$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa File: f8738a51-4689-46b8-a472-d4d0afaca2d7.roa (raw, json) Hash identifier: XaoPwhJjiaXkPp/G+BGBuMgv73uCW/Hta07PhSiIrPs= Subject key identifier: CC:69:98:A4:09:16:4F:C6:1D:C0:D1:CC:52:55:ED:DD:7F:2F:41:07 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4B8BE247A69BA0A65143BF7E31C1DA7712445F4B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa Signing time: Wed 25 Jun 2025 00:50:03 +0000 ROA not before: Wed 25 Jun 2025 00:50:03 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8b:e2:47:a6:9b:a0:a6:51:43:bf:7e:31:c1:da:77:12:44:5f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 25 00:50:03 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=32069f72bb3758de75dc598257ea7ede877abfced8db437f98c2ec3be8429e36, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:21:e0:25:ec:36:9c:7e:bd:39:34:e7:5c:94: 45:6a:9b:53:23:68:d3:cd:e5:6c:20:88:07:3c:1c: 65:8e:79:ac:3e:3c:e8:c3:f6:97:4c:bc:6b:ad:11: a0:69:1e:ab:e3:32:69:1e:8b:d0:2b:25:db:4f:03: ab:57:a2:47:9a:38:ac:28:7a:47:2e:b2:3e:10:46: c0:f2:65:b0:21:bc:cb:ec:27:20:5c:5e:ee:33:32: 26:36:a8:0a:e0:c1:85:db:13:58:76:2d:e8:a3:51: c2:a5:e6:d7:5b:da:67:88:8b:d1:18:31:f3:02:17: d6:e3:dd:c3:e2:b5:f6:4f:a7:42:79:bf:08:0f:0a: ad:0a:cc:f7:31:21:7f:06:0b:3d:80:f4:39:00:a9: d8:2a:34:a6:f1:cd:5f:85:49:f0:8e:a1:b1:8e:f8: eb:f5:f5:c6:9d:6a:dc:a4:78:9d:6c:48:90:cc:cb: e4:7f:da:81:b8:58:af:b1:b0:b3:61:99:05:5f:2c: 3f:29:45:7c:a8:d2:ae:b7:88:6d:a3:98:ad:52:1d: a5:7f:a9:8a:41:12:c5:97:72:02:f9:e3:5a:2d:1a: a4:0c:4d:f5:2f:f8:e2:c3:3a:93:64:dd:d2:7d:b2: c4:b6:79:d5:6d:11:ee:04:62:fe:fa:23:ce:66:08: a5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:69:98:A4:09:16:4F:C6:1D:C0:D1:CC:52:55:ED:DD:7F:2F:41:07 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8738a51-4689-46b8-a472-d4d0afaca2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4::/48 Signature Algorithm: sha256WithRSAEncryption 64:07:48:2e:b1:dd:03:08:5d:f6:e0:53:7c:4d:a8:0e:9a:7b: fc:9c:ab:0a:a1:39:74:4e:6a:c8:44:9e:31:ba:63:a7:de:a1: a5:4f:83:4d:cc:60:f7:61:db:71:f7:5c:ca:2e:74:09:20:1d: 18:0e:f9:fa:41:41:12:d7:b2:a1:f9:36:ad:fd:b7:28:d3:21: 8f:77:50:c3:9b:cc:17:84:43:cf:74:a9:24:72:66:3d:c9:b2: 93:34:62:77:e3:90:66:87:41:3f:5f:59:fc:9d:c6:cc:a4:18: 19:a0:24:84:52:6a:da:0d:60:0a:c0:40:da:89:df:b1:b2:fa: 24:da:3a:a4:b1:16:8d:07:52:2c:81:93:ff:81:75:98:0a:75: c4:e8:ce:c3:e9:1b:b7:2c:d3:cc:f9:ee:43:20:fb:72:7c:37: 60:88:a7:91:5e:1f:57:25:14:e3:82:7b:f2:b2:5a:1c:21:f0: 71:83:63:ff:9b:c1:79:c4:b7:54:fb:b3:0d:e7:54:d5:00:17: 16:9e:49:38:2d:39:ab:75:5c:71:86:ab:48:6c:3c:ef:0f:c6: 04:1d:0a:06:4d:9e:30:b6:dc:6e:c4:55:3b:13:63:4f:8d:c7: a9:18:04:a2:d9:28:50:3a:d8:2b:f0:7b:3e:ab:41:9c:30:b3: dd:ed:43:18 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUS4viR6aboKZRQ79+McHadxJEX0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjI1MDA1MDAzWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjA2OWY3MmJiMzc1OGRlNzVkYzU5ODI1N2VhN2VkZTg3 N2FiZmNlZDhkYjQzN2Y5OGMyZWMzYmU4NDI5ZTM2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqIeAl7Dacfr05NOdclEVqm1MjaNPN5WwgiAc8HGWOeaw+ POjD9pdMvGutEaBpHqvjMmkei9ArJdtPA6tXokeaOKwoekcusj4QRsDyZbAhvMvs JyBcXu4zMiY2qArgwYXbE1h2LeijUcKl5tdb2meIi9EYMfMCF9bj3cPitfZPp0J5 vwgPCq0KzPcxIX8GCz2A9DkAqdgqNKbxzV+FSfCOobGO+Ov19cadatykeJ1sSJDM y+R/2oG4WK+xsLNhmQVfLD8pRXyo0q63iG2jmK1SHaV/qYpBEsWXcgL541otGqQM TfUv+OLDOpNk3dJ9ssS2edVtEe4EYv76I85mCKXHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzGmYpAkWT8YdwNHMUlXt3X8vQQcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4NzM4YTUxLTQ2ODktNDZiOC1hNDcyLWQ0ZDBhZmFjYTJkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAQwDQYJKoZIhvcNAQELBQADggEBAGQHSC6x3QMIXfbgU3xNqA6a e/ycqwqhOXROashEnjG6Y6feoaVPg03MYPdh23H3XMoudAkgHRgO+fpBQRLXsqH5 Nq39tyjTIY93UMObzBeEQ890qSRyZj3JspM0YnfjkGaHQT9fWfydxsykGBmgJIRS atoNYArAQNqJ37Gy+iTaOqSxFo0HUiyBk/+BdZgKdcTozsPpG7cs08z57kMg+3J8 N2CIp5FeH1clFOOCe/KyWhwh8HGDY/+bwXnEt1T7sw3nVNUAFxaeSTgtOat1XHGG q0hsPO8PxgQdCgZNnjC23G7EVTsTY0+Nx6kYBKLZKFA62Cvwez6rQZwws93tQxg= -----END CERTIFICATE-----Generated at Sun Jun 29 09:26:51 2025 by rpki-client