$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa File: 39b45593-f3f3-4a2e-aa3a-895815db366a.roa (raw, json) Hash identifier: 2pLUod7HUtbSXLVD/uywu2o5c5h2EWV13lV9UN+Lo+Y= Subject key identifier: 30:BB:75:02:AE:C6:CB:F2:99:0D:C0:18:B6:E5:A4:77:FC:6A:14:E0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 038B46E77CE1623BD91D2E47F8BFB2CF916D065A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa Signing time: Mon 16 Jun 2025 19:31:28 +0000 ROA not before: Mon 16 Jun 2025 19:31:28 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8b:46:e7:7c:e1:62:3b:d9:1d:2e:47:f8:bf:b2:cf:91:6d:06:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:31:28 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=413d42b5bcd08f92a9a112b7dc961d3e55c7e289034fc858aa2b9c089e9231bd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:72:14:2f:8f:cb:b0:0d:1e:de:46:fc:4a:98: dc:5f:a8:89:2b:7d:62:a6:1c:89:97:58:f1:46:c4: 7a:3c:66:35:c4:ed:30:d5:bd:c4:32:8c:c5:86:e3: eb:b8:a2:e2:e7:5b:26:a4:32:d2:74:ea:01:76:bc: f6:20:be:59:3e:b8:5e:2c:4d:c8:55:54:f0:3e:c5: ff:10:09:fd:e9:19:4c:c6:ae:0f:c8:c9:df:27:4f: e0:29:3f:ec:50:3b:9b:26:9e:c5:a6:39:a8:9f:ee: da:2c:7b:81:a1:83:c4:1a:ba:12:a8:b3:61:ab:73: 01:66:6e:56:7a:44:c1:2e:e7:77:f0:ff:47:84:0e: 6d:37:14:b6:7e:7a:a7:67:d4:03:c1:16:19:8a:ec: f5:cb:f0:11:51:3c:c4:07:d0:1b:e6:7d:35:67:a8: 30:df:f7:86:56:3a:68:0f:ae:61:e6:c3:2a:8c:a8: 44:35:90:c7:be:06:3c:0d:c4:8a:82:6f:75:17:25: a4:21:76:cd:9e:5d:03:e6:3b:69:2e:7d:54:b9:83: 01:8f:83:d6:61:64:74:6c:66:9c:f7:22:11:9e:75: 00:7e:b2:6c:7a:4d:8d:c7:0e:3d:a0:4c:2e:b9:95: b3:c3:d9:dd:2f:29:47:f4:1c:81:90:ef:47:9b:4a: 78:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BB:75:02:AE:C6:CB:F2:99:0D:C0:18:B6:E5:A4:77:FC:6A:14:E0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f000::/39 Signature Algorithm: sha256WithRSAEncryption 79:12:64:11:f8:de:e1:a4:16:16:37:16:fb:ce:59:43:09:d3: f5:76:a0:e2:f5:fd:45:3d:ee:d5:e6:d4:bf:4d:4d:e5:9a:6d: 53:11:6d:54:b8:5a:07:29:7f:07:65:b9:a8:e6:d0:66:de:bd: 35:eb:da:2d:df:18:0b:75:64:eb:29:24:58:31:fd:19:86:d8: ea:b9:56:67:b5:b3:a8:3d:55:ec:3a:72:24:e0:c5:3c:c3:99: 23:a6:89:c4:d9:00:06:08:cd:08:a7:95:af:0e:9b:21:6f:7d: 2e:47:fb:ee:6c:7c:d6:06:47:b9:d4:75:90:ed:fd:b8:b6:e4: a4:25:e8:27:2a:e0:ff:f5:07:a5:87:c3:7a:cc:3e:b5:93:95: 7d:0b:76:a3:d9:38:2e:39:6d:0d:66:7b:6f:76:3d:64:f5:12: 3d:a2:f1:08:7c:45:91:79:05:13:69:e6:38:b3:40:7f:85:59: ce:7c:11:3b:3e:1e:d4:53:0e:28:4a:24:d9:62:65:dc:db:a8: be:96:35:8a:b5:59:77:03:bf:fb:25:9c:53:28:9b:c8:f3:e4: d9:13:ed:a1:09:6e:67:28:2b:6a:dc:3a:c5:c5:72:12:49:c4: a0:0e:67:28:c7:ff:35:54:73:9a:fd:3a:fb:4f:2c:e8:d5:b2: 69:31:fc:e3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUA4tG53zhYjvZHS5H+L+yz5FtBlowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkzMTI4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTNkNDJiNWJjZDA4ZjkyYTlhMTEyYjdkYzk2MWQzZTU1 YzdlMjg5MDM0ZmM4NThhYTJiOWMwODllOTIzMWJkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYchQvj8uwDR7eRvxKmNxfqIkrfWKmHImXWPFGxHo8ZjXE 7TDVvcQyjMWG4+u4ouLnWyakMtJ06gF2vPYgvlk+uF4sTchVVPA+xf8QCf3pGUzG rg/Iyd8nT+ApP+xQO5smnsWmOaif7tose4Ghg8QauhKos2GrcwFmblZ6RMEu53fw /0eEDm03FLZ+eqdn1APBFhmK7PXL8BFRPMQH0BvmfTVnqDDf94ZWOmgPrmHmwyqM qEQ1kMe+BjwNxIqCb3UXJaQhds2eXQPmO2kufVS5gwGPg9ZhZHRsZpz3IhGedQB+ smx6TY3HDj2gTC65lbPD2d0vKUf0HIGQ70ebSnjNAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUMLt1Aq7Gy/KZDcAYtuWkd/xqFOAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM5YjQ1NTkzLWYzZjMtNGEyZS1hYTNhLTg5NTgxNWRiMzY2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAPAAADANBgkqhkiG9w0BAQsFAAOCAQEAeRJkEfje4aQWFjcW+85ZQwnT 9Xag4vX9RT3u1ebUv01N5ZptUxFtVLhaByl/B2W5qObQZt69NevaLd8YC3Vk6ykk WDH9GYbY6rlWZ7WzqD1V7DpyJODFPMOZI6aJxNkABgjNCKeVrw6bIW99Lkf77mx8 1gZHudR1kO39uLbkpCXoJyrg//UHpYfDesw+tZOVfQt2o9k4LjltDWZ7b3Y9ZPUS PaLxCHxFkXkFE2nmOLNAf4VZznwROz4e1FMOKEok2WJl3NuovpY1irVZdwO/+yWc UyibyPPk2RPtoQluZygratw6xcVyEknEoA5nKMf/NVRzmv06+08s6NWyaTH84w== -----END CERTIFICATE-----Generated at Sun Jun 29 08:52:57 2025 by rpki-client