$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b700ba59-e7b4-4735-adc4-f2dba045282c.roa File: b700ba59-e7b4-4735-adc4-f2dba045282c.roa (raw, json) Hash identifier: TVbJRMmYrLIdRNx5RghLd/OcIeNvIZMcrxHk5LoNY9Y= Subject key identifier: 64:47:D9:B4:E1:31:E9:C4:B4:F6:6E:8A:83:F4:E9:C1:96:1D:D4:1D Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 275345920AB7E1F04563BFD70BBE00F603967106 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b700ba59-e7b4-4735-adc4-f2dba045282c.roa Signing time: Mon 07 Jul 2025 17:21:40 +0000 ROA not before: Mon 07 Jul 2025 17:21:40 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f00:80d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:53:45:92:0a:b7:e1:f0:45:63:bf:d7:0b:be:00:f6:03:96:71:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 7 17:21:40 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=2e9e1eeb28c4028aabbe8589c190b06001ff3a852051db873945a6f5cd36fafd, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:8b:ca:88:f8:10:d1:f2:54:9a:13:d3:3f: bc:46:92:a7:a4:0e:c0:ac:23:97:70:94:fe:3f:88: cb:de:a5:09:e4:d3:f4:20:ca:b5:cc:4b:d4:b3:35: 6a:24:bd:fe:36:99:43:f7:f5:88:0d:4a:fb:cf:07: 04:69:db:a4:4e:1b:89:76:ae:e4:d9:35:09:43:51: 5e:26:72:62:2d:cc:6c:93:49:4e:48:49:8e:a3:09: 4a:b4:34:22:8d:46:fd:c2:2a:b7:57:7c:1b:23:c2: 7f:69:2a:74:21:8f:6a:46:df:ae:89:ab:6c:bc:fd: 8a:ec:72:eb:4b:82:be:5e:02:94:19:dc:95:ad:f5: c8:36:05:3d:77:f0:b7:7f:d0:a8:29:fe:8a:53:b2: 5f:a9:dc:74:4e:81:4e:31:b9:62:da:64:a2:58:74: c5:83:ec:38:fb:a1:12:15:9b:fd:51:d2:be:e4:1f: 78:ba:40:c3:b8:af:51:c9:d4:58:5c:70:59:84:e8: 68:6a:0f:ef:18:12:42:e7:91:c1:07:34:ea:c9:8a: 32:a6:08:1e:a4:80:02:b5:fa:7e:ed:88:e8:b0:b5: f2:4d:cd:8a:b2:13:97:d5:b6:11:e6:c4:26:db:1f: c9:b0:e3:75:d9:e7:d5:7f:e6:5d:42:ef:c3:fc:22: 34:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:47:D9:B4:E1:31:E9:C4:B4:F6:6E:8A:83:F4:E9:C1:96:1D:D4:1D X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b700ba59-e7b4-4735-adc4-f2dba045282c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f00:80d0::/48 Signature Algorithm: sha256WithRSAEncryption 6a:e2:55:16:f7:da:62:a8:1f:a4:83:fe:1f:48:1e:df:0f:7b: 74:94:dc:f4:f6:7b:85:9d:79:d5:1e:d0:1d:ba:7c:75:75:6b: fb:69:40:9c:4f:60:b0:32:e1:0e:48:71:2e:30:f4:16:82:61: 18:f9:5c:af:08:59:1f:ba:c3:a0:d1:52:b8:0e:5a:17:9b:d1: 77:66:5d:3c:f7:db:24:6f:68:9a:2d:cf:14:6a:dc:6e:9a:1a: 10:e4:15:2e:de:5b:39:ee:9e:4b:d6:3d:f9:31:b9:fc:90:a1: 98:00:0c:3d:3d:bf:da:e7:e7:46:78:f1:93:bc:ad:32:61:b9: c5:c0:39:57:45:e4:1a:7c:bf:95:1b:ad:35:db:c3:01:e9:47: 80:b3:71:0a:45:bd:b5:87:7f:3f:94:7e:42:0f:e6:b5:61:0d: 59:9b:6b:5f:15:d0:56:94:ce:56:b6:9b:51:c3:64:a7:05:2b: 8e:2c:a4:d3:aa:08:69:e2:76:34:22:bf:db:ce:64:e0:50:04: f4:63:8d:c4:66:55:2f:05:85:64:e9:09:a1:d5:02:3f:9c:8c: 07:64:16:cc:af:69:f6:0d:c5:2c:0b:63:62:3a:e4:f0:1c:98: e9:60:d8:7f:d9:21:b0:2d:69:05:1f:7b:f0:ec:97:ac:f5:ad: f6:31:72:78 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJ1NFkgq34fBFY7/XC74A9gOWcQYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA3MTcyMTQwWhcNMjUwODExMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTllMWVlYjI4YzQwMjhhYWJiZTg1ODljMTkwYjA2MDAx ZmYzYTg1MjA1MWRiODczOTQ1YTZmNWNkMzZmYWZkMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC16IvKiPgQ0fJUmhPTP7xGkqekDsCsI5dwlP4/iMvepQnk 0/QgyrXMS9SzNWokvf42mUP39YgNSvvPBwRp26ROG4l2ruTZNQlDUV4mcmItzGyT SU5ISY6jCUq0NCKNRv3CKrdXfBsjwn9pKnQhj2pG366Jq2y8/YrscutLgr5eApQZ 3JWt9cg2BT138Ld/0Kgp/opTsl+p3HROgU4xuWLaZKJYdMWD7Dj7oRIVm/1R0r7k H3i6QMO4r1HJ1FhccFmE6GhqD+8YEkLnkcEHNOrJijKmCB6kgAK1+n7tiOiwtfJN zYqyE5fVthHmxCbbH8mw43XZ59V/5l1C78P8IjRLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZEfZtOEx6cS09m6Kg/TpwZYd1B0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2I3MDBiYTU5LWU3YjQtNDczNS1hZGM0LWYyZGJhMDQ1MjgyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB8AgNAwDQYJKoZIhvcNAQELBQADggEBAGriVRb32mKoH6SD/h9IHt8P e3SU3PT2e4WdedUe0B26fHV1a/tpQJxPYLAy4Q5IcS4w9BaCYRj5XK8IWR+6w6DR UrgOWheb0XdmXTz32yRvaJotzxRq3G6aGhDkFS7eWznunkvWPfkxufyQoZgADD09 v9rn50Z48ZO8rTJhucXAOVdF5Bp8v5UbrTXbwwHpR4CzcQpFvbWHfz+UfkIP5rVh DVmba18V0FaUzla2m1HDZKcFK44spNOqCGnidjQiv9vOZOBQBPRjjcRmVS8FhWTp CaHVAj+cjAdkFsyvafYNxSwLY2I65PAcmOlg2H/ZIbAtaQUfe/Dsl6z1rfYxcng= -----END CERTIFICATE-----Generated at Mon Jul 21 18:07:54 2025 by rpki-client