$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa File: 8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa (raw, json) Hash identifier: yBn7BF3UN/DXrRtgS6+ITKrEKIIGWmSN1BM2JcxXKps= Subject key identifier: A2:96:A4:49:F3:CF:13:A3:3F:87:77:0D:38:89:01:3F:11:FA:C8:6C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 730EF0D6AB7CCE40F1A5C1F4E6544EC71E0073D8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa Signing time: Thu 21 Aug 2025 22:38:10 +0000 ROA not before: Thu 21 Aug 2025 22:38:10 +0000 ROA not after: Thu 25 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0e:f0:d6:ab:7c:ce:40:f1:a5:c1:f4:e6:54:4e:c7:1e:00:73:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 21 22:38:10 2025 GMT Not After : Sep 25 23:59:59 2025 GMT Subject: serialNumber=54cd30dd4f7dabc6db6b535e5450fe788b28932583926e5807b0e212337f9096, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:74:00:d1:0e:1d:42:e2:33:96:4f:5d:99:4c: fc:0b:ac:94:af:a8:54:b6:49:99:fb:09:72:0a:7d: 41:7e:13:ff:76:be:57:36:6a:87:44:13:71:b8:fa: 9c:45:4e:7d:0f:81:de:2a:cb:18:65:12:f1:91:ce: 08:03:fa:f8:0e:c8:a5:36:a3:4e:20:51:b1:c6:7d: 30:99:f5:79:5b:e0:4d:6a:56:a9:bf:ee:6f:b1:a7: da:5b:33:7e:9e:53:73:60:37:e6:1f:4a:5a:69:10: df:f8:b4:8d:e1:e0:2a:61:9e:3b:12:7f:ba:8f:97: 47:2b:68:03:13:1b:5d:d4:11:67:59:e5:80:6f:37: 82:17:06:dc:71:bf:8c:fd:f8:74:c3:66:09:a3:74: 27:da:0c:0f:96:48:2a:d9:e0:d3:e2:02:de:3d:ed: cb:e1:4c:0b:fb:27:08:ce:76:a6:5b:cd:fc:f7:f2: 54:df:3e:e4:b1:79:62:31:74:96:e4:13:4d:8d:8b: 28:99:91:0b:3b:19:02:3f:81:d4:f3:06:7e:3f:da: 4b:41:ee:7d:18:16:54:56:bc:a6:17:a0:2e:42:81: 5e:63:fd:bb:50:63:8f:7f:d7:fb:4b:fb:83:ab:4a: bc:22:0a:d0:c2:4d:74:ac:ed:46:3e:ea:e0:28:db: 8e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:96:A4:49:F3:CF:13:A3:3F:87:77:0D:38:89:01:3F:11:FA:C8:6C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6122::/48 Signature Algorithm: sha256WithRSAEncryption 4f:2b:e1:bb:e6:20:62:cd:6a:24:af:66:d5:2e:7f:1c:1d:ad: e2:d3:9c:dc:79:ad:e1:e7:62:ac:04:02:e5:1a:3a:4d:9d:6d: d4:61:b2:3b:df:0f:e4:2a:73:12:3e:6f:40:94:4d:7e:ab:60: 03:ec:46:19:99:83:7c:27:d9:4a:4f:96:4d:63:27:40:43:4f: db:03:c3:ef:c7:8c:9a:54:c9:08:a0:ec:1b:89:67:2c:79:83: 50:72:a5:15:ec:46:32:f1:cf:d6:d9:49:fb:30:35:3b:45:b8: c6:b5:ba:17:86:bd:eb:cf:de:fb:1b:72:7f:f0:e1:5a:31:29: ba:f5:9a:8a:a8:eb:0f:ec:0f:d2:e3:ad:18:dc:95:da:79:52: a5:f4:2b:49:d3:41:b9:0b:e6:8a:1a:d1:6e:15:81:51:0d:d6: dc:2a:9e:96:bd:a7:5f:6f:b8:3c:ad:01:3e:0c:5d:80:ee:3e: ce:38:34:29:45:9b:94:26:f2:f5:9a:1d:5e:a1:8f:ca:da:ba: 10:17:22:96:86:7b:7a:aa:37:ed:bc:ac:6a:7b:7d:d0:05:67: d4:0b:7d:48:cd:b3:b7:04:e6:c9:e7:16:2c:35:fc:b2:f9:f6: d9:db:1f:db:e3:c7:06:24:72:33:63:c0:b6:aa:da:ea:18:ad: 76:eb:b5:1e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcw7w1qt8zkDxpcH05lROxx4Ac9gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODIxMjIzODEwWhcNMjUwOTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NGNkMzBkZDRmN2RhYmM2ZGI2YjUzNWU1NDUwZmU3ODhi Mjg5MzI1ODM5MjZlNTgwN2IwZTIxMjMzN2Y5MDk2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCadADRDh1C4jOWT12ZTPwLrJSvqFS2SZn7CXIKfUF+E/92 vlc2aodEE3G4+pxFTn0Pgd4qyxhlEvGRzggD+vgOyKU2o04gUbHGfTCZ9Xlb4E1q Vqm/7m+xp9pbM36eU3NgN+YfSlppEN/4tI3h4CphnjsSf7qPl0craAMTG13UEWdZ 5YBvN4IXBtxxv4z9+HTDZgmjdCfaDA+WSCrZ4NPiAt497cvhTAv7JwjOdqZbzfz3 8lTfPuSxeWIxdJbkE02NiyiZkQs7GQI/gdTzBn4/2ktB7n0YFlRWvKYXoC5CgV5j /btQY49/1/tL+4OrSrwiCtDCTXSs7UY+6uAo2477AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUopakSfPPE6M/h3cNOIkBPxH6yGwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhkZmM0MDY2LWZiYjMtNGM4MC1iNmQzLTllYTFmNDcxOWM4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSIwDQYJKoZIhvcNAQELBQADggEBAE8r4bvmIGLNaiSvZtUufxwd reLTnNx5reHnYqwEAuUaOk2dbdRhsjvfD+QqcxI+b0CUTX6rYAPsRhmZg3wn2UpP lk1jJ0BDT9sDw+/HjJpUyQig7BuJZyx5g1BypRXsRjLxz9bZSfswNTtFuMa1uheG vevP3vsbcn/w4VoxKbr1moqo6w/sD9LjrRjcldp5UqX0K0nTQbkL5ooa0W4VgVEN 1twqnpa9p19vuDytAT4MXYDuPs44NClFm5Qm8vWaHV6hj8rauhAXIpaGe3qqN+28 rGp7fdAFZ9QLfUjNs7cE5snnFiw1/LL59tnbH9vjxwYkcjNjwLaq2uoYrXbrtR4= -----END CERTIFICATE-----Generated at Sat Aug 23 08:21:28 2025 by rpki-client