$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d43700-d32a-417a-9ea8-12eb83d26590.roa File: f0d43700-d32a-417a-9ea8-12eb83d26590.roa (raw, json) Hash identifier: CG/XWYppAqm+wZukJU8Jvr4jA1TD+1SFMjxpRrr+8T0= Subject key identifier: FA:88:92:B3:D5:E5:D5:ED:37:92:57:1C:87:16:1A:1F:41:AC:E0:1F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 17030526F577F5A26D082416DDAB16C059F22DE0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d43700-d32a-417a-9ea8-12eb83d26590.roa Signing time: Mon 16 Jun 2025 19:22:11 +0000 ROA not before: Mon 16 Jun 2025 19:22:11 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1ff3:8010::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:03:05:26:f5:77:f5:a2:6d:08:24:16:dd:ab:16:c0:59:f2:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 16 19:22:11 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=ecb42051706a8965a69d51b43a85adee74251ecd821d29f0d309c21018205f9e, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:2f:32:26:9c:96:7c:f6:ca:9a:cb:b9:87: fd:04:6e:8c:38:b7:f0:78:72:1c:ff:be:d3:20:87: 1b:f8:b2:b7:fb:22:13:a5:ee:48:be:61:76:4a:fa: db:8e:3c:62:4f:80:2f:cb:36:db:3c:9b:56:4b:45: 90:f3:b8:33:0e:fe:0d:1a:be:82:d0:f4:67:98:e0: 89:7f:f4:5c:e7:39:c8:67:81:ff:88:04:dd:b0:a4: 36:e7:ec:94:87:dc:bb:62:ad:46:50:99:76:bb:18: 14:64:93:17:32:47:de:f9:80:6d:d7:be:d2:91:60: 1e:8f:f3:cc:5b:d0:2e:48:d2:24:bc:ff:64:90:9f: 4d:d8:ce:ad:4c:60:6a:f3:32:b0:6e:09:91:49:da: 9e:12:33:76:34:a0:08:29:8c:4b:5c:2c:71:5f:80: da:71:00:98:2a:34:fa:aa:40:f9:25:87:f9:24:78: 94:2a:7f:49:3e:c6:e8:3d:2e:27:88:5b:87:21:f0: 5a:49:83:c6:39:57:53:e1:4a:55:0a:5c:10:8a:b7: 42:99:fd:35:2d:9a:00:01:75:7c:79:62:34:30:21: 5c:cc:c8:83:20:7e:23:61:c9:b4:64:61:dc:be:46: 04:e3:a0:1f:68:43:ec:ad:e0:79:cf:04:cf:e6:2f: 57:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:88:92:B3:D5:E5:D5:ED:37:92:57:1C:87:16:1A:1F:41:AC:E0:1F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d43700-d32a-417a-9ea8-12eb83d26590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:8010::/46 Signature Algorithm: sha256WithRSAEncryption 38:d5:ef:12:1e:36:2f:89:0c:7d:50:85:63:82:36:4d:5a:99: bc:c6:bc:d9:b6:30:74:36:2c:a1:6c:e0:35:9e:d8:8f:64:74: 6b:65:fa:5c:c7:99:6c:3c:a2:e7:0b:ad:12:98:68:b4:f7:e8: 88:2b:c7:b2:49:42:35:7e:65:b2:2a:2a:2c:dc:1a:c6:28:37: 30:ed:47:76:05:8f:09:8d:fb:3c:50:2f:78:37:2b:43:b8:64: 7f:93:8f:ad:e6:d1:ef:8c:ff:69:69:ef:dc:9f:9f:10:f1:24: 07:97:4f:bb:70:46:a6:bc:72:18:58:a8:28:6b:33:42:3b:dd: 21:56:f8:52:96:dc:3d:b1:60:cc:a2:17:3e:9b:61:79:23:68: 0a:f8:a4:ae:cd:55:e4:9b:12:43:d8:d9:1f:8b:84:80:f7:e3: fe:cf:81:b6:fb:7a:b4:39:82:f5:67:57:b6:f4:4a:dc:89:a3: 16:cd:6d:12:b1:7a:ca:4c:46:be:6d:cd:b6:c5:2e:6d:b7:83: 1c:2a:41:4a:0a:9e:d0:8c:5f:f9:8e:34:c7:d0:6c:01:73:9c: bc:03:34:d4:2f:55:a4:33:52:cb:c9:99:76:4c:e2:85:35:88: 66:77:76:a8:e1:93:d8:5d:41:80:97:c9:b2:06:18:56:1f:26: 1d:37:97:c2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFwMFJvV39aJtCCQW3asWwFnyLeAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjE2MTkyMjExWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlY2I0MjA1MTcwNmE4OTY1YTY5ZDUxYjQzYTg1YWRlZTc0 MjUxZWNkODIxZDI5ZjBkMzA5YzIxMDE4MjA1ZjllMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCreC8yJpyWfPbKmsu5h/0Ebow4t/B4chz/vtMghxv4srf7 IhOl7ki+YXZK+tuOPGJPgC/LNts8m1ZLRZDzuDMO/g0avoLQ9GeY4Il/9FznOchn gf+IBN2wpDbn7JSH3LtirUZQmXa7GBRkkxcyR975gG3XvtKRYB6P88xb0C5I0iS8 /2SQn03Yzq1MYGrzMrBuCZFJ2p4SM3Y0oAgpjEtcLHFfgNpxAJgqNPqqQPklh/kk eJQqf0k+xug9LieIW4ch8FpJg8Y5V1PhSlUKXBCKt0KZ/TUtmgABdXx5YjQwIVzM yIMgfiNhybRkYdy+RgTjoB9oQ+yt4HnPBM/mL1chAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+oiSs9Xl1e03klcchxYaH0Gs4B8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2YwZDQzNzAwLWQzMmEtNDE3YS05ZWE4LTEyZWI4M2QyNjU5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zgBAwDQYJKoZIhvcNAQELBQADggEBADjV7xIeNi+JDH1QhWOCNk1a mbzGvNm2MHQ2LKFs4DWe2I9kdGtl+lzHmWw8oucLrRKYaLT36Igrx7JJQjV+ZbIq KizcGsYoNzDtR3YFjwmN+zxQL3g3K0O4ZH+Tj63m0e+M/2lp79yfnxDxJAeXT7tw Rqa8chhYqChrM0I73SFW+FKW3D2xYMyiFz6bYXkjaAr4pK7NVeSbEkPY2R+LhID3 4/7Pgbb7erQ5gvVnV7b0StyJoxbNbRKxespMRr5tzbbFLm23gxwqQUoKntCMX/mO NMfQbAFznLwDNNQvVaQzUsvJmXZM4oU1iGZ3dqjhk9hdQYCXybIGGFYfJh03l8I= -----END CERTIFICATE-----Generated at Tue Jul 1 07:43:18 2025 by rpki-client