$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa File: 644f882a-d42c-4c76-bb70-882838f6e3e0.roa (raw, json) Hash identifier: vjHONtFuQ0MlyJS1WnobHuFZCw/cwIZNfb+RBXuBEv0= Subject key identifier: B4:AC:A5:6E:9B:AD:02:C4:8A:25:A5:7A:66:EE:FF:31:73:2C:D9:C6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2D3AF8A08E80531C5463D1BBDDA74DED2250C800 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa Signing time: Mon 16 Jun 2025 19:30:58 +0000 ROA not before: Mon 16 Jun 2025 19:30:58 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3a:f8:a0:8e:80:53:1c:54:63:d1:bb:dd:a7:4d:ed:22:50:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:30:58 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=e0c77ebfbd9f15b80e5e359c7f375c38a339305b88641ad076dcc3772865be53, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:d0:92:83:27:fd:91:b2:5d:81:03:37:31: cd:f0:2e:42:4f:46:fc:c2:ec:eb:ff:26:56:67:40: dd:2f:d9:41:9a:5f:fe:62:73:6a:e5:42:68:0f:0b: c9:bc:ab:b5:61:b3:d3:14:5c:c7:5b:a9:7e:a0:5e: 22:bd:6e:39:78:2b:20:1e:0e:7a:67:76:2f:48:ac: 99:43:82:9c:89:5c:93:ae:e6:aa:6c:4f:22:6e:a7: 3c:e4:01:95:4c:b3:21:6c:26:07:93:90:4c:76:1e: 7d:10:1a:44:7c:b7:21:b5:22:df:cf:dc:8a:22:65: 93:c8:da:00:ed:57:dc:00:31:44:6f:73:4a:3d:0e: b7:c5:b2:03:9c:6d:05:4f:f2:4b:e9:b7:3c:af:bb: 7a:81:06:6b:01:f8:75:5f:0e:d0:27:27:55:b3:49: 32:58:df:6e:63:cf:fd:10:ad:a3:ab:8b:ab:88:e2: 67:43:4e:12:33:a4:48:4e:c7:77:2d:2c:e0:af:a8: 0c:7e:ff:68:71:1a:1e:7f:73:2a:f6:25:f7:a5:95: 5d:76:b0:61:db:94:ed:b0:0d:1d:c8:37:dd:5b:d3: c0:47:40:99:3a:44:26:6a:d6:c0:51:60:e3:db:7c: 15:48:a1:79:c2:96:19:ff:a8:2e:a4:da:d9:b6:eb: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AC:A5:6E:9B:AD:02:C4:8A:25:A5:7A:66:EE:FF:31:73:2C:D9:C6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e600::/40 Signature Algorithm: sha256WithRSAEncryption a7:ac:59:8e:a6:25:a3:ea:63:8d:22:be:bc:32:a5:e0:26:a7: 77:5a:b6:3f:32:36:82:8f:c4:d5:92:de:5e:18:34:44:de:ec: b4:a8:ee:45:50:33:c9:8d:2c:f7:16:06:e8:d1:ff:28:f3:d3: 5b:65:b6:b6:4c:2e:e2:ef:48:ec:58:dc:7f:f3:0b:40:22:a2: e4:ef:91:77:89:60:bd:05:fd:0b:f8:75:9f:60:60:49:d3:9d: d1:e6:3c:d5:c8:4d:fc:98:44:8f:d5:ea:32:ce:48:a5:87:6e: 78:ce:45:bf:d2:59:e8:ea:a7:3c:fa:08:6a:7b:1c:72:b0:c0: 67:a9:2f:16:0a:08:ed:fa:73:b4:a0:bf:39:63:77:8e:e8:52: db:c3:e1:41:03:61:9a:15:60:ab:5a:79:65:52:31:09:6b:0a: a2:c1:05:0b:9d:88:79:a6:25:96:9e:15:60:6b:90:42:a7:8f: 1b:01:38:b4:42:52:d4:a5:33:94:50:d5:ae:32:29:f6:78:98: 7c:58:8b:f5:95:b7:3b:fe:93:b9:ed:16:d2:fc:7b:56:e4:e9: 97:29:c7:5a:b7:cc:94:ee:95:63:69:b8:48:04:f2:dc:5f:63: 37:63:99:1d:c2:5a:5e:76:4f:d0:92:ff:08:bf:8d:dd:73:62: 62:07:e9:63 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULTr4oI6AUxxUY9G73adN7SJQyAAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkzMDU4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMGM3N2ViZmJkOWYxNWI4MGU1ZTM1OWM3ZjM3NWMzOGEz MzkzMDViODg2NDFhZDA3NmRjYzM3NzI4NjViZTUzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/CdCSgyf9kbJdgQM3Mc3wLkJPRvzC7Ov/JlZnQN0v2UGa X/5ic2rlQmgPC8m8q7Vhs9MUXMdbqX6gXiK9bjl4KyAeDnpndi9IrJlDgpyJXJOu 5qpsTyJupzzkAZVMsyFsJgeTkEx2Hn0QGkR8tyG1It/P3IoiZZPI2gDtV9wAMURv c0o9DrfFsgOcbQVP8kvptzyvu3qBBmsB+HVfDtAnJ1WzSTJY325jz/0QraOri6uI 4mdDThIzpEhOx3ctLOCvqAx+/2hxGh5/cyr2JfellV12sGHblO2wDR3IN91b08BH QJk6RCZq1sBRYOPbfBVIoXnClhn/qC6k2tm2689pAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUtKylbputAsSKJaV6Zu7/MXMs2cYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY0NGY4ODJhLWQ0MmMtNGM3Ni1iYjcwLTg4MjgzOGY2ZTNlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD75jANBgkqhkiG9w0BAQsFAAOCAQEAp6xZjqYlo+pjjSK+vDKl4Can d1q2PzI2go/E1ZLeXhg0RN7stKjuRVAzyY0s9xYG6NH/KPPTW2W2tkwu4u9I7Fjc f/MLQCKi5O+Rd4lgvQX9C/h1n2BgSdOd0eY81chN/JhEj9XqMs5IpYdueM5Fv9JZ 6OqnPPoIansccrDAZ6kvFgoI7fpztKC/OWN3juhS28PhQQNhmhVgq1p5ZVIxCWsK osEFC52IeaYllp4VYGuQQqePGwE4tEJS1KUzlFDVrjIp9niYfFiL9ZW3O/6Tue0W 0vx7VuTplynHWrfMlO6VY2m4SATy3F9jN2OZHcJaXnZP0JL/CL+N3XNiYgfpYw== -----END CERTIFICATE-----Generated at Sun Jun 29 09:03:36 2025 by rpki-client