$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa File: 100ca166-7317-4d78-8102-ea1dfe26d0e3.roa (raw, json) Hash identifier: VAEoRPwfThG3A1Jq2Gv4tzxzUtKcF0Z4r8X3xyWD4zQ= Subject key identifier: 26:26:7F:19:54:0A:66:79:D9:8B:87:B1:61:49:1E:5B:8E:40:BA:9D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1A97D188AB1CFA729ED495C655E756F997D6A3D9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa Signing time: Tue 05 Aug 2025 18:20:58 +0000 ROA not before: Tue 05 Aug 2025 18:20:58 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:551a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:97:d1:88:ab:1c:fa:72:9e:d4:95:c6:55:e7:56:f9:97:d6:a3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 5 18:20:58 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=479d2d15b0d3ceb938b2e8bd7d8ea47800d64a5d41953aa2295b685036749f18, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:30:1c:71:c4:e0:31:f4:9d:d3:18:76:22:5d: 72:e9:94:4b:54:28:22:94:35:d9:24:5f:fc:a2:ee: b6:33:34:42:40:eb:2d:b2:3a:c4:dc:79:e1:8c:09: f2:81:75:42:41:29:e8:56:5e:45:eb:75:0a:1c:9c: 79:1b:72:76:c3:5c:f3:07:d1:69:59:7c:95:b7:c8: ca:c4:88:2c:1c:2b:19:2e:7d:ce:d9:5a:66:85:b6: 03:07:a6:41:aa:5f:9f:57:db:6e:ec:35:48:89:0f: 00:4c:69:14:f6:f5:c8:2b:08:b0:cc:95:b4:1e:78: 1b:98:a4:de:83:be:2d:7f:80:bc:c4:13:5b:ae:4c: bd:f5:00:46:88:4e:05:a9:d8:41:4e:e5:75:53:50: 44:a8:72:16:ad:bd:c2:c4:52:eb:4d:b2:ce:9d:7c: 43:b7:42:7c:a7:4f:cb:64:73:d2:b6:7e:40:30:22: 32:b8:e7:04:cc:d2:fa:d9:f3:ec:9f:2b:ba:76:f2: 54:53:be:f5:f7:42:f1:59:c4:be:ba:23:4f:53:8a: 36:97:1c:f7:bd:7d:4f:3f:5e:69:ac:dc:98:fb:ce: 28:73:4d:bc:43:7b:60:e8:b7:e0:f6:3b:3a:6d:cc: 37:d3:43:4f:71:dc:f7:a8:4a:20:71:8e:7b:8c:60: 01:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:26:7F:19:54:0A:66:79:D9:8B:87:B1:61:49:1E:5B:8E:40:BA:9D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:551a::/48 Signature Algorithm: sha256WithRSAEncryption a8:02:4a:84:c3:b2:8a:c0:b5:e1:03:ce:79:a2:15:cf:2c:0e: 34:2a:2b:50:f7:29:8b:4d:b6:8f:61:49:ba:13:ba:cd:8a:91: 38:03:87:9d:5b:64:28:03:77:cf:be:69:a5:c2:ae:3d:4f:e9: 3d:67:72:2b:00:78:7b:dd:65:3f:b7:1d:9d:94:f8:df:67:b9: 22:cd:7f:e4:ed:69:67:5f:cf:f5:f4:1b:da:79:67:11:44:8c: 63:ab:fd:76:73:45:d6:7b:45:1b:c0:83:56:e9:cf:4c:18:34: bb:bb:c1:36:57:77:5a:a6:92:ae:79:61:67:e9:17:de:c3:ae: c5:71:57:da:af:05:c7:c4:03:31:95:f1:43:e1:ba:20:f9:46: 84:50:5b:a7:8c:78:bf:23:ad:8a:b7:ba:7a:b7:94:9e:ab:39: 51:17:43:02:af:44:d3:04:66:f3:ff:15:00:7a:f1:f6:0c:aa: b4:f8:ff:e1:50:62:99:12:97:ef:0b:94:f2:92:0b:ee:4d:1f: c9:e0:60:bd:2e:ea:c1:c0:d8:dd:03:46:dd:a9:9c:83:04:86: 52:35:ea:f2:38:32:11:c5:a0:bd:ad:db:ad:21:b6:bf:cb:88: 06:f8:dc:b3:69:a6:be:c5:06:30:16:50:56:1e:53:bd:d0:7f: b9:53:27:71 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGpfRiKsc+nKe1JXGVedW+ZfWo9kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA1MTgyMDU4WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzlkMmQxNWIwZDNjZWI5MzhiMmU4YmQ3ZDhlYTQ3ODAw ZDY0YTVkNDE5NTNhYTIyOTViNjg1MDM2NzQ5ZjE4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQMBxxxOAx9J3TGHYiXXLplEtUKCKUNdkkX/yi7rYzNEJA 6y2yOsTceeGMCfKBdUJBKehWXkXrdQocnHkbcnbDXPMH0WlZfJW3yMrEiCwcKxku fc7ZWmaFtgMHpkGqX59X227sNUiJDwBMaRT29cgrCLDMlbQeeBuYpN6Dvi1/gLzE E1uuTL31AEaITgWp2EFO5XVTUESochatvcLEUutNss6dfEO3QnynT8tkc9K2fkAw IjK45wTM0vrZ8+yfK7p28lRTvvX3QvFZxL66I09TijaXHPe9fU8/Xmms3Jj7zihz TbxDe2Dot+D2OzptzDfTQ09x3PeoSiBxjnuMYAH/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJiZ/GVQKZnnZi4exYUkeW45Aup0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzEwMGNhMTY2LTczMTctNGQ3OC04MTAyLWVhMWRmZTI2ZDBlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRowDQYJKoZIhvcNAQELBQADggEBAKgCSoTDsorAteEDznmiFc8s DjQqK1D3KYtNto9hSboTus2KkTgDh51bZCgDd8++aaXCrj1P6T1ncisAeHvdZT+3 HZ2U+N9nuSLNf+TtaWdfz/X0G9p5ZxFEjGOr/XZzRdZ7RRvAg1bpz0wYNLu7wTZX d1qmkq55YWfpF97DrsVxV9qvBcfEAzGV8UPhuiD5RoRQW6eMeL8jrYq3unq3lJ6r OVEXQwKvRNMEZvP/FQB68fYMqrT4/+FQYpkSl+8LlPKSC+5NH8ngYL0u6sHA2N0D Rt2pnIMEhlI16vI4MhHFoL2t260htr/LiAb43LNppr7FBjAWUFYeU73Qf7lTJ3E= -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:47 2025 by rpki-client