$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa File: 321028ee-2e2d-410c-8bdc-39a00f2044f0.roa (raw, json) Hash identifier: 3JPeuTUY/aLj6hDoSMdNsQwB6a0hIcvWugIi32n07/E= Subject key identifier: ED:21:E7:E2:48:79:A0:8F:D9:F6:DE:67:09:BE:77:15:91:AF:B4:06 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 759A92B599DD6D7717870FA09DADFB416FF922EE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa Signing time: Mon 16 Jun 2025 19:20:57 +0000 ROA not before: Mon 16 Jun 2025 19:20:57 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9a:92:b5:99:dd:6d:77:17:87:0f:a0:9d:ad:fb:41:6f:f9:22:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:57 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=57db038090a4e4a02b0058ce071259da4fcfe4b0e56781fa1ed76626c0561832, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:41:53:59:9b:be:de:c7:da:59:d3:a7:e5: a7:ad:04:16:8a:c1:d3:80:2d:97:15:5f:00:85:95: ca:a3:dd:31:68:34:a5:a4:34:d7:d8:c6:68:8f:38: 89:ee:76:17:08:15:a3:a5:a4:ec:12:f1:73:b0:65: de:9f:02:53:f7:ac:e3:c8:6c:7f:11:fd:f3:2c:13: 57:40:b5:a5:59:d3:9e:fd:07:2a:6f:f7:89:d8:98: e7:4a:1d:c9:c0:f9:9c:2e:f3:d6:f5:6c:ad:0f:7f: 8d:37:04:38:77:9f:22:25:8c:2f:ea:68:05:62:5e: ef:e2:0b:47:e3:67:e3:56:d0:b8:bf:90:e2:b4:4c: 5c:1a:ae:78:cf:28:8f:8b:4c:09:c7:18:53:ba:c7: a4:f7:8b:74:16:61:0e:e4:71:20:3b:49:1b:7a:14: 83:5a:78:58:3d:ae:4d:d0:5e:e5:d9:af:ba:58:69: d6:5d:fb:32:76:0c:41:ea:f4:e8:aa:fd:71:9a:8c: 91:5b:be:1e:b7:7a:06:ad:36:bd:eb:82:00:f8:79: 48:00:83:08:27:42:4c:94:44:e8:7a:d0:6e:8a:8a: e2:43:61:1e:99:4f:82:ee:57:3d:ed:80:a9:d4:74: a6:77:b9:73:b6:af:99:ea:fb:f8:fa:ca:0e:fa:d5: 18:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:21:E7:E2:48:79:A0:8F:D9:F6:DE:67:09:BE:77:15:91:AF:B4:06 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:500::/48 Signature Algorithm: sha256WithRSAEncryption 02:ea:a7:bf:b0:38:3a:49:a1:7e:1d:73:02:f1:94:c9:f9:5a: be:de:6f:de:86:d1:1b:b0:e7:11:9c:2b:5c:5d:65:34:e7:42: 67:ee:5f:26:4c:ad:21:df:a7:9e:9e:55:f5:b8:ee:e3:9c:ca: 7c:19:3b:66:e6:ae:11:b3:f9:f8:7e:80:ed:ae:34:c2:f1:07: 9b:dc:81:06:a5:aa:11:48:f0:97:1f:b9:f2:b5:6b:99:58:24: d4:dd:4d:0c:e8:49:93:21:0e:0a:b2:66:5d:ba:83:08:7f:17: 88:1c:37:01:f5:5f:39:7e:d4:4d:5b:9f:7e:fb:fe:eb:1e:7c: 12:0e:27:bb:d9:66:72:31:b0:58:6c:23:1b:87:a5:e6:ce:18: ee:1c:1c:c7:76:44:af:25:99:a3:7a:e4:be:e5:35:77:f3:36: 1d:0b:20:14:df:ce:92:37:c8:6e:1d:39:6d:67:51:4c:86:0f: bb:3c:11:15:dd:7a:9e:e1:7f:9a:23:6f:d6:9a:03:ea:e6:53: be:4e:7f:5a:95:63:f4:c9:94:48:b4:bd:ee:08:9c:d4:ee:27: 2a:47:7e:ac:73:47:18:d1:1b:5a:d1:14:22:41:f6:c1:38:ef: b2:e4:b3:da:fe:3f:41:f9:c4:eb:9c:da:3b:fa:81:0f:7a:87: 8e:54:ac:17 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdZqStZndbXcXhw+gna37QW/5Iu4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDU3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1N2RiMDM4MDkwYTRlNGEwMmIwMDU4Y2UwNzEyNTlkYTRm Y2ZlNGIwZTU2NzgxZmExZWQ3NjYyNmMwNTYxODMyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK+UFTWZu+3sfaWdOn5aetBBaKwdOALZcVXwCFlcqj3TFo NKWkNNfYxmiPOInudhcIFaOlpOwS8XOwZd6fAlP3rOPIbH8R/fMsE1dAtaVZ0579 Bypv94nYmOdKHcnA+Zwu89b1bK0Pf403BDh3nyIljC/qaAViXu/iC0fjZ+NW0Li/ kOK0TFwarnjPKI+LTAnHGFO6x6T3i3QWYQ7kcSA7SRt6FINaeFg9rk3QXuXZr7pY adZd+zJ2DEHq9Oiq/XGajJFbvh63egatNr3rggD4eUgAgwgnQkyUROh60G6KiuJD YR6ZT4LuVz3tgKnUdKZ3uXO2r5nq+/j6yg761Rg9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7SHn4kh5oI/Z9t5nCb53FZGvtAYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMyMTAyOGVlLTJlMmQtNDEwYy04YmRjLTM5YTAwZjIwNDRmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBQAwDQYJKoZIhvcNAQELBQADggEBAALqp7+wODpJoX4dcwLxlMn5 Wr7eb96G0Ruw5xGcK1xdZTTnQmfuXyZMrSHfp56eVfW47uOcynwZO2bmrhGz+fh+ gO2uNMLxB5vcgQalqhFI8JcfufK1a5lYJNTdTQzoSZMhDgqyZl26gwh/F4gcNwH1 Xzl+1E1bn377/usefBIOJ7vZZnIxsFhsIxuHpebOGO4cHMd2RK8lmaN65L7lNXfz Nh0LIBTfzpI3yG4dOW1nUUyGD7s8ERXdep7hf5ojb9aaA+rmU75Of1qVY/TJlEi0 ve4InNTuJypHfqxzRxjRG1rRFCJB9sE477Lks9r+P0H5xOuc2jv6gQ96h45UrBc= -----END CERTIFICATE-----Generated at Sun Jun 29 07:55:09 2025 by rpki-client