$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa File: bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa (raw, json) Hash identifier: jYvKsh/ZzXsCZC0Hq6HJSWYQLbJ61AMVQHrSBs1AIdU= Subject key identifier: 75:D2:6E:F8:BF:6B:9F:FA:8F:3E:26:0C:02:DA:F1:B6:23:43:3C:D2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4234F2395B469C6CF44DA16DA201D5941B54A28A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa Signing time: Tue 17 Jun 2025 04:22:09 +0000 ROA not before: Tue 17 Jun 2025 04:22:09 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:34:f2:39:5b:46:9c:6c:f4:4d:a1:6d:a2:01:d5:94:1b:54:a2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 17 04:22:09 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=96e39e97adfd186c0ad79349b7817d986e2d3b2ca9c3cbf6f34f3915b2640548, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cc:f8:40:ca:c7:42:ca:4a:a0:55:d6:72:e8: 46:a7:84:34:b1:1e:71:26:b4:87:1e:b0:13:85:31: df:bd:2f:69:d4:0e:06:dc:66:d2:ba:79:97:13:be: fd:36:35:0e:cf:4d:54:4f:8c:73:8a:d6:45:03:10: 63:f8:39:25:63:ed:e2:7e:10:2e:d1:ba:0f:48:b4: 80:69:d4:51:07:e3:df:f1:90:a3:c9:3c:33:9d:b8: 40:12:7b:48:30:75:d0:e9:1c:43:3b:40:9b:71:2e: b5:92:17:b1:4e:51:c8:2e:33:35:85:d2:db:4c:1e: 86:0a:e8:66:3e:b1:60:06:0e:08:34:41:74:07:a3: 61:62:cd:bb:a5:d1:9e:f0:69:88:7b:0b:58:47:61: 00:bb:7d:96:3c:57:18:c4:e3:c1:05:79:05:2d:fc: a2:79:8f:1c:6d:06:44:6a:84:8e:9b:06:db:0c:fe: a6:4f:ba:58:b8:1f:da:ea:54:57:28:85:f2:65:63: 97:f9:be:60:20:4f:36:9f:97:f9:f3:99:6b:fb:7e: 82:68:33:ad:d9:58:e4:49:cc:87:ef:dc:2d:90:59: 8b:c6:86:a2:bc:4e:af:b1:39:88:35:24:e5:31:dc: a6:44:be:51:8e:cf:7d:53:4e:d0:68:7d:1e:b6:d5: 63:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D2:6E:F8:BF:6B:9F:FA:8F:3E:26:0C:02:DA:F1:B6:23:43:3C:D2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4100::/48 Signature Algorithm: sha256WithRSAEncryption 05:be:77:20:16:00:96:86:28:b1:5c:3a:e0:ef:fd:72:68:ff: 4e:72:4c:9b:9e:9c:2a:46:08:c2:6f:4d:a4:ad:b3:4a:40:d6: 5b:04:9e:22:da:7d:fa:a0:a9:bd:a5:ce:62:84:e6:fd:d0:c8: cd:f1:37:74:3e:53:28:5c:6a:d5:08:e7:56:e7:6b:f2:dd:30: eb:aa:a9:a8:16:2b:fd:f9:8f:79:6d:5d:f5:46:64:92:fa:eb: 65:26:29:76:55:4a:8e:76:90:77:6a:32:5a:73:ff:f5:d8:2c: cd:68:bb:b0:cb:be:10:67:b0:e9:28:ab:0c:d7:bc:55:18:9b: fb:eb:2e:44:10:91:10:ae:29:92:32:cd:04:f9:76:05:d4:26: 24:6d:3c:4c:a5:1b:49:d0:11:a4:2a:75:c0:20:5d:fc:3e:a7: 7a:bd:89:3e:1f:6a:8c:a2:8b:43:f0:ad:73:d6:16:41:55:b5: f8:08:7f:6f:99:7e:f4:10:80:c6:a5:1a:90:27:7f:f4:ef:53: c2:66:9f:0c:f7:ef:fd:bb:9d:77:87:cb:0b:08:b8:c4:ad:69: 73:69:4a:81:d1:d7:08:4e:2e:b4:b0:0c:95:18:30:a4:f8:51: db:c0:7e:b3:22:4f:a0:fa:79:a2:25:8f:8c:37:85:62:58:3a: ba:10:0e:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQjTyOVtGnGz0TaFtogHVlBtUooowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE3MDQyMjA5WhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmUzOWU5N2FkZmQxODZjMGFkNzkzNDliNzgxN2Q5ODZl MmQzYjJjYTljM2NiZjZmMzRmMzkxNWIyNjQwNTQ4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNzPhAysdCykqgVdZy6EanhDSxHnEmtIcesBOFMd+9L2nU DgbcZtK6eZcTvv02NQ7PTVRPjHOK1kUDEGP4OSVj7eJ+EC7Rug9ItIBp1FEH49/x kKPJPDOduEASe0gwddDpHEM7QJtxLrWSF7FOUcguMzWF0ttMHoYK6GY+sWAGDgg0 QXQHo2Fizbul0Z7waYh7C1hHYQC7fZY8VxjE48EFeQUt/KJ5jxxtBkRqhI6bBtsM /qZPuli4H9rqVFcohfJlY5f5vmAgTzafl/nzmWv7foJoM63ZWORJzIfv3C2QWYvG hqK8Tq+xOYg1JOUx3KZEvlGOz31TTtBofR621WMLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUddJu+L9rn/qPPiYMAtrxtiNDPNIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmOWE0NTMyLTMyNmUtNDVjOC1hMGQ3LWQ2MDA4YWEwZWQ4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwQQAwDQYJKoZIhvcNAQELBQADggEBAAW+dyAWAJaGKLFcOuDv/XJo /05yTJuenCpGCMJvTaSts0pA1lsEniLaffqgqb2lzmKE5v3QyM3xN3Q+UyhcatUI 51bna/LdMOuqqagWK/35j3ltXfVGZJL662UmKXZVSo52kHdqMlpz//XYLM1ou7DL vhBnsOkoqwzXvFUYm/vrLkQQkRCuKZIyzQT5dgXUJiRtPEylG0nQEaQqdcAgXfw+ p3q9iT4faoyii0PwrXPWFkFVtfgIf2+ZfvQQgMalGpAnf/TvU8Jmnwz37/27nXeH ywsIuMStaXNpSoHR1whOLrSwDJUYMKT4UdvAfrMiT6D6eaIlj4w3hWJYOroQDso= -----END CERTIFICATE-----Generated at Sun Jun 29 09:02:17 2025 by rpki-client