$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa File: 222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa (raw, json) Hash identifier: cQrUFwrm8gFSKO8WlfF1vesqIvzTXrhZ84B66/t7KRQ= Subject key identifier: D0:F6:4B:28:33:B3:14:29:5A:B6:59:33:89:00:A9:AF:4C:08:73:B6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 375645EED52C3B54AEB08018340AD21DF254EB72 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa Signing time: Tue 05 Aug 2025 18:20:49 +0000 ROA not before: Tue 05 Aug 2025 18:20:49 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:56:45:ee:d5:2c:3b:54:ae:b0:80:18:34:0a:d2:1d:f2:54:eb:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 5 18:20:49 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=277ccc13c7f87c4973fbeaad7a4ee259a1d7ecabd04da4db562b94c191a4ceb6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:68:e1:b3:08:53:49:76:a8:17:77:2e:a6: ff:41:2e:da:34:4e:1a:df:78:e6:3b:a9:d0:ed:91: 55:88:fb:e1:3c:a8:24:b5:03:53:8e:99:81:f4:a6: f6:04:12:0a:03:d1:ad:3d:9e:3d:9d:2b:e5:39:6d: 24:b1:db:c3:00:cb:f5:c3:67:34:ec:1c:21:df:20: 80:8f:ac:80:d6:1d:56:cc:df:c6:07:7d:a3:47:8d: 57:e4:e5:bf:44:b1:4e:bd:ff:40:fc:f8:5b:53:6a: 39:34:de:9c:b6:21:b7:ed:e9:c0:8a:b0:4b:ac:54: 20:95:77:1b:0f:42:b8:d8:ff:30:1b:17:6a:b5:eb: 0a:f0:b9:cd:5f:df:cf:17:16:40:8f:ed:fc:71:0f: f2:8f:9f:48:87:7e:52:24:62:2c:7b:e1:55:8e:5f: ee:5d:94:4c:10:8a:55:d2:a0:1d:94:fd:55:bc:45: 18:5e:a8:a4:c7:96:dd:e3:3a:6d:e9:b3:16:2a:e0: 4b:6f:ca:4c:9d:4a:6e:61:76:83:06:8b:93:94:f1: ca:c5:06:97:64:fd:e4:af:fb:b6:87:8e:81:ce:dc: 4f:a1:37:a5:6a:40:32:58:40:bc:55:20:0e:76:05: 99:03:a5:43:f9:42:d4:6e:39:25:78:66:14:d4:70: 16:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F6:4B:28:33:B3:14:29:5A:B6:59:33:89:00:A9:AF:4C:08:73:B6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/222906d2-a6a0-40ad-9e41-eab2d7ff35a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:40::/48 Signature Algorithm: sha256WithRSAEncryption 5f:b2:5b:93:d4:54:58:9e:01:92:d6:9a:61:94:3e:89:01:df: 07:18:dd:b8:87:55:59:ad:62:cb:8a:88:bb:fb:bb:92:be:fa: 10:1d:c7:a4:64:17:07:7a:e8:c6:a0:36:7a:a9:ae:1f:fd:66: f9:70:82:c5:68:63:85:8a:32:a4:0b:4f:6e:5d:f8:00:78:ce: 8d:20:9f:3c:8d:56:91:2d:42:10:92:6b:51:30:bb:e5:f2:ad: 65:5a:f8:fe:45:77:6c:68:a5:23:9f:d7:37:54:7d:d3:35:96: a3:40:d1:7c:78:db:ff:77:9f:c7:9c:04:03:b1:ac:47:25:67: 9f:54:20:39:f8:56:33:db:dc:9f:0e:ae:82:db:1d:90:fa:87: ba:57:97:e5:15:ab:52:ec:78:f3:f3:08:56:81:e6:e1:db:8d: 3b:44:2a:e0:72:4a:64:4d:86:16:a7:6e:71:53:7b:8d:7b:ed: ac:05:a0:2c:fe:9f:e4:73:5d:f2:6d:ed:05:4b:89:e1:01:92: 58:c8:06:36:48:9b:14:9c:c0:48:d8:21:52:b3:86:42:17:bb: 67:11:a5:76:fb:5e:2d:5c:96:17:9b:f4:9b:77:ea:41:48:9f: f7:54:22:62:d0:0a:20:ef:06:e5:0e:52:1b:dc:1a:82:e2:10: 84:9d:f7:56 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUN1ZF7tUsO1SusIAYNArSHfJU63IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA1MTgyMDQ5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzdjY2MxM2M3Zjg3YzQ5NzNmYmVhYWQ3YTRlZTI1OWEx ZDdlY2FiZDA0ZGE0ZGI1NjJiOTRjMTkxYTRjZWI2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjrGjhswhTSXaoF3cupv9BLto0ThrfeOY7qdDtkVWI++E8 qCS1A1OOmYH0pvYEEgoD0a09nj2dK+U5bSSx28MAy/XDZzTsHCHfIICPrIDWHVbM 38YHfaNHjVfk5b9EsU69/0D8+FtTajk03py2Ibft6cCKsEusVCCVdxsPQrjY/zAb F2q16wrwuc1f388XFkCP7fxxD/KPn0iHflIkYix74VWOX+5dlEwQilXSoB2U/VW8 RRheqKTHlt3jOm3psxYq4EtvykydSm5hdoMGi5OU8crFBpdk/eSv+7aHjoHO3E+h N6VqQDJYQLxVIA52BZkDpUP5QtRuOSV4ZhTUcBZrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0PZLKDOzFClatlkziQCpr0wIc7YwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIyMjkwNmQyLWE2YTAtNDBhZC05ZTQxLWVhYjJkN2ZmMzVhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAEAwDQYJKoZIhvcNAQELBQADggEBAF+yW5PUVFieAZLWmmGUPokB 3wcY3biHVVmtYsuKiLv7u5K++hAdx6RkFwd66MagNnqprh/9ZvlwgsVoY4WKMqQL T25d+AB4zo0gnzyNVpEtQhCSa1Ewu+XyrWVa+P5Fd2xopSOf1zdUfdM1lqNA0Xx4 2/93n8ecBAOxrEclZ59UIDn4VjPb3J8OroLbHZD6h7pXl+UVq1LsePPzCFaB5uHb jTtEKuBySmRNhhanbnFTe4177awFoCz+n+RzXfJt7QVLieEBkljIBjZImxScwEjY IVKzhkIXu2cRpXb7Xi1clheb9Jt36kFIn/dUImLQCiDvBuUOUhvcGoLiEISd91Y= -----END CERTIFICATE-----Generated at Fri Aug 8 00:50:09 2025 by rpki-client