50:30:19:ab:a5:ee:6c:b0:09: 71:8c:65:54:c9:f8:10:42:bf:11:cc:d0:31:a5:46:04:7a:32: c6:c8:88:fb:06:58:28:72:73:41:fe:b3:8c:14:37:25:80:cb: b5:47:a4:77:de:e9:c6:5f:0f:09:17:72:d7:8e:1e:fd:9b:6f: 8b:88:4b:e9:46:d1:fb:e1:c2:69:08:e8:42:6a:cc:ab:a2:3d: ec:ca:42:c9:d6:93:1f:fa:c0:15:58:51:cd:24:ec:d3:37:d6: b7:25:4f:6e:e7:0b:1a:60:0e:c8:f9:e9:99:1d:8b:9b:5e:a6: 30:0d:42:72:5d:33:38:d9:ba:98:52:2f:f8:ab:22:97:0a:e6: fe:13:b6:2a:18:0e:ce:81:26:f1:1c:11:45:c0:21:b9:16:b7: e0:98:4b:e1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUeMW2u/Msnb6/Kwjo8n6DUIW9fDcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MDAyMTQ1WhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmZmOTcxZmFlMDgyZTUyYmQzMTM0YWI0Mjg0ODQ3Mzhi MTBiODk4OTllZjc1MzQ5ZWJkMGU3NDBhNzEyODYwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzbUAty+0Z4BrVaBZn4qYKqcu+8Pr9xdv+qVD0DVUVvIRU /VA2i0EkDcHeWBNPdoJJruAKP68Tg8DHrdXlUy1te7wlF4TwQzX+rZ4OLIxPiv0H txNlH8GAqLL17X6FG5Ootz3wPUlMrsiuByeXTM1SxiLWIEc7oNTqRbQCa83jbLcL +J3sOD6/Yx2l0tLURkOMTRmrCxRn9tVXV38ggWR7bBJIst4mJhHJAnRywmmM5+OZ 9PSovf2Hx0n1K59i3Kis0kZN0VFgD6sNeom7GqaOCVVNeZMB9EZl6V7aDyr4eBxv wKCl5kuH6tNGG2RVRge01bruCvfHF3Z41GHpF2xzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUwXLofAlu8Wpzi9PVVJmEQM0wNhwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2E3MzFlZDZjLTgxZmMtNGU4MC1iZjk5LTNmYjg2ODIyZDJjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/vUDANBgkqhkiG9w0BAQsFAAOCAQEAaBHniCudEJ+QdRiWUspq3NYb zymDxZJP0TIblJ2HWep9KL5OpFDQi15hQpEI5Q38Z4E++6P2iFK115hm3H+B3asR f9bdGXc71anZrT+k7pqschhEQupLgP7faVQsCdzz1rZUUDAZq6XubLAJcYxlVMn4 EEK/EczQMaVGBHoyxsiI+wZYKHJzQf6zjBQ3JYDLtUekd97pxl8PCRdy144e/Ztv i4hL6UbR++HCaQjoQmrMq6I97MpCydaTH/rAFVhRzSTs0zfWtyVPbucLGmAOyPnp mR2Lm16mMA1Ccl0zONm6mFIv+Ksilwrm/hO2KhgOzoEm8RwRRcAhuRa34JhL4Q== -----END CERTIFICATE-----Generated at Sun Jun 29 18:35:46 2025 by rpki-client