$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa File: bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa (raw, json) Hash identifier: Vxe4uZGZxL3fR36jgzb+TusJC0hMF4/AjR6y2VMeq7w= Subject key identifier: AD:B4:27:0B:05:24:98:FB:B0:1C:8C:B7:EB:62:18:75:7A:26:8B:30 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 02AC8051FA51191187494DBE72E1915F05BE4593 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa Signing time: Wed 18 Jun 2025 00:30:13 +0000 ROA not before: Wed 18 Jun 2025 00:30:13 +0000 ROA not after: Wed 23 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f2:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ac:80:51:fa:51:19:11:87:49:4d:be:72:e1:91:5f:05:be:45:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 18 00:30:13 2025 GMT Not After : Jul 23 23:59:59 2025 GMT Subject: serialNumber=a34ce00746df432e0ff7664f8301a53e82058bda0a5194ce3d594c8369e19880, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:dd:6a:f3:30:cd:3f:9c:e3:52:d5:c1:fd: d8:8e:67:46:15:6e:f0:7c:b4:86:d5:3b:3e:d4:e5: 31:a2:11:48:c7:a0:b4:6f:45:f1:80:b0:bd:5a:71: a8:72:28:0d:87:86:1b:76:bf:42:76:59:c0:e0:58: 09:52:b9:7f:5d:a1:06:f8:0d:94:47:d8:dc:46:7d: e6:1b:ef:0c:89:10:ae:32:ee:9f:45:ce:6f:6d:5f: 7c:b0:3a:2f:0e:df:1e:12:0d:62:fe:6c:07:95:d2: 4e:56:a1:bb:49:29:1d:08:19:e0:8c:c6:c1:9c:1a: df:97:2d:a3:00:6a:d6:5e:7b:8a:8e:71:29:15:3b: a6:5a:7d:de:3c:54:fa:99:de:9a:ad:a4:50:53:61: bf:9d:52:c5:35:52:f3:c4:5a:38:ce:93:7c:81:80: 1b:aa:c0:2c:51:2a:2d:d1:b2:7c:bf:7f:70:28:b5: 77:51:05:4d:bc:22:24:e9:b9:7b:00:de:01:bc:0b: e1:72:e7:24:77:ce:98:31:7d:24:b9:eb:27:98:9b: 22:99:e0:be:68:27:89:d9:2b:d1:07:2d:4a:fe:da: 05:e4:0f:67:13:04:07:e1:21:48:da:1e:d6:17:f4: 07:d6:01:52:91:4b:20:3f:17:7d:0a:8b:d9:82:cd: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B4:27:0B:05:24:98:FB:B0:1C:8C:B7:EB:62:18:75:7A:26:8B:30 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7000::/44 Signature Algorithm: sha256WithRSAEncryption 43:25:f9:29:f5:36:72:9b:23:e2:a2:26:ae:0d:7b:f9:2e:4a: 7e:ea:2a:ad:99:16:53:73:46:5e:69:63:71:9d:4d:ab:a0:60: e0:91:6e:f4:a9:93:8a:b4:3b:6a:c0:33:a0:6a:11:cb:11:e4: 55:d5:85:97:19:0e:ee:29:13:22:13:39:7b:1e:37:d3:b8:f7: 0c:e2:65:a8:f5:07:2f:6b:03:39:40:22:84:1b:c0:8e:8a:be: aa:63:ec:1b:f0:28:98:6f:b6:7c:10:08:f5:30:5f:1a:2d:4a: 91:84:70:a9:28:d8:4f:95:81:02:a8:19:c6:06:e1:75:0c:dd: 84:84:e7:0b:32:f0:70:a5:8b:19:12:96:96:46:d5:c7:85:c8: 9f:3d:65:00:23:2e:17:75:07:92:38:4b:73:72:b8:06:0b:c9: 32:de:d1:d2:3d:1d:89:20:f1:63:6a:49:cd:29:08:f5:23:87: 08:c0:8a:ae:5f:6c:4d:8f:cb:c6:3c:89:96:95:9b:2c:37:ab: 7e:b6:32:33:8c:28:a8:51:04:5a:49:b8:7b:25:75:72:35:db: 9e:07:c9:eb:47:a5:8e:26:64:84:e5:8a:04:d5:0e:ed:8b:99: 68:64:d4:30:fb:aa:a7:23:da:a2:ab:44:f8:1c:87:d5:08:fc: 67:b2:e6:66 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAqyAUfpRGRGHSU2+cuGRXwW+RZMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE4MDAzMDEzWhcNMjUwNzIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzRjZTAwNzQ2ZGY0MzJlMGZmNzY2NGY4MzAxYTUzZTgy MDU4YmRhMGE1MTk0Y2UzZDU5NGM4MzY5ZTE5ODgwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvBd1q8zDNP5zjUtXB/diOZ0YVbvB8tIbVOz7U5TGiEUjH oLRvRfGAsL1acahyKA2Hhht2v0J2WcDgWAlSuX9doQb4DZRH2NxGfeYb7wyJEK4y 7p9Fzm9tX3ywOi8O3x4SDWL+bAeV0k5WobtJKR0IGeCMxsGcGt+XLaMAatZee4qO cSkVO6Zafd48VPqZ3pqtpFBTYb+dUsU1UvPEWjjOk3yBgBuqwCxRKi3Rsny/f3Ao tXdRBU28IiTpuXsA3gG8C+Fy5yR3zpgxfSS56yeYmyKZ4L5oJ4nZK9EHLUr+2gXk D2cTBAfhIUjaHtYX9AfWAVKRSyA/F30Ki9mCzWc5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrbQnCwUkmPuwHIy362IYdXomizAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JkN2QyYjE1LTcxOGYtNDNmYi1iOTFkLWMwYmM3Zjc1ZThkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDycAAwDQYJKoZIhvcNAQELBQADggEBAEMl+Sn1NnKbI+KiJq4Ne/ku Sn7qKq2ZFlNzRl5pY3GdTaugYOCRbvSpk4q0O2rAM6BqEcsR5FXVhZcZDu4pEyIT OXseN9O49wziZaj1By9rAzlAIoQbwI6Kvqpj7BvwKJhvtnwQCPUwXxotSpGEcKko 2E+VgQKoGcYG4XUM3YSE5wsy8HClixkSlpZG1ceFyJ89ZQAjLhd1B5I4S3NyuAYL yTLe0dI9HYkg8WNqSc0pCPUjhwjAiq5fbE2Py8Y8iZaVmyw3q362MjOMKKhRBFpJ uHsldXI1254HyetHpY4mZITligTVDu2LmWhk1DD7qqcj2qKrRPgch9UI/Gey5mY= -----END CERTIFICATE-----Generated at Sun Jun 29 15:25:46 2025 by rpki-client