$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef1681d2-ccb0-459c-89f1-3dea31b1515a.roa File: ef1681d2-ccb0-459c-89f1-3dea31b1515a.roa (raw, json) Hash identifier: fcLXaI7LGkkcYinIZ7wyRJyRAnM191/fRcefcHt6Gn0= Subject key identifier: BC:DF:CD:B8:17:EE:35:4D:23:3C:D2:B6:3A:D5:AA:13:79:D2:22:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 53C7126A28B607CCC7E35A7663A3CE6ED6BE6B9C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef1681d2-ccb0-459c-89f1-3dea31b1515a.roa Signing time: Tue 08 Jul 2025 17:11:33 +0000 ROA not before: Tue 08 Jul 2025 17:11:33 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:1f1d:4000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c7:12:6a:28:b6:07:cc:c7:e3:5a:76:63:a3:ce:6e:d6:be:6b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 8 17:11:33 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=355eaeaa90229903920857330e8f8a5b05bf11526e0318cd9b95b7b3ff9ca826, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:5f:00:f2:df:6c:02:5d:e6:88:20:80:08: ef:4c:c1:c6:2a:22:12:23:c1:46:eb:44:c5:08:09: 4e:b9:b1:fd:f3:48:ab:55:05:78:1f:48:f1:cb:7c: da:81:cb:08:fe:86:83:d1:a1:53:bd:8e:bd:c5:3f: ef:94:f8:8f:eb:22:6f:68:29:71:8e:fd:1f:7d:a6: ad:be:12:d2:f9:8a:85:6e:0e:8b:16:29:22:50:5c: 60:d8:f2:46:ad:42:ad:fa:f2:e3:f7:51:dc:5a:17: ec:c4:0f:31:43:f5:41:c8:3c:36:42:3c:87:31:c7: 40:b7:bc:31:58:d8:3e:a2:56:14:09:c5:36:ba:5b: 1d:52:21:9d:6f:5d:9a:1e:7e:63:18:43:4d:fd:c9: 2c:5d:6a:af:58:90:70:96:ec:fd:ca:e3:e3:a4:f0: 78:a7:75:f2:8b:1f:06:3f:0e:71:10:89:34:93:99: 8f:79:2b:e4:45:c2:db:2b:b1:21:1f:60:33:83:12: 7b:be:db:ae:cc:12:2d:7a:3a:85:7a:c1:b9:29:9c: 19:f3:74:38:94:2d:a3:03:c9:be:a0:f3:b5:dd:53: 8c:e6:b4:4b:f8:df:62:4f:bd:f6:18:aa:46:0d:93: 79:4e:4e:ee:ca:c0:ce:4b:db:f3:81:94:0b:31:41: 92:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DF:CD:B8:17:EE:35:4D:23:3C:D2:B6:3A:D5:AA:13:79:D2:22:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef1681d2-ccb0-459c-89f1-3dea31b1515a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f1d:4000::/37 Signature Algorithm: sha256WithRSAEncryption a3:c3:23:ae:69:31:c2:81:9d:41:73:77:6b:08:75:55:a7:f2: 14:a8:f2:2c:88:37:cf:49:16:6d:f5:f3:08:7b:2b:1b:08:62: e4:88:4a:46:63:c7:a9:53:40:20:9d:1f:a7:35:7b:bb:b9:c2: 49:31:9d:dc:86:f7:87:53:73:77:1e:a1:d1:71:99:61:89:d4: f1:95:f7:2f:f6:d0:2c:26:7a:42:97:46:f7:92:bf:00:25:b1: 84:69:f7:71:22:66:e9:55:52:5a:27:2d:7f:ab:a9:eb:81:a5: de:76:e3:d4:fa:e0:13:4f:30:6c:69:7a:c6:4d:bf:0b:e1:2b: 07:95:88:c9:22:30:35:6b:06:49:1f:76:a8:f1:67:91:f0:09: 1a:8f:f6:6c:6d:90:95:17:65:8d:4c:c0:4f:ad:4c:f7:cd:03: 4d:27:21:b5:6e:cf:92:4d:a7:16:05:e9:62:92:da:71:1c:48: 1c:a5:73:c6:c9:7c:36:53:08:15:f6:c4:fa:48:8c:0c:a3:f3: 67:d8:cb:4b:50:28:b9:29:f6:47:60:21:15:5d:63:8d:6e:96: b2:3d:f5:31:bb:a3:b7:8b:48:77:84:fb:ac:84:c1:cd:20:98: e4:03:80:8d:3d:6d:4b:f8:ec:65:0d:76:19:21:5b:2b:3a:86: 18:2e:ec:75 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUU8cSaii2B8zH41p2Y6PObta+a5wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzA4MTcxMTMzWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTVlYWVhYTkwMjI5OTAzOTIwODU3MzMwZThmOGE1YjA1 YmYxMTUyNmUwMzE4Y2Q5Yjk1YjdiM2ZmOWNhODI2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxwV8A8t9sAl3miCCACO9MwcYqIhIjwUbrRMUICU65sf3z SKtVBXgfSPHLfNqBywj+hoPRoVO9jr3FP++U+I/rIm9oKXGO/R99pq2+EtL5ioVu DosWKSJQXGDY8katQq368uP3UdxaF+zEDzFD9UHIPDZCPIcxx0C3vDFY2D6iVhQJ xTa6Wx1SIZ1vXZoefmMYQ039ySxdaq9YkHCW7P3K4+Ok8HindfKLHwY/DnEQiTST mY95K+RFwtsrsSEfYDODEnu+267MEi16OoV6wbkpnBnzdDiULaMDyb6g87XdU4zm tEv432JPvfYYqkYNk3lOTu7KwM5L2/OBlAsxQZLpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUvN/NuBfuNU0jPNK2OtWqE3nSIrMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VmMTY4MWQyLWNjYjAtNDU5Yy04OWYxLTNkZWEzMWIxNTE1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAB8dQDANBgkqhkiG9w0BAQsFAAOCAQEAo8MjrmkxwoGdQXN3awh1Vafy FKjyLIg3z0kWbfXzCHsrGwhi5IhKRmPHqVNAIJ0fpzV7u7nCSTGd3Ib3h1Nzdx6h 0XGZYYnU8ZX3L/bQLCZ6QpdG95K/ACWxhGn3cSJm6VVSWictf6up64Gl3nbj1Prg E08wbGl6xk2/C+ErB5WIySIwNWsGSR92qPFnkfAJGo/2bG2QlRdljUzAT61M980D TSchtW7Pkk2nFgXpYpLacRxIHKVzxsl8NlMIFfbE+kiMDKPzZ9jLS1AouSn2R2Ah FV1jjW6Wsj31Mbujt4tId4T7rITBzSCY5AOAjT1tS/jsZQ12GSFbKzqGGC7sdQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:10 2025 by rpki-client