$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa File: 357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa (raw, json) Hash identifier: Cpj46ZVRuS26+tgu3srC7lqnivZzckiZh0BMSm9ir/o= Subject key identifier: 56:20:C1:A1:55:68:78:5E:3C:E2:EE:DE:96:C6:40:30:4C:4C:40:56 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7D7669F00155888A88AB4F22E15628AC1FCD8360 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa Signing time: Mon 18 Aug 2025 18:22:24 +0000 ROA not before: Mon 18 Aug 2025 18:22:24 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:76:69:f0:01:55:88:8a:88:ab:4f:22:e1:56:28:ac:1f:cd:83:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 18 18:22:24 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=ec8d2150004aeef70e747f84ab8f35e092ecfc2ad34a5906193072b0dbaf6d86, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:11:6f:41:5e:a3:2f:11:a4:dc:0f:0b:45:2a: 73:d6:22:8f:ef:dc:6f:bb:00:e2:3b:41:95:bd:a2: 8c:74:30:6e:93:ec:3d:c7:66:d0:26:1a:4f:32:5f: 59:7a:c8:95:18:5f:62:2e:9e:f2:58:78:70:80:e2: ef:d0:a3:58:53:b6:8b:e9:2a:ca:05:2c:a6:a7:75: ef:e0:40:c4:1e:20:4e:d7:4c:d1:f5:33:a8:3a:0d: d0:e3:4b:d0:65:67:ab:03:36:23:ca:b1:01:44:0a: 6c:05:fd:ec:90:10:2e:61:8d:ee:b2:8e:2c:4c:9e: 44:58:72:02:b8:9c:b1:94:e3:06:2a:a3:36:ad:3f: ff:9c:f3:6d:a0:a9:83:64:60:75:dd:f3:bb:f4:6c: 0a:7d:37:52:b3:cb:84:49:11:f8:07:11:fa:5f:b4: b8:d3:69:31:ef:5b:b4:9f:6c:65:fd:60:87:bd:7a: b7:16:2a:44:a6:3b:5c:22:13:7f:70:b7:a2:ce:76: e2:44:43:7d:41:69:3d:8f:54:8a:72:07:67:9d:ac: 99:bd:da:f2:69:ed:37:26:54:17:4b:54:0d:ee:35: 77:b0:5d:91:fe:3a:f6:48:80:5e:a3:ef:79:8c:ad: 49:94:9c:76:74:22:29:49:54:b2:98:47:dc:b1:5c: 49:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:20:C1:A1:55:68:78:5E:3C:E2:EE:DE:96:C6:40:30:4C:4C:40:56 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6110::/48 Signature Algorithm: sha256WithRSAEncryption 93:f2:d3:25:71:b7:ec:d3:f0:27:74:ce:04:25:e8:eb:67:05: 82:5b:3d:31:6d:32:c7:79:f5:21:0a:a8:c2:7a:9a:65:fa:4c: b9:70:dd:db:0f:18:fc:6c:00:80:66:44:88:87:f9:88:56:9f: 3c:ea:48:ae:7c:7c:07:cd:82:31:84:fc:57:83:71:0d:75:b2: e5:70:2c:b7:2f:71:72:58:a6:37:9f:32:50:21:f3:c8:49:a3: 9d:e7:25:8d:d8:d9:ad:18:a8:08:16:1e:23:01:aa:bc:6c:e0: b4:99:09:4d:39:7f:a5:ca:d7:be:d5:01:4d:ca:09:95:5e:db: 15:17:11:b8:27:e4:aa:fb:30:ce:dd:60:1b:58:09:01:8e:f7: d2:06:49:9f:80:d9:5d:cd:32:d3:15:10:93:4a:55:92:9d:19: d7:85:81:34:b9:70:ac:63:32:1d:cd:54:44:47:c7:9d:86:60: a7:77:b8:86:c2:b8:2a:df:a5:10:0b:15:6c:ac:cf:7b:44:26: d6:31:5d:d2:78:7f:6b:91:4e:0c:8e:16:6d:83:bb:85:e8:5e: dd:f7:73:a3:83:bd:5b:01:6a:78:db:61:d5:6c:48:3e:52:ec: 38:77:0d:8c:4d:02:5d:e3:ea:07:64:a4:9f:35:69:ff:c0:b8: 87:63:49:97 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfXZp8AFViIqIq08i4VYorB/Ng2AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE4MTgyMjI0WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzhkMjE1MDAwNGFlZWY3MGU3NDdmODRhYjhmMzVlMDky ZWNmYzJhZDM0YTU5MDYxOTMwNzJiMGRiYWY2ZDg2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcEW9BXqMvEaTcDwtFKnPWIo/v3G+7AOI7QZW9oox0MG6T 7D3HZtAmGk8yX1l6yJUYX2IunvJYeHCA4u/Qo1hTtovpKsoFLKande/gQMQeIE7X TNH1M6g6DdDjS9BlZ6sDNiPKsQFECmwF/eyQEC5hje6yjixMnkRYcgK4nLGU4wYq ozatP/+c822gqYNkYHXd87v0bAp9N1Kzy4RJEfgHEfpftLjTaTHvW7SfbGX9YIe9 ercWKkSmO1wiE39wt6LOduJEQ31BaT2PVIpyB2edrJm92vJp7TcmVBdLVA3uNXew XZH+OvZIgF6j73mMrUmUnHZ0IilJVLKYR9yxXEmjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUViDBoVVoeF484u7elsZAMExMQFYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM1N2ExNWU3LTBkZDgtNGFjNC04OGI0LTA5OTZhMWY3ZTdiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRAwDQYJKoZIhvcNAQELBQADggEBAJPy0yVxt+zT8Cd0zgQl6Otn BYJbPTFtMsd59SEKqMJ6mmX6TLlw3dsPGPxsAIBmRIiH+YhWnzzqSK58fAfNgjGE /FeDcQ11suVwLLcvcXJYpjefMlAh88hJo53nJY3Y2a0YqAgWHiMBqrxs4LSZCU05 f6XK177VAU3KCZVe2xUXEbgn5Kr7MM7dYBtYCQGO99IGSZ+A2V3NMtMVEJNKVZKd GdeFgTS5cKxjMh3NVERHx52GYKd3uIbCuCrfpRALFWysz3tEJtYxXdJ4f2uRTgyO Fm2Du4XoXt33c6ODvVsBanjbYdVsSD5S7Dh3DYxNAl3j6gdkpJ81af/AuIdjSZc= -----END CERTIFICATE-----Generated at Sat Aug 23 06:38:42 2025 by rpki-client