$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa File: b90bcce5-377e-4df4-b77e-97a06ec916c4.roa (raw, json) Hash identifier: IEZ59cPapy/La5GPU8vQJREumDV849Czg/LlcODoLBI= Subject key identifier: 29:FF:EF:B2:1E:8B:35:B7:AC:13:65:77:A2:F6:50:5E:F0:4F:94:FB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5FC19DE95128859C902CF78DE81007D7B6A05376 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa Signing time: Mon 16 Jun 2025 19:20:34 +0000 ROA not before: Mon 16 Jun 2025 19:20:34 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c1:9d:e9:51:28:85:9c:90:2c:f7:8d:e8:10:07:d7:b6:a0:53:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:34 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=3dd023bb439c1c61d56f5a4b5df28c9754cb86b16e11179d059826485e3f5493, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:43:b0:46:38:04:f1:00:c5:4b:91:64:b9:04: 1a:94:be:80:08:42:af:57:fd:bd:cd:e5:b0:05:e9: 91:80:84:f4:e4:30:30:3e:36:7f:ee:f6:63:a5:e9: 0a:c6:42:f6:1f:18:3a:bd:7b:27:b3:3c:d6:c2:b0: 4f:87:04:52:42:0c:ef:39:70:85:14:e9:7b:ec:12: 45:e7:ee:60:86:8e:2b:f1:24:b9:cf:a0:f6:1c:68: a8:b3:d3:c3:7f:8c:05:bb:b4:8f:89:f3:c4:63:16: 74:8c:93:bd:17:96:c6:0e:b4:ad:6a:8c:9d:b9:97: 67:78:e4:c8:7b:5f:b8:d4:41:c4:64:7e:c6:7a:a6: fc:3b:23:20:e6:71:29:e2:07:bd:a4:08:42:9d:30: 38:f3:3d:93:d7:0c:dd:e1:9f:cc:e8:8e:29:37:90: 80:bb:9e:2b:a0:57:e0:24:e2:eb:d2:51:c2:86:43: cb:81:c7:99:d8:f6:81:e4:ff:ff:c4:7c:d0:f4:52: 09:7b:1f:cc:5c:1f:46:cf:1e:b6:79:ee:59:d0:12: 5c:db:57:a8:3d:3e:a9:39:aa:38:68:1f:0a:d1:23: 10:81:33:db:41:6d:4b:86:11:ad:02:d3:11:80:ff: dd:74:82:d3:ac:67:b7:54:8e:da:48:04:43:4e:b0: df:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FF:EF:B2:1E:8B:35:B7:AC:13:65:77:A2:F6:50:5E:F0:4F:94:FB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:30::/44 Signature Algorithm: sha256WithRSAEncryption 87:94:25:c1:fe:37:d7:5d:70:67:d4:de:ae:4e:c8:d9:71:a7: 2b:0e:89:5f:35:f3:79:67:5d:ed:de:0d:77:b4:5e:a6:6f:e4: e8:a3:4f:86:56:fd:f0:c0:13:46:05:2f:b3:09:d9:ee:fb:0d: 54:85:75:44:61:76:f0:33:dd:7b:e1:62:29:aa:4d:ae:c0:af: b5:03:e9:e4:73:80:a0:ed:42:53:e9:37:8b:f9:5e:2c:3a:8b: 4a:73:c9:2f:36:de:97:a3:dc:3a:3d:5b:08:47:02:b7:aa:45: ca:3a:66:a0:e5:09:83:d6:c0:33:23:1d:a4:6f:d2:56:b7:ca: be:28:56:9b:cf:03:89:6b:d7:6b:f1:bb:f6:82:e2:5d:22:f5: b0:72:21:d6:72:a9:35:40:62:bd:2c:43:38:06:44:4c:7f:c1: e8:a7:25:47:83:2e:2b:2b:cd:c0:09:db:eb:3d:12:31:72:cc: 38:ac:48:9c:35:5f:5c:e7:1f:c9:4e:6c:ed:94:0b:bf:59:d0: 23:94:8d:8d:23:3c:a7:7a:ce:fe:b3:ef:90:89:e9:a5:d7:97: e6:47:20:62:f6:e6:80:e7:6b:2f:36:e0:05:0d:7b:dc:90:2b: 6a:f3:6e:f2:8a:0d:3c:6c:5e:df:8f:5c:f8:46:4b:b8:56:fd: d9:67:66:ce -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUX8Gd6VEohZyQLPeN6BAH17agU3YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDM0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZGQwMjNiYjQzOWMxYzYxZDU2ZjVhNGI1ZGYyOGM5NzU0 Y2I4NmIxNmUxMTE3OWQwNTk4MjY0ODVlM2Y1NDkzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVQ7BGOATxAMVLkWS5BBqUvoAIQq9X/b3N5bAF6ZGAhPTk MDA+Nn/u9mOl6QrGQvYfGDq9eyezPNbCsE+HBFJCDO85cIUU6XvsEkXn7mCGjivx JLnPoPYcaKiz08N/jAW7tI+J88RjFnSMk70XlsYOtK1qjJ25l2d45Mh7X7jUQcRk fsZ6pvw7IyDmcSniB72kCEKdMDjzPZPXDN3hn8zojik3kIC7niugV+Ak4uvSUcKG Q8uBx5nY9oHk///EfND0Ugl7H8xcH0bPHrZ57lnQElzbV6g9Pqk5qjhoHwrRIxCB M9tBbUuGEa0C0xGA/910gtOsZ7dUjtpIBENOsN/XAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKf/vsh6LNbesE2V3ovZQXvBPlPswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I5MGJjY2U1LTM3N2UtNGRmNC1iNzdlLTk3YTA2ZWM5MTZjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwADAwDQYJKoZIhvcNAQELBQADggEBAIeUJcH+N9ddcGfU3q5OyNlx pysOiV8183lnXe3eDXe0XqZv5OijT4ZW/fDAE0YFL7MJ2e77DVSFdURhdvAz3Xvh YimqTa7Ar7UD6eRzgKDtQlPpN4v5Xiw6i0pzyS823pej3Do9WwhHAreqRco6ZqDl CYPWwDMjHaRv0la3yr4oVpvPA4lr12vxu/aC4l0i9bByIdZyqTVAYr0sQzgGREx/ weinJUeDLisrzcAJ2+s9EjFyzDisSJw1X1znH8lObO2UC79Z0COUjY0jPKd6zv6z 75CJ6aXXl+ZHIGL25oDnay824AUNe9yQK2rzbvKKDTxsXt+PXPhGS7hW/dlnZs4= -----END CERTIFICATE-----Generated at Sun Jun 29 06:50:23 2025 by rpki-client