$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2537a9dc-38fe-4282-a7fd-c3f10cbb6270.roa File: 2537a9dc-38fe-4282-a7fd-c3f10cbb6270.roa (raw, json) Hash identifier: kV3HePxqkXPnePzNb3uQYI+Xzs8RtRE4ilhKhS2u/qc= Subject key identifier: 9C:A2:29:A7:57:24:08:99:AE:92:01:9F:7A:6A:AD:0A:FA:06:1A:22 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 07B80B2489D5C964420E8E73938C3C57CEC21607 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2537a9dc-38fe-4282-a7fd-c3f10cbb6270.roa Signing time: Sat 24 May 2025 00:30:39 +0000 ROA not before: Sat 24 May 2025 00:30:39 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f3:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b8:0b:24:89:d5:c9:64:42:0e:8e:73:93:8c:3c:57:ce:c2:16:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 24 00:30:39 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=0769208d9c31d4d1b2d5d2614de5d38b333841825495cc4692df0ecd009ef194, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:61:a4:91:57:3a:90:20:34:04:69:9c:d5:be: cc:f6:40:1c:b4:73:09:a1:6b:8c:a4:93:5c:ba:b5: 50:a4:a1:77:a9:3c:56:33:d3:4d:06:cb:6b:f8:88: f2:67:d2:92:af:99:e8:12:5b:a5:39:89:17:3a:d1: f0:e5:04:c2:68:6b:6c:06:41:d8:da:3a:43:ad:21: d1:51:64:92:60:b8:ff:73:d0:17:39:79:2b:29:52: 09:d6:20:57:9f:2d:fa:ee:8c:ec:55:d8:4c:ad:59: ea:0c:31:79:7c:11:8b:a4:0c:dc:56:b5:07:91:2a: 05:5a:f8:bb:75:9d:a1:3a:e2:6e:79:d5:1f:6e:c7: 6b:56:2c:ec:a2:00:62:39:2f:c3:bc:69:ba:d4:af: a7:b8:81:ee:29:67:bc:e7:70:f8:21:8e:45:e2:53: 24:66:30:7c:4e:46:19:ae:86:61:65:46:31:c4:6f: b7:c4:23:db:73:00:2e:c5:b8:a7:44:1d:9f:56:2b: e6:d5:6a:03:23:10:85:03:02:c7:03:19:96:cb:de: bd:be:67:55:0f:f1:ea:16:f1:83:ca:27:89:16:5e: 1c:64:c0:17:c7:6b:de:4e:6e:7f:6e:18:10:01:d4: 05:1a:80:f5:99:dc:15:52:30:a5:92:e6:18:bb:54: de:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A2:29:A7:57:24:08:99:AE:92:01:9F:7A:6A:AD:0A:FA:06:1A:22 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2537a9dc-38fe-4282-a7fd-c3f10cbb6270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f000::/44 Signature Algorithm: sha256WithRSAEncryption 7e:83:de:35:f4:7d:ef:50:a3:a1:1d:0c:16:e6:2b:ca:9f:40: 27:95:f9:0f:21:58:b6:75:c0:60:44:0b:52:05:01:b8:ac:83: 9b:08:4c:93:12:0d:00:85:8c:7f:5d:7f:28:06:88:5e:8b:bf: b5:d1:38:dd:66:c9:b4:c8:56:70:54:70:69:f7:c4:21:fa:08: 56:1e:d7:76:89:26:d6:cd:21:e3:80:97:e6:66:f4:f5:af:a0: 13:4f:97:46:24:26:74:ad:55:ee:0a:15:38:dc:46:ee:b1:e4: 38:17:7e:45:76:92:60:e3:64:b0:d3:ac:2c:55:ac:9b:ce:2a: 81:1a:a9:08:b6:f8:a0:bc:40:d8:92:21:0c:34:31:b8:bd:e5: fd:af:84:bc:5a:71:04:8f:bd:62:9e:1d:da:09:1d:3c:36:53: 5c:cb:6f:ca:cc:80:99:04:d3:2c:e6:54:32:13:3c:42:dd:49: 0d:3e:92:e5:ec:40:9c:63:42:48:cb:f4:87:87:08:d1:09:33: 3d:3c:2b:84:4d:c4:ee:50:09:49:59:b8:1a:25:bb:ca:87:b0: cf:c8:ce:e6:02:93:8c:42:20:0f:2f:76:d5:41:ea:22:85:42: 8f:3d:14:2f:a5:96:42:9b:22:54:a7:ed:5e:5f:03:bf:1b:b0: 1b:b7:a6:ef -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB7gLJInVyWRCDo5zk4w8V87CFgcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTI0MDAzMDM5WhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzY5MjA4ZDljMzFkNGQxYjJkNWQyNjE0ZGU1ZDM4YjMz Mzg0MTgyNTQ5NWNjNDY5MmRmMGVjZDAwOWVmMTk0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTYaSRVzqQIDQEaZzVvsz2QBy0cwmha4ykk1y6tVCkoXep PFYz000Gy2v4iPJn0pKvmegSW6U5iRc60fDlBMJoa2wGQdjaOkOtIdFRZJJguP9z 0Bc5eSspUgnWIFefLfrujOxV2EytWeoMMXl8EYukDNxWtQeRKgVa+Lt1naE64m55 1R9ux2tWLOyiAGI5L8O8abrUr6e4ge4pZ7zncPghjkXiUyRmMHxORhmuhmFlRjHE b7fEI9tzAC7FuKdEHZ9WK+bVagMjEIUDAscDGZbL3r2+Z1UP8eoW8YPKJ4kWXhxk wBfHa95Obn9uGBAB1AUagPWZ3BVSMKWS5hi7VN47AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnKIpp1ckCJmukgGfemqtCvoGGiIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzI1MzdhOWRjLTM4ZmUtNDI4Mi1hN2ZkLWMzZjEwY2JiNjI3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDz8AAwDQYJKoZIhvcNAQELBQADggEBAH6D3jX0fe9Qo6EdDBbmK8qf QCeV+Q8hWLZ1wGBEC1IFAbisg5sITJMSDQCFjH9dfygGiF6Lv7XRON1mybTIVnBU cGn3xCH6CFYe13aJJtbNIeOAl+Zm9PWvoBNPl0YkJnStVe4KFTjcRu6x5DgXfkV2 kmDjZLDTrCxVrJvOKoEaqQi2+KC8QNiSIQw0Mbi95f2vhLxacQSPvWKeHdoJHTw2 U1zLb8rMgJkE0yzmVDITPELdSQ0+kuXsQJxjQkjL9IeHCNEJMz08K4RNxO5QCUlZ uBolu8qHsM/IzuYCk4xCIA8vdtVB6iKFQo89FC+llkKbIlSn7V5fA78bsBu3pu8= -----END CERTIFICATE-----Generated at Sun Jun 15 11:42:49 2025 by rpki-client