$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef295804-89a7-4ec3-826e-73e32733dc02.roa File: ef295804-89a7-4ec3-826e-73e32733dc02.roa (raw, json) Hash identifier: bed6RjZE95u+CjlZoKXDS/uIn3+ohBqG/b9oW9ZSpYI= Subject key identifier: 00:7C:CE:EF:8F:96:D8:CD:8B:90:25:05:BC:11:B6:06:A6:D6:4C:FE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3B4A363D91B4AB733C10BC9E058885E097C7F0FA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef295804-89a7-4ec3-826e-73e32733dc02.roa Signing time: Mon 16 Jun 2025 19:21:03 +0000 ROA not before: Mon 16 Jun 2025 19:21:03 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:551d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4a:36:3d:91:b4:ab:73:3c:10:bc:9e:05:88:85:e0:97:c7:f0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:21:03 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=d507d6c2423e8dc1946db27101b5436e5cef09c33d571a2ac1aca8e7f7806132, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9b:8b:56:d5:1a:e0:00:7c:ca:df:c4:7e:31: 36:6b:78:19:1f:d8:d2:a6:2a:90:d1:d6:d8:4f:f2: 07:2c:7b:f5:a9:47:4d:6c:f3:73:3e:53:43:f6:6d: cd:82:30:c0:10:45:b6:2d:84:09:5b:94:cd:ec:66: eb:82:82:21:83:26:12:47:51:d5:51:5d:15:a3:6a: 06:08:ab:d6:17:ba:1d:0e:1e:ee:84:4b:00:bd:29: 76:1f:fa:65:33:00:2f:eb:f0:d8:a4:c3:52:e1:0a: 79:a2:b9:d9:b5:43:57:7c:86:51:64:ff:c5:39:d3: d4:6f:28:f1:b1:c4:d0:11:19:92:04:fb:7b:6d:70: ac:e9:4e:64:b2:c7:b6:1d:c5:24:f6:70:ad:3d:3c: 01:57:eb:d5:33:69:f4:37:5a:f4:a9:d6:6f:75:df: cb:89:9a:ee:0b:a7:39:1b:fa:5e:e5:de:0d:19:f0: de:d9:53:70:c5:0d:ee:e0:c7:77:42:05:84:9c:c8: ee:bb:90:bd:cb:4e:c1:a5:b1:dc:ea:46:5b:f7:c6: 57:2a:e4:80:5a:33:59:2f:68:58:7b:d7:86:68:6d: 03:77:83:c8:9b:d2:bf:39:55:fa:c1:a8:b8:8a:77: 09:8e:d2:7f:03:64:e9:f0:b6:26:13:d9:18:37:56: b9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7C:CE:EF:8F:96:D8:CD:8B:90:25:05:BC:11:B6:06:A6:D6:4C:FE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef295804-89a7-4ec3-826e-73e32733dc02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:551d::/48 Signature Algorithm: sha256WithRSAEncryption 9e:2e:67:0e:d7:33:8b:5a:06:47:6a:b2:5d:db:dd:b1:53:e4: 93:59:68:d5:f6:89:74:e0:21:48:94:06:cb:55:70:f4:61:84: 33:d3:a1:20:66:69:88:89:2e:7b:85:20:87:05:b6:d8:33:22: e3:5f:0b:75:be:90:6e:a2:60:51:e3:12:8f:0f:a2:4b:18:28: 0b:1b:b9:74:10:ef:34:a5:b0:2b:8f:f0:97:a7:bd:63:b5:eb: df:03:5f:b4:04:18:49:fe:82:e5:11:65:41:2c:eb:13:ae:07: 85:8d:4b:9d:68:be:a5:41:e6:f4:40:a3:bd:fc:82:1d:da:c1: aa:db:fa:4c:0e:5c:06:9c:12:2a:d2:4e:10:44:15:25:36:9e: 58:9a:30:2d:78:82:ff:db:0a:8a:a5:98:30:2b:85:d2:de:6f: ab:1a:7c:45:34:05:27:29:e8:3f:36:96:af:b0:35:8c:1a:31: de:59:73:a7:80:b0:01:9c:d2:e6:84:0e:79:5e:40:b3:da:c2: 15:60:9f:2b:ee:2c:2e:a1:3d:6d:27:29:ea:27:51:04:43:40: 5f:e1:c6:5a:8a:1b:fd:71:c3:9c:66:15:d4:85:9f:31:e9:ba: 63:89:c0:2f:70:4e:e3:3f:43:c7:13:c9:3d:22:54:fd:85:a6: 9d:bc:6e:af -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUO0o2PZG0q3M8ELyeBYiF4JfH8PowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMTAzWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTA3ZDZjMjQyM2U4ZGMxOTQ2ZGIyNzEwMWI1NDM2ZTVj ZWYwOWMzM2Q1NzFhMmFjMWFjYThlN2Y3ODA2MTMyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNm4tW1RrgAHzK38R+MTZreBkf2NKmKpDR1thP8gcse/Wp R01s83M+U0P2bc2CMMAQRbYthAlblM3sZuuCgiGDJhJHUdVRXRWjagYIq9YXuh0O Hu6ESwC9KXYf+mUzAC/r8Nikw1LhCnmiudm1Q1d8hlFk/8U509RvKPGxxNARGZIE +3ttcKzpTmSyx7YdxST2cK09PAFX69UzafQ3WvSp1m9138uJmu4Lpzkb+l7l3g0Z 8N7ZU3DFDe7gx3dCBYScyO67kL3LTsGlsdzqRlv3xlcq5IBaM1kvaFh714ZobQN3 g8ib0r85VfrBqLiKdwmO0n8DZOnwtiYT2Rg3VrnVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAHzO74+W2M2LkCUFvBG2BqbWTP4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VmMjk1ODA0LTg5YTctNGVjMy04MjZlLTczZTMyNzMzZGMwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVR0wDQYJKoZIhvcNAQELBQADggEBAJ4uZw7XM4taBkdqsl3b3bFT 5JNZaNX2iXTgIUiUBstVcPRhhDPToSBmaYiJLnuFIIcFttgzIuNfC3W+kG6iYFHj Eo8PoksYKAsbuXQQ7zSlsCuP8JenvWO1698DX7QEGEn+guURZUEs6xOuB4WNS51o vqVB5vRAo738gh3awarb+kwOXAacEirSThBEFSU2nliaMC14gv/bCoqlmDArhdLe b6safEU0BScp6D82lq+wNYwaMd5Zc6eAsAGc0uaEDnleQLPawhVgnyvuLC6hPW0n KeonUQRDQF/hxlqKG/1xw5xmFdSFnzHpumOJwC9wTuM/Q8cTyT0iVP2Fpp28bq8= -----END CERTIFICATE-----Generated at Tue Jul 1 17:09:01 2025 by rpki-client