$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa File: 22382750-431d-4ab9-aa08-e0f973e067f8.roa (raw, json) Hash identifier: jMJX7I9XI2blF7JLH6nFQs9WZmTu6BZQ8k8pCnwTB5U= Subject key identifier: 0E:44:28:1A:40:0C:F3:F2:BD:85:E0:AF:C2:4C:5D:94:03:41:18:FD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2128E2CED91484ADE4FAFC5601EB1B2DF095765D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa Signing time: Mon 16 Jun 2025 19:31:27 +0000 ROA not before: Mon 16 Jun 2025 19:31:27 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f00c::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:28:e2:ce:d9:14:84:ad:e4:fa:fc:56:01:eb:1b:2d:f0:95:76:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:31:27 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=36c193460887eca6897b855fb2a50215a94833b160aedfccb09645d3aa446ca1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:8d:17:65:22:9c:f8:67:5d:74:60:3b:ec: 8d:55:4f:51:2a:96:3e:8a:43:8e:ca:86:23:02:64: 2e:32:5d:7a:90:77:a3:f1:57:79:34:9f:fe:4e:38: ce:be:84:0b:8a:76:c2:40:3d:3a:5d:b8:0c:49:4f: 70:db:a7:ff:45:48:bf:ea:ec:01:ad:89:8f:59:2e: 69:d1:6a:21:35:f2:2e:00:94:17:ed:66:3c:74:55: 7b:06:34:b6:74:6a:c1:a9:26:af:cd:af:01:b1:d3: b1:84:ed:0e:eb:06:a8:55:77:4c:af:5f:3e:92:e0: bf:7e:b9:57:4d:dd:4f:1a:9e:e9:a5:07:a4:f4:b9: 1a:be:90:35:14:4b:f6:86:03:d0:f8:d5:b5:12:10: e6:62:f9:4f:83:ab:2a:59:18:ad:77:b9:8f:4a:d9: ab:03:44:cb:e0:fe:92:47:06:c8:4b:98:2a:a1:86: d3:9f:76:ec:4a:76:9f:34:00:fc:62:4f:8e:ec:5b: bd:1a:bf:4f:fe:27:92:e5:29:86:a8:62:c9:ff:22: 4c:df:04:46:50:cb:d9:16:3e:2f:50:02:df:52:00: e2:77:47:c8:06:2e:78:d5:fd:40:54:df:b5:ed:7d: de:b4:b9:06:e8:f6:69:e6:3c:81:64:94:e0:d6:e4: 65:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:44:28:1A:40:0C:F3:F2:BD:85:E0:AF:C2:4C:5D:94:03:41:18:FD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f00c::/39 Signature Algorithm: sha256WithRSAEncryption 93:32:c3:f7:9c:21:10:e1:b3:49:0f:46:57:99:87:5f:2f:15: 3e:5f:6f:29:49:50:ed:7e:1d:f1:9c:bf:53:1c:91:fe:89:43: e1:a7:b4:8d:bd:78:7d:75:03:21:67:c5:0d:1b:ab:2f:72:4e: a5:7e:44:4e:e0:85:f2:a8:c1:65:8c:86:5d:ca:2c:97:d3:32: 4c:c9:4c:25:69:c5:7e:c5:80:cc:24:2d:e1:eb:f0:f0:01:fc: b3:71:bb:3f:be:59:03:ae:4a:f8:03:00:fb:7d:b4:0b:c5:6b: 00:fc:30:37:4a:98:23:16:8e:a1:6c:e4:72:66:1f:db:55:a1: 23:c1:fc:b9:68:b9:12:29:c4:5e:98:ad:99:8d:e4:ed:fb:1a: 79:8a:87:c0:4c:bf:9f:cd:60:1b:e0:9b:ae:65:fe:c8:a1:d0: 4d:d0:1b:37:5c:f7:6e:64:ff:82:72:0e:0b:31:6d:f4:94:9c: 8a:d4:54:c4:b9:d0:d4:e7:96:cd:bc:52:08:0f:b6:d7:af:5f: fb:59:29:0d:28:37:89:cc:c1:ae:93:4f:13:72:9b:3a:1f:a7: 3a:c2:66:0d:c7:b7:d9:1b:3f:99:9d:62:b5:b4:16:13:70:67: 6e:4b:3d:bc:1a:41:96:42:4c:10:73:e4:43:07:e0:57:74:a9: 43:9c:b5:21 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUISjiztkUhK3k+vxWAesbLfCVdl0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkzMTI3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmMxOTM0NjA4ODdlY2E2ODk3Yjg1NWZiMmE1MDIxNWE5 NDgzM2IxNjBhZWRmY2NiMDk2NDVkM2FhNDQ2Y2ExMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNBY0XZSKc+GdddGA77I1VT1Eqlj6KQ47KhiMCZC4yXXqQ d6PxV3k0n/5OOM6+hAuKdsJAPTpduAxJT3Dbp/9FSL/q7AGtiY9ZLmnRaiE18i4A lBftZjx0VXsGNLZ0asGpJq/NrwGx07GE7Q7rBqhVd0yvXz6S4L9+uVdN3U8anuml B6T0uRq+kDUUS/aGA9D41bUSEOZi+U+DqypZGK13uY9K2asDRMvg/pJHBshLmCqh htOfduxKdp80APxiT47sW70av0/+J5LlKYaoYsn/IkzfBEZQy9kWPi9QAt9SAOJ3 R8gGLnjV/UBU37Xtfd60uQbo9mnmPIFklODW5GWrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUDkQoGkAM8/K9heCvwkxdlANBGP0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIyMzgyNzUwLTQzMWQtNGFiOS1hYTA4LWUwZjk3M2UwNjdmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAPAMADANBgkqhkiG9w0BAQsFAAOCAQEAkzLD95whEOGzSQ9GV5mHXy8V Pl9vKUlQ7X4d8Zy/UxyR/olD4ae0jb14fXUDIWfFDRurL3JOpX5ETuCF8qjBZYyG Xcosl9MyTMlMJWnFfsWAzCQt4evw8AH8s3G7P75ZA65K+AMA+320C8VrAPwwN0qY IxaOoWzkcmYf21WhI8H8uWi5EinEXpitmY3k7fsaeYqHwEy/n81gG+CbrmX+yKHQ TdAbN1z3bmT/gnIOCzFt9JScitRUxLnQ1OeWzbxSCA+2169f+1kpDSg3iczBrpNP E3KbOh+nOsJmDce32Rs/mZ1itbQWE3Bnbks9vBpBlkJMEHPkQwfgV3SpQ5y1IQ== -----END CERTIFICATE-----Generated at Tue Jul 1 15:28:07 2025 by rpki-client