$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa File: 0b456d9a-b78d-45ba-9949-b00a9581f118.roa (raw, json) Hash identifier: Tuxf2xa4mIR+NO1XriF7RAUlT/5WXh72vo1fSW6s9Yk= Subject key identifier: CA:1F:82:8D:2B:C3:1E:2C:56:6C:48:23:58:B8:C9:E8:2F:50:AA:AE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 23B0652BAF81C24B8859AED0C2048AC426CA866F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa Signing time: Mon 16 Jun 2025 19:20:07 +0000 ROA not before: Mon 16 Jun 2025 19:20:07 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ec00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b0:65:2b:af:81:c2:4b:88:59:ae:d0:c2:04:8a:c4:26:ca:86:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:07 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=0c9af5f4727eaf9fc289901bdcb3eae5a844a26f435ba0a0038e04c77951d6b7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:5d:1c:86:09:43:26:e5:90:8a:af:9d:0e: a6:45:6c:35:3d:62:69:11:59:1f:9d:cd:f4:c7:73: b9:39:a8:8b:44:cd:c7:d7:26:be:44:78:9b:0a:9f: da:95:82:ad:38:28:f8:23:24:67:e3:12:b8:f6:ad: a6:fe:85:76:11:74:e3:a0:8b:ed:31:1a:ed:a7:58: 4a:06:92:84:c7:89:62:41:1d:24:74:ca:13:2d:58: 6c:d9:ec:9a:a6:71:22:1f:70:5f:1b:19:e8:7a:b4: 38:0b:f7:06:10:88:9d:84:bc:6d:b4:3b:d8:69:be: 7c:0d:a6:51:32:0e:c7:bb:f3:06:60:fd:26:34:ad: cf:f4:26:09:3c:4e:d5:76:04:81:1f:f4:3e:19:bb: 9d:70:83:8c:b6:fa:d4:88:92:23:29:c7:10:e4:be: 51:87:76:82:a6:28:73:af:fa:c5:66:67:73:77:04: 2b:53:e8:f0:b8:af:fa:70:21:33:f5:ab:ba:41:4c: 1b:38:27:a4:1e:ef:23:d8:ec:35:8c:30:3f:c9:d9: 57:52:d5:1a:55:e5:35:99:36:39:99:ae:60:92:68: 8e:a6:b3:3c:42:1c:ef:76:9e:0a:93:10:e6:05:dc: aa:e1:99:23:c2:dc:1b:c7:06:b1:eb:fa:2e:9f:b9: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1F:82:8D:2B:C3:1E:2C:56:6C:48:23:58:B8:C9:E8:2F:50:AA:AE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/42 Signature Algorithm: sha256WithRSAEncryption 79:37:3d:39:7f:ad:f4:0c:d1:b6:27:39:1e:ae:d4:ba:ce:d8: 91:21:d9:83:39:14:77:30:82:1f:58:37:4f:52:bf:b3:69:e9: 51:e0:74:7e:63:09:07:21:a4:82:92:8d:2c:12:1e:a5:db:ce: e0:d7:12:f0:f1:a3:b5:e4:fa:c5:12:2a:d0:4e:37:02:c4:cd: 4b:f1:ea:ad:d1:07:d5:dc:49:20:d6:71:06:df:cb:6f:b9:e4: 40:89:36:44:40:24:e8:75:7b:e4:a5:49:72:52:57:a1:2e:e6: 51:01:5d:f9:d8:87:1e:09:dd:7c:ed:ed:fa:8f:7a:84:22:c4: c2:41:38:4a:7e:87:1c:48:d5:3e:1f:35:6b:ed:af:08:8c:f3: ae:bf:86:22:56:57:d0:39:b4:68:04:ac:3a:19:33:33:ac:41: 2f:fd:95:a3:95:d4:a3:f5:5a:78:3f:d3:92:c4:44:3a:9d:54: 6d:de:e1:19:4f:db:7a:71:a2:b6:45:c4:2b:27:82:b6:db:66: 7c:ab:85:cd:b0:8d:a4:83:57:26:e9:f6:89:5c:af:73:c7:02: dd:a3:6d:cf:a0:56:3d:7a:15:97:6b:63:3a:21:4d:dd:ab:9a: 87:57:b1:af:78:51:e3:2e:c5:95:18:df:3d:57:0e:cd:09:98: be:e4:51:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUI7BlK6+BwkuIWa7QwgSKxCbKhm8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDA3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzlhZjVmNDcyN2VhZjlmYzI4OTkwMWJkY2IzZWFlNWE4 NDRhMjZmNDM1YmEwYTAwMzhlMDRjNzc5NTFkNmI3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg8l0chglDJuWQiq+dDqZFbDU9YmkRWR+dzfTHc7k5qItE zcfXJr5EeJsKn9qVgq04KPgjJGfjErj2rab+hXYRdOOgi+0xGu2nWEoGkoTHiWJB HSR0yhMtWGzZ7JqmcSIfcF8bGeh6tDgL9wYQiJ2EvG20O9hpvnwNplEyDse78wZg /SY0rc/0Jgk8TtV2BIEf9D4Zu51wg4y2+tSIkiMpxxDkvlGHdoKmKHOv+sVmZ3N3 BCtT6PC4r/pwITP1q7pBTBs4J6Qe7yPY7DWMMD/J2VdS1RpV5TWZNjmZrmCSaI6m szxCHO92ngqTEOYF3KrhmSPC3BvHBrHr+i6fuYIxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyh+CjSvDHixWbEgjWLjJ6C9Qqq4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBiNDU2ZDlhLWI3OGQtNDViYS05OTQ5LWIwMGE5NTgxZjExOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77AAwDQYJKoZIhvcNAQELBQADggEBAHk3PTl/rfQM0bYnOR6u1LrO 2JEh2YM5FHcwgh9YN09Sv7Np6VHgdH5jCQchpIKSjSwSHqXbzuDXEvDxo7Xk+sUS KtBONwLEzUvx6q3RB9XcSSDWcQbfy2+55ECJNkRAJOh1e+SlSXJSV6Eu5lEBXfnY hx4J3Xzt7fqPeoQixMJBOEp+hxxI1T4fNWvtrwiM866/hiJWV9A5tGgErDoZMzOs QS/9laOV1KP1Wng/05LERDqdVG3e4RlP23pxorZFxCsngrbbZnyrhc2wjaSDVybp 9olcr3PHAt2jbc+gVj16FZdrYzohTd2rmodXsa94UeMuxZUY3z1XDs0JmL7kUdE= -----END CERTIFICATE-----Generated at Tue Jul 1 20:47:00 2025 by rpki-client