$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa File: adb258f2-061e-4e94-b6ee-d4de9405ec61.roa (raw, json) Hash identifier: yyLsNUid7+MNTLSI6IvVSZRp3kKjjo12tKYSj7yoGx8= Subject key identifier: 2F:45:0B:3E:30:BB:7E:88:09:95:C6:F1:0D:53:3B:CC:53:F0:BA:9C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2C7EF011A3AD236801597B0E3B6CD7BA0B2A1154 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa Signing time: Mon 16 Jun 2025 19:31:09 +0000 ROA not before: Mon 16 Jun 2025 19:31:09 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7e:f0:11:a3:ad:23:68:01:59:7b:0e:3b:6c:d7:ba:0b:2a:11:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:31:09 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=0b3c9f50c90ef5aed011026c0b731eb9382594c7bd453cdd21c2f930e7111069, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:ab:ec:d1:be:8f:ba:17:a3:05:d5:13:3b: 37:bc:85:ec:8e:04:3d:01:3b:2e:1f:be:ce:3b:34: cf:76:52:21:62:d1:98:59:02:16:14:b3:cb:b9:f7: 23:e4:5b:1a:d7:e0:98:69:4f:0f:c7:17:2b:c6:0d: c6:98:dc:d4:e2:93:3c:60:eb:f3:1e:c8:ae:66:9d: 33:e1:f5:65:60:17:93:34:e5:3d:23:d8:b5:2e:da: d3:ee:59:0d:1d:32:ba:2e:7c:65:da:e3:8a:0c:1d: 6d:99:a4:97:8d:df:6e:e2:35:12:1c:4f:b3:0b:18: 2f:52:d9:99:11:6a:62:9f:e5:af:05:ce:b7:22:b2: b5:5c:52:ce:95:96:18:00:45:ff:b2:70:43:17:7a: 7b:30:e3:66:ac:42:bc:d2:23:20:a0:1c:80:2b:dd: e9:4f:b9:dc:1a:8f:1e:8d:37:56:ba:31:cd:d5:34: 67:19:fc:47:d5:ad:a0:1e:b0:38:45:6b:7a:93:4b: b1:fe:af:1e:45:63:0e:2d:a6:f1:fc:39:59:0a:ea: 15:1a:19:06:d4:d0:36:de:a9:bf:57:4f:58:c3:9d: 93:d3:5f:1e:2e:88:6e:67:f4:f6:ac:4d:32:a5:dd: ad:c2:12:25:93:49:76:7b:a0:ae:e4:a2:60:8f:a8: 5a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:45:0B:3E:30:BB:7E:88:09:95:C6:F1:0D:53:3B:CC:53:F0:BA:9C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:8000::/40 Signature Algorithm: sha256WithRSAEncryption 2c:5e:41:7e:64:12:ea:3f:b1:31:3d:ac:c1:43:4c:5c:82:b4: c0:be:8d:be:3f:f7:5e:4d:54:a5:48:cd:da:f7:01:5d:46:e4: 3b:73:94:7e:83:1b:13:11:e4:20:8c:7c:9d:97:79:a1:a6:39: 9d:05:bb:69:3d:8d:23:67:c4:92:37:2c:09:76:a0:dc:2c:97: 27:29:a3:63:2a:35:8e:19:de:3f:5b:f8:d3:47:d8:ef:04:55: 1a:6b:00:77:bd:f0:ad:5c:8e:27:dd:ca:c9:ae:9a:1e:98:5a: 7c:41:ca:c5:3b:ae:01:f0:23:e5:92:ee:51:01:05:55:d3:7f: c7:73:96:e3:7b:99:80:0a:04:27:6a:da:e9:e7:e3:d5:88:ec: 7d:bc:76:c7:23:ce:a7:20:c8:e2:dc:72:1d:f1:ed:71:ae:b2: fd:cb:b8:b6:35:aa:68:fb:c5:12:32:12:27:21:0a:c0:33:fe: 2c:39:36:33:f5:46:2a:1e:0c:47:58:b0:c7:d4:c1:49:18:d6: a1:37:76:b3:32:a3:aa:dc:19:a4:67:27:35:c6:6f:75:30:b1: c4:d6:54:25:80:21:57:de:38:b8:f1:a8:11:88:b4:85:ab:bc: d4:58:af:bc:d6:b4:b9:86:12:07:c4:8e:3c:41:3d:20:a3:9c: e3:e8:e3:f6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULH7wEaOtI2gBWXsOO2zXugsqEVQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkzMTA5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjNjOWY1MGM5MGVmNWFlZDAxMTAyNmMwYjczMWViOTM4 MjU5NGM3YmQ0NTNjZGQyMWMyZjkzMGU3MTExMDY5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTLKvs0b6PuhejBdUTOze8heyOBD0BOy4fvs47NM92UiFi 0ZhZAhYUs8u59yPkWxrX4JhpTw/HFyvGDcaY3NTikzxg6/MeyK5mnTPh9WVgF5M0 5T0j2LUu2tPuWQ0dMroufGXa44oMHW2ZpJeN327iNRIcT7MLGC9S2ZkRamKf5a8F zrcisrVcUs6VlhgARf+ycEMXensw42asQrzSIyCgHIAr3elPudwajx6NN1a6Mc3V NGcZ/EfVraAesDhFa3qTS7H+rx5FYw4tpvH8OVkK6hUaGQbU0Dbeqb9XT1jDnZPT Xx4uiG5n9PasTTKl3a3CEiWTSXZ7oK7komCPqFq/AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUL0ULPjC7fogJlcbxDVM7zFPwupwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FkYjI1OGYyLTA2MWUtNGU5NC1iNmVlLWQ0ZGU5NDA1ZWM2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwgDANBgkqhkiG9w0BAQsFAAOCAQEALF5BfmQS6j+xMT2swUNMXIK0 wL6Nvj/3Xk1UpUjN2vcBXUbkO3OUfoMbExHkIIx8nZd5oaY5nQW7aT2NI2fEkjcs CXag3CyXJymjYyo1jhneP1v400fY7wRVGmsAd73wrVyOJ93Kya6aHphafEHKxTuu AfAj5ZLuUQEFVdN/x3OW43uZgAoEJ2ra6efj1Yjsfbx2xyPOpyDI4txyHfHtca6y /cu4tjWqaPvFEjISJyEKwDP+LDk2M/VGKh4MR1iwx9TBSRjWoTd2szKjqtwZpGcn NcZvdTCxxNZUJYAhV944uPGoEYi0hau81FivvNa0uYYSB8SOPEE9IKOc4+jj9g== -----END CERTIFICATE-----Generated at Sun Jun 29 04:30:46 2025 by rpki-client