$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf613a48-a86e-4b9f-af6e-df55021d6954.roa File: cf613a48-a86e-4b9f-af6e-df55021d6954.roa (raw, json) Hash identifier: /ONtylO1PtiRc32HYI+15a69rgGhANBoivMNeDUVvgM= Subject key identifier: 65:BD:CB:BE:47:E0:28:E9:88:60:62:0B:6E:FA:A1:3E:40:B7:09:6E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 665EC0C8DB26868E30AA01946CCD115293574922 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf613a48-a86e-4b9f-af6e-df55021d6954.roa Signing time: Tue 08 Jul 2025 16:31:25 +0000 ROA not before: Tue 08 Jul 2025 16:31:25 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fb8:8000::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5e:c0:c8:db:26:86:8e:30:aa:01:94:6c:cd:11:52:93:57:49:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 16:31:25 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=76be4c2c8092d5312083f0ea7bb547551999209e10986ae2a231a84f309ada81, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:94:2e:4c:00:7c:bc:bb:03:f1:a2:f3:00:35: 15:17:19:27:22:bb:06:a3:6b:fa:5c:e4:56:4c:eb: 53:fe:8f:81:3e:19:56:64:e9:77:39:d1:43:7d:3c: 7c:b1:27:c0:ef:bb:e9:95:bb:4b:45:10:f8:94:59: c5:45:24:86:7a:cc:3d:4f:c2:8c:df:ee:5b:07:7a: 84:5e:fa:97:75:32:ef:64:2b:8a:09:3c:b7:89:44: a1:1e:85:74:cb:0f:99:13:ae:83:5f:d6:46:42:d5: 16:f8:44:4c:65:17:7e:b7:61:3e:31:92:9d:a6:18: 6b:21:97:13:e8:5d:2b:8f:db:93:d7:be:a0:21:e4: 02:3d:15:02:05:65:d4:1e:bd:46:41:7d:9f:b8:59: 1d:9c:75:b7:ca:a2:da:c7:e8:77:f0:a8:ea:64:b3: 1d:9d:76:d7:07:5c:91:bc:a2:34:7d:fe:5f:22:23: 9d:77:84:24:10:25:fb:f3:5c:99:55:ed:97:61:63: 80:e5:38:e0:8e:69:7b:a6:de:92:cd:58:16:ad:82: 1d:80:58:df:27:cb:56:05:f3:17:12:9c:41:52:28: b5:2f:77:d2:b4:c4:d8:f5:6e:25:74:ed:8c:72:f8: 89:9a:a4:4b:2f:8e:e9:3a:91:b0:6a:ce:cf:d2:94: ba:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BD:CB:BE:47:E0:28:E9:88:60:62:0B:6E:FA:A1:3E:40:B7:09:6E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf613a48-a86e-4b9f-af6e-df55021d6954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fb8:8000::/39 Signature Algorithm: sha256WithRSAEncryption 7b:6d:34:d6:84:f4:4d:be:bd:2e:fd:6e:e3:4f:07:17:99:7e: e8:3b:74:ea:77:08:11:de:b9:ac:7c:fd:f5:c0:8a:0e:12:44: a0:dc:ad:ab:e5:8c:b1:da:b7:08:b2:84:c8:0b:10:f4:cc:e8: 9e:9a:3e:ea:48:17:e9:bf:13:01:63:9f:8d:2d:21:e3:d3:d2: 00:e1:80:b8:66:76:1e:92:b3:20:56:4a:b9:c9:13:aa:88:3c: b3:f2:1e:b8:26:65:fe:67:f6:fb:28:ff:c4:4f:ba:de:7d:72: 51:2c:13:56:6f:5d:10:11:b9:7f:b8:60:c6:f9:8e:62:73:4d: c7:d6:0f:cc:6c:cf:d3:65:fd:30:0d:a1:1f:08:c0:8f:80:45: ba:32:b7:4b:b5:17:6d:96:48:bf:4b:be:8f:ad:10:e1:7b:ab: 8f:1d:59:0d:f7:ba:f8:bb:0f:78:3a:73:97:40:f6:60:ac:a3: 31:bc:48:39:3a:74:e6:44:87:a9:1d:b8:f1:c7:48:fd:e2:3d: 3e:9c:c3:22:8c:f7:c1:6c:1f:61:a4:e7:00:2f:58:dd:77:e5: 36:47:4f:bb:98:b5:6f:2c:55:3b:df:00:16:03:4c:1f:b7:66: a5:e4:95:b3:f3:7f:57:da:24:6e:34:18:91:5f:fd:fd:aa:f9: bf:8f:2f:e8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZl7AyNsmho4wqgGUbM0RUpNXSSIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTYzMTI1WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmJlNGMyYzgwOTJkNTMxMjA4M2YwZWE3YmI1NDc1NTE5 OTkyMDllMTA5ODZhZTJhMjMxYTg0ZjMwOWFkYTgxMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDglC5MAHy8uwPxovMANRUXGSciuwaja/pc5FZM61P+j4E+ GVZk6Xc50UN9PHyxJ8Dvu+mVu0tFEPiUWcVFJIZ6zD1Pwozf7lsHeoRe+pd1Mu9k K4oJPLeJRKEehXTLD5kTroNf1kZC1Rb4RExlF363YT4xkp2mGGshlxPoXSuP25PX vqAh5AI9FQIFZdQevUZBfZ+4WR2cdbfKotrH6HfwqOpksx2ddtcHXJG8ojR9/l8i I513hCQQJfvzXJlV7ZdhY4DlOOCOaXum3pLNWBatgh2AWN8ny1YF8xcSnEFSKLUv d9K0xNj1biV07Yxy+ImapEsvjuk6kbBqzs/SlLoZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUZb3LvkfgKOmIYGILbvqhPkC3CW4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NmNjEzYTQ4LWE4NmUtNGI5Zi1hZjZlLWRmNTUwMjFkNjk1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAB+4gDANBgkqhkiG9w0BAQsFAAOCAQEAe2001oT0Tb69Lv1u408HF5l+ 6Dt06ncIEd65rHz99cCKDhJEoNytq+WMsdq3CLKEyAsQ9Mzonpo+6kgX6b8TAWOf jS0h49PSAOGAuGZ2HpKzIFZKuckTqog8s/IeuCZl/mf2+yj/xE+63n1yUSwTVm9d EBG5f7hgxvmOYnNNx9YPzGzP02X9MA2hHwjAj4BFujK3S7UXbZZIv0u+j60Q4Xur jx1ZDfe6+LsPeDpzl0D2YKyjMbxIOTp05kSHqR248cdI/eI9PpzDIoz3wWwfYaTn AC9Y3XflNkdPu5i1byxVO98AFgNMH7dmpeSVs/N/V9okbjQYkV/9/ar5v48v6A== -----END CERTIFICATE-----Generated at Mon Jul 21 12:58:45 2025 by rpki-client