$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7200dfa9-d36f-44de-852a-1adda1bbb99c.roa File: 7200dfa9-d36f-44de-852a-1adda1bbb99c.roa (raw, json) Hash identifier: fZDD3YTg5R7yNKILa/gwdRu0sBEsTKPOC8rEOJOZMu4= Subject key identifier: 45:B9:AE:B6:20:3B:51:B1:2C:17:2A:BB:E4:52:95:1B:06:52:8D:15 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 479AFA0D8FEF4D15B595CC20801D8E5DE4CB1A93 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7200dfa9-d36f-44de-852a-1adda1bbb99c.roa Signing time: Mon 16 Jun 2025 19:10:22 +0000 ROA not before: Mon 16 Jun 2025 19:10:22 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:1000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:9a:fa:0d:8f:ef:4d:15:b5:95:cc:20:80:1d:8e:5d:e4:cb:1a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:10:22 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=0d91ba3f4677b444ae6f483413fbe808c026d239a7dc09b67e99f0e56080a0f1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e8:56:85:94:1f:7b:ac:ff:66:35:3d:8a:9f: 07:8a:02:1a:7d:4d:88:57:bd:51:da:2a:93:23:bd: a0:39:e6:5f:58:94:56:e4:08:93:af:32:9d:da:de: 8b:c0:2a:97:a0:db:60:3e:44:85:85:f1:1e:2c:e1: 88:08:00:90:6e:d8:4c:65:67:43:30:1f:55:79:89: 0e:6f:6b:7a:6a:3e:4e:4b:aa:9a:00:8e:c8:ac:11: 3c:71:d4:51:d5:38:a6:2f:e2:2a:dc:cc:a3:24:1d: 2d:7c:60:f9:42:dc:e7:61:90:8c:35:19:e2:72:95: 62:06:1e:7c:28:4e:0f:d8:1c:5f:16:d2:e7:11:3d: fe:7d:fa:91:26:1d:ee:bc:c8:8d:82:ac:43:53:e0: 15:2a:51:db:1c:71:e4:6e:43:79:24:7b:89:c0:a4: 39:f8:13:c2:05:b4:e1:33:36:e6:7d:48:b6:ee:17: 1a:82:a6:dc:d8:8c:42:f2:87:3c:20:e0:1d:56:02: c2:89:37:a1:f3:0c:4e:56:1d:f4:4c:d8:35:ff:60: 29:52:8c:02:d6:4e:2e:25:e1:bb:0d:e2:bd:03:8c: 06:36:d6:28:30:5b:ba:e4:08:6d:11:6b:f5:54:a7: ff:fd:46:a2:7c:2f:91:ab:cd:17:4c:85:2f:44:e0: a8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B9:AE:B6:20:3B:51:B1:2C:17:2A:BB:E4:52:95:1B:06:52:8D:15 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7200dfa9-d36f-44de-852a-1adda1bbb99c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1000::/44 Signature Algorithm: sha256WithRSAEncryption 77:fb:30:a7:0f:90:e5:6a:5f:fd:2d:70:9a:4e:c6:58:d4:ba: d0:95:9e:a7:ad:6d:f4:ae:44:53:07:d7:1c:7b:08:71:e2:ff: 3a:d9:44:cb:00:22:bb:d0:0a:52:af:e3:92:c1:47:98:0e:c1: 7d:dd:85:22:41:d3:d2:eb:6d:b6:11:7c:bf:19:17:3d:c5:2d: 0a:10:da:a5:6e:7f:5f:ae:89:af:25:90:43:c6:fe:97:fd:c0: 29:eb:15:a1:da:c8:9f:fc:fc:1b:dc:fb:0d:fd:b4:4e:26:b4: 92:75:5f:d2:8e:a0:fa:a4:1f:43:ed:6f:15:11:a9:76:a6:ef: ae:35:51:4d:f6:fd:85:2c:41:c0:c9:f2:c1:b1:a9:4f:1f:76: d9:f8:58:bf:6f:2f:5d:01:63:2d:74:a2:f6:15:29:e7:57:68: 3d:b5:db:b5:20:4f:6f:01:2a:72:7e:b4:6f:75:6d:b5:95:30: 28:0a:3d:1b:b8:3b:04:be:ad:ec:65:6e:34:49:61:59:6e:6b: 06:9e:f7:ca:37:5e:36:74:75:62:48:4a:fb:06:ac:08:10:cd: 97:91:d2:11:b1:d5:cc:a8:a0:77:cc:c9:1b:aa:a8:66:c0:89: 1d:3e:71:38:66:c7:07:50:d1:9e:61:ca:19:c8:74:5c:91:a3: 1a:19:d5:66 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUR5r6DY/vTRW1lcwggB2OXeTLGpMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkxMDIyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDkxYmEzZjQ2NzdiNDQ0YWU2ZjQ4MzQxM2ZiZTgwOGMw MjZkMjM5YTdkYzA5YjY3ZTk5ZjBlNTYwODBhMGYxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCX6FaFlB97rP9mNT2KnweKAhp9TYhXvVHaKpMjvaA55l9Y lFbkCJOvMp3a3ovAKpeg22A+RIWF8R4s4YgIAJBu2ExlZ0MwH1V5iQ5va3pqPk5L qpoAjsisETxx1FHVOKYv4irczKMkHS18YPlC3OdhkIw1GeJylWIGHnwoTg/YHF8W 0ucRPf59+pEmHe68yI2CrENT4BUqUdscceRuQ3kke4nApDn4E8IFtOEzNuZ9SLbu FxqCptzYjELyhzwg4B1WAsKJN6HzDE5WHfRM2DX/YClSjALWTi4l4bsN4r0DjAY2 1igwW7rkCG0Ra/VUp//9RqJ8L5GrzRdMhS9E4KjpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURbmutiA7UbEsFyq75FKVGwZSjRUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcyMDBkZmE5LWQzNmYtNDRkZS04NTJhLTFhZGRhMWJiYjk5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwEAAwDQYJKoZIhvcNAQELBQADggEBAHf7MKcPkOVqX/0tcJpOxljU utCVnqetbfSuRFMH1xx7CHHi/zrZRMsAIrvQClKv45LBR5gOwX3dhSJB09LrbbYR fL8ZFz3FLQoQ2qVuf1+uia8lkEPG/pf9wCnrFaHayJ/8/Bvc+w39tE4mtJJ1X9KO oPqkH0PtbxURqXam7641UU32/YUsQcDJ8sGxqU8fdtn4WL9vL10BYy10ovYVKedX aD2127UgT28BKnJ+tG91bbWVMCgKPRu4OwS+rexlbjRJYVluawae98o3XjZ0dWJI SvsGrAgQzZeR0hGx1cyooHfMyRuqqGbAiR0+cThmxwdQ0Z5hyhnIdFyRoxoZ1WY= -----END CERTIFICATE-----Generated at Sun Jun 29 06:33:01 2025 by rpki-client