$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd2c3e2-4d89-41a3-b450-b53f95a9dcd3.roa File: ffd2c3e2-4d89-41a3-b450-b53f95a9dcd3.roa (raw, json) Hash identifier: EdLquqy3fVnsaHaGhu5xPe7lki4Kl9x058eLzt/53+Y= Subject key identifier: D4:28:B1:AA:C5:B5:F2:48:6F:73:FB:1B:64:17:6E:CA:F0:A9:27:8A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0A04DC98F624F8E0D2F880B9477DCC0E580F28CD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd2c3e2-4d89-41a3-b450-b53f95a9dcd3.roa Signing time: Mon 16 Jun 2025 19:20:04 +0000 ROA not before: Mon 16 Jun 2025 19:20:04 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:04:dc:98:f6:24:f8:e0:d2:f8:80:b9:47:7d:cc:0e:58:0f:28:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:04 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=d83c9b4dd191c1888bfe077086c7fcd44597e85330a6408295f075bea54ddbf5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:52:f0:a9:1a:51:ec:9a:68:32:6b:4f:5c: 45:4d:58:2e:b4:63:e6:1d:bb:39:7c:30:2c:ee:ac: 08:04:67:82:95:0b:6f:26:54:5a:b0:cf:44:c5:99: 1f:de:6d:53:c0:af:d9:cc:10:48:4c:54:6e:56:d9: 2b:90:a2:64:45:a3:62:bf:aa:4c:33:a5:1b:cb:f8: 95:65:a4:ec:35:57:f2:7b:1f:55:c0:d1:84:97:8c: 43:0e:92:64:1e:a4:08:d7:a9:d4:6a:a9:71:07:09: d5:8e:ac:ab:8a:16:c4:14:86:92:fd:96:34:f7:d9: b4:90:e7:af:c5:de:8c:7f:70:97:44:e5:6b:14:14: f8:8b:64:d1:2a:87:6a:99:d4:17:93:c6:17:85:d6: 2b:2e:ac:61:cf:0a:9c:36:79:b1:24:80:84:86:cf: 0a:8e:a5:ad:8a:e0:81:fc:fe:27:38:98:d3:72:c5: 3d:ee:92:60:c7:88:f5:37:f9:1a:95:0f:08:44:81: 83:b6:67:21:41:51:08:29:91:f9:2a:9a:b7:0c:83: fa:a7:39:36:1c:b4:e8:e9:7d:5b:76:3e:06:56:48: 01:7b:86:0d:9d:2f:a1:8b:78:59:40:f9:9d:fb:ba: ce:9a:7e:71:c2:f2:2e:c3:dd:0f:d0:4c:1d:bb:71: 74:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:28:B1:AA:C5:B5:F2:48:6F:73:FB:1B:64:17:6E:CA:F0:A9:27:8A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd2c3e2-4d89-41a3-b450-b53f95a9dcd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e200::/40 Signature Algorithm: sha256WithRSAEncryption 00:f5:69:00:d3:4a:80:ff:78:cc:98:54:67:0b:bf:50:35:12: e5:af:9e:7c:86:29:e9:4d:f9:1c:3b:67:2b:22:90:e2:d6:28: bc:f7:92:49:dc:2e:95:4e:bf:59:8a:7f:56:cd:e9:bf:4e:66: 76:2e:79:3e:4e:9e:7a:7d:91:96:a5:f2:52:32:cf:25:28:c4: d7:0d:72:a1:59:af:86:e3:18:1f:45:6f:24:67:c7:ca:cb:6a: e8:df:e2:bf:6c:04:45:95:72:98:41:a5:ff:7d:f5:2b:15:1c: 32:22:41:ee:36:e7:7d:b5:7b:a5:88:06:6e:de:f8:5d:24:1c: 34:71:c8:50:6e:21:d3:a8:60:a5:1e:88:9a:e6:74:8b:0c:c8: 33:dd:a1:c6:06:66:e0:a1:2c:af:18:b4:03:18:9c:d6:78:9c: f7:02:0a:22:6c:ff:28:ce:f4:78:70:d0:44:3b:bc:36:85:9b: 82:df:0a:17:b5:6a:e4:d4:d8:dc:ac:19:19:ab:32:be:d4:6d: b8:ac:71:f0:08:21:b1:dd:cb:a7:60:1d:a9:1c:06:ec:6d:43: 56:33:4b:da:cf:3e:e3:05:63:77:99:ee:c6:8e:56:f2:0d:23: ec:e7:a2:e7:78:34:6f:85:9f:2e:68:89:8c:0e:5d:1a:1d:5e: f1:11:2e:1a -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCgTcmPYk+ODS+IC5R33MDlgPKM0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDA0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkODNjOWI0ZGQxOTFjMTg4OGJmZTA3NzA4NmM3ZmNkNDQ1 OTdlODUzMzBhNjQwODI5NWYwNzViZWE1NGRkYmY1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfeVLwqRpR7JpoMmtPXEVNWC60Y+Yduzl8MCzurAgEZ4KV C28mVFqwz0TFmR/ebVPAr9nMEEhMVG5W2SuQomRFo2K/qkwzpRvL+JVlpOw1V/J7 H1XA0YSXjEMOkmQepAjXqdRqqXEHCdWOrKuKFsQUhpL9ljT32bSQ56/F3ox/cJdE 5WsUFPiLZNEqh2qZ1BeTxheF1isurGHPCpw2ebEkgISGzwqOpa2K4IH8/ic4mNNy xT3ukmDHiPU3+RqVDwhEgYO2ZyFBUQgpkfkqmrcMg/qnOTYctOjpfVt2PgZWSAF7 hg2dL6GLeFlA+Z37us6afnHC8i7D3Q/QTB27cXSTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU1CixqsW18khvc/sbZBduyvCpJ4owHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ZmZDJjM2UyLTRkODktNDFhMy1iNDUwLWI1M2Y5NWE5ZGNkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74jANBgkqhkiG9w0BAQsFAAOCAQEAAPVpANNKgP94zJhUZwu/UDUS 5a+efIYp6U35HDtnKyKQ4tYovPeSSdwulU6/WYp/Vs3pv05mdi55Pk6een2RlqXy UjLPJSjE1w1yoVmvhuMYH0VvJGfHystq6N/iv2wERZVymEGl/331KxUcMiJB7jbn fbV7pYgGbt74XSQcNHHIUG4h06hgpR6ImuZ0iwzIM92hxgZm4KEsrxi0Axic1nic 9wIKImz/KM70eHDQRDu8NoWbgt8KF7Vq5NTY3KwZGasyvtRtuKxx8Aghsd3Lp2Ad qRwG7G1DVjNL2s8+4wVjd5nuxo5W8g0j7Oei53g0b4WfLmiJjA5dGh1e8REuGg== -----END CERTIFICATE-----Generated at Mon Jun 30 19:30:24 2025 by rpki-client