$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f504ccce-2eee-4202-842d-dad59cabe141.roa File: f504ccce-2eee-4202-842d-dad59cabe141.roa (raw, json) Hash identifier: mVdoVLhMvSel8XWTwzDvMabbDqdjZG2Iv3htMxVVuzU= Subject key identifier: AF:A7:41:09:87:B5:90:EB:1E:6C:2B:49:E8:EC:CC:4B:23:E5:E8:42 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7153C67E34B995D4DD0C655036997451FBBFB40C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f504ccce-2eee-4202-842d-dad59cabe141.roa Signing time: Mon 16 Jun 2025 19:20:39 +0000 ROA not before: Mon 16 Jun 2025 19:20:39 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:53:c6:7e:34:b9:95:d4:dd:0c:65:50:36:99:74:51:fb:bf:b4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:39 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=67ed51c9019f75b890208003155e18977c750ff3101d61ee80b36f6efd320f80, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:96:7a:67:07:60:2b:bc:06:3f:72:1e:7f:12: 26:9e:8c:23:1d:ee:ea:fe:ce:db:70:8a:ef:2e:92: b0:d9:c2:c3:45:51:0a:99:18:ad:1c:b9:f9:a2:e3: 0c:36:2a:2c:a6:ee:3d:f3:2c:20:0f:ba:20:a0:f8: 94:95:2e:b6:26:c0:b8:6d:fd:ea:f4:9c:92:ec:81: cd:3b:a0:b0:ba:b6:92:bf:e4:97:d8:16:d1:b6:ac: 16:7c:14:21:ef:6a:67:9e:8a:d5:85:4c:a0:55:71: c0:f8:3a:bb:8c:b5:0c:d4:ec:77:02:f9:42:e2:db: c1:27:eb:62:fb:51:df:39:29:fc:ea:ed:61:76:5a: a9:51:57:ac:8f:69:38:1b:38:47:16:40:05:01:ea: 14:93:2a:14:d3:6b:47:8f:f8:28:9d:52:b0:bc:e5: e2:bb:cf:fe:b7:dc:21:f3:cb:70:70:d5:c1:3b:e8: f3:a7:9a:5f:2a:26:13:9e:1f:4d:8c:a9:f1:68:91: 61:cf:0e:b0:82:1e:e6:d0:8f:d5:ce:9f:82:42:af: 0c:99:d6:1f:ee:65:f0:72:11:13:5d:05:e4:f3:c5: 96:6b:b8:22:e0:bc:e4:a4:6e:ce:71:1b:70:75:77: 31:0a:27:d2:c2:c4:20:a6:9a:5d:57:8f:fd:c7:f0: 3e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A7:41:09:87:B5:90:EB:1E:6C:2B:49:E8:EC:CC:4B:23:E5:E8:42 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f504ccce-2eee-4202-842d-dad59cabe141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:8000::/40 Signature Algorithm: sha256WithRSAEncryption 94:0b:96:a8:12:74:bc:3a:9d:16:d8:bf:bc:66:d4:36:81:03: 5c:03:e7:d3:c2:91:22:2c:0f:84:94:9e:b2:26:0a:0e:44:33: a0:a0:bd:54:05:56:02:4f:39:13:d8:a0:3e:bf:37:52:54:ad: 64:51:1c:8e:6a:3a:4a:ca:cd:79:c2:79:43:a7:7a:ee:a0:f8: 3e:c9:31:39:8b:8a:64:dc:fc:60:20:9b:7a:c3:44:0d:7a:d4: a3:70:50:20:1a:45:60:55:4f:d0:91:a1:37:b1:bc:52:40:be: 8b:24:dc:50:1d:d4:f9:9c:3f:b6:a7:e6:5c:de:c7:7e:b8:f9: 57:e3:ad:fc:ae:c0:9b:45:a1:ea:c1:f4:a1:1f:0f:73:09:c8: f2:93:6f:a9:ba:53:b0:ad:31:7d:50:19:c0:13:a9:1a:25:56: 64:82:8e:c8:f6:4e:05:63:fa:c5:c5:b6:bc:eb:9a:4d:16:47: a7:54:4a:7d:a1:3d:ce:be:ca:57:48:44:7a:6e:46:70:cf:20: d9:41:aa:c8:47:d0:89:0e:c0:ba:bf:e8:67:3f:20:6d:66:b0: e8:ec:43:1b:5d:db:a1:5a:b1:26:65:55:e6:36:a1:3c:2f:fe: 25:5c:79:44:e3:0c:9a:36:3e:e8:e0:72:27:d2:83:c3:14:3e: 11:3a:c6:a0 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUcVPGfjS5ldTdDGVQNpl0Ufu/tAwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDM5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2N2VkNTFjOTAxOWY3NWI4OTAyMDgwMDMxNTVlMTg5Nzdj NzUwZmYzMTAxZDYxZWU4MGIzNmY2ZWZkMzIwZjgwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTlnpnB2ArvAY/ch5/EiaejCMd7ur+zttwiu8ukrDZwsNF UQqZGK0cufmi4ww2Kiym7j3zLCAPuiCg+JSVLrYmwLht/er0nJLsgc07oLC6tpK/ 5JfYFtG2rBZ8FCHvameeitWFTKBVccD4OruMtQzU7HcC+ULi28En62L7Ud85Kfzq 7WF2WqlRV6yPaTgbOEcWQAUB6hSTKhTTa0eP+CidUrC85eK7z/633CHzy3Bw1cE7 6POnml8qJhOeH02MqfFokWHPDrCCHubQj9XOn4JCrwyZ1h/uZfByERNdBeTzxZZr uCLgvOSkbs5xG3B1dzEKJ9LCxCCmml1Xj/3H8D4NAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUr6dBCYe1kOsebCtJ6OzMSyPl6EIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y1MDRjY2NlLTJlZWUtNDIwMi04NDJkLWRhZDU5Y2FiZTE0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD7gDANBgkqhkiG9w0BAQsFAAOCAQEAlAuWqBJ0vDqdFti/vGbUNoED XAPn08KRIiwPhJSesiYKDkQzoKC9VAVWAk85E9igPr83UlStZFEcjmo6SsrNecJ5 Q6d67qD4PskxOYuKZNz8YCCbesNEDXrUo3BQIBpFYFVP0JGhN7G8UkC+iyTcUB3U +Zw/tqfmXN7Hfrj5V+Ot/K7Am0Wh6sH0oR8PcwnI8pNvqbpTsK0xfVAZwBOpGiVW ZIKOyPZOBWP6xcW2vOuaTRZHp1RKfaE9zr7KV0hEem5GcM8g2UGqyEfQiQ7Aur/o Zz8gbWaw6OxDG13boVqxJmVV5jahPC/+JVx5ROMMmjY+6OByJ9KDwxQ+ETrGoA== -----END CERTIFICATE-----Generated at Tue Jul 1 08:58:14 2025 by rpki-client