$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c49b356-187d-4223-bfed-b3dba0ce3e66.roa File: 5c49b356-187d-4223-bfed-b3dba0ce3e66.roa (raw, json) Hash identifier: hJAp3diQj60xb3mSHVsmGldJGhlAvKwOHbzL++dkJZ4= Subject key identifier: 58:B3:19:29:BA:D6:F8:4E:6E:9C:FD:6B:89:EB:47:DB:00:24:15:05 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0EE93DC687BDB1398FC6967D0F1EA8436F7B4654 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c49b356-187d-4223-bfed-b3dba0ce3e66.roa Signing time: Fri 22 Aug 2025 15:00:08 +0000 ROA not before: Fri 22 Aug 2025 15:00:08 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f2:7010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e9:3d:c6:87:bd:b1:39:8f:c6:96:7d:0f:1e:a8:43:6f:7b:46:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 22 15:00:08 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=a599627e261a17a1c348c27a8ceadabc66626d8b0763ca83dd9abd4511eee9e3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:4a:83:65:80:03:16:79:05:06:b3:2d:e5:4e: eb:18:e7:09:72:48:12:0a:99:33:1c:55:ef:fe:29: 37:72:8d:aa:84:a7:3f:87:8b:1d:c2:b9:e6:f5:18: 02:80:61:63:0f:26:5a:b7:e8:08:3a:e3:c2:b3:b0: 51:3e:b3:a6:37:e5:63:40:c9:87:bf:90:d5:59:bd: 26:05:a9:a7:b2:a5:3b:0b:d3:ef:7a:3a:1f:de:a5: 00:74:e6:75:bf:35:e4:72:5a:04:72:19:63:36:df: df:17:e9:b6:09:e5:07:a8:48:51:84:04:ad:57:f0: 9e:a5:a0:6a:2c:ff:2b:5b:1c:43:ad:dd:2f:3b:df: cf:12:e0:88:b6:59:2d:f9:22:b2:7b:54:b1:bb:30: 6a:2d:e6:9e:b2:3d:9a:4d:e9:3d:8f:11:e2:57:92: 68:49:bd:4b:40:9e:29:73:5d:7d:e5:bb:4a:e3:cc: 50:b4:ca:4f:f9:e8:a0:e7:39:8c:81:ee:31:10:27: f4:69:3f:73:cf:af:d2:cf:dd:d7:5c:37:f8:c7:68: 17:61:e3:94:fb:19:87:6a:b7:61:af:99:25:e8:1c: b1:c0:1d:70:1b:6f:dc:d7:79:d1:22:bb:32:3b:e5: b2:bb:e7:e5:36:73:a9:2d:7b:c3:38:ce:f2:93:fe: 79:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B3:19:29:BA:D6:F8:4E:6E:9C:FD:6B:89:EB:47:DB:00:24:15:05 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c49b356-187d-4223-bfed-b3dba0ce3e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7010::/48 Signature Algorithm: sha256WithRSAEncryption 3e:8a:c3:00:60:34:64:15:13:85:60:61:c8:ea:2d:40:25:a3: 4c:5e:49:24:ba:12:3f:a4:e1:e0:b8:67:d2:d7:63:84:1a:40: ec:26:3b:96:29:0c:a3:7b:c3:aa:9c:3f:2c:28:bf:f8:05:98: 55:7e:e1:b6:81:c2:4e:da:a0:b5:14:ee:1a:26:cf:6a:f0:e6: 03:2f:8b:ec:19:89:18:96:f0:53:73:51:d3:b5:4a:e5:8b:17: f1:64:87:f0:ba:51:0e:06:af:88:da:f3:15:15:01:31:01:68: 38:9c:9f:04:3b:29:ee:67:72:a0:25:9d:b6:1f:09:64:d8:5f: ce:6f:92:b6:d1:58:9b:09:80:7f:72:44:07:30:d9:e8:2b:b0: 90:ca:bc:85:ff:0a:f6:13:09:e6:6d:7b:2c:bb:a2:bd:39:cd: d1:66:9f:cd:9c:3f:96:8c:e9:2b:86:b4:89:f7:76:ae:b9:2c: f7:d3:26:ba:74:0f:e3:09:47:51:dc:5b:cd:e7:ac:58:66:36: 5e:6f:bd:00:91:3f:b8:4b:d4:51:bf:dd:4b:fa:4f:ce:81:a5: f5:48:50:df:f1:4a:c5:7c:88:64:58:8b:93:a3:19:03:06:e6: 33:7a:7e:5e:fd:33:df:b0:b0:15:37:cd:98:d8:b7:6e:f7:73: 7f:65:39:05 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDuk9xoe9sTmPxpZ9Dx6oQ297RlQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODIyMTUwMDA4WhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTk5NjI3ZTI2MWExN2ExYzM0OGMyN2E4Y2VhZGFiYzY2 NjI2ZDhiMDc2M2NhODNkZDlhYmQ0NTExZWVlOWUzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD4SoNlgAMWeQUGsy3lTusY5wlySBIKmTMcVe/+KTdyjaqE pz+Hix3Cueb1GAKAYWMPJlq36Ag648KzsFE+s6Y35WNAyYe/kNVZvSYFqaeypTsL 0+96Oh/epQB05nW/NeRyWgRyGWM2398X6bYJ5QeoSFGEBK1X8J6loGos/ytbHEOt 3S87388S4Ii2WS35IrJ7VLG7MGot5p6yPZpN6T2PEeJXkmhJvUtAnilzXX3lu0rj zFC0yk/56KDnOYyB7jEQJ/RpP3PPr9LP3ddcN/jHaBdh45T7GYdqt2GvmSXoHLHA HXAbb9zXedEiuzI75bK75+U2c6kte8M4zvKT/nlJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWLMZKbrW+E5unP1rietH2wAkFQUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVjNDliMzU2LTE4N2QtNDIyMy1iZmVkLWIzZGJhMGNlM2U2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBAwDQYJKoZIhvcNAQELBQADggEBAD6KwwBgNGQVE4VgYcjqLUAl o0xeSSS6Ej+k4eC4Z9LXY4QaQOwmO5YpDKN7w6qcPywov/gFmFV+4baBwk7aoLUU 7homz2rw5gMvi+wZiRiW8FNzUdO1SuWLF/Fkh/C6UQ4Gr4ja8xUVATEBaDicnwQ7 Ke5ncqAlnbYfCWTYX85vkrbRWJsJgH9yRAcw2egrsJDKvIX/CvYTCeZteyy7or05 zdFmn82cP5aM6SuGtIn3dq65LPfTJrp0D+MJR1HcW83nrFhmNl5vvQCRP7hL1FG/ 3Uv6T86BpfVIUN/xSsV8iGRYi5OjGQMG5jN6fl79M9+wsBU3zZjYt273c39lOQU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:48 2025 by rpki-client