$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa File: 0fac8622-056c-4350-9d70-b107bedf3e94.roa (raw, json) Hash identifier: WjrNH9Y+P6QdHiNNFGtzlDnihzdYuGj9XXxSeO4AFyM= Subject key identifier: 41:C8:52:DF:1A:B1:0C:05:56:58:0C:8A:9A:43:43:D2:28:C0:AF:32 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 50AF4A2FE457B970DC11CAE6F352584175A0AE72 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa Signing time: Fri 15 Aug 2025 23:07:08 +0000 ROA not before: Fri 15 Aug 2025 23:07:08 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:af:4a:2f:e4:57:b9:70:dc:11:ca:e6:f3:52:58:41:75:a0:ae:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 15 23:07:08 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=bc3a2c20b48a0b7dd9c5c5d4da7551a7ced3c31c1cf26fd98382dedc98f53312, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:52:3f:c8:f9:90:e2:e3:b7:a4:6b:e8:ad: 0c:3e:f5:94:c6:ad:dc:bb:a0:b5:b7:1f:23:76:e9: 8f:29:65:cd:70:bf:43:56:06:aa:1e:f4:b0:2c:31: 99:55:c9:ac:1e:1c:36:59:01:39:60:f9:6b:98:23: 81:82:0b:68:a3:c7:48:f6:bc:00:7c:fa:fa:5d:02: 95:f2:b6:9f:e9:f3:6a:e0:73:e1:a7:8c:5f:cf:ba: 91:e4:88:39:33:1c:03:ae:ce:69:3a:f7:76:03:54: 83:e8:a6:a0:dd:86:3c:da:8c:d1:8f:67:e6:01:88: ac:94:0c:79:3b:5e:56:e1:4e:2d:20:6f:c4:5c:bc: 75:06:c2:55:fb:0f:e0:02:32:2a:c7:c3:83:b0:b8: 26:20:c0:cf:68:e9:d8:36:c6:c6:0f:b3:7f:a0:a1: 33:fa:28:e8:87:5a:61:20:57:cd:30:c6:52:52:f5: 7c:50:59:b2:d4:a9:77:e5:e4:5d:66:e2:71:04:d5: a3:33:21:e8:ba:f2:a8:f4:fa:7d:7a:34:a2:9b:21: 44:06:40:61:e9:72:83:6c:c1:bb:0d:6e:8a:df:e0: 84:5d:2c:7c:d1:2d:b6:7f:a9:aa:f9:39:dd:90:bc: 04:1a:6d:c2:e5:04:04:a5:df:ff:b6:a3:f4:98:b0: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C8:52:DF:1A:B1:0C:05:56:58:0C:8A:9A:43:43:D2:28:C0:AF:32 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6103::/48 Signature Algorithm: sha256WithRSAEncryption 9f:4c:8e:56:26:68:bc:04:05:d7:d6:f0:aa:83:ae:05:d9:71: 8d:37:d9:19:60:42:b9:b4:0f:15:da:72:d3:c1:b8:85:de:f5: ab:01:ee:b3:1e:a4:da:d4:5a:9e:cf:68:6c:39:c6:d7:9c:5c: 37:21:17:c2:58:e2:09:a6:50:1c:67:3a:00:71:d6:7a:94:ec: ed:1d:d4:a9:13:15:d6:12:c6:67:8f:5a:cc:db:80:49:2a:61: 45:0b:ff:89:eb:ed:eb:7f:d3:df:42:59:e0:2e:83:dc:e4:45: 82:fe:3f:1e:31:86:ea:d9:e5:c0:db:35:1a:9e:31:26:1d:8b: 9f:04:42:96:69:ec:32:66:3e:5a:15:3a:93:59:36:bf:97:78: 64:ce:0f:54:ba:87:f7:cb:10:35:eb:84:a7:b8:18:2d:f6:d3: 14:84:29:c5:b4:b4:f1:6e:60:03:c0:39:1c:ed:f3:77:3c:f0: 5c:55:0f:86:35:1f:20:81:ff:9a:ef:b0:7d:3a:b5:bb:21:cd: 5e:d8:86:8c:db:63:4a:2e:f6:f9:da:df:87:6a:f0:41:ad:f2: f6:0b:dd:5e:6f:62:eb:5d:15:3d:8a:24:2f:a3:6f:83:d2:60: 05:e9:d6:ce:87:f0:72:4c:25:26:2b:e4:36:26:2c:30:8a:81: aa:cb:a0:8d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUK9KL+RXuXDcEcrm81JYQXWgrnIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE1MjMwNzA4WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzNhMmMyMGI0OGEwYjdkZDljNWM1ZDRkYTc1NTFhN2Nl ZDNjMzFjMWNmMjZmZDk4MzgyZGVkYzk4ZjUzMzEyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEq1I/yPmQ4uO3pGvorQw+9ZTGrdy7oLW3HyN26Y8pZc1w v0NWBqoe9LAsMZlVyaweHDZZATlg+WuYI4GCC2ijx0j2vAB8+vpdApXytp/p82rg c+GnjF/PupHkiDkzHAOuzmk693YDVIPopqDdhjzajNGPZ+YBiKyUDHk7XlbhTi0g b8RcvHUGwlX7D+ACMirHw4OwuCYgwM9o6dg2xsYPs3+goTP6KOiHWmEgV80wxlJS 9XxQWbLUqXfl5F1m4nEE1aMzIei68qj0+n16NKKbIUQGQGHpcoNswbsNborf4IRd LHzRLbZ/qar5Od2QvAQabcLlBASl3/+2o/SYsMXzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQchS3xqxDAVWWAyKmkND0ijArzIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBmYWM4NjIyLTA1NmMtNDM1MC05ZDcwLWIxMDdiZWRmM2U5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQMwDQYJKoZIhvcNAQELBQADggEBAJ9MjlYmaLwEBdfW8KqDrgXZ cY032RlgQrm0DxXactPBuIXe9asB7rMepNrUWp7PaGw5xtecXDchF8JY4gmmUBxn OgBx1nqU7O0d1KkTFdYSxmePWszbgEkqYUUL/4nr7et/099CWeAug9zkRYL+Px4x hurZ5cDbNRqeMSYdi58EQpZp7DJmPloVOpNZNr+XeGTOD1S6h/fLEDXrhKe4GC32 0xSEKcW0tPFuYAPAORzt83c88FxVD4Y1HyCB/5rvsH06tbshzV7YhozbY0ou9vna 34dq8EGt8vYL3V5vYutdFT2KJC+jb4PSYAXp1s6H8HJMJSYr5DYmLDCKgarLoI0= -----END CERTIFICATE-----Generated at Sat Aug 23 06:50:59 2025 by rpki-client