$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b863f23f-4426-4c77-a614-689e722bb8c6.roa File: b863f23f-4426-4c77-a614-689e722bb8c6.roa (raw, json) Hash identifier: 6cJWwSN/P3Bcfb5Dlb8T4i4tqRMEpKA+ztuLZWmFbAc= Subject key identifier: F7:95:9D:72:79:A9:C9:CB:7C:D3:7F:2E:E8:21:7B:DB:16:07:D8:C1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 50B309E350C6963FB8528C46C1A3C575BD13382B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b863f23f-4426-4c77-a614-689e722bb8c6.roa Signing time: Mon 18 Aug 2025 18:24:10 +0000 ROA not before: Mon 18 Aug 2025 18:24:10 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b3:09:e3:50:c6:96:3f:b8:52:8c:46:c1:a3:c5:75:bd:13:38:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 18 18:24:10 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=c805d38972ec8bcac7889823cf5599af5873d4664acdfa99f6cdfb27ed557837, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:31:73:58:67:3d:82:5e:17:db:46:ce:bc: 33:bb:dd:cd:83:ec:e4:fa:94:c5:dc:8b:2b:40:49: 77:2d:71:90:50:9e:47:f0:6a:5a:b4:ab:c9:a0:95: f5:e5:53:d8:5c:f6:e3:2f:80:f8:b8:7c:69:20:02: 19:39:96:1d:ab:a2:75:3f:12:db:08:eb:bc:a2:43: a8:cb:e7:9b:32:74:29:68:07:d9:6a:01:1f:75:86: 7c:d3:0d:ee:85:01:92:c3:18:6f:ef:78:93:dd:79: 0e:b4:0d:8e:4d:88:0b:ce:4a:58:5f:42:28:a3:fa: 36:19:83:94:a9:2f:2a:94:ab:44:38:10:3b:c0:48: c2:2a:be:48:b2:50:ff:2f:2b:6e:88:e9:41:30:45: 7d:fa:55:20:44:4d:ef:02:38:01:f9:0d:51:92:0e: 84:89:3e:ff:49:cf:40:2c:82:db:63:00:83:eb:7b: 7f:1c:d0:18:9c:ec:0a:b8:58:8b:58:d4:8e:9a:51: 8d:51:1c:a1:98:4c:51:70:9b:33:5d:5c:97:a5:78: 22:95:4b:aa:3e:90:8b:81:a3:0a:36:a6:6f:ba:3c: 9f:85:b2:29:e1:1e:df:4e:0e:d3:a9:69:43:c1:73: 31:35:64:b0:03:6e:7d:d5:89:84:c1:03:11:2e:64: 23:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:95:9D:72:79:A9:C9:CB:7C:D3:7F:2E:E8:21:7B:DB:16:07:D8:C1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b863f23f-4426-4c77-a614-689e722bb8c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6121::/48 Signature Algorithm: sha256WithRSAEncryption 06:e9:35:bc:45:c5:67:5a:6b:dc:2e:a4:0e:04:23:5e:08:ef: 88:ee:7e:5b:f3:48:f6:fd:69:87:63:f0:bf:ce:6a:4b:d6:a7: 0a:01:4b:bc:7f:16:e5:93:c7:be:cf:df:dd:5a:27:a9:37:41: 4c:b9:8a:f6:1b:ed:a7:2e:1f:53:28:e0:ad:f2:94:b0:f3:f9: 10:3e:51:41:2e:16:01:ad:9f:d2:db:8c:64:62:87:53:7d:63: 53:32:0f:1e:32:f9:80:44:b6:9b:24:22:c2:c9:4d:29:e7:09: 41:71:b1:76:45:29:7d:56:24:ab:53:2e:9f:a6:bf:19:50:6e: bb:f1:d2:6f:b5:03:14:12:00:b8:bf:2a:fe:a8:ff:5a:47:76: 29:2c:da:59:9d:72:6c:03:34:3a:10:bf:e9:3e:99:7e:34:32: 53:53:b5:44:5c:d4:da:20:48:56:ed:61:85:07:96:5e:b0:a8: 34:4a:39:b9:18:21:a6:b4:0f:25:c5:ce:5e:d6:d9:cf:f8:e2: 91:d7:cb:f0:5e:92:d7:3b:40:4a:8f:ce:cf:7e:23:f0:3b:b3: 7d:e1:56:43:4c:1f:d9:c0:d4:16:c4:7e:f3:ca:59:78:5c:26: 6f:f5:df:13:db:a5:7a:c2:ab:3c:96:eb:d9:6d:41:42:cc:44: 7b:a6:0c:f3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUULMJ41DGlj+4UoxGwaPFdb0TOCswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE4MTgyNDEwWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjODA1ZDM4OTcyZWM4YmNhYzc4ODk4MjNjZjU1OTlhZjU4 NzNkNDY2NGFjZGZhOTlmNmNkZmIyN2VkNTU3ODM3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrETFzWGc9gl4X20bOvDO73c2D7OT6lMXciytASXctcZBQ nkfwalq0q8mglfXlU9hc9uMvgPi4fGkgAhk5lh2ronU/EtsI67yiQ6jL55sydClo B9lqAR91hnzTDe6FAZLDGG/veJPdeQ60DY5NiAvOSlhfQiij+jYZg5SpLyqUq0Q4 EDvASMIqvkiyUP8vK26I6UEwRX36VSBETe8COAH5DVGSDoSJPv9Jz0AsgttjAIPr e38c0Bic7Aq4WItY1I6aUY1RHKGYTFFwmzNdXJeleCKVS6o+kIuBowo2pm+6PJ+F sinhHt9ODtOpaUPBczE1ZLADbn3ViYTBAxEuZCOVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU95Wdcnmpyct8038u6CF72xYH2MEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I4NjNmMjNmLTQ0MjYtNGM3Ny1hNjE0LTY4OWU3MjJiYjhjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSEwDQYJKoZIhvcNAQELBQADggEBAAbpNbxFxWdaa9wupA4EI14I 74juflvzSPb9aYdj8L/OakvWpwoBS7x/FuWTx77P391aJ6k3QUy5ivYb7acuH1Mo 4K3ylLDz+RA+UUEuFgGtn9LbjGRih1N9Y1MyDx4y+YBEtpskIsLJTSnnCUFxsXZF KX1WJKtTLp+mvxlQbrvx0m+1AxQSALi/Kv6o/1pHdiks2lmdcmwDNDoQv+k+mX40 MlNTtURc1NogSFbtYYUHll6wqDRKObkYIaa0DyXFzl7W2c/44pHXy/Bektc7QEqP zs9+I/A7s33hVkNMH9nA1BbEfvPKWXhcJm/13xPbpXrCqzyW69ltQULMRHumDPM= -----END CERTIFICATE-----Generated at Sat Aug 23 06:40:28 2025 by rpki-client