$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4550dcb5-431c-4b07-9e46-224c71cb2b00.roa File: 4550dcb5-431c-4b07-9e46-224c71cb2b00.roa (raw, json) Hash identifier: W9l/97yN0RqOOVXNYGzwDLwg+io5QIZAk/QqExq2xos= Subject key identifier: F0:CA:67:AA:AD:2E:21:A3:4E:97:4D:1F:47:47:05:C0:80:B8:A5:B4 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2D117B1DAF4157E1961BA1133CD84DFBC7481773 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4550dcb5-431c-4b07-9e46-224c71cb2b00.roa Signing time: Mon 16 Jun 2025 19:10:18 +0000 ROA not before: Mon 16 Jun 2025 19:10:18 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:5518::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:11:7b:1d:af:41:57:e1:96:1b:a1:13:3c:d8:4d:fb:c7:48:17:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:10:18 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=c5a29cd43e258dba4f9454e4a0ccb78d59e2fe4771a4afc958fc0a2f158b47b2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:5f:18:d8:af:4e:43:b7:2d:19:47:08:87: c8:b0:8d:0e:7d:84:ee:d9:d8:bc:2d:c2:22:5e:fe: d0:aa:fd:de:93:8d:4b:b1:0d:f1:18:14:b5:f2:fd: fd:a1:5d:c5:d4:60:f0:ea:44:3e:5e:8f:02:0f:0d: 02:1d:6c:04:2a:77:72:ab:6e:fc:73:e4:63:63:91: 45:21:2c:4a:24:28:50:3d:2f:ae:db:14:00:20:d5: 8f:1c:6b:bb:1b:70:d7:86:64:b8:c9:90:d2:35:58: 2c:c1:6b:d2:19:c1:2d:22:76:04:22:79:cc:ca:75: 93:00:2e:1e:58:ec:26:6f:c7:a3:49:da:aa:d3:c0: b6:17:e4:1b:f8:68:ca:fa:ad:34:8f:c7:27:4d:c1: 0c:9f:66:80:c7:bb:4c:b1:b3:b7:32:5c:d7:87:67: 64:30:96:f1:3e:2a:8e:06:14:48:4f:a7:df:b2:73: 93:83:68:e6:e3:b6:29:2d:45:1b:55:9d:4f:6e:21: 00:48:16:38:26:7c:94:c2:83:c2:3c:3c:26:c4:c5: 75:40:d6:5b:f9:1d:82:e6:b7:ee:71:f4:c1:ed:aa: 20:18:a7:75:92:04:9e:ad:46:e9:d6:78:5a:ed:ec: 97:5a:18:8c:4d:4e:15:a6:46:d9:1e:1d:cb:d6:b7: 2c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CA:67:AA:AD:2E:21:A3:4E:97:4D:1F:47:47:05:C0:80:B8:A5:B4 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4550dcb5-431c-4b07-9e46-224c71cb2b00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5518::/48 Signature Algorithm: sha256WithRSAEncryption a7:4d:78:88:e7:46:11:59:1a:f1:05:dc:e5:06:5e:0a:aa:b3: af:a6:a3:9c:ba:9b:8e:43:aa:27:87:fa:c3:89:4f:6f:c6:4b: cb:82:8c:7a:ee:68:10:15:f8:ee:6d:07:fe:69:0d:05:f4:7c: 93:80:d4:a6:5b:82:51:59:bf:dc:b8:e6:de:43:8e:df:bc:74: d3:18:97:0b:26:ee:de:db:3a:a0:68:d7:b0:ef:63:07:db:aa: 38:2c:ef:cf:fe:58:75:0c:f4:49:a1:f5:47:4f:e2:da:fa:dc: 93:82:3e:a3:e6:f8:c5:8e:2d:41:15:67:d5:80:56:a9:6c:a2: cd:18:91:d3:90:47:ca:0d:37:cd:c7:10:57:bb:ae:cc:5e:c3: 27:fd:60:1d:59:91:16:02:bc:cf:70:cb:ac:c5:db:75:c5:8c: 85:9e:d7:eb:a4:38:77:e2:68:72:0f:e5:0c:91:32:46:a3:27: b2:00:ab:a0:39:37:91:17:ed:02:6d:ff:47:c6:38:a5:5e:6a: 6b:9f:a5:87:84:2f:dd:47:ac:a7:68:7c:4a:50:10:f8:4e:b5: c7:3f:a7:cc:f6:94:19:46:4a:b8:46:91:7d:8c:57:db:95:a4: 48:6a:08:7d:eb:9a:ee:3a:1f:b3:c6:b6:d4:86:4b:31:d4:5c: 0f:51:18:73 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULRF7Ha9BV+GWG6ETPNhN+8dIF3MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkxMDE4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNWEyOWNkNDNlMjU4ZGJhNGY5NDU0ZTRhMGNjYjc4ZDU5 ZTJmZTQ3NzFhNGFmYzk1OGZjMGEyZjE1OGI0N2IyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1u18Y2K9OQ7ctGUcIh8iwjQ59hO7Z2LwtwiJe/tCq/d6T jUuxDfEYFLXy/f2hXcXUYPDqRD5ejwIPDQIdbAQqd3Krbvxz5GNjkUUhLEokKFA9 L67bFAAg1Y8ca7sbcNeGZLjJkNI1WCzBa9IZwS0idgQieczKdZMALh5Y7CZvx6NJ 2qrTwLYX5Bv4aMr6rTSPxydNwQyfZoDHu0yxs7cyXNeHZ2QwlvE+Ko4GFEhPp9+y c5ODaObjtiktRRtVnU9uIQBIFjgmfJTCg8I8PCbExXVA1lv5HYLmt+5x9MHtqiAY p3WSBJ6tRunWeFrt7JdaGIxNThWmRtkeHcvWtyxZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8Mpnqq0uIaNOl00fR0cFwIC4pbQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ1NTBkY2I1LTQzMWMtNGIwNy05ZTQ2LTIyNGM3MWNiMmIwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRgwDQYJKoZIhvcNAQELBQADggEBAKdNeIjnRhFZGvEF3OUGXgqq s6+mo5y6m45DqieH+sOJT2/GS8uCjHruaBAV+O5tB/5pDQX0fJOA1KZbglFZv9y4 5t5Djt+8dNMYlwsm7t7bOqBo17DvYwfbqjgs78/+WHUM9Emh9UdP4tr63JOCPqPm +MWOLUEVZ9WAVqlsos0YkdOQR8oNN83HEFe7rsxewyf9YB1ZkRYCvM9wy6zF23XF jIWe1+ukOHfiaHIP5QyRMkajJ7IAq6A5N5EX7QJt/0fGOKVeamufpYeEL91HrKdo fEpQEPhOtcc/p8z2lBlGSrhGkX2MV9uVpEhqCH3rmu46H7PGttSGSzHUXA9RGHM= -----END CERTIFICATE-----Generated at Sun Jun 29 09:22:35 2025 by rpki-client