$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab4b0199-6a63-46e2-9ecf-6c0bbea54035.roa File: ab4b0199-6a63-46e2-9ecf-6c0bbea54035.roa (raw, json) Hash identifier: aL5OtoUxCZU8nfUMIz4hRI9V9iqHxboyEpBoeLt0rGk= Subject key identifier: 74:F1:FF:86:E1:17:B1:DF:03:E1:97:79:FC:AB:74:E1:06:64:A1:8A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 33D75C7ED3590B8F7856BAF972882F77C582769A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab4b0199-6a63-46e2-9ecf-6c0bbea54035.roa Signing time: Mon 16 Jun 2025 19:31:00 +0000 ROA not before: Mon 16 Jun 2025 19:31:00 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d7:5c:7e:d3:59:0b:8f:78:56:ba:f9:72:88:2f:77:c5:82:76:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:31:00 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=9750f6d2f9b93e61c3433fa69f3a10f310bb510a5bcd8fb49c743c82bfeb84ce, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:26:b9:7c:8b:dc:90:2d:93:be:4b:e4:e8:33: 44:97:52:fe:ff:7a:1f:0d:02:8f:e0:0b:ac:a9:0a: 71:dc:16:2d:a8:21:2e:c0:ad:ba:4d:3f:ce:d5:29: 77:32:96:1d:01:3c:61:ed:5c:ed:cd:a3:38:d9:83: 48:58:18:3e:2b:70:90:8f:4d:ae:47:87:d2:02:93: 17:a4:96:ad:af:96:76:41:8a:94:b8:27:e5:8b:f8: cc:2f:a6:20:90:e6:1e:21:9e:aa:96:da:9b:5a:bb: 9b:c9:02:17:12:6e:b5:d0:3a:53:cf:7a:cd:12:29: 98:2e:e6:ef:a5:91:d8:e6:dd:23:17:62:40:1f:23: a6:08:a5:b6:f4:f9:53:dd:d8:73:f7:5f:a4:5b:4f: 79:43:13:c8:b7:34:84:c0:af:24:1c:37:eb:b0:41: 98:0d:29:3c:e2:f2:b4:54:2c:77:be:d7:11:9e:e0: 29:f3:1e:e4:9b:60:91:fb:fe:f2:3d:e8:62:03:a1: 50:ff:86:34:e9:9b:8d:7f:7b:26:ed:bb:3f:60:f0: df:61:a1:a0:8c:4d:e1:a8:87:7f:1d:f7:95:15:a6: 97:7b:17:30:30:74:d7:fb:14:5b:c2:26:9c:17:6d: e3:f9:f0:56:42:30:bb:36:f6:92:45:e0:83:3b:8f: d2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F1:FF:86:E1:17:B1:DF:03:E1:97:79:FC:AB:74:E1:06:64:A1:8A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab4b0199-6a63-46e2-9ecf-6c0bbea54035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e600::/40 Signature Algorithm: sha256WithRSAEncryption 27:c6:60:7a:7a:20:ed:ad:5c:c9:f7:dc:fe:f8:9f:2a:61:7c: 18:d1:c1:cf:0b:53:6c:4e:36:1e:d6:63:43:0a:7a:3d:36:45: 98:6e:e2:be:a3:7c:9a:30:14:3f:99:8b:ff:80:df:67:9e:48: 1c:ab:dc:09:21:d0:4c:ca:0c:3f:f0:66:e5:7c:8a:73:98:d2: c0:59:02:04:1d:aa:1b:e6:0a:45:1c:db:e6:99:14:d8:05:7e: 93:dc:c7:7e:26:d4:50:bb:3d:91:99:eb:2c:39:f4:0b:09:92: da:8a:dc:8b:bb:67:dc:82:7b:16:6e:38:49:c8:35:ae:fd:d4: d7:07:b7:fa:d0:9f:05:aa:75:5e:c6:f8:02:b5:af:67:52:43: 13:de:71:9c:7c:44:ca:62:d5:ad:ae:be:11:aa:01:11:f8:c5: 12:fb:92:c9:0f:a4:51:d7:2a:8a:11:73:47:a6:81:75:8a:ae: 3f:75:45:c8:0e:28:4d:75:f2:06:89:cc:82:cd:2a:9b:44:a5: d1:07:4a:be:2f:bf:73:ad:5d:31:57:4d:95:ed:09:21:93:80: 23:52:d9:9f:9a:4d:5e:cb:17:47:fd:c8:9a:f5:56:96:63:bd: f7:3d:a0:70:72:b9:8e:9a:09:b4:ac:56:1b:be:22:a2:50:63: 72:e6:03:d5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUM9dcftNZC494Vrr5cogvd8WCdpowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkzMTAwWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzUwZjZkMmY5YjkzZTYxYzM0MzNmYTY5ZjNhMTBmMzEw YmI1MTBhNWJjZDhmYjQ5Yzc0M2M4MmJmZWI4NGNlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfJrl8i9yQLZO+S+ToM0SXUv7/eh8NAo/gC6ypCnHcFi2o IS7ArbpNP87VKXcylh0BPGHtXO3NozjZg0hYGD4rcJCPTa5Hh9ICkxeklq2vlnZB ipS4J+WL+MwvpiCQ5h4hnqqW2ptau5vJAhcSbrXQOlPPes0SKZgu5u+lkdjm3SMX YkAfI6YIpbb0+VPd2HP3X6RbT3lDE8i3NITAryQcN+uwQZgNKTzi8rRULHe+1xGe 4CnzHuSbYJH7/vI96GIDoVD/hjTpm41/eybtuz9g8N9hoaCMTeGoh38d95UVppd7 FzAwdNf7FFvCJpwXbeP58FZCMLs29pJF4IM7j9KrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUdPH/huEXsd8D4Zd5/Kt04QZkoYowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FiNGIwMTk5LTZhNjMtNDZlMi05ZWNmLTZjMGJiZWE1NDAzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD75jANBgkqhkiG9w0BAQsFAAOCAQEAJ8Zgenog7a1cyffc/vifKmF8 GNHBzwtTbE42HtZjQwp6PTZFmG7ivqN8mjAUP5mL/4DfZ55IHKvcCSHQTMoMP/Bm 5XyKc5jSwFkCBB2qG+YKRRzb5pkU2AV+k9zHfibUULs9kZnrLDn0CwmS2orci7tn 3IJ7Fm44Scg1rv3U1we3+tCfBap1Xsb4ArWvZ1JDE95xnHxEymLVra6+EaoBEfjF EvuSyQ+kUdcqihFzR6aBdYquP3VFyA4oTXXyBonMgs0qm0Sl0QdKvi+/c61dMVdN le0JIZOAI1LZn5pNXssXR/3ImvVWlmO99z2gcHK5jpoJtKxWG74iolBjcuYD1Q== -----END CERTIFICATE-----Generated at Tue Jul 1 17:19:02 2025 by rpki-client