$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7077e2ea-9e27-49fd-b57f-a743c75ad425.roa File: 7077e2ea-9e27-49fd-b57f-a743c75ad425.roa (raw, json) Hash identifier: 7I1G/XFJdsUYtF8G4LA3F/UvYsangQCgvEb5m5BfEfU= Subject key identifier: 5F:7A:29:D6:F5:DB:BC:CB:51:D2:A7:4C:28:27:25:28:F8:27:CD:12 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 3405F71EE854A5F91F4D1EF54235FB975B0D231E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7077e2ea-9e27-49fd-b57f-a743c75ad425.roa Signing time: Tue 10 Jun 2025 16:41:32 +0000 ROA not before: Tue 10 Jun 2025 16:41:32 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:1fff:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:05:f7:1e:e8:54:a5:f9:1f:4d:1e:f5:42:35:fb:97:5b:0d:23:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jun 10 16:41:32 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=b3c85d748f578db471f3dab9ea431a721ca1b9e35a41304cfa391873d4cfe516, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:6c:fd:82:e8:c6:45:c3:d2:53:d0:ac:5e: 90:7a:ea:f6:98:b6:fd:e1:c7:e1:8e:e8:8d:ee:e9: 39:3b:73:e7:a7:c3:cf:21:e3:a5:7b:0a:8c:72:64: bd:12:5e:13:88:0e:58:cc:c6:d5:df:5a:61:fa:92: d5:fd:b4:cd:cc:1b:5d:a6:b2:7b:7f:89:d2:af:2a: 6b:88:ae:0a:3a:cc:ec:79:b1:f1:81:36:9d:2a:d7: ed:b2:e5:1f:9f:8e:a1:35:cc:1e:3d:96:9a:f6:53: 9b:8e:b8:cf:5e:ff:f5:16:75:d7:60:61:3f:4a:02: d2:58:df:ed:90:f7:60:c5:08:2a:85:0d:bf:44:74: c4:7a:1d:ab:0f:3a:aa:2d:86:67:08:64:91:54:18: 37:09:59:bf:ea:12:84:6e:87:89:58:8c:ec:e6:f3: 8b:88:44:96:17:af:9a:f6:e7:14:48:9f:b2:18:2f: 68:85:83:8b:2a:68:66:5c:62:3c:ce:8b:b0:4b:fa: fb:89:40:b7:55:dc:cf:54:3f:82:b2:42:e5:ee:cb: 23:c7:46:a8:7a:51:27:a4:7f:3b:50:27:9c:0f:7a: b6:6f:33:39:65:77:b0:b8:c9:67:c7:85:e6:ed:ef: b1:69:bf:7d:c3:22:b6:19:aa:44:13:37:8c:2f:73: 8f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7A:29:D6:F5:DB:BC:CB:51:D2:A7:4C:28:27:25:28:F8:27:CD:12 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7077e2ea-9e27-49fd-b57f-a743c75ad425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:2040::/48 Signature Algorithm: sha256WithRSAEncryption c2:2a:9e:48:4f:c7:eb:1f:c2:a4:5c:f1:34:27:43:b1:60:db: a5:7f:34:8d:84:8e:32:ad:c7:f1:d3:32:2e:07:bf:48:68:68: c2:ca:1f:8d:45:ed:bf:19:c7:84:84:bc:80:e8:4e:0d:9c:ab: b9:be:bc:ba:e0:4d:64:fd:97:fb:a4:8c:58:4a:ef:c1:02:d1: ff:da:21:c5:bb:9b:d6:30:67:de:96:a6:83:13:d7:ad:d0:7d: 1d:4e:0e:08:32:b1:1d:10:29:b1:ba:75:c8:b9:38:04:2d:5a: 0b:42:3b:7c:79:43:96:12:6f:22:01:91:8d:c4:a3:fa:13:1a: ca:82:d0:5e:f9:72:b3:f3:2f:d8:46:f5:ff:c5:c1:22:31:65: 0e:bc:38:89:8f:f2:ff:70:3d:40:d8:5f:0e:fc:41:64:35:62: 92:87:03:93:0c:c3:2a:88:d1:a4:d6:5d:74:43:11:89:12:13: 7e:e7:09:b1:40:a6:8f:a9:92:ae:27:28:ba:bd:19:c1:e0:b4: 7a:0f:4b:ba:a3:d4:09:a9:5a:75:d8:3e:a8:29:36:25:6d:78: 36:ea:e6:05:0d:11:e8:61:b0:4a:06:1e:70:91:97:fa:5a:b1: ce:f6:80:29:ef:36:ee:f7:24:a3:52:82:18:b4:60:a1:72:85: 1b:13:1a:38 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNAX3HuhUpfkfTR71QjX7l1sNIx4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNjEwMTY0MTMyWhcNMjUwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2M4NWQ3NDhmNTc4ZGI0NzFmM2RhYjllYTQzMWE3MjFj YTFiOWUzNWE0MTMwNGNmYTM5MTg3M2Q0Y2ZlNTE2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWXmz9gujGRcPSU9CsXpB66vaYtv3hx+GO6I3u6Tk7c+en w88h46V7CoxyZL0SXhOIDljMxtXfWmH6ktX9tM3MG12msnt/idKvKmuIrgo6zOx5 sfGBNp0q1+2y5R+fjqE1zB49lpr2U5uOuM9e//UWdddgYT9KAtJY3+2Q92DFCCqF Db9EdMR6HasPOqothmcIZJFUGDcJWb/qEoRuh4lYjOzm84uIRJYXr5r25xRIn7IY L2iFg4sqaGZcYjzOi7BL+vuJQLdV3M9UP4KyQuXuyyPHRqh6USekfztQJ5wPerZv Mzlld7C4yWfHhebt77Fpv33DIrYZqkQTN4wvc49tAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUX3op1vXbvMtR0qdMKCclKPgnzRIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzcwNzdlMmVhLTllMjctNDlmZC1iNTdmLWE3NDNjNzVhZDQyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//IEAwDQYJKoZIhvcNAQELBQADggEBAMIqnkhPx+sfwqRc8TQnQ7Fg 26V/NI2EjjKtx/HTMi4Hv0hoaMLKH41F7b8Zx4SEvIDoTg2cq7m+vLrgTWT9l/uk jFhK78EC0f/aIcW7m9YwZ96WpoMT163QfR1ODggysR0QKbG6dci5OAQtWgtCO3x5 Q5YSbyIBkY3Eo/oTGsqC0F75crPzL9hG9f/FwSIxZQ68OImP8v9wPUDYXw78QWQ1 YpKHA5MMwyqI0aTWXXRDEYkSE37nCbFApo+pkq4nKLq9GcHgtHoPS7qj1AmpWnXY PqgpNiVteDbq5gUNEehhsEoGHnCRl/pasc72gCnvNu73JKNSghi0YKFyhRsTGjg= -----END CERTIFICATE-----Generated at Tue Jun 17 07:40:20 2025 by rpki-client