$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cdcc47d5-338b-4adc-9bc7-703261ddd214.roa File: cdcc47d5-338b-4adc-9bc7-703261ddd214.roa (raw, json) Hash identifier: pxAbHA/jLNODMOVCy/LbNaCE+J6HXPPdfsXhdYIsNZg= Subject key identifier: C9:7C:E7:FD:90:9D:45:87:53:5F:9C:5C:F4:02:A5:82:D4:E7:07:AC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7B763CA2A4431C9E42C9E5C070B794497B17D9DA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cdcc47d5-338b-4adc-9bc7-703261ddd214.roa Signing time: Mon 16 Jun 2025 19:20:32 +0000 ROA not before: Mon 16 Jun 2025 19:20:32 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:76:3c:a2:a4:43:1c:9e:42:c9:e5:c0:70:b7:94:49:7b:17:d9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:32 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=86091f2935841a2ffa09903f192805dbd1ee9f63c89f9d8d7d2ec8b414077ccf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:e0:62:58:d3:9b:3c:72:c1:dd:c2:54:39: 48:98:af:83:3e:65:c8:99:e4:0f:75:84:db:63:b2: 8b:1e:52:0a:7e:6a:c0:29:a0:76:9a:7d:d1:2a:20: ac:b9:24:04:59:63:82:45:18:30:45:bd:b2:7a:c8: 54:d7:6d:11:e4:9a:53:0f:a4:d9:d8:1e:36:8d:20: 25:68:a3:56:6f:24:10:92:a0:0f:9b:f5:81:51:ce: 1d:bf:10:ab:ac:e5:73:ee:54:d9:b5:52:97:93:56: 5f:18:32:0d:7d:a2:c1:6e:e7:cb:59:c3:2c:de:ce: 9d:8b:ac:a1:9a:bf:c4:a0:df:f0:fd:36:e8:4b:c9: 3a:bf:8d:f8:76:15:d5:f0:0c:a7:3b:fc:de:56:da: e2:f8:72:cb:a1:0b:e5:38:2e:af:27:a4:78:9e:37: 6e:0f:91:fa:56:db:04:fa:6d:1e:a4:82:08:9e:fc: 37:24:30:bd:aa:e1:e5:db:41:92:ff:a7:61:45:26: c8:79:11:85:2c:7b:70:37:15:00:db:02:ea:11:61: 41:29:2e:a1:97:19:20:00:1d:a0:1a:1c:cc:52:0a: 43:4a:05:01:c5:e9:dd:65:ab:44:91:a0:4c:b9:93: 7b:81:81:26:20:29:c5:cd:49:40:97:8f:f0:1b:c5: b1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7C:E7:FD:90:9D:45:87:53:5F:9C:5C:F4:02:A5:82:D4:E7:07:AC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cdcc47d5-338b-4adc-9bc7-703261ddd214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6000::/44 Signature Algorithm: sha256WithRSAEncryption 19:b1:ca:68:5c:42:e1:6a:43:fa:94:ca:ec:3e:f9:2e:4c:61: 3d:11:15:87:d2:c4:1f:8d:5b:12:7f:17:b5:4b:95:81:3a:dc: ae:81:91:8e:e4:f9:6f:cb:e7:58:c3:cf:27:a3:0f:d5:e9:ce: 78:c6:82:88:47:81:6a:62:20:8f:b2:58:04:32:3b:e6:11:41: 9e:9a:25:0c:c3:0c:76:6d:ba:3f:a5:fb:ec:62:c2:76:27:d1: f2:7a:a8:0d:ab:a9:00:4a:f5:62:36:6c:cd:46:41:38:ca:8e: 4e:f9:1e:43:31:01:7c:ca:65:75:1f:37:89:38:d3:9f:85:f5: a5:5a:67:02:f8:fa:9c:31:d9:e4:0c:35:f4:93:5a:6d:3d:ab: a3:15:16:e8:c1:a5:0d:1f:59:15:96:a2:44:7d:6c:c1:fb:87: 54:d7:14:33:84:b4:d3:2b:d3:6b:ec:16:9a:91:93:37:f8:09: b4:71:43:a4:79:13:14:ff:db:23:8d:7a:31:70:4c:be:c5:23: 6a:70:dc:ac:1d:51:8d:dc:15:68:14:bb:e9:08:51:16:97:02: 63:c5:c6:4b:28:48:28:59:8c:6d:fe:c1:14:9e:30:18:50:a2: a6:bc:66:d9:cd:5d:6b:6b:05:ae:8c:a5:2e:cc:e4:f6:75:b0: 68:87:29:9e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUe3Y8oqRDHJ5CyeXAcLeUSXsX2dowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDMyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjA5MWYyOTM1ODQxYTJmZmEwOTkwM2YxOTI4MDVkYmQx ZWU5ZjYzYzg5ZjlkOGQ3ZDJlYzhiNDE0MDc3Y2NmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+9uBiWNObPHLB3cJUOUiYr4M+ZciZ5A91hNtjsoseUgp+ asApoHaafdEqIKy5JARZY4JFGDBFvbJ6yFTXbRHkmlMPpNnYHjaNICVoo1ZvJBCS oA+b9YFRzh2/EKus5XPuVNm1UpeTVl8YMg19osFu58tZwyzezp2LrKGav8Sg3/D9 NuhLyTq/jfh2FdXwDKc7/N5W2uL4csuhC+U4Lq8npHieN24PkfpW2wT6bR6kggie /DckML2q4eXbQZL/p2FFJsh5EYUse3A3FQDbAuoRYUEpLqGXGSAAHaAaHMxSCkNK BQHF6d1lq0SRoEy5k3uBgSYgKcXNSUCXj/AbxbHvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyXzn/ZCdRYdTX5xc9AKlgtTnB6wwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2NkY2M0N2Q1LTMzOGItNGFkYy05YmM3LTcwMzI2MWRkZDIxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwYAAwDQYJKoZIhvcNAQELBQADggEBABmxymhcQuFqQ/qUyuw++S5M YT0RFYfSxB+NWxJ/F7VLlYE63K6BkY7k+W/L51jDzyejD9XpznjGgohHgWpiII+y WAQyO+YRQZ6aJQzDDHZtuj+l++xiwnYn0fJ6qA2rqQBK9WI2bM1GQTjKjk75HkMx AXzKZXUfN4k405+F9aVaZwL4+pwx2eQMNfSTWm09q6MVFujBpQ0fWRWWokR9bMH7 h1TXFDOEtNMr02vsFpqRkzf4CbRxQ6R5ExT/2yONejFwTL7FI2pw3KwdUY3cFWgU u+kIURaXAmPFxksoSChZjG3+wRSeMBhQoqa8ZtnNXWtrBa6MpS7M5PZ1sGiHKZ4= -----END CERTIFICATE-----Generated at Sun Jun 29 11:25:56 2025 by rpki-client