$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7bc9900-6d65-436f-9efa-2f647452d323.roa File: b7bc9900-6d65-436f-9efa-2f647452d323.roa (raw, json) Hash identifier: 18Uzu9Ndt5WoGnwQLQ491fUpc03mta2sYO7rfg9PQ1k= Subject key identifier: 7A:E4:31:75:C7:A5:C9:3A:DE:B5:B2:B1:AE:8C:D2:2D:85:6A:32:53 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 4F06E09DDB02AF55EC38050AE0258AAC693CAC39 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7bc9900-6d65-436f-9efa-2f647452d323.roa Signing time: Tue 24 Jun 2025 00:20:23 +0000 ROA not before: Tue 24 Jun 2025 00:20:23 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1ff0:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:06:e0:9d:db:02:af:55:ec:38:05:0a:e0:25:8a:ac:69:3c:ac:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 24 00:20:23 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=b5a391e7b41bf556d366d8fda99235cf788918a701b308842286e067d57fc9ff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d0:db:bf:f5:00:59:8a:bb:59:0d:a7:f6:c5: 0b:6a:22:fc:4e:ec:bd:70:3d:77:b7:9b:7c:e6:82: 48:35:47:64:03:31:ba:70:ba:62:29:86:c6:a2:91: 7e:4e:9b:f6:c4:45:3d:a5:39:d3:cc:b3:4c:0f:03: 5a:e5:a1:13:88:33:bd:84:0b:d1:1c:fc:79:e5:c7: a2:eb:67:2f:19:96:7b:b3:15:00:d2:c5:8f:dc:38: eb:b1:46:bf:9f:34:99:84:72:58:52:fb:45:92:78: 7d:8b:54:4e:a9:5b:4c:04:db:1a:e0:db:5d:09:e0: ec:83:6b:0a:d6:a1:46:b2:58:c2:62:e0:90:13:fd: b9:e1:90:ea:3a:a7:f7:a3:ba:66:7c:10:c2:3d:c3: f5:59:0d:53:fb:c4:94:bb:70:83:23:65:55:f1:d8: e5:8a:a4:af:bf:f5:c7:53:4a:a4:65:74:aa:30:c1: 10:dd:8e:ff:ae:32:d6:68:e2:cc:a6:54:ed:65:79: 0f:d1:88:dc:2f:36:12:9a:b4:ec:88:27:eb:f8:46: 4e:9d:fe:ce:1c:b3:d5:79:db:8b:86:ad:7c:d5:07: 26:9d:38:74:d8:73:95:b1:21:62:3e:8f:20:50:31: a3:7d:9e:ed:8d:1a:c2:20:93:d5:4d:e8:92:6d:51: 3d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E4:31:75:C7:A5:C9:3A:DE:B5:B2:B1:AE:8C:D2:2D:85:6A:32:53 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7bc9900-6d65-436f-9efa-2f647452d323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff0:2000::/40 Signature Algorithm: sha256WithRSAEncryption 12:eb:ad:79:88:db:57:70:30:8f:4d:36:b1:9a:2c:e9:55:a7: 1d:81:25:7d:19:22:c6:f4:bc:91:18:ea:54:04:74:93:52:77: 2c:5d:21:6a:55:df:96:79:f9:d1:de:42:04:70:0a:fa:09:4f: d3:c6:0f:b6:ea:a6:6c:c0:a0:b7:55:c8:f5:bf:66:9f:14:d2: 24:3a:42:1d:97:5c:33:b4:2e:75:ae:7e:3e:c8:81:b8:48:64: 90:e8:f2:ca:ff:6d:a8:eb:b2:eb:d7:95:31:22:71:cd:63:4a: d1:a6:68:1b:a1:18:14:3d:cf:c4:1d:0c:8c:1d:13:82:bd:a9: 5a:a1:75:87:c8:65:1c:ec:56:99:65:be:3f:b1:47:07:f3:a2: 69:19:5d:d6:e1:4c:0f:0a:5f:d1:12:f1:85:26:98:9e:e4:f6: 5c:65:68:4d:28:64:cf:47:e4:73:24:5f:b2:75:45:a6:88:ab: 38:fd:ca:84:2a:1f:fe:0b:c2:db:58:59:8c:d0:0c:c4:7b:82: 7f:e1:db:dd:2c:a2:ec:8a:7d:67:eb:a0:f8:16:07:89:20:be: 51:13:80:77:ef:87:8b:94:9b:43:67:21:a6:6d:73:5b:e0:6b: 17:d9:ff:ce:fd:7f:54:bf:67:9c:8f:29:5e:47:6d:25:f6:64: 18:a5:9b:7f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUTwbgndsCr1XsOAUK4CWKrGk8rDkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjI0MDAyMDIzWhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNWEzOTFlN2I0MWJmNTU2ZDM2NmQ4ZmRhOTkyMzVjZjc4 ODkxOGE3MDFiMzA4ODQyMjg2ZTA2N2Q1N2ZjOWZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH0Nu/9QBZirtZDaf2xQtqIvxO7L1wPXe3m3zmgkg1R2QD MbpwumIphsaikX5Om/bERT2lOdPMs0wPA1rloROIM72EC9Ec/Hnlx6LrZy8Zlnuz FQDSxY/cOOuxRr+fNJmEclhS+0WSeH2LVE6pW0wE2xrg210J4OyDawrWoUayWMJi 4JAT/bnhkOo6p/ejumZ8EMI9w/VZDVP7xJS7cIMjZVXx2OWKpK+/9cdTSqRldKow wRDdjv+uMtZo4symVO1leQ/RiNwvNhKatOyIJ+v4Rk6d/s4cs9V524uGrXzVByad OHTYc5WxIWI+jyBQMaN9nu2NGsIgk9VN6JJtUT1DAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUeuQxdcelyTretbKxrozSLYVqMlMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3YmM5OTAwLTZkNjUtNDM2Zi05ZWZhLTJmNjQ3NDUyZDMyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB/wIDANBgkqhkiG9w0BAQsFAAOCAQEAEuuteYjbV3Awj002sZos6VWn HYElfRkixvS8kRjqVAR0k1J3LF0halXflnn50d5CBHAK+glP08YPtuqmbMCgt1XI 9b9mnxTSJDpCHZdcM7Quda5+PsiBuEhkkOjyyv9tqOuy69eVMSJxzWNK0aZoG6EY FD3PxB0MjB0Tgr2pWqF1h8hlHOxWmWW+P7FHB/OiaRld1uFMDwpf0RLxhSaYnuT2 XGVoTShkz0fkcyRfsnVFpoirOP3KhCof/gvC21hZjNAMxHuCf+Hb3Syi7Ip9Z+ug +BYHiSC+UROAd++Hi5SbQ2chpm1zW+BrF9n/zv1/VL9nnI8pXkdtJfZkGKWbfw== -----END CERTIFICATE-----Generated at Wed Jul 2 07:43:44 2025 by rpki-client