$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa File: 1713f755-e887-41fa-83fe-8bab1dc14311.roa (raw, json) Hash identifier: E4gMUgHuMvbOc8PiNU8wO5Sqw+59otkD2rT841EVEVk= Subject key identifier: CD:38:42:EC:25:EC:C5:EB:C9:84:A7:ED:81:BA:6A:3B:66:43:1F:5B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 29D8B7F50587516E8790335B680E639037142FA6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa Signing time: Mon 16 Jun 2025 19:30:53 +0000 ROA not before: Mon 16 Jun 2025 19:30:53 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ea00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d8:b7:f5:05:87:51:6e:87:90:33:5b:68:0e:63:90:37:14:2f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:30:53 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=20a406c097c8ba5922c395b2ed73e47924bad5fed82cc410ad4bd1bfc26bf106, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9a:55:51:3c:ff:64:73:53:77:4e:99:e7:fc: 99:92:d8:6c:b9:c8:51:ee:f2:3c:dd:14:ce:92:ea: ed:bd:4c:fb:b2:1b:13:c7:69:8a:92:ab:17:20:0f: 7b:65:ab:85:79:31:8c:07:61:b3:28:c5:f8:fd:41: fe:c7:aa:9c:63:56:19:c3:73:fb:a4:15:78:71:2a: c3:4d:c2:31:04:07:26:5f:c8:07:8b:93:9f:ed:78: c2:36:c7:34:13:78:10:a8:36:82:66:14:d3:c7:12: c9:c5:e4:24:60:a2:6b:5c:9d:85:13:de:a6:55:c1: e5:6d:9a:cd:df:1c:1e:5c:f8:c0:5c:6b:ce:c3:22: 0a:4b:68:ac:72:25:7b:e7:1c:1a:11:bb:9e:ce:5b: 30:e1:cc:a0:d9:e5:e3:af:9a:8b:57:5c:5d:b4:c6: 39:46:93:c1:9d:86:85:cb:f9:ed:e6:08:2e:70:c0: b5:32:57:37:23:f8:fb:74:b7:8a:f8:14:8e:72:98: 5d:72:e0:ff:39:ca:df:96:2e:43:96:64:e8:dc:52: ef:9f:7d:03:c0:68:ea:7c:e8:0e:8b:5a:48:4c:96: 93:7b:04:2d:e9:f4:40:3f:f1:da:86:3c:1d:ad:7b: 57:35:24:d0:50:a2:72:36:4b:13:54:24:6d:f5:ce: f5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:38:42:EC:25:EC:C5:EB:C9:84:A7:ED:81:BA:6A:3B:66:43:1F:5B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/42 Signature Algorithm: sha256WithRSAEncryption 81:57:da:c5:f4:6a:11:39:e3:38:c9:2b:e0:87:c3:fe:67:58: f6:87:50:40:64:64:0f:2f:2d:52:dc:a2:91:5b:3d:50:f7:4c: d4:ea:74:36:db:b7:b4:d4:11:6d:19:19:bc:56:93:19:1e:b9: 65:4f:29:d6:36:40:bf:0b:6f:f4:91:d1:1a:e4:cc:34:f9:3f: e9:f7:85:76:33:67:e6:af:48:8b:c1:d4:93:e6:ec:8a:f6:fc: 71:ac:51:de:0c:82:5b:d8:9f:96:4d:c1:bd:25:25:89:46:5d: 8a:e1:a2:18:b8:b8:85:13:f5:06:bf:cb:b3:ce:30:3d:67:86: 31:3f:8f:88:7c:87:e2:04:ca:6d:38:ac:d6:08:fd:f1:8b:38: 41:04:0a:47:01:2a:51:ff:3f:4e:3f:f1:1d:33:2c:7f:b5:6f: 19:a1:d3:fb:af:4c:c5:c9:b0:23:7f:06:55:d6:e2:a1:4a:7d: ac:98:6b:67:1e:5c:bc:77:e3:86:a6:af:ce:57:b4:cc:4a:0f: 4e:5a:69:69:f1:7f:1c:91:6c:8d:d0:96:96:6a:6b:9e:b3:4a: ea:dc:3e:ec:5f:d4:da:30:b4:4b:34:6c:91:e4:cb:67:cd:2e: a1:08:8d:47:3e:76:fe:ab:83:9d:9b:ae:eb:36:82:b9:a8:56: 1c:4b:e4:6c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKdi39QWHUW6HkDNbaA5jkDcUL6YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkzMDUzWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGE0MDZjMDk3YzhiYTU5MjJjMzk1YjJlZDczZTQ3OTI0 YmFkNWZlZDgyY2M0MTBhZDRiZDFiZmMyNmJmMTA2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCymlVRPP9kc1N3Tpnn/JmS2Gy5yFHu8jzdFM6S6u29TPuy GxPHaYqSqxcgD3tlq4V5MYwHYbMoxfj9Qf7HqpxjVhnDc/ukFXhxKsNNwjEEByZf yAeLk5/teMI2xzQTeBCoNoJmFNPHEsnF5CRgomtcnYUT3qZVweVtms3fHB5c+MBc a87DIgpLaKxyJXvnHBoRu57OWzDhzKDZ5eOvmotXXF20xjlGk8GdhoXL+e3mCC5w wLUyVzcj+Pt0t4r4FI5ymF1y4P85yt+WLkOWZOjcUu+ffQPAaOp86A6LWkhMlpN7 BC3p9EA/8dqGPB2te1c1JNBQonI2SxNUJG31zvWlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzThC7CXsxevJhKftgbpqO2ZDH1swHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE3MTNmNzU1LWU4ODctNDFmYS04M2ZlLThiYWIxZGMxNDMxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD76gAwDQYJKoZIhvcNAQELBQADggEBAIFX2sX0ahE54zjJK+CHw/5n WPaHUEBkZA8vLVLcopFbPVD3TNTqdDbbt7TUEW0ZGbxWkxkeuWVPKdY2QL8Lb/SR 0RrkzDT5P+n3hXYzZ+avSIvB1JPm7Ir2/HGsUd4MglvYn5ZNwb0lJYlGXYrhohi4 uIUT9Qa/y7POMD1nhjE/j4h8h+IEym04rNYI/fGLOEEECkcBKlH/P04/8R0zLH+1 bxmh0/uvTMXJsCN/BlXW4qFKfayYa2ceXLx344amr85XtMxKD05aaWnxfxyRbI3Q lpZqa56zSurcPuxf1NowtEs0bJHky2fNLqEIjUc+dv6rg52brus2grmoVhxL5Gw= -----END CERTIFICATE-----Generated at Tue Jul 1 13:11:23 2025 by rpki-client