$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa File: 529e132d-0c8c-4ca3-bafc-0927932483fd.roa (raw, json) Hash identifier: T1tho6fzuOQ8d49qoRPitAF0BTTEdKwJ4V3XD+fOw1E= Subject key identifier: 48:56:47:16:3E:72:A4:66:7A:05:5F:AB:38:1B:88:B0:47:BF:69:70 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 413A41D9C7D271A9E168E471B3A16C4AA602AC56 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa Signing time: Mon 16 Jun 2025 19:30:56 +0000 ROA not before: Mon 16 Jun 2025 19:30:56 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3a:41:d9:c7:d2:71:a9:e1:68:e4:71:b3:a1:6c:4a:a6:02:ac:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:30:56 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=620b97fd622bbf3e0d3e2e20dab02b751f3141581a76bfe69c1133655bbc78ac, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:f5:63:e6:f4:9d:c0:48:7c:a7:07:6e:6a: f5:f3:db:58:d4:7c:bc:e8:2e:5b:75:ce:b4:9e:f1: dd:4f:14:f5:84:11:42:8a:4b:dd:ce:8b:bd:d9:d1: 42:ba:8c:79:7a:1b:3f:59:4f:94:bd:25:9f:f4:e2: 73:57:fe:94:4d:bd:02:0d:53:c9:34:ae:65:42:fc: e0:e9:f3:1b:7f:dd:df:dd:7c:7e:87:92:3e:3c:b5: 13:db:4a:12:31:ef:cb:e9:b5:87:f1:39:f2:1f:43: 3f:c9:a3:41:4a:5d:ef:24:ae:36:cd:3a:cb:2e:64: 0b:0d:06:f7:a9:4a:6b:f3:d0:28:71:da:05:2a:f5: c5:ae:92:a8:32:15:a3:6d:d0:dd:46:2e:8f:10:23: 3f:62:90:3c:1a:6a:ff:26:af:e6:4d:ab:bd:f9:60: 72:8f:e8:a7:c6:99:1b:29:96:89:36:0f:16:86:50: 0a:c1:c7:d9:b6:e4:30:83:68:cb:21:56:c2:23:fa: 99:8b:96:54:dc:b5:3d:e6:0f:46:88:a1:be:68:63: a0:80:0a:c0:90:9b:d0:b7:b5:90:e9:2e:60:40:7f: 23:bb:aa:66:32:bb:96:02:8b:25:c6:84:fc:04:9d: 8a:60:8a:47:3d:92:6b:bd:3b:a7:c5:0a:95:df:d9: c9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:56:47:16:3E:72:A4:66:7A:05:5F:AB:38:1B:88:B0:47:BF:69:70 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e000::/36 Signature Algorithm: sha256WithRSAEncryption 42:61:a6:cf:c4:1d:2d:8e:a6:26:d8:f3:11:ff:f0:69:67:4c: fc:b5:7f:d9:8a:31:53:26:86:d3:2f:c5:98:da:95:67:98:26: 04:05:5f:66:53:0f:3f:c6:1e:17:97:91:54:ae:48:55:2e:71: e2:45:51:f7:66:88:89:ed:55:5b:e0:c4:a1:f0:de:03:4d:a6: 14:14:22:c0:54:9c:5d:08:9a:82:43:eb:9f:c5:c1:7a:9c:a2: 2d:4e:64:ff:81:07:54:9e:91:b3:bf:f8:de:0d:b1:a2:2f:5d: 3d:1d:fc:b3:6a:25:47:7e:23:50:1e:ec:6f:53:2e:24:df:0f: fe:e2:70:44:16:5d:7a:dd:5f:2c:4b:43:90:f8:ac:8b:c7:52: 3b:e9:ea:af:d9:c4:e1:21:b6:76:b1:34:21:1f:2d:fd:06:c2: 9e:44:5e:32:0a:fd:ab:f9:eb:0a:f7:a8:af:14:f9:b2:6a:89: 7d:53:29:5c:c9:81:aa:e1:b2:7b:1c:37:a8:d0:17:45:85:08: 79:29:22:69:b5:54:8e:58:13:aa:3b:16:e8:45:a6:be:41:6e: db:b2:2b:fe:34:82:fe:7d:73:9e:44:1c:40:f1:ce:aa:92:31: f8:6c:9a:f0:0d:6b:49:40:2c:07:56:2f:da:aa:70:4b:d6:eb: 62:2b:2a:97 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQTpB2cfScanhaORxs6FsSqYCrFYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkzMDU2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjBiOTdmZDYyMmJiZjNlMGQzZTJlMjBkYWIwMmI3NTFm MzE0MTU4MWE3NmJmZTY5YzExMzM2NTViYmM3OGFjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClrvVj5vSdwEh8pwduavXz21jUfLzoLlt1zrSe8d1PFPWE EUKKS93Oi73Z0UK6jHl6Gz9ZT5S9JZ/04nNX/pRNvQINU8k0rmVC/ODp8xt/3d/d fH6Hkj48tRPbShIx78vptYfxOfIfQz/Jo0FKXe8krjbNOssuZAsNBvepSmvz0Chx 2gUq9cWukqgyFaNt0N1GLo8QIz9ikDwaav8mr+ZNq735YHKP6KfGmRsplok2DxaG UArBx9m25DCDaMshVsIj+pmLllTctT3mD0aIob5oY6CACsCQm9C3tZDpLmBAfyO7 qmYyu5YCiyXGhPwEnYpgikc9kmu9O6fFCpXf2cmDAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSFZHFj5ypGZ6BV+rOBuIsEe/aXAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzUyOWUxMzJkLTBjOGMtNGNhMy1iYWZjLTA5Mjc5MzI0ODNmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAPD74DANBgkqhkiG9w0BAQsFAAOCAQEAQmGmz8QdLY6mJtjzEf/waWdM /LV/2YoxUyaG0y/FmNqVZ5gmBAVfZlMPP8YeF5eRVK5IVS5x4kVR92aIie1VW+DE ofDeA02mFBQiwFScXQiagkPrn8XBepyiLU5k/4EHVJ6Rs7/43g2xoi9dPR38s2ol R34jUB7sb1MuJN8P/uJwRBZdet1fLEtDkPisi8dSO+nqr9nE4SG2drE0IR8t/QbC nkReMgr9q/nrCveorxT5smqJfVMpXMmBquGyexw3qNAXRYUIeSkiabVUjlgTqjsW 6EWmvkFu27Ir/jSC/n1znkQcQPHOqpIx+Gya8A1rSUAsB1Yv2qpwS9brYisqlw== -----END CERTIFICATE-----Generated at Sun Jun 29 14:43:56 2025 by rpki-client