$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2754057-8887-4dfa-96d2-8349e00ea226.roa File: d2754057-8887-4dfa-96d2-8349e00ea226.roa (raw, json) Hash identifier: E/8/2wPlA40GIq8/S2hD2qLNRWnc6nCJIIiLGp2JFQY= Subject key identifier: 15:11:2B:4A:AA:BF:A9:7D:33:37:C8:F5:21:58:03:37:3E:16:64:85 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2E8A76D63A34608DBB28583FB9B372A6864B38FF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2754057-8887-4dfa-96d2-8349e00ea226.roa Signing time: Mon 18 Aug 2025 18:22:16 +0000 ROA not before: Mon 18 Aug 2025 18:22:16 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8a:76:d6:3a:34:60:8d:bb:28:58:3f:b9:b3:72:a6:86:4b:38:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 18 18:22:16 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=4b7e0574607124e321f69979da7d3c0da1d89fcb9cce609e6cf12d8c51567f51, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:bc:97:aa:e9:d8:91:f8:17:17:cd:6d:f4: 15:dd:31:3b:90:87:b1:2f:b5:21:2c:aa:03:9b:b3: fc:fc:8b:53:f6:0c:b0:59:7f:9b:a1:56:4a:9e:0f: 20:b2:74:e5:79:a3:f8:1d:a7:a4:99:5b:9e:62:88: 90:58:76:e5:89:fb:26:90:b8:b9:4e:e1:bb:cf:c2: a3:80:72:fa:73:1f:24:71:a5:19:c6:78:6e:6e:96: 9a:c0:7f:2c:15:84:c0:8a:a0:14:17:0d:4c:59:40: 09:04:e1:e4:44:61:7e:ee:32:0e:be:96:70:a0:90: 36:59:81:e6:f5:2b:c8:30:02:4a:0a:59:64:56:3e: c6:7d:e0:fb:8d:76:86:77:b7:62:2e:4a:f0:c7:07: 04:9d:f5:db:4a:f2:51:2f:a2:ee:b2:8a:a9:d5:b9: 5c:52:ac:46:f3:96:c9:43:57:91:67:6b:96:c3:49: 02:52:26:42:12:62:91:9b:74:3c:b2:7c:c1:d0:3d: 05:4d:03:cf:4c:e7:1f:d4:5c:b8:3e:5c:cf:fb:65: d0:f9:02:9d:09:02:f1:01:a7:bb:85:10:13:ee:71: 67:e6:03:f3:f7:ba:8b:5b:34:a6:94:33:d1:3d:d6: 05:7e:da:6a:04:c0:95:9d:2e:9e:7d:75:2f:15:87: 77:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:11:2B:4A:AA:BF:A9:7D:33:37:C8:F5:21:58:03:37:3E:16:64:85 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2754057-8887-4dfa-96d2-8349e00ea226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6108::/48 Signature Algorithm: sha256WithRSAEncryption 15:2d:c1:d7:b0:70:a0:c4:22:99:1c:55:eb:d3:22:92:44:71: 88:f9:70:91:e9:c5:ea:72:0f:54:ec:45:18:57:0a:83:98:6e: a8:26:1a:ee:96:2c:a6:5a:e0:28:8b:8c:89:6a:28:ba:3a:22: cd:95:6a:32:59:89:27:18:38:d0:19:80:6b:5b:4d:f4:ad:12: 98:1f:60:a4:93:a8:88:b1:00:21:79:59:0b:ef:86:da:63:4c: 27:14:64:dc:ce:a3:19:9c:7b:84:69:d5:3d:be:52:bb:69:c6: c0:98:fe:17:5d:3c:70:83:d5:df:ba:4e:6d:6c:fc:f3:d0:72: 09:5c:e7:1d:18:88:0f:59:69:40:c4:7c:26:fd:49:63:92:14: 13:46:6e:06:62:f7:5c:1b:02:ff:f4:13:09:de:e7:27:ef:ea: 41:3b:c9:bc:f2:6c:de:dd:a3:0e:41:2c:b3:fd:38:b4:0e:bd: c6:1f:8d:bf:b1:f6:30:b1:d7:d6:8a:d1:1d:15:9b:c6:b4:98: 35:84:f8:bc:c6:02:b9:60:5d:e5:8a:75:76:cd:6d:7c:0b:2e: a7:77:25:ac:b4:b3:8e:10:32:0d:6b:eb:27:56:ff:87:86:e3: e6:39:9f:c2:b4:f0:94:5e:6e:36:2d:ba:54:9b:53:e4:60:b5: 4f:c1:00:70 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULop21jo0YI27KFg/ubNypoZLOP8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODE4MTgyMjE2WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjdlMDU3NDYwNzEyNGUzMjFmNjk5NzlkYTdkM2MwZGEx ZDg5ZmNiOWNjZTYwOWU2Y2YxMmQ4YzUxNTY3ZjUxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAyLyXqunYkfgXF81t9BXdMTuQh7EvtSEsqgObs/z8i1P2 DLBZf5uhVkqeDyCydOV5o/gdp6SZW55iiJBYduWJ+yaQuLlO4bvPwqOAcvpzHyRx pRnGeG5ulprAfywVhMCKoBQXDUxZQAkE4eREYX7uMg6+lnCgkDZZgeb1K8gwAkoK WWRWPsZ94PuNdoZ3t2IuSvDHBwSd9dtK8lEvou6yiqnVuVxSrEbzlslDV5Fna5bD SQJSJkISYpGbdDyyfMHQPQVNA89M5x/UXLg+XM/7ZdD5Ap0JAvEBp7uFEBPucWfm A/P3uotbNKaUM9E91gV+2moEwJWdLp59dS8Vh3dvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFRErSqq/qX0zN8j1IVgDNz4WZIUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyNzU0MDU3LTg4ODctNGRmYS05NmQyLTgzNDllMDBlYTIyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQgwDQYJKoZIhvcNAQELBQADggEBABUtwdewcKDEIpkcVevTIpJE cYj5cJHpxepyD1TsRRhXCoOYbqgmGu6WLKZa4CiLjIlqKLo6Is2VajJZiScYONAZ gGtbTfStEpgfYKSTqIixACF5WQvvhtpjTCcUZNzOoxmce4Rp1T2+UrtpxsCY/hdd PHCD1d+6Tm1s/PPQcglc5x0YiA9ZaUDEfCb9SWOSFBNGbgZi91wbAv/0Ewne5yfv 6kE7ybzybN7dow5BLLP9OLQOvcYfjb+x9jCx19aK0R0Vm8a0mDWE+LzGArlgXeWK dXbNbXwLLqd3Jay0s44QMg1r6ydW/4eG4+Y5n8K08JRebjYtulSbU+RgtU/BAHA= -----END CERTIFICATE-----Generated at Sat Aug 23 06:57:16 2025 by rpki-client