$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6d504583-8250-4693-a46d-7a40db5add33.roa File: 6d504583-8250-4693-a46d-7a40db5add33.roa (raw, json) Hash identifier: woNL0qkyUCv+RTNfeLrimm3c4V/ITFLnGrjzsDYceSI= Subject key identifier: BA:EB:8C:82:A1:54:2A:20:E1:0E:0C:3E:04:04:D4:7B:C8:B0:4E:0D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 17669064B01FCF3DAF987D6D6AD9EC0144D42D32 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6d504583-8250-4693-a46d-7a40db5add33.roa Signing time: Mon 16 Jun 2025 19:31:07 +0000 ROA not before: Mon 16 Jun 2025 19:31:07 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:66:90:64:b0:1f:cf:3d:af:98:7d:6d:6a:d9:ec:01:44:d4:2d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:31:07 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=4833e44e19fd85bbbad10b9e337af6b9103c0bcd32e9fc55656337fb6fb8e11b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2f:4e:3a:7b:84:c2:b6:90:04:22:3a:d6:c0: 1f:a0:6e:08:98:b7:e8:9d:e6:43:89:f6:b6:54:f4: 06:58:09:07:91:9d:64:ce:d2:e7:50:7a:88:bc:7d: 43:c7:e0:18:46:04:60:0b:43:77:96:b7:9c:a0:fb: 00:b9:fb:f9:24:59:19:17:c4:e5:83:3e:5f:75:91: 5a:4b:eb:b2:76:a2:8a:f2:eb:cc:ab:bc:79:75:9d: 08:8e:5f:29:e9:d9:4c:84:e8:40:fe:2d:81:03:b6: 0f:5f:61:61:03:d3:dd:14:bf:4c:81:b9:9a:c2:13: 85:c1:f2:26:04:ac:f3:25:d7:4c:e8:9d:d8:f0:c4: 65:cf:b4:3c:b3:9b:06:ce:89:a2:2f:55:49:96:0a: f7:ca:66:47:9a:ad:b2:30:b7:8d:e8:cf:d0:01:36: 53:50:59:2d:2f:5a:89:a9:bf:39:87:04:39:4f:1c: 9a:4f:1d:c6:81:fc:f6:08:71:8a:6a:d0:64:87:0e: 66:ac:80:27:cf:ea:b0:03:53:e9:05:37:5b:5f:07: 53:47:35:9e:68:eb:cc:d7:b4:75:f1:75:f7:8e:b0: 32:27:0d:27:ca:dc:02:2b:c0:bb:44:f7:ee:52:c0: e9:f6:c9:04:18:65:88:15:a1:24:13:29:15:56:85: 16:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EB:8C:82:A1:54:2A:20:E1:0E:0C:3E:04:04:D4:7B:C8:B0:4E:0D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6d504583-8250-4693-a46d-7a40db5add33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e500::/40 Signature Algorithm: sha256WithRSAEncryption 88:e6:5c:8c:cd:c8:ec:1f:47:e8:1e:dd:33:48:f5:90:ab:c7: 66:9a:99:22:f4:9a:f2:b4:c2:06:5c:87:39:ea:16:7a:b3:cf: 47:59:cf:05:80:c6:5f:fc:ee:1f:46:87:aa:5a:8a:d5:d0:1e: d2:c3:64:85:fb:b7:b6:57:e4:f3:d3:d7:e8:f3:d4:f1:60:71: 60:eb:f6:5b:00:a8:bc:bd:70:b1:4c:7d:4e:06:de:99:7a:77: fb:8f:be:12:67:80:39:b8:c6:6c:77:cc:5e:42:6a:df:45:8e: dd:04:53:c1:3f:e6:a5:da:dd:f9:14:56:35:a8:9e:3f:59:05: c1:83:f5:09:d2:70:6d:68:23:08:f3:cf:ef:f6:0a:a2:21:03: 90:6f:20:5e:87:fe:70:85:7a:8e:24:95:72:e2:00:bd:08:97: d1:31:35:ff:1f:9a:c1:7e:fa:f3:da:4a:a7:1e:fc:8a:84:72: 0b:6e:71:bb:8b:10:fc:cb:c4:56:83:2b:8f:20:2e:fa:ad:84: 7e:35:4d:1a:04:33:7d:48:a9:7c:42:5a:55:4a:be:ba:85:f3: 6c:f1:24:45:7f:ee:00:b5:b4:9f:49:f4:0d:7e:83:bc:47:fd: e6:c6:01:1b:c2:10:30:6d:2f:f4:0f:1d:7d:b7:2c:6f:f1:be: ef:b3:5f:76 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUF2aQZLAfzz2vmH1tatnsAUTULTIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkzMTA3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODMzZTQ0ZTE5ZmQ4NWJiYmFkMTBiOWUzMzdhZjZiOTEw M2MwYmNkMzJlOWZjNTU2NTYzMzdmYjZmYjhlMTFiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuL046e4TCtpAEIjrWwB+gbgiYt+id5kOJ9rZU9AZYCQeR nWTO0udQeoi8fUPH4BhGBGALQ3eWt5yg+wC5+/kkWRkXxOWDPl91kVpL67J2oory 68yrvHl1nQiOXynp2UyE6ED+LYEDtg9fYWED090Uv0yBuZrCE4XB8iYErPMl10zo ndjwxGXPtDyzmwbOiaIvVUmWCvfKZkearbIwt43oz9ABNlNQWS0vWompvzmHBDlP HJpPHcaB/PYIcYpq0GSHDmasgCfP6rADU+kFN1tfB1NHNZ5o68zXtHXxdfeOsDIn DSfK3AIrwLtE9+5SwOn2yQQYZYgVoSQTKRVWhRazAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUuuuMgqFUKiDhDgw+BATUe8iwTg0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZkNTA0NTgzLTgyNTAtNDY5My1hNDZkLTdhNDBkYjVhZGQzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD75TANBgkqhkiG9w0BAQsFAAOCAQEAiOZcjM3I7B9H6B7dM0j1kKvH ZpqZIvSa8rTCBlyHOeoWerPPR1nPBYDGX/zuH0aHqlqK1dAe0sNkhfu3tlfk89PX 6PPU8WBxYOv2WwCovL1wsUx9TgbemXp3+4++EmeAObjGbHfMXkJq30WO3QRTwT/m pdrd+RRWNaieP1kFwYP1CdJwbWgjCPPP7/YKoiEDkG8gXof+cIV6jiSVcuIAvQiX 0TE1/x+awX7689pKpx78ioRyC25xu4sQ/MvEVoMrjyAu+q2EfjVNGgQzfUipfEJa VUq+uoXzbPEkRX/uALW0n0n0DX6DvEf95sYBG8IQMG0v9A8dfbcsb/G+77Nfdg== -----END CERTIFICATE-----Generated at Wed Jul 2 10:19:13 2025 by rpki-client