$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cef76c94-9cd9-4bc2-af61-a27618977a7d.roa File: cef76c94-9cd9-4bc2-af61-a27618977a7d.roa (raw, json) Hash identifier: lfbb7SzApuPpu41XueDaBAURPZVktLi9faXaH72pGao= Subject key identifier: 23:55:35:CE:98:8B:EB:BE:C8:21:CE:6E:59:1D:A3:28:40:86:97:C0 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 596C68600D995D8C959EE404377E9F6BFA78B665 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cef76c94-9cd9-4bc2-af61-a27618977a7d.roa Signing time: Mon 21 Jul 2025 15:41:20 +0000 ROA not before: Mon 21 Jul 2025 15:41:20 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff3:5040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6c:68:60:0d:99:5d:8c:95:9e:e4:04:37:7e:9f:6b:fa:78:b6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 21 15:41:20 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=da8946e7bf3d54ece197a1b0e041c5ae64c99f7410a7655f5f3d2350070045c1, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:48:c4:60:ed:d1:e7:2a:a6:f0:4c:29:11: 64:a9:c2:91:71:5e:c4:1d:63:36:5a:12:1a:e4:66: 9d:57:69:fa:1c:2d:be:cd:59:ea:e3:8f:82:e4:88: 55:97:50:92:e7:f8:b2:82:16:31:ce:39:6e:5b:33: d4:0b:e4:8b:a4:42:2e:9e:2b:8f:c1:7b:dc:00:a7: fd:71:f9:69:51:03:1a:f9:b6:49:82:73:87:72:e5: 20:d1:f2:18:ba:de:99:35:47:d4:21:08:b1:e7:ac: d5:95:9e:7c:43:5e:60:c8:8c:ac:f9:f5:12:5b:ab: 10:7e:d8:cc:f4:bb:11:1d:cb:74:51:62:5d:21:19: 7a:e5:29:5c:97:56:28:d5:10:ad:8e:78:2e:72:02: 7a:e1:7e:fc:5e:ef:4d:26:7b:53:8c:95:bd:f7:6e: 68:4c:72:a2:d9:27:0e:47:13:1f:7f:87:e5:19:d3: e1:7f:13:f9:73:25:5a:db:32:19:fe:5c:0c:5b:28: 03:06:6d:41:fa:2b:a5:2d:d2:25:93:38:72:87:5d: 96:b0:a2:de:e0:a2:87:e2:f8:a9:47:fe:3b:fd:d7: 0e:b6:31:0c:b8:f1:02:15:56:f0:a2:08:45:a1:f3: 06:39:a0:10:2f:6f:fa:56:8a:fe:10:34:d3:e5:ba: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:55:35:CE:98:8B:EB:BE:C8:21:CE:6E:59:1D:A3:28:40:86:97:C0 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cef76c94-9cd9-4bc2-af61-a27618977a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff3:5040::/46 Signature Algorithm: sha256WithRSAEncryption 06:70:96:54:d3:7c:9d:f7:26:c7:fb:90:0e:b6:60:a8:50:2f: a2:f6:52:2c:8f:a6:8b:4a:79:7f:51:48:37:a8:d8:ea:f9:63: 8d:bc:94:46:36:7b:0a:47:ce:25:7d:24:b5:1d:1a:68:cd:6c: ba:75:f1:d3:53:65:37:b2:ab:92:d6:90:ad:e0:a0:fb:fa:fe: 65:0c:14:a9:34:74:b7:ca:00:af:54:ad:21:21:10:08:d2:b9: e7:36:fe:5f:63:16:09:02:a3:89:ca:22:14:a5:b6:e5:25:27: 02:0d:a6:3d:54:30:7e:54:48:19:b8:78:74:70:fe:35:fb:52: 26:24:d8:01:ce:ac:7f:a5:45:7b:d2:41:ea:7f:dd:6d:7a:ba: 09:ab:44:af:99:ca:4a:03:a9:53:b0:bb:09:8d:99:3d:dc:9f: 5a:7d:13:d8:45:d8:a6:07:3b:f1:88:b8:0c:8f:0d:74:94:69: 7c:a7:d5:f5:80:5f:98:f0:0b:d5:6c:72:bf:33:67:0e:df:a3: a9:ef:da:9d:ec:15:5f:c6:0d:d1:a3:fe:08:9d:aa:93:d7:af: 77:45:92:94:4b:8d:95:9b:ae:f8:84:8e:ed:1d:b0:b2:f7:e1: ab:35:20:8c:e6:da:2e:d3:c5:a2:9b:0f:5c:6b:8c:38:00:ec: e1:0c:ab:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWWxoYA2ZXYyVnuQEN36fa/p4tmUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzIxMTU0MTIwWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTg5NDZlN2JmM2Q1NGVjZTE5N2ExYjBlMDQxYzVhZTY0 Yzk5Zjc0MTBhNzY1NWY1ZjNkMjM1MDA3MDA0NWMxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+VEjEYO3R5yqm8EwpEWSpwpFxXsQdYzZaEhrkZp1Xafoc Lb7NWerjj4LkiFWXUJLn+LKCFjHOOW5bM9QL5IukQi6eK4/Be9wAp/1x+WlRAxr5 tkmCc4dy5SDR8hi63pk1R9QhCLHnrNWVnnxDXmDIjKz59RJbqxB+2Mz0uxEdy3RR Yl0hGXrlKVyXVijVEK2OeC5yAnrhfvxe700me1OMlb33bmhMcqLZJw5HEx9/h+UZ 0+F/E/lzJVrbMhn+XAxbKAMGbUH6K6Ut0iWTOHKHXZawot7goofi+KlH/jv91w62 MQy48QIVVvCiCEWh8wY5oBAvb/pWiv4QNNPlumNhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUI1U1zpiL677IIc5uWR2jKECGl8AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NlZjc2Yzk0LTljZDktNGJjMi1hZjYxLWEyNzYxODk3N2E3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/zUEAwDQYJKoZIhvcNAQELBQADggEBAAZwllTTfJ33Jsf7kA62YKhQ L6L2UiyPpotKeX9RSDeo2Or5Y428lEY2ewpHziV9JLUdGmjNbLp18dNTZTeyq5LW kK3goPv6/mUMFKk0dLfKAK9UrSEhEAjSuec2/l9jFgkCo4nKIhSltuUlJwINpj1U MH5USBm4eHRw/jX7UiYk2AHOrH+lRXvSQep/3W16ugmrRK+ZykoDqVOwuwmNmT3c n1p9E9hF2KYHO/GIuAyPDXSUaXyn1fWAX5jwC9Vscr8zZw7fo6nv2p3sFV/GDdGj /gidqpPXr3dFkpRLjZWbrviEju0dsLL34as1IIzm2i7TxaKbD1xrjDgA7OEMq/U= -----END CERTIFICATE-----Generated at Wed Aug 6 04:04:43 2025 by rpki-client