$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa File: 37e5da86-98ab-4d9c-889e-6ab6e277d866.roa (raw, json) Hash identifier: tfbSl6APld5WlfJABfgymDeYS1665+BbgeoOA/P/lfQ= Subject key identifier: 9F:CC:BF:6F:FC:09:89:42:B9:16:8F:63:A2:89:94:55:A1:97:49:87 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0B63B365C5D9410A2CD8E9D07BFD2E19F0A7CEE9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa Signing time: Mon 16 Jun 2025 19:10:02 +0000 ROA not before: Mon 16 Jun 2025 19:10:02 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:63:b3:65:c5:d9:41:0a:2c:d8:e9:d0:7b:fd:2e:19:f0:a7:ce:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:10:02 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=20fb5105a0a0a77545b8f5054757c1a0a4f9f569a2e31761e83e9fa9f2b50d06, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7c:19:a9:b4:a9:e2:e2:a8:9f:53:d6:e4:5c: ef:b5:2b:ba:bf:14:91:f7:74:f1:66:25:bd:c9:c8: e9:96:f6:30:2c:80:35:0a:94:8a:8f:72:85:b8:22: 7b:9d:fd:f9:c8:2f:d8:1d:77:25:60:95:7d:67:aa: ea:d4:42:0f:cf:d3:e6:ae:fc:ba:48:53:7c:9d:6e: 23:35:cb:12:c7:f7:d3:66:65:ce:b7:32:43:ef:b9: 7c:71:dc:67:11:16:6e:1b:ea:b7:a6:0b:28:64:26: 8c:85:5d:11:99:86:5a:34:ad:5f:0e:5c:0a:48:24: fe:66:03:40:e0:1a:6a:d7:d9:35:76:21:e5:25:1e: 01:da:76:78:6b:eb:f9:37:b2:d2:1e:c7:28:ce:98: f0:a1:ce:ca:69:48:64:9b:dd:73:c4:aa:dc:12:cf: 7e:2d:b7:67:c6:87:1a:1c:21:bc:30:41:bd:6d:31: fa:30:e2:39:c6:f5:a4:24:95:45:96:a8:b4:7d:43: 99:e1:bf:f9:8b:d4:3b:f0:4b:ee:ca:28:00:5c:67: e2:12:82:07:fc:08:dd:d8:b7:b7:2d:9f:6c:e1:7a: b8:3d:94:9a:83:4f:de:28:b2:0a:56:bd:c9:af:2b: 8b:e4:dd:2e:64:02:37:39:ab:a8:ba:f7:3a:f6:95: f3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CC:BF:6F:FC:09:89:42:B9:16:8F:63:A2:89:94:55:A1:97:49:87 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1::/48 Signature Algorithm: sha256WithRSAEncryption 4c:85:15:4f:c0:be:f1:39:df:92:44:7b:02:97:23:64:43:fb: 87:8d:5b:b8:40:6b:d0:53:ce:4a:8f:43:76:b4:6b:fb:f0:7e: 17:6a:a4:f0:ab:64:18:04:e8:f8:a7:03:21:b5:f8:49:e2:11: 29:ad:ab:3d:f8:a2:32:b7:1a:00:c0:82:e8:61:bb:cf:fe:ab: 47:1b:cc:55:b7:6b:38:db:05:cd:7e:55:50:62:8e:4a:31:51: 37:be:54:c0:97:7e:87:99:7a:2d:69:fd:d0:95:4b:a7:20:49: 0d:1b:0f:df:44:49:78:5a:c5:b1:01:90:db:d1:fa:21:71:1f: 97:f3:5e:32:0a:73:9f:70:c6:bd:46:53:8d:b3:e4:47:a9:05: a0:58:ca:5b:32:0b:a3:56:87:b2:4a:c7:b9:f2:74:47:e6:e1: fb:43:f9:3f:f1:a9:63:4f:29:98:b8:dc:f1:53:1b:d0:33:2c: cb:d6:60:c7:e8:19:f8:18:97:b5:0f:63:77:e6:d8:3d:d1:13: 93:6e:50:35:87:41:0c:cd:8e:76:85:1d:60:26:cb:42:1c:10: ed:73:1b:00:1c:6a:d3:6a:cf:65:57:e3:46:41:55:b1:5d:45: 00:d7:00:40:6c:38:4b:5c:75:04:64:f9:45:30:7f:16:00:f1: e0:5e:59:e6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC2OzZcXZQQos2OnQe/0uGfCnzukwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkxMDAyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGZiNTEwNWEwYTBhNzc1NDViOGY1MDU0NzU3YzFhMGE0 ZjlmNTY5YTJlMzE3NjFlODNlOWZhOWYyYjUwZDA2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDffBmptKni4qifU9bkXO+1K7q/FJH3dPFmJb3JyOmW9jAs gDUKlIqPcoW4Inud/fnIL9gddyVglX1nqurUQg/P0+au/LpIU3ydbiM1yxLH99Nm Zc63MkPvuXxx3GcRFm4b6remCyhkJoyFXRGZhlo0rV8OXApIJP5mA0DgGmrX2TV2 IeUlHgHadnhr6/k3stIexyjOmPChzsppSGSb3XPEqtwSz34tt2fGhxocIbwwQb1t Mfow4jnG9aQklUWWqLR9Q5nhv/mL1DvwS+7KKABcZ+ISggf8CN3Yt7ctn2zherg9 lJqDT94osgpWvcmvK4vk3S5kAjc5q6i69zr2lfMrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUn8y/b/wJiUK5Fo9joomUVaGXSYcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM3ZTVkYTg2LTk4YWItNGQ5Yy04ODllLTZhYjZlMjc3ZDg2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAEwDQYJKoZIhvcNAQELBQADggEBAEyFFU/AvvE535JEewKXI2RD +4eNW7hAa9BTzkqPQ3a0a/vwfhdqpPCrZBgE6PinAyG1+EniESmtqz34ojK3GgDA guhhu8/+q0cbzFW3azjbBc1+VVBijkoxUTe+VMCXfoeZei1p/dCVS6cgSQ0bD99E SXhaxbEBkNvR+iFxH5fzXjIKc59wxr1GU42z5EepBaBYylsyC6NWh7JKx7nydEfm 4ftD+T/xqWNPKZi43PFTG9AzLMvWYMfoGfgYl7UPY3fm2D3RE5NuUDWHQQzNjnaF HWAmy0IcEO1zGwAcatNqz2VX40ZBVbFdRQDXAEBsOEtcdQRk+UUwfxYA8eBeWeY= -----END CERTIFICATE-----Generated at Sun Jun 29 20:45:36 2025 by rpki-client