$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/561dfaff-0d62-4d0f-8223-365a2175ed6b.roa File: 561dfaff-0d62-4d0f-8223-365a2175ed6b.roa (raw, json) Hash identifier: ycWjWo/YfnnydJq9i9dep2fVtdcys3F9LhYXjUATvUg= Subject key identifier: BA:39:03:CA:FA:EA:2D:9F:A2:0C:96:A5:53:10:2E:37:B9:0E:96:58 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 73374C3C994AD2799F27AECA41357CDB8DBBEC19 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/561dfaff-0d62-4d0f-8223-365a2175ed6b.roa Signing time: Mon 07 Jul 2025 17:10:50 +0000 ROA not before: Mon 07 Jul 2025 17:10:50 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f38:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:37:4c:3c:99:4a:d2:79:9f:27:ae:ca:41:35:7c:db:8d:bb:ec:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 17:10:50 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=e842d6e7c4fdd75d8714cf1e5b0b38befa682e24324709f40ebeca14e551d4ed, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:b3:7f:3f:fc:f7:16:04:70:50:27:1f:48: 85:4e:90:c1:e4:0f:42:c1:99:b3:eb:00:1b:03:46: dc:e7:fe:fd:69:e8:28:0d:36:fd:78:f8:b4:58:11: a3:f4:71:19:0a:c5:12:a4:c6:01:d8:55:c8:2c:b9: a0:e4:2a:3e:6b:2b:fa:8c:e6:b8:4a:b1:1c:77:1f: d7:7a:59:63:b0:4c:40:20:2c:1d:77:6b:87:cb:53: f5:0d:69:7c:ee:85:b1:08:81:40:af:ae:9e:10:cd: d8:6f:d1:a8:ef:13:cf:57:da:68:00:d6:11:75:39: 22:19:ab:ac:bd:26:f7:53:96:fa:2c:09:4c:89:f1: 91:f4:bf:52:6b:bc:06:92:d1:64:32:8e:99:29:8e: 42:ed:61:a3:f1:e0:30:27:73:bd:cb:44:cf:c6:40: 6b:1a:b6:58:88:5b:f5:ac:09:d7:af:1f:a3:04:19: 31:da:83:15:c0:21:cb:0c:cd:91:16:58:3c:45:e3: ef:e9:33:f5:b9:bc:7b:98:18:41:4a:15:d6:7c:8d: be:61:c9:4c:0c:55:04:9d:c6:a5:7e:d6:19:f6:d1: 08:88:32:f3:40:d2:a7:32:0c:e2:2d:b0:50:a2:70: 8c:63:da:a3:d6:81:40:8f:1e:69:5a:1c:f2:5f:38: 99:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:39:03:CA:FA:EA:2D:9F:A2:0C:96:A5:53:10:2E:37:B9:0E:96:58 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/561dfaff-0d62-4d0f-8223-365a2175ed6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f38:4080::/48 Signature Algorithm: sha256WithRSAEncryption d0:76:32:c2:f7:7e:d1:3a:73:8b:81:7c:86:8f:81:b4:43:14: 58:34:e7:45:a4:70:0b:5b:9d:8a:d7:85:a3:00:20:a3:04:92: 78:8c:ac:2b:b8:79:a8:58:ad:dd:81:f0:57:b3:2b:08:a3:cd: 83:d3:24:b6:66:72:97:65:67:c3:cf:c4:e7:21:01:17:f8:e1: dc:27:6c:e1:f5:a9:43:6a:9c:34:af:e2:a5:ae:65:11:ab:25: 76:cd:da:d9:a1:07:4f:9b:fc:97:52:5f:e9:a9:2c:8c:c3:f3: 41:1e:58:27:78:84:24:b2:33:18:76:57:0a:f8:ac:52:c2:cd: 48:2e:9f:41:f1:84:65:b3:bc:7a:56:84:2e:3f:4b:35:c7:e5: 7e:22:a1:54:4e:7b:11:97:a5:55:fa:e0:b3:73:1c:82:df:37: 4d:b1:97:6b:b8:02:55:84:9d:e4:a7:df:32:a1:65:2c:04:8c: 63:d5:e5:2a:55:5d:de:1c:9e:01:a8:b0:f5:ef:eb:8c:29:a3: 97:2d:ec:d0:fc:2a:bf:d4:72:88:f8:9b:ec:4a:b4:3b:7a:f7: 25:cd:f0:f3:8c:5c:3f:60:d8:66:dd:ff:0b:ca:c1:59:a2:52: ac:31:94:7f:6e:4a:42:3e:e5:c8:f9:b9:75:4d:f5:71:35:e8: 4b:6f:42:24 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUczdMPJlK0nmfJ67KQTV824277BkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTcxMDUwWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0BlODQyZDZlN2M0ZmRkNzVkODcxNGNmMWU1YjBiMzhiZWZh NjgyZTI0MzI0NzA5ZjQwZWJlY2ExNGU1NTFkNGVkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAH7N/P/z3FgRwUCcfSIVOkMHkD0LBmbPrABsDRtzn/v1p 6CgNNv14+LRYEaP0cRkKxRKkxgHYVcgsuaDkKj5rK/qM5rhKsRx3H9d6WWOwTEAg LB13a4fLU/UNaXzuhbEIgUCvrp4Qzdhv0ajvE89X2mgA1hF1OSIZq6y9JvdTlvos CUyJ8ZH0v1JrvAaS0WQyjpkpjkLtYaPx4DAnc73LRM/GQGsatliIW/WsCdevH6ME GTHagxXAIcsMzZEWWDxF4+/pM/W5vHuYGEFKFdZ8jb5hyUwMVQSdxqV+1hn20QiI MvNA0qcyDOItsFCicIxj2qPWgUCPHmlaHPJfOJnxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUujkDyvrqLZ+iDJalUxAuN7kOllgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU2MWRmYWZmLTBkNjItNGQwZi04MjIzLTM2NWEyMTc1ZWQ2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB84QIAwDQYJKoZIhvcNAQELBQADggEBANB2MsL3ftE6c4uBfIaPgbRD FFg050WkcAtbnYrXhaMAIKMEkniMrCu4eahYrd2B8FezKwijzYPTJLZmcpdlZ8PP xOchARf44dwnbOH1qUNqnDSv4qWuZRGrJXbN2tmhB0+b/JdSX+mpLIzD80EeWCd4 hCSyMxh2Vwr4rFLCzUgun0HxhGWzvHpWhC4/SzXH5X4ioVROexGXpVX64LNzHILf N02xl2u4AlWEneSn3zKhZSwEjGPV5SpVXd4cngGosPXv64wpo5ct7ND8Kr/Ucoj4 m+xKtDt69yXN8POMXD9g2Gbd/wvKwVmiUqwxlH9uSkI+5cj5uXVN9XE16EtvQiQ= -----END CERTIFICATE-----Generated at Mon Jul 21 23:38:40 2025 by rpki-client