$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa File: 4d9dc189-6c00-4764-9c0c-c990d1727298.roa (raw, json) Hash identifier: Zu0Fm6ijWTh2GUOiMsKXxL5o1jdwyeXvY6S1fes443U= Subject key identifier: 95:22:36:C9:B7:CE:26:BF:4E:1C:A4:5A:37:13:8F:FE:85:8B:8F:33 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 287CE5910F97C5A1CB86AAFDB9107404D2DA8338 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa Signing time: Mon 16 Jun 2025 19:21:01 +0000 ROA not before: Mon 16 Jun 2025 19:21:01 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7c:e5:91:0f:97:c5:a1:cb:86:aa:fd:b9:10:74:04:d2:da:83:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:21:01 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=f2ca110af730bb62b2c42888bf175111b8293de477b61d2dfb916095d91b0944, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:d2:ba:76:4b:f6:1a:ce:5e:35:c7:05:17: f4:34:bb:84:2c:3d:79:4f:e1:b9:34:e5:4a:4d:f4: 40:f7:22:93:99:f0:32:c4:44:1c:69:c2:c8:46:8c: ef:58:dc:4d:54:b1:2f:1c:5d:5d:14:a4:8a:5a:82: a9:72:dc:f7:74:6d:55:50:aa:b0:d0:7d:be:cc:c3: 43:95:a8:d9:db:d1:d2:72:3e:5e:c6:b0:19:ee:9d: 8f:b1:1c:39:7b:8c:5a:02:7a:e0:86:91:90:a5:0d: ff:ce:ee:5a:9c:3e:00:77:20:cf:65:01:10:2f:7c: ef:d6:0c:2e:06:a2:52:cd:8c:b0:41:78:3b:73:98: df:77:7f:27:9a:82:91:92:d6:5a:19:54:8b:29:8e: 85:70:f7:00:76:67:5b:84:2b:67:ae:ff:d7:44:f2: db:6e:d6:93:01:5a:54:bc:64:cb:19:69:64:bf:8e: 5a:91:01:8e:39:04:ea:5a:26:49:c7:f8:84:bd:22: 71:b3:00:93:95:38:b9:25:f6:71:70:60:da:0c:50: 55:39:47:cb:4c:eb:ff:d3:3c:b8:84:b3:48:07:a4: ef:1c:ea:1c:d2:a3:18:ae:75:21:ba:8c:e7:4d:f2: a3:6a:13:e2:67:46:ba:a4:04:61:ed:28:e8:07:2e: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:22:36:C9:B7:CE:26:BF:4E:1C:A4:5A:37:13:8F:FE:85:8B:8F:33 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:600::/48 Signature Algorithm: sha256WithRSAEncryption 9b:76:ec:19:68:af:dd:d4:78:b4:42:44:db:2a:63:27:ab:6e: 4d:9e:a4:54:0a:be:13:97:d6:34:32:b5:72:c1:6e:e9:2f:99: 4a:b3:34:27:68:4f:52:3a:30:bf:99:eb:ec:73:86:c1:4a:7b: 62:f0:81:8c:56:10:32:e6:2d:7f:b3:16:77:40:e5:64:1c:ea: 91:34:40:22:be:9f:3e:9b:49:9d:b4:4c:b0:cc:25:3b:cd:28: 40:47:85:ff:b2:d6:86:e9:c3:ce:c0:ff:79:5c:22:1b:f2:a6: 95:9d:9e:fd:f0:33:30:0f:2d:20:34:03:4e:01:38:cb:2a:c9: 5f:c9:58:3f:87:dc:f9:d5:ec:8d:5d:a4:d7:79:6a:cf:cd:11: 1d:85:eb:09:77:d6:a1:b5:01:65:fe:42:5c:97:27:03:a2:52: cc:c2:9b:ab:23:01:10:86:bd:4b:a2:0c:7e:4e:88:f0:bd:91: ca:ca:a7:30:79:1d:65:31:16:99:3d:f1:af:40:77:c1:b8:ca: e7:a2:33:36:34:66:a9:10:95:4a:6f:47:bd:07:99:21:8d:e9: 8a:bf:8c:f5:9c:96:69:2d:78:02:d2:16:55:f3:2d:18:90:55: 05:86:38:ff:47:0e:55:28:b1:c6:8e:b8:de:ae:b7:24:94:64: c2:16:c7:a1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKHzlkQ+XxaHLhqr9uRB0BNLagzgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMTAxWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmNhMTEwYWY3MzBiYjYyYjJjNDI4ODhiZjE3NTExMWI4 MjkzZGU0NzdiNjFkMmRmYjkxNjA5NWQ5MWIwOTQ0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4ctK6dkv2Gs5eNccFF/Q0u4QsPXlP4bk05UpN9ED3IpOZ 8DLERBxpwshGjO9Y3E1UsS8cXV0UpIpagqly3Pd0bVVQqrDQfb7Mw0OVqNnb0dJy Pl7GsBnunY+xHDl7jFoCeuCGkZClDf/O7lqcPgB3IM9lARAvfO/WDC4GolLNjLBB eDtzmN93fyeagpGS1loZVIspjoVw9wB2Z1uEK2eu/9dE8ttu1pMBWlS8ZMsZaWS/ jlqRAY45BOpaJknH+IS9InGzAJOVOLkl9nFwYNoMUFU5R8tM6//TPLiEs0gHpO8c 6hzSoxiudSG6jOdN8qNqE+JnRrqkBGHtKOgHLhM7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlSI2ybfOJr9OHKRaNxOP/oWLjzMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRkOWRjMTg5LTZjMDAtNDc2NC05YzBjLWM5OTBkMTcyNzI5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBgAwDQYJKoZIhvcNAQELBQADggEBAJt27Blor93UeLRCRNsqYyer bk2epFQKvhOX1jQytXLBbukvmUqzNCdoT1I6ML+Z6+xzhsFKe2LwgYxWEDLmLX+z FndA5WQc6pE0QCK+nz6bSZ20TLDMJTvNKEBHhf+y1obpw87A/3lcIhvyppWdnv3w MzAPLSA0A04BOMsqyV/JWD+H3PnV7I1dpNd5as/NER2F6wl31qG1AWX+QlyXJwOi UszCm6sjARCGvUuiDH5OiPC9kcrKpzB5HWUxFpk98a9Ad8G4yueiMzY0ZqkQlUpv R70HmSGN6Yq/jPWclmkteALSFlXzLRiQVQWGOP9HDlUoscaOuN6utySUZMIWx6E= -----END CERTIFICATE-----Generated at Mon Jun 30 19:22:23 2025 by rpki-client