$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/15261f12-a3b4-407e-9226-8285aa79061d.roa File: 15261f12-a3b4-407e-9226-8285aa79061d.roa (raw, json) Hash identifier: Eqz4n0Gi/6phOfar2cNJ7ZtQRgmI/CYV0akJKhfQrlo= Subject key identifier: 61:D3:08:7A:01:E2:9E:64:94:75:2C:A3:3A:DC:F9:69:21:27:6D:9F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7D34CDB4DAFC516AA55E53076079B85ABF000253 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/15261f12-a3b4-407e-9226-8285aa79061d.roa Signing time: Sat 09 Aug 2025 00:10:42 +0000 ROA not before: Sat 09 Aug 2025 00:10:42 +0000 ROA not after: Sat 13 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:4100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:34:cd:b4:da:fc:51:6a:a5:5e:53:07:60:79:b8:5a:bf:00:02:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 9 00:10:42 2025 GMT Not After : Sep 13 23:59:59 2025 GMT Subject: serialNumber=07a178035a972f222c6d471452fecc0a13704e3d0cf7e9ce7598058738d9f6f6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:aa:a2:a4:42:ef:f1:7f:55:0f:18:e1:91:3a: ef:bd:80:57:18:63:99:7d:e0:3c:e8:de:bf:6a:ff: 3c:eb:2a:86:68:fc:84:89:97:cd:b8:ad:28:9b:30: 00:13:0f:6b:33:ec:5a:90:b4:15:35:9f:dc:55:e8: da:21:5c:40:86:f2:ac:55:28:a4:5a:f7:ea:25:bd: 0e:53:42:75:eb:7a:19:1e:29:0d:5c:88:d4:da:d0: be:df:8c:d3:d7:04:ac:23:9b:63:53:79:22:77:13: bb:8d:7a:63:08:a3:77:25:46:b4:fb:26:91:b4:cb: 3a:c5:6e:f7:87:78:58:43:3a:91:70:e4:98:96:0d: 0e:8d:38:ed:18:ee:c1:bf:1b:8d:06:b5:30:bd:89: a3:94:76:48:6e:46:08:4c:1e:19:91:04:18:b9:ab: fc:03:21:f7:26:2f:7f:d7:15:58:ac:f0:0b:bb:ae: 39:45:00:47:8d:ed:ee:ab:b8:bb:d5:6c:63:28:5b: b1:df:db:3c:96:9d:19:eb:e0:e9:6f:29:ee:a2:82: 92:15:c5:e4:c1:e4:e9:10:8e:d4:ac:56:5d:f3:a4: 19:47:d2:ac:da:ae:d6:15:05:6e:17:58:a1:df:bf: 8e:18:43:2d:39:22:cc:4f:0d:c5:6a:f0:2d:fc:70: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D3:08:7A:01:E2:9E:64:94:75:2C:A3:3A:DC:F9:69:21:27:6D:9F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/15261f12-a3b4-407e-9226-8285aa79061d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4100::/40 Signature Algorithm: sha256WithRSAEncryption 6f:1c:e3:25:04:e1:7a:35:62:fd:98:cd:be:cc:50:74:14:64: f4:7a:4c:31:d3:9a:c8:6f:cc:2c:41:b9:2f:dd:ee:7d:05:81: 9b:9d:19:ab:31:4e:af:e1:d1:89:ed:8a:f7:af:cc:51:7d:cd: 47:9b:03:4e:bc:3a:08:e8:07:97:d8:9a:aa:4f:20:5c:f6:68: fd:af:3e:57:d4:27:fc:86:2f:0f:20:f0:1e:90:26:e9:48:7e: 1e:bd:de:37:12:a0:44:2d:09:43:27:45:48:09:0b:cb:73:14: 21:d9:18:57:15:be:64:27:9d:08:aa:31:97:e3:e2:1f:ac:7c: 5a:8c:6e:89:81:d3:cd:d9:59:35:5e:35:fd:b0:24:80:b6:6a: ac:8d:cc:b6:99:bc:c4:f1:f5:78:e3:46:89:fd:53:35:19:65: 68:56:1b:cb:1f:db:34:6e:5b:a4:39:cf:c9:5c:bc:08:12:db: 1d:67:04:2f:e7:7c:ac:bf:2f:7f:1d:d4:46:37:a4:ce:dc:3a: 97:5f:d3:f6:94:f0:d0:d1:b5:97:39:c0:91:9b:59:69:f6:62: 15:8f:54:32:2d:0d:6c:c3:ba:d5:b5:12:c1:f1:6b:26:4a:b6: 80:39:1c:b3:c1:9c:16:20:1a:b2:c7:96:18:9e:bd:7e:5b:a7: 7d:20:c7:c4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfTTNtNr8UWqlXlMHYHm4Wr8AAlMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA5MDAxMDQyWhcNMjUwOTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwN2ExNzgwMzVhOTcyZjIyMmM2ZDQ3MTQ1MmZlY2MwYTEz NzA0ZTNkMGNmN2U5Y2U3NTk4MDU4NzM4ZDlmNmY2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUqqKkQu/xf1UPGOGROu+9gFcYY5l94Dzo3r9q/zzrKoZo /ISJl824rSibMAATD2sz7FqQtBU1n9xV6NohXECG8qxVKKRa9+olvQ5TQnXrehke KQ1ciNTa0L7fjNPXBKwjm2NTeSJ3E7uNemMIo3clRrT7JpG0yzrFbveHeFhDOpFw 5JiWDQ6NOO0Y7sG/G40GtTC9iaOUdkhuRghMHhmRBBi5q/wDIfcmL3/XFVis8Au7 rjlFAEeN7e6ruLvVbGMoW7Hf2zyWnRnr4OlvKe6igpIVxeTB5OkQjtSsVl3zpBlH 0qzartYVBW4XWKHfv44YQy05IsxPDcVq8C38cI/BAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUYdMIegHinmSUdSyjOtz5aSEnbZ8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE1MjYxZjEyLWEzYjQtNDA3ZS05MjI2LTgyODVhYTc5MDYxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwQTANBgkqhkiG9w0BAQsFAAOCAQEAbxzjJQThejVi/ZjNvsxQdBRk 9HpMMdOayG/MLEG5L93ufQWBm50ZqzFOr+HRie2K96/MUX3NR5sDTrw6COgHl9ia qk8gXPZo/a8+V9Qn/IYvDyDwHpAm6Uh+Hr3eNxKgRC0JQydFSAkLy3MUIdkYVxW+ ZCedCKoxl+PiH6x8WoxuiYHTzdlZNV41/bAkgLZqrI3Mtpm8xPH1eONGif1TNRll aFYbyx/bNG5bpDnPyVy8CBLbHWcEL+d8rL8vfx3URjekztw6l1/T9pTw0NG1lznA kZtZafZiFY9UMi0NbMO61bUSwfFrJkq2gDkcs8GcFiAasseWGJ69flunfSDHxA== -----END CERTIFICATE-----Generated at Sat Aug 23 08:26:16 2025 by rpki-client