$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa File: 8638aa88-01e8-41ec-a10e-f2452ac701be.roa (raw, json) Hash identifier: qz9e7yCv7dJ/c4945h7ejm5bK7eEVbwNzAeMTip88d8= Subject key identifier: 9B:4A:EE:3F:69:E5:81:9D:0B:92:88:20:CD:8F:AB:BC:6B:43:7A:67 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 758B92B0821A5605F7276EBB92FA0020176B3A1F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa Signing time: Mon 16 Jun 2025 19:20:17 +0000 ROA not before: Mon 16 Jun 2025 19:20:17 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ed00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8b:92:b0:82:1a:56:05:f7:27:6e:bb:92:fa:00:20:17:6b:3a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:17 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=8ce098e7b1092e29fbfbd398c6b5c7aec1687f2b8484f6846b5c203b1fb57189, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1a:ca:78:62:36:d3:a4:1e:26:ea:d3:49:8b: 4c:6c:a4:63:b8:ef:ab:17:28:22:08:12:b8:12:de: 48:9a:1c:a3:6b:66:19:ce:d5:58:fc:1c:65:78:e7: 7f:75:e0:1b:96:36:97:66:94:4f:f2:71:6e:82:1b: 4b:75:f5:af:a2:3d:de:47:45:f3:c3:f5:30:9d:56: 51:d8:ae:c7:6b:78:3c:7d:29:17:dd:30:11:ff:b4: 1d:68:3c:49:b5:4e:a5:e4:9e:d1:0f:5e:ed:2f:76: e7:f9:66:98:5b:e0:57:f8:ca:f5:de:81:67:7f:27: b3:9d:ca:4e:ad:ec:e3:32:b7:ca:0c:0b:1b:3c:97: 60:2b:38:5e:a0:1c:19:88:ff:15:c3:60:ca:b5:fb: 75:99:7b:54:8a:97:a3:ac:5a:30:f2:d6:a2:8e:de: a7:c5:f6:73:55:cf:6d:0b:f0:b1:57:b1:0b:08:d6: 74:cb:a9:fc:4b:d3:8e:82:26:22:d1:2e:bb:74:b0: 5b:89:93:70:9a:3b:23:99:45:b9:6e:c7:a7:47:cd: 52:f3:3c:b2:02:60:26:25:80:9c:fc:d7:96:c0:6b: c5:07:15:c8:a0:dc:5f:2d:f9:f1:00:f7:0b:cb:3a: 50:15:26:c5:79:db:9e:72:7c:86:d4:b1:16:27:c2: 7c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4A:EE:3F:69:E5:81:9D:0B:92:88:20:CD:8F:AB:BC:6B:43:7A:67 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ed00::/42 Signature Algorithm: sha256WithRSAEncryption 0a:ee:7d:46:fb:28:12:c2:5b:fa:a3:57:72:04:bf:a6:bd:1d: 41:9e:f4:ba:7b:e4:4d:c9:85:e4:2b:b0:11:f4:6e:b8:a5:ac: b7:90:4d:db:09:80:cf:57:c8:9f:74:e5:64:fe:18:62:24:ee: 81:b3:c5:c6:17:08:d6:b0:df:6d:78:32:2f:75:e3:07:e4:7c: 2f:cc:a5:51:f2:3f:fe:a1:5e:70:24:59:cb:e1:2c:cb:df:bd: 00:d7:e3:0e:bf:d7:b3:73:c0:39:a6:93:cd:9b:c2:45:09:d8: b8:18:3c:9d:5d:6b:24:32:68:db:42:72:75:f0:6d:76:d2:ab: 45:7d:5b:8c:83:7d:42:2c:36:bb:12:a0:6b:f9:63:ee:5b:e3: 89:cc:e4:f1:d0:9f:81:6d:2a:d2:7a:29:a7:c2:09:f7:e6:c6: 59:58:2c:f6:59:6c:a0:e7:4d:1d:59:17:77:ab:c6:d5:cc:d0: 8a:74:89:f5:b4:34:de:4e:3e:8b:f1:d7:25:eb:4a:d5:2e:b6: 8e:13:97:7b:39:e1:f5:55:df:cb:79:75:b4:12:68:d9:1f:9b: 2c:8e:ea:b9:96:5f:15:e3:70:b9:9f:d9:e3:1e:fc:c0:ec:6b: 85:2d:0d:9d:d1:2c:36:f9:ac:2e:97:69:e0:07:c5:28:d5:7c: 99:e0:50:e8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdYuSsIIaVgX3J267kvoAIBdrOh8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDE3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2UwOThlN2IxMDkyZTI5ZmJmYmQzOThjNmI1YzdhZWMx Njg3ZjJiODQ4NGY2ODQ2YjVjMjAzYjFmYjU3MTg5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3Gsp4YjbTpB4m6tNJi0xspGO476sXKCIIErgS3kiaHKNr ZhnO1Vj8HGV453914BuWNpdmlE/ycW6CG0t19a+iPd5HRfPD9TCdVlHYrsdreDx9 KRfdMBH/tB1oPEm1TqXkntEPXu0vduf5Zphb4Ff4yvXegWd/J7Odyk6t7OMyt8oM Cxs8l2ArOF6gHBmI/xXDYMq1+3WZe1SKl6OsWjDy1qKO3qfF9nNVz20L8LFXsQsI 1nTLqfxL046CJiLRLrt0sFuJk3CaOyOZRblux6dHzVLzPLICYCYlgJz815bAa8UH Fcig3F8t+fEA9wvLOlAVJsV5255yfIbUsRYnwnwnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUm0ruP2nlgZ0LkoggzY+rvGtDemcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg2MzhhYTg4LTAxZTgtNDFlYy1hMTBlLWYyNDUyYWM3MDFiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77QAwDQYJKoZIhvcNAQELBQADggEBAArufUb7KBLCW/qjV3IEv6a9 HUGe9Lp75E3JheQrsBH0brilrLeQTdsJgM9XyJ905WT+GGIk7oGzxcYXCNaw3214 Mi914wfkfC/MpVHyP/6hXnAkWcvhLMvfvQDX4w6/17NzwDmmk82bwkUJ2LgYPJ1d ayQyaNtCcnXwbXbSq0V9W4yDfUIsNrsSoGv5Y+5b44nM5PHQn4FtKtJ6KafCCffm xllYLPZZbKDnTR1ZF3erxtXM0Ip0ifW0NN5OPovx1yXrStUuto4Tl3s54fVV38t5 dbQSaNkfmyyO6rmWXxXjcLmf2eMe/MDsa4UtDZ3RLDb5rC6XaeAHxSjVfJngUOg= -----END CERTIFICATE-----Generated at Wed Jul 2 02:04:57 2025 by rpki-client