$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa File: 0668f39a-0950-45e9-b174-8f7a83ff26e9.roa (raw, json) Hash identifier: zn8cswM6PiVqZn9lkVpec5YurHDZd2SgJ2mmY9lWG6E= Subject key identifier: 28:89:BE:5E:92:4E:09:DC:DA:3F:E2:24:0D:71:59:25:F3:25:EC:FA Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 66232A90F621A9E105BAAB0F3B7B2553BD70FEE4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa Signing time: Tue 05 Aug 2025 18:21:03 +0000 ROA not before: Tue 05 Aug 2025 18:21:03 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:23:2a:90:f6:21:a9:e1:05:ba:ab:0f:3b:7b:25:53:bd:70:fe:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 5 18:21:03 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=b85d5ba1219b313e2e66db362f53ce7aa9cff83365380f2e0c2728c9047fedbe, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:27:4b:cf:4b:60:52:16:b2:35:0d:2d:22:55: 5b:5f:3e:93:6d:4d:91:6a:b2:b9:2a:74:ea:69:cb: 77:80:98:51:19:d4:78:0e:5c:ca:55:77:d2:81:46: 79:14:78:19:e2:53:85:ce:18:2e:6a:9c:35:9a:98: 2e:53:3a:04:9a:17:90:f3:a6:4d:10:db:0a:95:5d: ad:c9:5c:d8:00:0c:59:6e:ca:f6:82:1e:1b:4f:e4: 1d:d4:63:56:1e:fe:50:c8:f7:17:71:da:eb:b9:d3: 8b:d6:14:48:5a:d0:b5:c0:b3:69:93:9a:1e:28:05: ea:e1:c7:af:6f:29:f5:52:50:80:f6:a5:28:1e:fe: bb:be:aa:2d:ae:5a:62:4e:9e:5d:e9:fa:da:3e:f9: b1:a4:b6:01:68:5f:21:77:0c:ae:3d:ff:9c:8b:f0: 6b:bb:10:bb:07:90:b2:c8:c2:35:1e:d9:66:39:3d: 04:24:28:16:73:cf:ef:fb:cd:da:f0:54:88:e5:4a: cf:d7:d9:12:6f:48:1f:e3:49:5d:ee:1c:bd:e2:18: 25:1e:31:ee:a7:5b:6f:2d:7c:70:92:1f:07:0b:77: b9:f2:86:a1:46:57:65:92:13:73:7f:05:05:c5:f2: f2:b6:36:a2:1f:3b:08:85:00:e6:8a:fe:dd:ff:41: 27:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:89:BE:5E:92:4E:09:DC:DA:3F:E2:24:0D:71:59:25:F3:25:EC:FA X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1000::/48 Signature Algorithm: sha256WithRSAEncryption 84:d4:66:3a:25:cf:e8:e7:63:75:af:a1:37:84:61:a8:02:9c: b9:d6:61:5b:7c:f3:c5:74:f3:33:5a:90:97:60:2a:9c:69:30: a6:2d:63:a5:18:6c:c3:86:ae:53:e7:dd:39:8a:0a:d8:bf:f6: f5:65:50:94:73:75:0b:e8:81:c5:01:9a:dc:6a:db:a9:c9:6e: a8:d7:c5:3f:55:50:a7:32:cd:93:f3:15:5a:9c:89:c8:57:45: 51:43:85:f9:2c:70:19:57:32:77:5b:29:e8:8a:91:a9:9c:86: 37:22:a8:be:7e:c1:b7:f2:c1:12:43:f9:ba:68:00:50:f0:d7: 8f:51:4a:d8:af:13:18:88:f5:83:ac:7b:bb:02:e5:5a:7a:10: f5:49:54:69:e3:f5:d3:d8:7f:99:e2:f4:46:29:b1:b2:3d:9a: 46:5c:da:3b:ef:5d:23:76:33:71:81:00:45:33:3e:45:e1:eb: e9:1d:8a:c7:f7:28:3e:9d:47:59:5e:44:4b:a6:1a:33:fb:97: 67:8a:a4:36:5b:cf:28:1d:70:bb:e6:31:12:ef:ef:83:b8:32: 40:6a:22:99:ea:f0:36:42:e8:50:cd:2b:67:3c:b6:c9:98:8b: 54:58:83:1a:bd:9d:0d:66:24:eb:d4:9f:2a:b6:ea:d5:37:b1: cb:e4:9d:10 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZiMqkPYhqeEFuqsPO3slU71w/uQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA1MTgyMTAzWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiODVkNWJhMTIxOWIzMTNlMmU2NmRiMzYyZjUzY2U3YWE5 Y2ZmODMzNjUzODBmMmUwYzI3MjhjOTA0N2ZlZGJlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaJ0vPS2BSFrI1DS0iVVtfPpNtTZFqsrkqdOppy3eAmFEZ 1HgOXMpVd9KBRnkUeBniU4XOGC5qnDWamC5TOgSaF5Dzpk0Q2wqVXa3JXNgADFlu yvaCHhtP5B3UY1Ye/lDI9xdx2uu504vWFEha0LXAs2mTmh4oBerhx69vKfVSUID2 pSge/ru+qi2uWmJOnl3p+to++bGktgFoXyF3DK49/5yL8Gu7ELsHkLLIwjUe2WY5 PQQkKBZzz+/7zdrwVIjlSs/X2RJvSB/jSV3uHL3iGCUeMe6nW28tfHCSHwcLd7ny hqFGV2WSE3N/BQXF8vK2NqIfOwiFAOaK/t3/QSdpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKIm+XpJOCdzaP+IkDXFZJfMl7PowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzA2NjhmMzlhLTA5NTAtNDVlOS1iMTc0LThmN2E4M2ZmMjZlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwEAAwDQYJKoZIhvcNAQELBQADggEBAITUZjolz+jnY3WvoTeEYagC nLnWYVt888V08zNakJdgKpxpMKYtY6UYbMOGrlPn3TmKCti/9vVlUJRzdQvogcUB mtxq26nJbqjXxT9VUKcyzZPzFVqcichXRVFDhfkscBlXMndbKeiKkamchjciqL5+ wbfywRJD+bpoAFDw149RStivExiI9YOse7sC5Vp6EPVJVGnj9dPYf5ni9EYpsbI9 mkZc2jvvXSN2M3GBAEUzPkXh6+kdisf3KD6dR1leREumGjP7l2eKpDZbzygdcLvm MRLv74O4MkBqIpnq8DZC6FDNK2c8tsmYi1RYgxq9nQ1mJOvUnyq26tU3scvknRA= -----END CERTIFICATE-----Generated at Sat Aug 23 08:32:40 2025 by rpki-client