$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa File: 7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa (raw, json) Hash identifier: fuXPt544EjNImQEHg4MsNXgbxVoiVcHTXu/yfWhPfB0= Subject key identifier: B1:96:1D:B7:9A:D8:9E:B3:14:49:B5:65:44:5F:A4:06:46:76:16:6F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 351553F64121BFC0C77172698889B5EA3A215A6A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa Signing time: Mon 16 Jun 2025 19:20:42 +0000 ROA not before: Mon 16 Jun 2025 19:20:42 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:15:53:f6:41:21:bf:c0:c7:71:72:69:88:89:b5:ea:3a:21:5a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:42 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=4970294d1c86029998cb7edff7c11f475c609546b9d28c1b9b9c02b6c31da002, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7c:73:5b:2b:17:64:eb:39:92:09:e4:a8:21: 0c:8c:ef:09:d5:2b:50:10:50:75:a1:79:46:c4:23: 37:f7:24:a6:6d:2e:b1:33:70:75:15:c9:52:0e:b1: 40:a9:e2:41:cd:02:d9:7c:97:4c:66:f4:78:77:ec: 6b:79:4f:a3:d3:07:1e:19:6e:d3:06:a0:ee:ad:c1: 6e:ed:a2:b8:0a:e4:60:51:5d:ff:bc:25:2b:1e:7e: 38:7f:e7:04:23:76:43:ba:2e:f7:00:26:b6:08:4c: 95:61:55:78:c5:1d:3e:45:2f:3d:6a:05:6f:c9:48: b8:ac:4f:c3:5f:ae:05:0b:25:4e:fb:1f:d1:46:d4: 67:6e:23:25:62:9a:8f:40:ab:86:a1:96:39:7e:67: c3:62:e6:ee:2c:7c:37:f5:71:37:c0:ce:fd:35:42: 35:43:aa:4f:2f:a7:ab:30:f9:6f:2b:77:20:21:31: 7f:3c:92:d0:e9:0b:24:5f:9f:95:73:1a:94:2a:44: ca:8f:48:8b:3f:d9:2b:8c:84:b3:f3:21:33:a5:bd: 6b:f8:2d:48:09:b7:a7:34:51:38:24:aa:ff:35:14: f8:08:93:85:a0:d9:5d:6e:26:c4:eb:d0:97:05:84: 3e:f5:62:72:c5:dd:5b:58:6f:3f:9b:75:c8:d3:06: 76:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:96:1D:B7:9A:D8:9E:B3:14:49:B5:65:44:5F:A4:06:46:76:16:6F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7ad26bb9-2f69-40ee-b91a-0cce67fa4a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e800::/40 Signature Algorithm: sha256WithRSAEncryption 90:3b:f9:21:28:8e:c2:f8:d3:f0:9b:eb:72:d3:64:0f:88:7f: 55:ce:72:68:fe:86:ad:2e:f9:80:2d:bb:41:03:b0:a1:c5:53: 28:9b:d7:c9:fe:15:78:38:49:00:bb:01:2e:1f:51:ba:4f:83: ff:d9:1c:61:67:8c:2d:fa:ec:47:21:11:ec:4d:f3:0a:81:90: 0e:f2:dc:3e:ff:da:66:e9:98:f0:6d:3d:f7:2a:0b:65:8e:e2: 92:48:ce:cb:78:4b:a7:ba:9b:1e:f1:17:e0:d6:df:07:be:73: c8:df:fc:b7:ee:4f:da:10:ec:ec:db:79:2c:30:1f:03:4b:62: 21:39:db:f3:54:82:26:99:4d:a1:0e:29:da:a2:12:08:b4:3e: 86:8f:47:51:44:ad:44:06:ee:5a:5e:e6:93:70:f4:ae:cb:d7: 9c:43:d3:11:b3:12:14:df:bf:10:78:c7:d2:83:d5:f3:53:46: 42:be:73:d3:25:5d:16:fe:21:c0:09:ba:0c:b3:13:fb:86:66: 0c:6c:9c:ca:9a:3d:13:ca:a3:93:a9:9c:68:8f:29:e9:dd:2e: 40:68:c4:f5:14:2f:02:47:e7:d5:e1:4c:a5:de:8f:ed:02:1d: a3:ec:1e:ed:f4:47:72:af:ad:64:9b:68:1a:a8:05:fd:4a:30: d6:e5:68:7d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNRVT9kEhv8DHcXJpiIm16johWmowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDQyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTcwMjk0ZDFjODYwMjk5OThjYjdlZGZmN2MxMWY0NzVj NjA5NTQ2YjlkMjhjMWI5YjljMDJiNmMzMWRhMDAyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCufHNbKxdk6zmSCeSoIQyM7wnVK1AQUHWheUbEIzf3JKZt LrEzcHUVyVIOsUCp4kHNAtl8l0xm9Hh37Gt5T6PTBx4ZbtMGoO6twW7torgK5GBR Xf+8JSsefjh/5wQjdkO6LvcAJrYITJVhVXjFHT5FLz1qBW/JSLisT8NfrgULJU77 H9FG1GduIyVimo9Aq4ahljl+Z8Ni5u4sfDf1cTfAzv01QjVDqk8vp6sw+W8rdyAh MX88ktDpCyRfn5VzGpQqRMqPSIs/2SuMhLPzITOlvWv4LUgJt6c0UTgkqv81FPgI k4Wg2V1uJsTr0JcFhD71YnLF3VtYbz+bdcjTBnZ3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUsZYdt5rYnrMUSbVlRF+kBkZ2Fm8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdhZDI2YmI5LTJmNjktNDBlZS1iOTFhLTBjY2U2N2ZhNGE1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76DANBgkqhkiG9w0BAQsFAAOCAQEAkDv5ISiOwvjT8JvrctNkD4h/ Vc5yaP6GrS75gC27QQOwocVTKJvXyf4VeDhJALsBLh9Ruk+D/9kcYWeMLfrsRyER 7E3zCoGQDvLcPv/aZumY8G099yoLZY7ikkjOy3hLp7qbHvEX4NbfB75zyN/8t+5P 2hDs7Nt5LDAfA0tiITnb81SCJplNoQ4p2qISCLQ+ho9HUUStRAbuWl7mk3D0rsvX nEPTEbMSFN+/EHjH0oPV81NGQr5z0yVdFv4hwAm6DLMT+4ZmDGycypo9E8qjk6mc aI8p6d0uQGjE9RQvAkfn1eFMpd6P7QIdo+we7fRHcq+tZJtoGqgF/Uow1uVofQ== -----END CERTIFICATE-----Generated at Sun Jun 29 04:21:08 2025 by rpki-client