$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa File: 222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa (raw, json) Hash identifier: vrdf5SRPoQdhmiwMKaoYtbr6e9fmV7esEJwJNOLep8I= Subject key identifier: 53:82:23:CD:E8:60:A4:7D:2B:A8:D3:BB:C1:03:FA:96:55:40:E6:DB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1641304C7276EA5D28846F37E5B27B2D44CE9255 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa Signing time: Tue 20 May 2025 18:00:05 +0000 ROA not before: Tue 20 May 2025 18:00:05 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:41:30:4c:72:76:ea:5d:28:84:6f:37:e5:b2:7b:2d:44:ce:92:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:00:05 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=7875c0cfe45be098a755342ec5d8cb7b750c3cb416df773863bd82bc2e37c791, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bb:75:bf:02:0a:0e:73:5b:68:0a:bf:b4:3d: 95:a1:22:33:0c:b7:c2:70:2a:b9:17:54:f2:c1:f3: c8:0c:22:8d:fc:a7:b9:8c:cd:6c:38:5b:9f:1a:83: 54:01:1c:3c:2d:cf:96:3f:0d:1d:99:45:50:a7:22: 3a:4b:f6:40:25:90:63:0f:c3:92:63:6a:70:7d:e8: 90:c3:f4:1c:33:54:ec:af:9a:05:33:72:b4:7b:b3: 28:aa:19:13:9e:73:07:65:20:4c:56:d2:cc:55:ba: 8c:7d:0c:8a:d9:9e:8b:f2:4b:f4:40:c0:8a:fa:d7: aa:52:19:33:10:85:9c:d3:b7:a5:da:f6:d8:3e:f9: ad:9f:dd:7c:dc:96:5d:78:8b:f4:59:a8:d6:90:91: 8f:f4:5a:7d:16:c2:ea:29:e4:dd:b2:28:a3:8c:b5: 69:d0:e7:6f:5a:c5:cd:ed:95:1f:4f:a3:9b:a9:d7: 8e:09:17:b5:ec:47:94:a3:94:37:7b:d5:a3:7d:b3: 9f:69:c8:26:2e:ec:40:df:65:96:88:d0:ed:34:15: 84:46:0f:91:38:5e:b2:12:0d:29:b9:04:c0:bd:2e: e7:75:82:77:d2:ff:ff:09:d0:1e:e1:5f:59:51:97: ed:fc:9b:ce:84:bd:dd:4f:07:da:d7:7e:a5:06:63: 42:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:82:23:CD:E8:60:A4:7D:2B:A8:D3:BB:C1:03:FA:96:55:40:E6:DB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:40::/48 Signature Algorithm: sha256WithRSAEncryption 72:99:fc:d9:07:65:c6:ed:33:40:60:35:5c:66:99:dd:92:0c: 94:d0:cf:f2:3b:9d:d2:5c:af:83:8b:7e:94:9f:93:08:60:d3: 95:49:60:84:35:45:60:4a:8d:49:2c:42:03:9d:cf:07:71:ac: 62:fd:1a:86:4a:ba:3d:05:27:c9:04:6e:17:62:70:f2:6e:1e: 27:a8:1b:c4:e0:92:84:49:61:9a:80:13:f5:e1:40:13:19:77: 53:86:b3:8c:6e:35:0d:14:dd:e6:93:d8:89:1b:74:33:ef:de: 27:94:57:2d:64:a4:ac:c0:ab:a7:0a:c2:05:ba:f6:55:45:41: 59:70:92:3f:fc:fc:c8:d2:fe:3f:4d:bc:12:3c:74:11:7f:af: 11:b6:ea:91:cd:ed:bc:14:5b:33:af:8e:6b:4e:b9:ae:68:64: e2:51:fd:1b:92:21:07:17:3e:7a:f0:2b:bc:e4:eb:24:02:cc: c0:5e:72:df:61:06:6b:26:39:3a:99:6d:29:05:77:1d:12:7a: 3e:05:ee:5b:21:de:26:33:df:10:f4:c2:9a:86:d9:d4:a2:24: dd:d3:9b:c6:0e:2f:73:0f:3f:5f:bd:cb:2c:35:ee:59:e7:be: e4:7d:1b:3e:08:f2:fe:62:40:e0:d9:7c:5f:c1:cc:02:e0:16: 85:16:60:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFkEwTHJ26l0ohG835bJ7LUTOklUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgwMDA1WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODc1YzBjZmU0NWJlMDk4YTc1NTM0MmVjNWQ4Y2I3Yjc1 MGMzY2I0MTZkZjc3Mzg2M2JkODJiYzJlMzdjNzkxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMu3W/AgoOc1toCr+0PZWhIjMMt8JwKrkXVPLB88gMIo38 p7mMzWw4W58ag1QBHDwtz5Y/DR2ZRVCnIjpL9kAlkGMPw5JjanB96JDD9BwzVOyv mgUzcrR7syiqGROecwdlIExW0sxVuox9DIrZnovyS/RAwIr616pSGTMQhZzTt6Xa 9tg++a2f3Xzcll14i/RZqNaQkY/0Wn0Wwuop5N2yKKOMtWnQ529axc3tlR9Po5up 144JF7XsR5SjlDd71aN9s59pyCYu7EDfZZaI0O00FYRGD5E4XrISDSm5BMC9Lud1 gnfS//8J0B7hX1lRl+38m86Evd1PB9rXfqUGY0KFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUU4IjzehgpH0rqNO7wQP6llVA5tswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIyMjkwNmQyLWE2YTAtNDBhZC05ZTQxLWVhYjJkN2ZmMzVhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAEAwDQYJKoZIhvcNAQELBQADggEBAHKZ/NkHZcbtM0BgNVxmmd2S DJTQz/I7ndJcr4OLfpSfkwhg05VJYIQ1RWBKjUksQgOdzwdxrGL9GoZKuj0FJ8kE bhdicPJuHieoG8TgkoRJYZqAE/XhQBMZd1OGs4xuNQ0U3eaT2IkbdDPv3ieUVy1k pKzAq6cKwgW69lVFQVlwkj/8/MjS/j9NvBI8dBF/rxG26pHN7bwUWzOvjmtOua5o ZOJR/RuSIQcXPnrwK7zk6yQCzMBect9hBmsmOTqZbSkFdx0Sej4F7lsh3iYz3xD0 wpqG2dSiJN3Tm8YOL3MPP1+9yyw17lnnvuR9Gz4I8v5iQODZfF/BzALgFoUWYC4= -----END CERTIFICATE-----Generated at Sat Jun 14 18:52:52 2025 by rpki-client