$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dde62d4-6bbd-4a28-bbc3-33587737ae3b.roa File: 6dde62d4-6bbd-4a28-bbc3-33587737ae3b.roa (raw, json) Hash identifier: T0dhNJ3gST06e6isgBJYa6WGnwX0zBnIL1e1j9AF0OQ= Subject key identifier: 67:99:A1:AD:52:83:A3:47:63:E5:CA:C4:37:4F:27:14:A7:6F:29:15 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 38BCC030CB4F76D774EED6678F65FD21571720D1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dde62d4-6bbd-4a28-bbc3-33587737ae3b.roa Signing time: Mon 18 Aug 2025 18:22:20 +0000 ROA not before: Mon 18 Aug 2025 18:22:20 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:610b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:bc:c0:30:cb:4f:76:d7:74:ee:d6:67:8f:65:fd:21:57:17:20:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 18 18:22:20 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=4ef4e1a83dbbc4b4e1baeeb31e2b0eef7e4d5ae47b24ce0486f63c8ad4ff77cf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:8f:8e:a0:8f:1d:ef:b4:1e:3b:42:57:b0: 54:37:a5:4a:52:e7:e2:6d:df:22:44:96:04:73:f3: 03:41:aa:00:d1:b9:d8:c0:ee:f5:ab:d4:fc:16:5f: 4e:26:78:39:b9:3e:fc:17:e8:0f:77:4c:6d:61:e0: 5a:88:be:b4:cb:30:fb:d9:02:e5:46:e0:c5:15:ce: 29:84:69:d2:61:31:67:6a:16:8f:ea:5e:fe:8a:b5: dc:d4:aa:53:19:63:24:ae:23:8a:65:d0:81:2d:e2: 6b:7a:88:c5:66:ab:fa:d6:b4:88:45:4c:40:85:16: 8b:ea:12:13:5a:f1:f6:e9:6e:15:39:39:56:a2:89: ce:d6:f5:c0:b2:a5:a6:e9:b1:3e:9e:9b:77:ae:16: 14:5f:41:b7:54:79:a9:93:e6:06:8a:01:06:96:99: ad:af:ba:4d:b3:43:04:f7:ad:8d:73:35:a3:46:57: 4e:4b:10:5e:8e:40:0b:02:63:32:a1:67:be:e1:e2: 09:a7:4e:2b:87:61:f0:d1:2c:09:a6:38:d2:a0:b1: 40:13:74:5c:eb:b8:5e:2d:73:cc:32:6f:50:7c:40: 2d:03:53:83:8d:ef:69:3a:ed:54:4c:57:d3:7b:d2: 9c:9e:cc:41:48:e4:69:44:19:0e:bc:29:03:33:7b: 6f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:99:A1:AD:52:83:A3:47:63:E5:CA:C4:37:4F:27:14:A7:6F:29:15 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dde62d4-6bbd-4a28-bbc3-33587737ae3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610b::/48 Signature Algorithm: sha256WithRSAEncryption 7e:c2:df:36:53:f7:ae:cc:be:95:5c:33:dd:ef:88:be:ce:cf: e8:ec:b7:87:75:78:fc:b2:5b:e8:60:17:0d:fe:c6:64:f0:86: fa:a8:04:7b:66:5b:23:6d:bf:27:ad:39:b8:24:55:83:a0:11: bf:2a:da:70:95:74:86:83:f0:b0:49:aa:0d:1a:1e:44:5d:e9: c7:bc:5a:23:96:dd:6d:ed:1f:09:89:ea:56:af:14:ec:97:73: 09:4e:ff:e5:9e:d8:cc:da:02:79:c6:6a:ca:02:98:5d:fe:38: 17:44:4b:b2:e6:99:91:ce:0e:fe:1e:e2:f2:bd:ce:75:23:fd: 93:b0:4c:ea:0a:ff:4c:bc:c8:e3:cf:c4:26:7a:e0:66:9a:bc: 7a:9d:e3:54:2d:c7:5d:0c:b0:be:1e:5e:6b:07:44:55:b5:62: f0:96:fb:5c:2b:10:0d:6a:74:ad:9b:8a:38:65:8d:4b:e1:90: dc:41:ae:33:83:56:c9:87:ba:05:aa:03:02:eb:7c:79:a6:6a: 08:c1:5e:e3:e1:f7:11:59:66:96:43:32:d3:6a:9d:11:11:f7: cc:a6:92:fc:1f:13:19:27:b4:45:a1:ae:a0:48:c9:2c:df:5c: a2:de:17:b2:9b:96:3e:65:d1:a0:85:7e:ec:b1:bb:62:c0:45: ab:af:0d:8f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOLzAMMtPdtd07tZnj2X9IVcXINEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE4MTgyMjIwWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZWY0ZTFhODNkYmJjNGI0ZTFiYWVlYjMxZTJiMGVlZjdl NGQ1YWU0N2IyNGNlMDQ4NmY2M2M4YWQ0ZmY3N2NmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxr4+OoI8d77QeO0JXsFQ3pUpS5+Jt3yJElgRz8wNBqgDR udjA7vWr1PwWX04meDm5PvwX6A93TG1h4FqIvrTLMPvZAuVG4MUVzimEadJhMWdq Fo/qXv6KtdzUqlMZYySuI4pl0IEt4mt6iMVmq/rWtIhFTECFFovqEhNa8fbpbhU5 OVaiic7W9cCypabpsT6em3euFhRfQbdUeamT5gaKAQaWma2vuk2zQwT3rY1zNaNG V05LEF6OQAsCYzKhZ77h4gmnTiuHYfDRLAmmONKgsUATdFzruF4tc8wyb1B8QC0D U4ON72k67VRMV9N70pyezEFI5GlEGQ68KQMze2/jAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZ5mhrVKDo0dj5crEN08nFKdvKRUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZkZGU2MmQ0LTZiYmQtNGEyOC1iYmMzLTMzNTg3NzM3YWUzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQswDQYJKoZIhvcNAQELBQADggEBAH7C3zZT967MvpVcM93viL7O z+jst4d1ePyyW+hgFw3+xmTwhvqoBHtmWyNtvyetObgkVYOgEb8q2nCVdIaD8LBJ qg0aHkRd6ce8WiOW3W3tHwmJ6lavFOyXcwlO/+We2MzaAnnGasoCmF3+OBdES7Lm mZHODv4e4vK9znUj/ZOwTOoK/0y8yOPPxCZ64GaavHqd41Qtx10MsL4eXmsHRFW1 YvCW+1wrEA1qdK2bijhljUvhkNxBrjODVsmHugWqAwLrfHmmagjBXuPh9xFZZpZD MtNqnRER98ymkvwfExkntEWhrqBIySzfXKLeF7Kblj5l0aCFfuyxu2LARauvDY8= -----END CERTIFICATE-----Generated at Sat Aug 23 08:25:10 2025 by rpki-client