$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81466a00-4ef6-4b26-ad84-e79fb496219c.roa File: 81466a00-4ef6-4b26-ad84-e79fb496219c.roa (raw, json) Hash identifier: O6gvpi5F1fnYZc/8DOEP5xIcJWxusrWPW3IrocZubAs= Subject key identifier: 47:29:01:22:B3:AF:27:90:92:4E:BD:80:C1:3A:FC:1E:8B:53:41:74 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 72FDDF38F5A8258EEB4C9123E7C32F753DB6A703 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81466a00-4ef6-4b26-ad84-e79fb496219c.roa Signing time: Mon 07 Jul 2025 18:11:00 +0000 ROA not before: Mon 07 Jul 2025 18:11:00 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fd:df:38:f5:a8:25:8e:eb:4c:91:23:e7:c3:2f:75:3d:b6:a7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 18:11:00 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=11ab775a4f42db45617671eea0e98021cdea56707d6c4b1375a7392d2f26f293, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3b:27:80:56:02:02:7f:94:05:c7:10:b6:7c: c3:b6:00:7b:87:44:d4:ae:79:97:6e:03:8a:42:2d: 21:5e:25:ea:76:5c:bb:50:8e:f5:c8:8a:2b:0e:62: 5e:24:88:06:29:05:a0:66:17:7b:71:bf:8d:eb:1f: 88:11:70:ef:4e:92:4d:eb:45:bc:b0:0e:b6:52:64: 76:31:7c:23:59:74:38:65:b5:d5:f0:a9:f2:b0:74: 43:c5:d4:ed:c0:22:5f:58:71:fb:cf:08:a0:e1:8d: 67:65:14:ba:0b:b1:4c:2e:0c:46:2a:65:d2:ab:16: 37:6c:72:ec:eb:9e:3e:95:bd:cd:d3:16:f4:5e:62: 74:45:94:bb:bf:0b:a7:c3:c1:ef:a3:13:86:17:cd: 15:56:25:63:ae:23:c3:86:0e:38:d5:5a:10:f8:96: a3:f9:9b:c0:79:75:4e:14:9e:63:20:73:b9:3b:84: 71:25:6f:fb:d6:a5:69:2a:65:80:e4:08:99:34:a2: 54:5e:ba:32:2f:bb:57:96:aa:88:6e:75:01:5b:9a: 13:71:15:ee:82:f7:c6:00:08:bd:e3:89:0c:97:d6: 19:0b:45:d9:08:fa:6d:3a:39:64:65:e1:74:bd:f5: cf:34:f8:d0:24:14:d6:81:77:ef:e7:70:a4:ab:af: c0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:29:01:22:B3:AF:27:90:92:4E:BD:80:C1:3A:FC:1E:8B:53:41:74 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81466a00-4ef6-4b26-ad84-e79fb496219c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:8080::/48 Signature Algorithm: sha256WithRSAEncryption d3:5f:01:51:ce:19:f9:71:b3:fe:e7:cd:b1:03:c4:96:aa:3d: 58:20:4b:c2:61:13:69:0c:96:76:2f:29:f4:7b:93:c3:c5:d1: 3a:96:3d:48:fc:63:81:97:0b:5a:aa:fd:e3:7c:3a:81:c5:70: 0e:f6:29:f4:08:ed:84:54:c7:f9:30:8b:84:95:d7:eb:88:57: 30:2f:47:41:22:a6:30:3d:01:c6:36:26:1e:11:3e:c4:75:e8: f0:7b:e3:62:d2:56:1b:7b:8c:69:a7:5f:50:a3:4d:85:44:ed: 15:26:4c:f9:8e:c5:9c:c2:06:1a:b8:1b:6c:bd:b0:71:db:80: d8:3d:41:41:db:ec:23:88:25:fc:e8:68:61:04:9a:dd:bc:0a: 0d:17:bb:fe:7e:e2:74:27:c2:ff:92:43:43:31:5a:38:77:e8: 4b:4e:d0:1d:81:e5:63:3c:53:57:61:85:0f:cd:bc:d8:3d:d0: 3e:ea:41:65:d7:08:07:d0:a6:50:0c:5c:3d:67:31:a2:03:e5: 5d:b2:96:a1:cd:b0:97:b5:6e:40:bd:a7:2f:b6:df:68:20:0c: 44:0a:5f:6d:34:a1:e4:dc:ec:b2:a9:ea:67:e8:ba:da:ab:d8: 15:0e:c7:8a:a5:b9:d5:a3:36:d8:dc:fe:aa:d4:d3:73:85:ec: 32:7c:d6:7c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcv3fOPWoJY7rTJEj58MvdT22pwMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTgxMTAwWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMWFiNzc1YTRmNDJkYjQ1NjE3NjcxZWVhMGU5ODAyMWNk ZWE1NjcwN2Q2YzRiMTM3NWE3MzkyZDJmMjZmMjkzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCEOyeAVgICf5QFxxC2fMO2AHuHRNSueZduA4pCLSFeJep2 XLtQjvXIiisOYl4kiAYpBaBmF3txv43rH4gRcO9Okk3rRbywDrZSZHYxfCNZdDhl tdXwqfKwdEPF1O3AIl9YcfvPCKDhjWdlFLoLsUwuDEYqZdKrFjdscuzrnj6Vvc3T FvReYnRFlLu/C6fDwe+jE4YXzRVWJWOuI8OGDjjVWhD4lqP5m8B5dU4UnmMgc7k7 hHElb/vWpWkqZYDkCJk0olReujIvu1eWqohudQFbmhNxFe6C98YACL3jiQyX1hkL RdkI+m06OWRl4XS99c80+NAkFNaBd+/ncKSrr8BLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURykBIrOvJ5CSTr2AwTr8HotTQXQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzgxNDY2YTAwLTRlZjYtNGIyNi1hZDg0LWU3OWZiNDk2MjE5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgIAwDQYJKoZIhvcNAQELBQADggEBANNfAVHOGflxs/7nzbEDxJaq PVggS8JhE2kMlnYvKfR7k8PF0TqWPUj8Y4GXC1qq/eN8OoHFcA72KfQI7YRUx/kw i4SV1+uIVzAvR0EipjA9AcY2Jh4RPsR16PB742LSVht7jGmnX1CjTYVE7RUmTPmO xZzCBhq4G2y9sHHbgNg9QUHb7COIJfzoaGEEmt28Cg0Xu/5+4nQnwv+SQ0MxWjh3 6EtO0B2B5WM8U1dhhQ/NvNg90D7qQWXXCAfQplAMXD1nMaID5V2ylqHNsJe1bkC9 py+232ggDEQKX200oeTc7LKp6mfoutqr2BUOx4qludWjNtjc/qrU03OF7DJ81nw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:14 2025 by rpki-client