$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfa32114-1528-41e2-94e0-650a1c21a174.roa File: cfa32114-1528-41e2-94e0-650a1c21a174.roa (raw, json) Hash identifier: 2PhrFmsAx3spzb8B988Fk8wnTv1ENPsWhP9YEVnb2vg= Subject key identifier: F8:CC:99:48:56:7B:5A:1A:1A:99:98:6C:ED:AA:FD:D2:0E:AD:0C:3F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 61FBEF0952F8FADB46D4557FA0EB5191EFCE6EC9 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfa32114-1528-41e2-94e0-650a1c21a174.roa Signing time: Tue 17 Jun 2025 16:21:56 +0000 ROA not before: Tue 17 Jun 2025 16:21:56 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f26:c000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fb:ef:09:52:f8:fa:db:46:d4:55:7f:a0:eb:51:91:ef:ce:6e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 17 16:21:56 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=3d42f1d8c46ccd2393e1f8302f007815b84c076f00e8a67140c844dc95768472, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:80:70:19:76:70:28:34:83:f8:72:c6:cd: 19:e9:70:8e:9d:81:f8:8c:d3:0a:ba:9a:37:11:93: 06:4f:f4:62:4e:02:dc:fc:b5:d8:ac:f8:75:54:4f: eb:b4:f7:7f:fb:7e:85:db:50:97:4f:06:68:07:67: b2:0a:a7:5f:9e:3b:6f:d4:84:1d:39:6f:bd:40:a9: 20:1d:d8:16:41:7f:92:33:76:93:4a:e6:95:a8:dd: e5:92:d8:b6:99:2c:b6:16:64:34:7a:26:19:43:66: fa:e9:2a:91:fb:5e:ed:ba:1c:7b:d1:fa:61:5e:4e: 37:e3:01:b7:4d:58:b5:24:2a:2d:8a:18:c4:f4:91: 2a:42:91:0e:4d:b6:34:79:63:1b:58:41:cf:65:73: 8a:60:e2:5a:69:e6:2d:7a:50:54:36:61:62:f6:4b: d6:c2:4d:eb:ae:60:13:88:9b:28:28:76:bc:86:87: 33:97:8f:80:ae:a5:41:96:22:b3:eb:07:d8:8e:b9: e5:1e:8d:96:61:20:f9:11:de:6e:24:9d:df:8b:de: d9:99:26:9a:3f:3d:25:a6:c1:d3:bc:37:7c:11:ce: f0:2d:3f:ce:bb:ba:83:98:66:1e:e7:e9:c3:a6:6f: 47:32:f5:80:01:63:98:24:ed:39:b1:39:97:34:e9: 41:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CC:99:48:56:7B:5A:1A:1A:99:98:6C:ED:AA:FD:D2:0E:AD:0C:3F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfa32114-1528-41e2-94e0-650a1c21a174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f26:c000::/37 Signature Algorithm: sha256WithRSAEncryption 1e:bd:e5:41:96:2e:e3:e6:9e:63:78:1b:e2:7e:f0:8c:b4:57: 84:64:df:64:b6:cd:9e:96:19:96:ff:c0:40:be:f8:3a:df:7e: 98:b1:a0:ae:4a:0d:ad:1d:57:4c:98:26:5f:8e:35:64:b6:f6: 7d:fe:56:f8:97:5e:81:fb:8d:b1:0b:d7:75:55:fd:fa:2f:53: e7:38:42:09:1f:21:f1:01:00:9f:5b:7f:a5:b5:e1:f5:cc:3c: af:c9:da:9f:44:dc:9b:21:f7:38:9c:ef:05:9f:85:93:a8:e2: ec:d4:af:7c:94:9d:4a:9d:ab:9e:04:62:be:ed:4b:ef:30:4f: dc:d3:a1:c8:c1:28:3c:a1:b7:e0:6d:84:62:63:c8:02:f6:d3: 7b:60:a6:b3:d0:e7:28:ab:e6:f5:85:7a:4f:c6:51:3c:a0:5f: 57:8e:53:ff:7e:4e:6a:bc:54:66:f1:05:0f:72:88:dc:e3:e9: c1:28:ac:06:15:ce:3b:84:1e:63:0e:d3:d4:01:d5:03:ab:7f: 6e:be:6c:96:23:a5:58:3d:76:af:9d:1c:20:0d:6c:cd:6b:0f: 5a:41:15:a4:bd:2d:90:a6:c3:50:c8:f0:00:91:71:b6:fb:2c: 10:19:3b:0e:e7:9d:e5:0b:11:a1:48:11:a2:47:6f:27:cd:6c: b1:5b:0b:39 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYfvvCVL4+ttG1FV/oOtRke/ObskwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE3MTYyMTU2WhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDQyZjFkOGM0NmNjZDIzOTNlMWY4MzAyZjAwNzgxNWI4 NGMwNzZmMDBlOGE2NzE0MGM4NDRkYzk1NzY4NDcyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLPoBwGXZwKDSD+HLGzRnpcI6dgfiM0wq6mjcRkwZP9GJO Atz8tdis+HVUT+u093/7foXbUJdPBmgHZ7IKp1+eO2/UhB05b71AqSAd2BZBf5Iz dpNK5pWo3eWS2LaZLLYWZDR6JhlDZvrpKpH7Xu26HHvR+mFeTjfjAbdNWLUkKi2K GMT0kSpCkQ5NtjR5YxtYQc9lc4pg4lpp5i16UFQ2YWL2S9bCTeuuYBOImygodryG hzOXj4CupUGWIrPrB9iOueUejZZhIPkR3m4knd+L3tmZJpo/PSWmwdO8N3wRzvAt P867uoOYZh7n6cOmb0cy9YABY5gk7TmxOZc06UGNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+MyZSFZ7WhoamZhs7ar90g6tDD8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmYTMyMTE0LTE1MjgtNDFlMi05NGUwLTY1MGExYzIxYTE3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8mwDANBgkqhkiG9w0BAQsFAAOCAQEAHr3lQZYu4+aeY3gb4n7wjLRX hGTfZLbNnpYZlv/AQL74Ot9+mLGgrkoNrR1XTJgmX441ZLb2ff5W+JdegfuNsQvX dVX9+i9T5zhCCR8h8QEAn1t/pbXh9cw8r8nan0TcmyH3OJzvBZ+Fk6ji7NSvfJSd Sp2rngRivu1L7zBP3NOhyMEoPKG34G2EYmPIAvbTe2Cms9DnKKvm9YV6T8ZRPKBf V45T/35OarxUZvEFD3KI3OPpwSisBhXOO4QeYw7T1AHVA6t/br5sliOlWD12r50c IA1szWsPWkEVpL0tkKbDUMjwAJFxtvssEBk7Dued5QsRoUgRokdvJ81ssVsLOQ== -----END CERTIFICATE-----Generated at Tue Jul 1 11:03:44 2025 by rpki-client