$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa File: 37cee73e-f60c-422c-8edf-fbb308bfb117.roa (raw, json) Hash identifier: QVcdl5BDJG4xaKkZeCjSh2tOPHKeExNmylHpTdcIw/k= Subject key identifier: 51:C0:87:FE:B4:66:00:0C:AC:D0:3F:98:82:A5:61:F0:2B:12:35:3E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 20D4B9D28147A655D414B67764810FE952090154 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa Signing time: Mon 16 Jun 2025 19:20:14 +0000 ROA not before: Mon 16 Jun 2025 19:20:14 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d4:b9:d2:81:47:a6:55:d4:14:b6:77:64:81:0f:e9:52:09:01:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:14 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=ee84bbecd663262e2dc25365485b071bdbe1c7a47805540ddb4eb59404d7be73, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:ae:55:8f:2c:78:5f:43:aa:43:ab:22:cb: ee:9a:55:24:71:b0:17:c5:aa:ec:97:4f:bc:cd:71: 14:b5:58:14:14:a8:f2:29:36:9b:2a:85:12:3f:8b: 3c:dd:fc:bc:c1:7f:73:04:99:d7:02:f3:fe:6e:7a: 4d:7c:5d:af:17:6b:f0:db:20:0b:5b:81:e7:a3:55: 6f:1f:81:c7:95:72:27:91:55:b6:24:82:b9:b5:36: d5:86:4a:9f:45:c2:13:85:c5:52:4d:0d:55:8f:1b: 73:61:49:63:33:c4:4c:80:6f:29:af:d1:c3:63:4e: 1c:1b:e9:da:31:d1:3c:c7:10:f9:04:57:ea:27:3d: 02:a2:4e:8b:e5:f0:b9:f5:6b:80:57:35:bb:c3:5e: c3:2a:ea:ba:27:4b:e8:81:bc:e0:61:03:9f:45:a9: 46:2f:62:70:a5:5d:0b:77:60:1b:37:83:ed:6d:73: c4:6f:2c:47:be:84:58:40:8d:e7:02:f0:53:13:e4: 6b:1d:0c:ea:f0:20:3f:2e:5f:d1:d5:79:d2:4b:66: 7f:a9:f7:dc:dc:2b:22:7d:3f:24:fc:9f:63:8b:37: 4e:b5:8f:80:4b:5b:d1:5b:c4:a5:85:1d:7b:e7:55: db:66:f7:bf:3d:b1:39:94:a1:d4:0c:06:da:cf:56: 78:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C0:87:FE:B4:66:00:0C:AC:D0:3F:98:82:A5:61:F0:2B:12:35:3E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e000::/40 Signature Algorithm: sha256WithRSAEncryption a1:72:c9:1a:43:36:23:75:19:4d:c6:7e:79:ad:c9:3e:b4:86: 9b:fb:00:65:5f:9b:43:d6:fa:13:c1:f1:6f:9f:be:dc:4b:85: 1c:a3:88:47:72:b6:17:6f:39:4f:3c:85:fd:7b:3a:f9:47:95: e0:dd:80:a4:17:30:f6:be:20:72:1e:5b:89:d4:47:a0:c8:46: ea:f6:2a:63:26:84:f9:66:c4:cf:40:82:82:62:03:af:e2:a2: 36:3f:10:a5:c9:7c:01:ee:ce:ab:fe:66:c5:cb:fe:42:57:97: 11:9f:35:73:b3:57:e4:1e:91:3a:30:37:80:6f:3a:0c:b5:c9: 5c:4f:20:88:fd:5b:25:a7:0f:71:5f:10:8a:f3:c5:24:e6:db: f9:8c:27:c5:aa:17:2b:a5:a9:2f:c3:6b:bc:11:6b:b6:ae:4f: 0b:b8:35:93:11:87:bf:2a:b2:30:2c:04:d9:1b:59:55:d6:92: 9e:fa:94:1b:17:15:ce:59:54:94:5c:32:00:5d:f6:a0:08:33: 76:82:66:e0:bf:a5:a0:d1:d0:15:19:e7:d9:86:cd:8d:29:f0: c8:9d:60:2f:9d:9a:70:e8:7c:99:58:8d:61:9f:e6:ad:99:ab: 0d:7b:71:c2:37:03:76:52:26:34:38:e4:c1:8a:48:31:1c:6d: 0d:09:91:c0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUINS50oFHplXUFLZ3ZIEP6VIJAVQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDE0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTg0YmJlY2Q2NjMyNjJlMmRjMjUzNjU0ODViMDcxYmRi ZTFjN2E0NzgwNTU0MGRkYjRlYjU5NDA0ZDdiZTczMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7R65Vjyx4X0OqQ6siy+6aVSRxsBfFquyXT7zNcRS1WBQU qPIpNpsqhRI/izzd/LzBf3MEmdcC8/5uek18Xa8Xa/DbIAtbgeejVW8fgceVcieR VbYkgrm1NtWGSp9FwhOFxVJNDVWPG3NhSWMzxEyAbymv0cNjThwb6dox0TzHEPkE V+onPQKiTovl8Ln1a4BXNbvDXsMq6ronS+iBvOBhA59FqUYvYnClXQt3YBs3g+1t c8RvLEe+hFhAjecC8FMT5GsdDOrwID8uX9HVedJLZn+p99zcKyJ9PyT8n2OLN061 j4BLW9FbxKWFHXvnVdtm9789sTmUodQMBtrPVni/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUUcCH/rRmAAys0D+YgqVh8CsSNT4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM3Y2VlNzNlLWY2MGMtNDIyYy04ZWRmLWZiYjMwOGJmYjExNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74DANBgkqhkiG9w0BAQsFAAOCAQEAoXLJGkM2I3UZTcZ+ea3JPrSG m/sAZV+bQ9b6E8Hxb5++3EuFHKOIR3K2F285TzyF/Xs6+UeV4N2ApBcw9r4gch5b idRHoMhG6vYqYyaE+WbEz0CCgmIDr+KiNj8Qpcl8Ae7Oq/5mxcv+QleXEZ81c7NX 5B6ROjA3gG86DLXJXE8giP1bJacPcV8QivPFJObb+YwnxaoXK6WpL8NrvBFrtq5P C7g1kxGHvyqyMCwE2RtZVdaSnvqUGxcVzllUlFwyAF32oAgzdoJm4L+loNHQFRnn 2YbNjSnwyJ1gL52acOh8mViNYZ/mrZmrDXtxwjcDdlImNDjkwYpIMRxtDQmRwA== -----END CERTIFICATE-----Generated at Sun Jun 29 10:27:46 2025 by rpki-client