$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa File: f6cf58cb-08de-4e22-be98-43e3537a793b.roa (raw, json) Hash identifier: HuXfTD6iMkIDLMHkCI+S+gcqqfmJHcI3Xd6r2Ok9qq8= Subject key identifier: 1C:7D:8D:A2:CA:3F:F0:AD:63:2E:2B:31:F3:FA:94:80:50:17:6E:B6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 67C446916A7D8EE42252E00E749A1A1D32E378E4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa Signing time: Mon 16 Jun 2025 19:31:06 +0000 ROA not before: Mon 16 Jun 2025 19:31:06 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c4:46:91:6a:7d:8e:e4:22:52:e0:0e:74:9a:1a:1d:32:e3:78:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:31:06 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=ba9f4c8c9e28eb716173762b68b855353c336ee44e270efb241ab40e0f83e5e2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:80:07:67:3f:66:b9:92:69:b1:f3:3b:aa: 67:ae:44:5a:ae:dc:dd:8e:a5:f6:33:06:b7:38:28: 7d:da:8b:09:5c:2e:8b:07:0c:ac:fe:64:8f:06:25: 89:fb:b3:15:08:61:89:a0:17:57:4e:bd:33:3d:af: 5a:5d:57:21:f2:ef:7c:63:5c:12:f7:27:e4:5e:e2: 51:d5:79:fd:97:d8:d4:b0:85:16:7e:fa:27:2c:63: 2f:e1:a4:dc:bf:71:d4:2b:b4:3e:52:d2:25:b5:3d: b1:21:af:b2:42:ef:cf:59:f5:54:15:e6:47:0d:73: ab:e0:c2:38:e5:be:45:e1:65:a9:1a:12:5d:19:f5: 66:ca:14:10:2a:1c:3a:91:df:41:82:37:94:4b:d7: 01:ad:fa:90:7e:13:f5:7a:fa:f8:3d:30:a3:09:e7: 2a:3a:2a:de:45:95:d5:04:d3:91:ac:1a:3d:88:f0: c3:d2:3b:95:0c:14:9a:fb:12:78:ed:db:ea:d7:6a: e8:1b:8e:eb:e0:9b:ad:69:d2:8c:57:44:ba:b6:c5: 1e:95:39:a6:3f:a3:ea:49:c7:74:e1:73:88:8d:84: 45:b2:16:3f:e6:de:32:ef:08:f3:06:12:3c:3a:87: c9:8a:6a:9b:99:bc:fb:d3:6a:d3:40:51:10:65:6e: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7D:8D:A2:CA:3F:F0:AD:63:2E:2B:31:F3:FA:94:80:50:17:6E:B6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e100::/40 Signature Algorithm: sha256WithRSAEncryption 55:48:bc:b1:40:2f:b8:31:77:6b:7d:49:5f:26:55:d5:27:1f: df:80:5c:33:ab:ec:27:6e:07:b5:00:c9:e4:93:00:0b:0a:20: 7e:43:4e:ba:05:d3:be:18:41:b0:15:62:b0:d0:9b:5c:1f:61: f2:cb:6a:5c:2d:4e:07:8a:06:0d:a7:70:98:3a:dc:40:aa:9d: 22:54:5b:60:55:0a:6c:d6:0f:06:f4:1a:0f:d8:4e:c0:88:03: 05:b8:35:cf:25:f3:17:8a:55:d1:81:d3:bb:a5:96:e4:2b:9e: de:d8:18:a9:93:cb:50:fb:31:ef:1d:9b:bb:9b:26:4f:1e:0c: 4e:44:2a:8f:7c:93:33:65:37:fa:25:5d:45:a4:ae:b6:f1:33: 5d:8e:49:3e:f5:21:b6:3d:a8:95:d0:96:da:ad:2d:fc:ff:00: 16:ff:3f:04:26:5c:44:07:ff:77:77:bd:ce:dd:33:43:75:3f: d9:18:79:ee:63:db:f4:1c:3b:05:ea:e8:dc:b2:d6:af:79:49: a2:0c:e7:79:a9:35:24:7f:bf:a7:2a:1f:1a:ed:40:37:7c:1c: b5:6d:f4:5b:e0:fa:c7:2e:59:c1:cd:2d:2e:70:13:dc:c7:c7: a7:6d:27:b2:48:d5:7e:a9:7c:0a:ad:d8:99:b7:09:6f:16:07: 72:08:d5:b7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUZ8RGkWp9juQiUuAOdJoaHTLjeOQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkzMTA2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTlmNGM4YzllMjhlYjcxNjE3Mzc2MmI2OGI4NTUzNTNj MzM2ZWU0NGUyNzBlZmIyNDFhYjQwZTBmODNlNWUyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClnIAHZz9muZJpsfM7qmeuRFqu3N2OpfYzBrc4KH3aiwlc LosHDKz+ZI8GJYn7sxUIYYmgF1dOvTM9r1pdVyHy73xjXBL3J+Re4lHVef2X2NSw hRZ++icsYy/hpNy/cdQrtD5S0iW1PbEhr7JC789Z9VQV5kcNc6vgwjjlvkXhZaka El0Z9WbKFBAqHDqR30GCN5RL1wGt+pB+E/V6+vg9MKMJ5yo6Kt5FldUE05GsGj2I 8MPSO5UMFJr7Enjt2+rXaugbjuvgm61p0oxXRLq2xR6VOaY/o+pJx3Thc4iNhEWy Fj/m3jLvCPMGEjw6h8mKapuZvPvTatNAURBlbhU3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHH2Noso/8K1jLisx8/qUgFAXbrYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y2Y2Y1OGNiLTA4ZGUtNGUyMi1iZTk4LTQzZTM1MzdhNzkzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74TANBgkqhkiG9w0BAQsFAAOCAQEAVUi8sUAvuDF3a31JXyZV1Scf 34BcM6vsJ24HtQDJ5JMACwogfkNOugXTvhhBsBVisNCbXB9h8stqXC1OB4oGDadw mDrcQKqdIlRbYFUKbNYPBvQaD9hOwIgDBbg1zyXzF4pV0YHTu6WW5Cue3tgYqZPL UPsx7x2bu5smTx4MTkQqj3yTM2U3+iVdRaSutvEzXY5JPvUhtj2oldCW2q0t/P8A Fv8/BCZcRAf/d3e9zt0zQ3U/2Rh57mPb9Bw7Bero3LLWr3lJogzneak1JH+/pyof Gu1AN3wctW30W+D6xy5Zwc0tLnAT3MfHp20nskjVfql8Cq3YmbcJbxYHcgjVtw== -----END CERTIFICATE-----Generated at Tue Jul 1 15:24:14 2025 by rpki-client