$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/64dce371-37b2-4fab-9d85-05ea7f2c1aab.roa File: 64dce371-37b2-4fab-9d85-05ea7f2c1aab.roa (raw, json) Hash identifier: a1khTldWicwQ+PcOSyVBWfeU1dN7VxvpqPf4KswLtSY= Subject key identifier: D8:6C:21:26:66:2C:3F:FE:DF:F5:3D:21:F1:32:29:0C:0D:0D:0B:4A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 27C44C9AE1F3A66B0E8C896AB12E33774D81E037 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/64dce371-37b2-4fab-9d85-05ea7f2c1aab.roa Signing time: Mon 16 Jun 2025 19:30:22 +0000 ROA not before: Mon 16 Jun 2025 19:30:22 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e300::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c4:4c:9a:e1:f3:a6:6b:0e:8c:89:6a:b1:2e:33:77:4d:81:e0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:30:22 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=747d4d09870f4ba7770f91621bfe84b4405ce3deaf985f13371e5b042494cf85, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:9f:08:d4:f7:ca:b0:69:b7:96:ca:c4:02: a0:1c:d8:ae:c1:cd:21:e9:56:9c:65:f6:79:57:00: 75:a6:c9:db:fc:5f:8a:e6:39:20:22:22:56:9c:03: 18:d4:e7:ce:23:c5:81:48:5b:37:57:a1:f9:2e:0a: 58:4a:b6:7c:44:ff:bb:bc:b8:56:35:36:a1:b3:25: 2a:89:a2:ff:08:27:98:06:a7:b7:80:5e:d4:f5:fc: 65:f7:5f:4f:ba:71:7b:26:25:3a:88:ba:3e:51:34: ea:b2:52:53:ca:22:d8:d2:5c:94:6d:85:59:e0:35: d2:0c:22:84:b0:35:d1:07:df:11:54:98:4c:fc:34: a9:52:ec:32:13:22:55:2d:c4:30:b4:09:46:44:d2: 5d:4a:54:a1:74:85:3b:9f:e0:6c:8a:6c:7d:13:c3: f6:66:32:18:58:27:8d:7f:81:64:73:fe:d4:9b:9b: e5:0a:9e:d1:4b:c5:49:e1:3b:1f:56:ef:86:a5:eb: 41:2c:a9:91:94:69:eb:86:8b:e0:66:32:d6:1f:d1: 51:a3:f2:d2:c4:fc:aa:25:c3:47:7f:e4:c4:ec:99: 17:7a:5b:9f:a8:b0:52:24:68:d4:45:a2:86:f7:50: f9:03:7a:62:89:44:4a:82:bc:e5:1c:0f:ec:36:7e: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6C:21:26:66:2C:3F:FE:DF:F5:3D:21:F1:32:29:0C:0D:0D:0B:4A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/64dce371-37b2-4fab-9d85-05ea7f2c1aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e300::/42 Signature Algorithm: sha256WithRSAEncryption a6:58:c5:08:26:e2:db:65:68:b5:ac:f7:76:4c:7f:00:cf:97: 9d:f4:f4:1b:3f:68:62:fa:17:c1:d2:2f:7c:7e:b1:b5:49:8b: c6:bb:b8:70:9b:39:e0:02:d2:58:a5:f2:f7:b5:38:91:b0:7f: 4d:ae:f2:6e:96:3d:33:4f:ae:62:45:c7:4a:8d:69:8c:55:ba: dc:21:df:b6:09:2a:bd:63:16:ce:bd:14:0c:40:c3:18:9e:67: 13:f9:03:c4:6d:80:57:99:a9:b7:f3:0c:44:d3:a6:11:24:13: 69:5d:f4:38:09:7b:07:4d:b1:c4:0a:28:3d:35:2f:af:21:1e: 3b:16:c8:2c:b0:46:3c:63:17:53:71:98:44:6b:78:60:d1:73: 64:99:ed:1d:7a:84:3f:0f:7c:3f:ae:42:27:51:9a:d0:f6:57: a1:da:89:98:38:0e:c6:e3:05:fc:7f:a4:9f:0f:4d:64:3f:11: 03:30:1f:4e:00:42:d8:36:81:a0:f8:21:46:a9:2d:60:19:d7: 8e:79:ab:2c:8b:92:85:56:92:2b:7c:11:a2:c5:63:8e:b2:c2: cb:22:5a:96:fa:d2:a5:1b:4c:62:16:23:ca:d5:6c:64:f9:e8: 4c:d5:e5:a2:63:57:bf:4d:55:e2:4c:91:92:cd:b9:19:37:7d: 2b:c5:f9:3a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJ8RMmuHzpmsOjIlqsS4zd02B4DcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkzMDIyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDdkNGQwOTg3MGY0YmE3NzcwZjkxNjIxYmZlODRiNDQw NWNlM2RlYWY5ODVmMTMzNzFlNWIwNDI0OTRjZjg1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4cp8I1PfKsGm3lsrEAqAc2K7BzSHpVpxl9nlXAHWmydv8 X4rmOSAiIlacAxjU584jxYFIWzdXofkuClhKtnxE/7u8uFY1NqGzJSqJov8IJ5gG p7eAXtT1/GX3X0+6cXsmJTqIuj5RNOqyUlPKItjSXJRthVngNdIMIoSwNdEH3xFU mEz8NKlS7DITIlUtxDC0CUZE0l1KVKF0hTuf4GyKbH0Tw/ZmMhhYJ41/gWRz/tSb m+UKntFLxUnhOx9W74al60EsqZGUaeuGi+BmMtYf0VGj8tLE/Kolw0d/5MTsmRd6 W5+osFIkaNRFoob3UPkDemKJREqCvOUcD+w2fnAJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2GwhJmYsP/7f9T0h8TIpDA0NC0owHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY0ZGNlMzcxLTM3YjItNGZhYi05ZDg1LTA1ZWE3ZjJjMWFhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD74wAwDQYJKoZIhvcNAQELBQADggEBAKZYxQgm4ttlaLWs93ZMfwDP l5309Bs/aGL6F8HSL3x+sbVJi8a7uHCbOeAC0lil8ve1OJGwf02u8m6WPTNPrmJF x0qNaYxVutwh37YJKr1jFs69FAxAwxieZxP5A8RtgFeZqbfzDETTphEkE2ld9DgJ ewdNscQKKD01L68hHjsWyCywRjxjF1NxmERreGDRc2SZ7R16hD8PfD+uQidRmtD2 V6HaiZg4DsbjBfx/pJ8PTWQ/EQMwH04AQtg2gaD4IUapLWAZ1455qyyLkoVWkit8 EaLFY46ywssiWpb60qUbTGIWI8rVbGT56EzV5aJjV79NVeJMkZLNuRk3fSvF+To= -----END CERTIFICATE-----Generated at Mon Jun 30 16:05:40 2025 by rpki-client