$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa File: 8a8b863b-298e-48a9-bced-202e80d98f01.roa (raw, json) Hash identifier: DN8Md9vhDH+6xif3aQ6o/YqqAYMV1Lbp+urvPXE9gC8= Subject key identifier: 63:BF:FF:10:84:F0:2E:78:2B:5A:0E:ED:73:12:79:26:8E:5F:D9:02 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 03D2C35B8C01D211024FB4DBBF91876BC9FA4226 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa Signing time: Mon 16 Jun 2025 19:20:44 +0000 ROA not before: Mon 16 Jun 2025 19:20:44 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ee00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d2:c3:5b:8c:01:d2:11:02:4f:b4:db:bf:91:87:6b:c9:fa:42:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:44 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=1ef314b9f5cf47d12e8d9e040323f65be7fb50f4a6ba619526a0a6772e55fc4e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:45:f4:5d:5c:2b:d2:22:48:2d:72:aa:32: da:a3:1e:7c:8b:4c:b7:51:a3:56:34:e6:a5:1e:29: 09:fb:c4:f2:f6:12:51:c9:23:70:c1:bd:e5:04:a6: 28:ea:72:35:69:13:05:20:34:7c:db:f7:43:8a:e3: 28:c9:35:3e:cc:af:e1:30:66:f4:64:f0:3f:a9:07: 85:52:71:9e:51:72:ed:d5:57:e1:7a:19:66:62:05: ac:06:2c:2e:da:ad:e3:96:9b:06:77:ed:16:75:f4: 27:b3:62:9b:8a:d1:86:17:e7:dd:d2:68:14:10:92: fb:42:5b:61:5b:72:3a:80:6c:c4:ce:05:41:74:08: 17:8d:78:50:d5:f9:e5:b8:a8:68:f6:f2:56:23:63: 76:51:fb:96:6d:39:b4:66:ec:3b:3c:92:85:1f:72: 91:10:83:5e:89:f3:40:fc:6b:c3:29:a4:8d:48:a8: 19:d5:66:13:6f:5b:4c:d3:70:54:46:45:88:01:9f: 1c:71:54:83:f1:ca:47:c5:7d:4e:7b:a8:8a:23:be: 44:1c:dc:85:cd:fe:36:66:18:d5:51:40:2a:b2:41: 40:89:ed:ed:28:cb:c3:68:d7:53:b7:6a:8f:ff:6b: 0b:1c:e9:26:67:b2:9e:43:5c:b6:9f:61:95:26:2b: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BF:FF:10:84:F0:2E:78:2B:5A:0E:ED:73:12:79:26:8E:5F:D9:02 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ee00::/40 Signature Algorithm: sha256WithRSAEncryption a1:3a:17:81:bc:f7:a1:91:5f:d3:51:ef:75:85:02:c3:4c:14: 4c:94:1f:7e:d4:a0:04:5f:ee:46:fd:b8:2c:88:e7:be:41:2f: 25:d8:22:26:89:d2:56:cf:69:20:65:e5:0f:49:d1:67:a5:29: 39:b4:52:47:2a:00:74:95:8f:06:19:d9:48:89:4f:ac:f0:0a: ac:12:2d:4c:1e:92:41:2b:9a:40:9a:55:3c:10:33:5b:a1:1c: d1:1f:c5:d4:32:98:1e:32:e7:32:18:fe:2a:98:11:dd:bd:4e: 3a:79:b5:be:2d:35:24:bc:77:05:8c:ca:13:fe:be:01:b0:8b: 94:47:75:47:a5:5a:d9:65:91:53:ca:4d:fe:5a:7c:3a:f6:b7: 58:be:44:6a:29:eb:53:d2:c4:f3:1d:46:15:0e:d8:08:d1:0a: 94:3b:67:71:19:e4:5a:0d:d7:54:74:ec:e0:6d:fb:6e:8e:74: 35:c0:5a:04:b3:c3:1c:d1:93:4e:78:6a:81:ad:d5:8e:32:f0: 51:c4:9f:0a:2f:38:9f:cf:93:72:b7:d4:83:6a:fc:68:62:66: 63:c3:8f:26:3c:bc:65:ff:5c:67:d5:09:69:32:d6:17:ef:9a: bb:b9:c8:14:5a:03:95:d0:60:13:16:d9:55:c4:17:9e:8e:80: 08:d1:32:01 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUA9LDW4wB0hECT7Tbv5GHa8n6QiYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDQ0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZWYzMTRiOWY1Y2Y0N2QxMmU4ZDllMDQwMzIzZjY1YmU3 ZmI1MGY0YTZiYTYxOTUyNmEwYTY3NzJlNTVmYzRlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClrEX0XVwr0iJILXKqMtqjHnyLTLdRo1Y05qUeKQn7xPL2 ElHJI3DBveUEpijqcjVpEwUgNHzb90OK4yjJNT7Mr+EwZvRk8D+pB4VScZ5Rcu3V V+F6GWZiBawGLC7areOWmwZ37RZ19CezYpuK0YYX593SaBQQkvtCW2FbcjqAbMTO BUF0CBeNeFDV+eW4qGj28lYjY3ZR+5ZtObRm7Ds8koUfcpEQg16J80D8a8MppI1I qBnVZhNvW0zTcFRGRYgBnxxxVIPxykfFfU57qIojvkQc3IXN/jZmGNVRQCqyQUCJ 7e0oy8No11O3ao//awsc6SZnsp5DXLafYZUmKzzXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUY7//EITwLngrWg7tcxJ5Jo5f2QIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhhOGI4NjNiLTI5OGUtNDhhOS1iY2VkLTIwMmU4MGQ5OGYwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD77jANBgkqhkiG9w0BAQsFAAOCAQEAoToXgbz3oZFf01HvdYUCw0wU TJQfftSgBF/uRv24LIjnvkEvJdgiJonSVs9pIGXlD0nRZ6UpObRSRyoAdJWPBhnZ SIlPrPAKrBItTB6SQSuaQJpVPBAzW6Ec0R/F1DKYHjLnMhj+KpgR3b1OOnm1vi01 JLx3BYzKE/6+AbCLlEd1R6Va2WWRU8pN/lp8Ova3WL5EainrU9LE8x1GFQ7YCNEK lDtncRnkWg3XVHTs4G37bo50NcBaBLPDHNGTTnhqga3VjjLwUcSfCi84n8+TcrfU g2r8aGJmY8OPJjy8Zf9cZ9UJaTLWF++au7nIFFoDldBgExbZVcQXno6ACNEyAQ== -----END CERTIFICATE-----Generated at Sun Jun 29 08:04:24 2025 by rpki-client