$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa File: 14518d87-9a80-47da-80c6-efeb62f0643b.roa (raw, json) Hash identifier: S7vPwcWSuIeXgEctSrCjl25SoI0a4nMoiIH4IRGfdrY= Subject key identifier: 45:D8:9D:CD:71:06:0E:E5:DF:64:63:CD:75:B7:24:A7:DB:47:6D:CE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2360F68886EF151DD4C78D2B92AF01C6F90476E9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa Signing time: Tue 05 Aug 2025 18:20:18 +0000 ROA not before: Tue 05 Aug 2025 18:20:18 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:60:f6:88:86:ef:15:1d:d4:c7:8d:2b:92:af:01:c6:f9:04:76:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 5 18:20:18 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=4144cd44915ec61cef6485fa68d86ef25f4156132dc8ca237b2b8b2c0a9af3fa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:4d:de:39:ae:7a:bb:b9:37:42:2d:65:2f: 7c:fb:8b:46:78:8e:35:c7:ec:d7:cc:43:72:0f:e7: 09:37:de:a3:ea:7d:f5:74:74:01:5e:da:de:42:3c: fc:ff:80:8b:bd:ad:ad:63:47:96:b5:46:d2:b0:00: 37:24:22:5d:e0:00:bc:c6:ad:71:8d:59:c6:a0:82: 33:09:1d:ad:ba:7b:79:68:43:e0:f9:2b:21:a4:01: ca:01:7d:05:08:f6:93:da:6d:f5:8e:09:d7:6e:55: 37:28:e5:35:ab:83:fa:da:a4:61:79:64:ab:b2:51: 03:7e:24:13:fe:1a:d8:39:6f:00:7d:a7:87:ef:15: e8:5f:24:79:de:51:3b:64:5d:88:68:38:c5:24:20: 4d:0e:3d:b1:3e:bd:42:26:ed:74:02:e1:8d:76:f8: b8:54:41:4f:30:85:df:ce:68:df:33:9c:aa:c7:e6: 71:39:5c:e7:37:d3:69:f8:ec:ed:7b:13:5e:c8:bf: 4a:84:7d:de:85:8a:4f:df:f2:31:dc:ee:d0:12:5d: 8a:8b:29:99:de:b5:40:80:05:2a:5f:e6:ea:7c:51: 7e:85:8d:5c:7b:63:62:c9:5c:30:80:96:40:fb:82: 2e:07:82:78:b0:3e:a8:bb:c1:c9:a3:6f:4b:6f:a4: 69:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D8:9D:CD:71:06:0E:E5:DF:64:63:CD:75:B7:24:A7:DB:47:6D:CE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14518d87-9a80-47da-80c6-efeb62f0643b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:3::/48 Signature Algorithm: sha256WithRSAEncryption 49:02:d0:bf:24:40:53:ca:c3:bd:04:61:13:a8:8a:a7:08:c6: 32:b0:7a:4f:6f:e4:e8:e5:e3:87:96:b2:32:12:c9:c2:fc:ad: dc:ba:cd:c0:d3:e2:11:f9:f3:48:7a:5c:ca:33:cb:ca:2e:1e: 14:46:89:1c:16:ef:4b:a9:ef:af:b9:d5:64:65:78:5f:30:ac: a1:86:01:31:16:8b:85:56:54:f7:be:db:aa:e1:b3:cc:dd:50: 9a:93:15:6b:53:89:2e:3a:de:bf:23:5e:26:59:c6:04:0e:5c: 17:02:9d:fa:13:67:c9:74:77:16:e7:d2:fd:e6:c8:b3:4c:18: e2:66:88:00:bf:fb:38:ab:70:e4:d2:89:fe:e2:f5:ea:66:1c: 6b:18:50:f7:dc:57:b1:a3:4e:28:0b:a6:23:c3:20:59:a0:b3: 71:f1:e0:e5:98:f2:2d:cb:c0:0c:70:fb:d7:d0:8f:90:a4:48: e8:4f:c2:34:a7:50:b3:24:45:6f:a3:1e:2b:f5:4e:69:8b:16: 92:20:49:8a:aa:b7:61:c6:30:84:82:46:54:99:55:6d:d1:48: 9a:97:fb:7c:7a:64:de:84:2f:c1:2a:0c:1e:e9:82:d5:33:75: b0:b0:27:12:08:b0:a5:68:9f:59:0a:e6:eb:c2:2f:15:1e:52: cb:a5:34:4f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUI2D2iIbvFR3Ux40rkq8BxvkEdukwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA1MTgyMDE4WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTQ0Y2Q0NDkxNWVjNjFjZWY2NDg1ZmE2OGQ4NmVmMjVm NDE1NjEzMmRjOGNhMjM3YjJiOGIyYzBhOWFmM2ZhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjXE3eOa56u7k3Qi1lL3z7i0Z4jjXH7NfMQ3IP5wk33qPq ffV0dAFe2t5CPPz/gIu9ra1jR5a1RtKwADckIl3gALzGrXGNWcaggjMJHa26e3lo Q+D5KyGkAcoBfQUI9pPabfWOCdduVTco5TWrg/rapGF5ZKuyUQN+JBP+Gtg5bwB9 p4fvFehfJHneUTtkXYhoOMUkIE0OPbE+vUIm7XQC4Y12+LhUQU8whd/OaN8znKrH 5nE5XOc302n47O17E17Iv0qEfd6Fik/f8jHc7tASXYqLKZnetUCABSpf5up8UX6F jVx7Y2LJXDCAlkD7gi4HgniwPqi7wcmjb0tvpGnXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURdidzXEGDuXfZGPNdbckp9tHbc4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE0NTE4ZDg3LTlhODAtNDdkYS04MGM2LWVmZWI2MmYwNjQzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAAMwDQYJKoZIhvcNAQELBQADggEBAEkC0L8kQFPKw70EYROoiqcI xjKwek9v5Ojl44eWsjISycL8rdy6zcDT4hH580h6XMozy8ouHhRGiRwW70up76+5 1WRleF8wrKGGATEWi4VWVPe+26rhs8zdUJqTFWtTiS463r8jXiZZxgQOXBcCnfoT Z8l0dxbn0v3myLNMGOJmiAC/+zircOTSif7i9epmHGsYUPfcV7GjTigLpiPDIFmg s3Hx4OWY8i3LwAxw+9fQj5CkSOhPwjSnULMkRW+jHiv1TmmLFpIgSYqqt2HGMISC RlSZVW3RSJqX+3x6ZN6EL8EqDB7pgtUzdbCwJxIIsKVon1kK5uvCLxUeUsulNE8= -----END CERTIFICATE-----Generated at Fri Aug 8 19:34:01 2025 by rpki-client