$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa File: c8a22460-1c12-4314-8b13-6a586edac27c.roa (raw, json) Hash identifier: rGW2MqwNUxTIfA1xWO1AU4l/VYWc2rsOJwVkIRIebEk= Subject key identifier: EA:26:E0:BD:82:B5:C3:D1:C4:85:D4:A8:C5:2C:54:08:7E:16:F9:02 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1FAC54B3C8A25FAFAEEC45A6DD8DB1E12A52C0B6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa Signing time: Mon 16 Jun 2025 19:20:09 +0000 ROA not before: Mon 16 Jun 2025 19:20:09 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ec00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ac:54:b3:c8:a2:5f:af:ae:ec:45:a6:dd:8d:b1:e1:2a:52:c0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:09 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=1c1e9dfea8ecc7cc3f7440cc903d83056023e4272ecb98d3ac6572eb027470fd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0f:75:0f:6a:64:7f:13:90:83:48:96:c9:ff: a1:bd:70:81:14:69:80:9a:28:cb:d5:e7:1c:13:79: 60:d2:86:4b:d8:dd:1e:26:fd:20:42:70:2b:84:27: 76:9c:94:1a:fc:72:39:f3:81:99:9f:90:64:1d:1c: ff:8c:62:d9:83:68:58:82:cb:8a:a4:da:6a:a4:08: e3:9a:b2:39:6a:3a:ba:39:e0:39:1f:9a:78:35:42: b2:db:eb:52:03:4e:73:bc:45:37:6d:4e:12:88:3c: 9e:7b:32:50:92:fd:92:0f:8e:7a:ee:ba:e7:d9:7c: 52:82:12:3d:0a:25:18:8d:86:ac:b7:9f:58:06:af: 65:22:bf:0d:a5:bf:03:84:41:de:8b:03:7d:6c:24: ab:70:5c:42:96:c4:80:d8:27:f1:87:36:e7:42:9c: e3:0f:bc:d1:f6:84:2a:20:2e:fa:f9:8a:56:9a:ab: f8:6a:3e:c1:2c:12:f1:6f:22:15:88:d0:8f:1e:4a: 59:4f:aa:6d:3d:41:23:29:89:e8:a3:fe:48:33:4b: 16:0c:70:4b:27:a7:46:8e:83:6f:c3:2a:cf:b6:c3: 3b:53:6e:ec:4c:c8:05:70:60:fe:69:ea:7e:e1:7b: 7b:27:30:61:8b:19:68:0f:8f:f2:60:59:88:82:89: 1e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:26:E0:BD:82:B5:C3:D1:C4:85:D4:A8:C5:2C:54:08:7E:16:F9:02 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 59:17:e4:47:93:76:e1:80:90:d5:cd:c4:f2:62:40:33:fe:5b: f0:0f:c6:fb:f0:11:b3:45:97:56:f4:71:c6:37:e1:4a:ce:a8: 74:ba:ff:58:10:ff:7a:70:3f:e8:98:4b:ee:83:35:3c:37:91: 8e:5c:40:d1:96:31:35:fa:54:38:85:4d:d5:10:4b:de:fc:2b: 1a:10:bd:03:b7:48:c6:c2:76:9d:54:79:c9:23:29:9d:e9:0e: a2:5e:f0:e9:3e:e1:4f:ad:d2:a2:dd:cc:0b:19:8e:ee:a6:3e: c4:58:8e:fa:2f:19:1e:74:0a:05:e6:fb:2c:c8:19:4d:6d:f5: e0:f2:d5:41:46:0b:06:af:79:d5:b5:a1:c9:c8:dd:55:1e:11: 67:76:2d:47:6e:06:f0:09:19:fb:7c:4e:3d:80:fb:a5:64:49: f0:dc:25:40:6c:ce:a0:de:4e:20:5e:58:3a:85:90:d1:ec:97: 4a:2d:13:df:a2:ee:25:37:47:29:69:24:e2:75:b9:23:ea:3e: b8:23:3a:a4:c5:10:b3:9d:5b:d7:f0:42:0a:7b:a4:1b:28:ca: cb:db:ea:8e:e4:6b:c1:4f:96:f1:29:55:5f:21:a0:ac:36:90: 83:93:ed:56:56:c4:52:21:7f:da:d4:0f:3f:17:c4:01:62:5b: ae:e1:50:0d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUH6xUs8iiX6+u7EWm3Y2x4SpSwLYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDA5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzFlOWRmZWE4ZWNjN2NjM2Y3NDQwY2M5MDNkODMwNTYw MjNlNDI3MmVjYjk4ZDNhYzY1NzJlYjAyNzQ3MGZkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFD3UPamR/E5CDSJbJ/6G9cIEUaYCaKMvV5xwTeWDShkvY 3R4m/SBCcCuEJ3aclBr8cjnzgZmfkGQdHP+MYtmDaFiCy4qk2mqkCOOasjlqOro5 4Dkfmng1QrLb61IDTnO8RTdtThKIPJ57MlCS/ZIPjnruuufZfFKCEj0KJRiNhqy3 n1gGr2Uivw2lvwOEQd6LA31sJKtwXEKWxIDYJ/GHNudCnOMPvNH2hCogLvr5ilaa q/hqPsEsEvFvIhWI0I8eSllPqm09QSMpieij/kgzSxYMcEsnp0aOg2/DKs+2wztT buxMyAVwYP5p6n7he3snMGGLGWgPj/JgWYiCiR5LAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU6ibgvYK1w9HEhdSoxSxUCH4W+QIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M4YTIyNDYwLTFjMTItNDMxNC04YjEzLTZhNTg2ZWRhYzI3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD77DANBgkqhkiG9w0BAQsFAAOCAQEAWRfkR5N24YCQ1c3E8mJAM/5b 8A/G+/ARs0WXVvRxxjfhSs6odLr/WBD/enA/6JhL7oM1PDeRjlxA0ZYxNfpUOIVN 1RBL3vwrGhC9A7dIxsJ2nVR5ySMpnekOol7w6T7hT63Sot3MCxmO7qY+xFiO+i8Z HnQKBeb7LMgZTW314PLVQUYLBq951bWhycjdVR4RZ3YtR24G8AkZ+3xOPYD7pWRJ 8NwlQGzOoN5OIF5YOoWQ0eyXSi0T36LuJTdHKWkk4nW5I+o+uCM6pMUQs51b1/BC CnukGyjKy9vqjuRrwU+W8SlVXyGgrDaQg5PtVlbEUiF/2tQPPxfEAWJbruFQDQ== -----END CERTIFICATE-----Generated at Mon Jun 30 20:05:58 2025 by rpki-client