$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8098420f-108f-4bc5-8d8c-6d62621f83e9.roa File: 8098420f-108f-4bc5-8d8c-6d62621f83e9.roa (raw, json) Hash identifier: 6wPRnjviGbSmFjlBa1aYaOEqpXPSgQW0fK0MBKItKYw= Subject key identifier: 0C:6A:95:02:51:09:68:76:F7:EB:13:0A:49:8D:40:0A:61:39:2D:81 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7CCF9807FE1412D54560934986E6E521EBCD4DE4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8098420f-108f-4bc5-8d8c-6d62621f83e9.roa Signing time: Fri 22 Aug 2025 15:00:17 +0000 ROA not before: Fri 22 Aug 2025 15:00:17 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:cf:98:07:fe:14:12:d5:45:60:93:49:86:e6:e5:21:eb:cd:4d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 22 15:00:17 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=ad0a907cbf2ea25b7e49216c75b1e5cebd4403f5287b8b931c265371d2da69e3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:52:5a:b8:90:a3:2e:6f:fb:0a:7c:20:d3: 0d:47:f6:0a:f6:e9:d0:cb:2d:42:13:58:5a:31:e9: c8:84:63:89:3d:c2:38:5a:f6:d2:98:f2:cc:3e:94: 9f:bb:c1:53:48:70:4f:94:91:bc:ce:6f:2f:7b:09: ed:5b:a7:5a:ec:ba:b3:55:fc:56:67:18:06:ad:8b: 9c:fe:8a:2c:0d:fa:63:07:7b:23:14:91:30:0f:25: 26:b7:11:94:3e:b6:d1:55:0d:9e:65:d5:31:11:c6: 67:fc:47:97:de:03:59:29:5e:ed:cc:2c:4d:c2:75: a2:ec:cd:58:19:e0:52:a2:ec:a6:26:2f:18:50:bd: 3d:2b:4e:ff:f9:e3:e5:82:3f:a2:a3:db:5a:bf:c6: 19:72:ef:8a:5d:da:53:3e:12:33:52:8f:37:3a:f5: e7:0e:b8:3b:82:66:e8:77:20:ed:71:9e:09:69:b1: ec:95:34:07:6e:14:c6:eb:17:43:2b:6b:46:aa:87: 67:47:5f:e7:22:59:f9:49:9e:f0:95:f6:f9:b6:d9: 2d:f2:5e:3e:c5:1d:4a:f8:d7:e0:ac:47:af:ac:cb: 71:b5:92:ad:a5:a8:f5:b5:7e:09:f2:89:a9:6f:0d: 5f:a6:3e:9e:01:67:bd:2a:cc:e5:d4:7a:11:7d:7b: 62:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6A:95:02:51:09:68:76:F7:EB:13:0A:49:8D:40:0A:61:39:2D:81 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8098420f-108f-4bc5-8d8c-6d62621f83e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7012::/48 Signature Algorithm: sha256WithRSAEncryption 11:5a:09:4c:e7:7d:5f:d2:51:91:61:42:7a:8f:d0:f2:37:57: a1:e5:fc:58:84:da:b6:00:98:e4:4e:56:8d:b8:2e:14:90:0a: ac:34:79:d8:b4:34:e5:fa:49:d9:2c:65:06:b9:29:68:cc:43: e5:3c:64:0e:c0:3e:67:c1:1e:51:5a:1e:76:65:03:c7:1c:98: 5a:26:a3:23:cd:4f:de:65:dc:5a:78:7d:43:bb:be:0c:dd:92: 12:37:c4:e2:83:6c:78:22:02:eb:5a:9d:50:79:85:8d:78:b8: 48:8b:b7:35:20:c7:e8:4c:1f:19:b8:e9:45:da:bd:ed:e8:58: da:4a:8a:48:1d:8a:95:8a:76:8e:b0:f1:76:9a:d4:0b:1a:03: 32:f0:1a:cd:b3:14:09:cf:94:32:3a:3b:70:1a:80:23:1f:e5: ad:93:0e:27:d5:d9:54:e7:2e:80:23:87:80:08:ca:5d:0a:d8: 49:51:25:0c:e5:8c:c8:ad:d7:2c:36:98:73:fe:c9:18:3f:d0: ff:83:f9:3d:c4:fe:39:76:8b:ff:e5:25:0c:33:3b:15:30:54: 08:9f:f9:4c:39:59:98:c5:d2:8e:4c:cb:26:d0:7a:aa:35:be: dd:c2:c1:88:55:1e:4f:04:6e:76:24:5a:54:2f:18:4c:78:9c: 0a:20:a8:b4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfM+YB/4UEtVFYJNJhublIevNTeQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODIyMTUwMDE3WhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDBhOTA3Y2JmMmVhMjViN2U0OTIxNmM3NWIxZTVjZWJk NDQwM2Y1Mjg3YjhiOTMxYzI2NTM3MWQyZGE2OWUzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrklJauJCjLm/7Cnwg0w1H9gr26dDLLUITWFox6ciEY4k9 wjha9tKY8sw+lJ+7wVNIcE+UkbzOby97Ce1bp1rsurNV/FZnGAati5z+iiwN+mMH eyMUkTAPJSa3EZQ+ttFVDZ5l1TERxmf8R5feA1kpXu3MLE3CdaLszVgZ4FKi7KYm LxhQvT0rTv/54+WCP6Kj21q/xhly74pd2lM+EjNSjzc69ecOuDuCZuh3IO1xnglp seyVNAduFMbrF0Mra0aqh2dHX+ciWflJnvCV9vm22S3yXj7FHUr41+CsR6+sy3G1 kq2lqPW1fgnyialvDV+mPp4BZ70qzOXUehF9e2J3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDGqVAlEJaHb36xMKSY1ACmE5LYEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzgwOTg0MjBmLTEwOGYtNGJjNS04ZDhjLTZkNjI2MjFmODNlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBIwDQYJKoZIhvcNAQELBQADggEBABFaCUznfV/SUZFhQnqP0PI3 V6Hl/FiE2rYAmOROVo24LhSQCqw0edi0NOX6SdksZQa5KWjMQ+U8ZA7APmfBHlFa HnZlA8ccmFomoyPNT95l3Fp4fUO7vgzdkhI3xOKDbHgiAutanVB5hY14uEiLtzUg x+hMHxm46UXave3oWNpKikgdipWKdo6w8Xaa1AsaAzLwGs2zFAnPlDI6O3AagCMf 5a2TDifV2VTnLoAjh4AIyl0K2ElRJQzljMit1yw2mHP+yRg/0P+D+T3E/jl2i//l JQwzOxUwVAif+Uw5WZjF0o5MyybQeqo1vt3CwYhVHk8EbnYkWlQvGEx4nAogqLQ= -----END CERTIFICATE-----Generated at Sat Aug 23 06:49:09 2025 by rpki-client