$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa File: 25c2cfc0-0999-4c50-a813-1379410017e8.roa (raw, json) Hash identifier: spaJkjyFxXFPLuh38N3xvGUHwOQ+YX5NMiPOlzlkutM= Subject key identifier: 40:5F:9D:58:B6:56:BA:01:3F:64:24:85:B0:67:E1:60:28:2B:2F:FD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 29412C25954704B76FFB3B67BBE9CA45E681EB89 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa Signing time: Tue 05 Aug 2025 18:30:55 +0000 ROA not before: Tue 05 Aug 2025 18:30:55 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:41:2c:25:95:47:04:b7:6f:fb:3b:67:bb:e9:ca:45:e6:81:eb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 5 18:30:55 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=4b441b5c4647b45b110ed7c2f85363704c25e2a53049237f092067e0495f3595, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3e:8f:01:2a:67:ea:2a:02:f9:f7:1f:16:0a: 4e:cf:a4:50:0d:31:70:2f:d1:93:2c:17:7d:73:09: 23:3f:17:d5:ed:e6:92:b7:67:f9:61:b2:5e:b4:fd: ad:b9:53:2d:eb:0b:45:ab:40:eb:69:c7:fc:31:44: 95:65:81:12:4a:ed:c4:a4:17:db:63:82:4e:1d:29: ed:02:7b:73:01:3f:2d:5d:17:0c:f8:2d:74:5a:de: 24:ab:6f:50:7a:a7:18:da:6a:b6:5f:f0:46:83:16: 77:d6:b0:83:71:20:84:0f:54:93:5c:e4:96:b3:12: ed:a3:6e:37:40:d5:9e:29:13:6d:14:25:31:1e:52: 6c:80:4e:ee:13:84:03:a9:6b:a0:b7:76:1e:92:67: 9e:5f:be:f0:ae:ed:0a:83:6f:5c:87:c4:e8:b2:f6: d7:21:ac:c8:14:86:60:ef:73:f4:1a:33:64:bf:a7: e0:61:41:1a:73:65:01:09:b5:9a:1d:92:67:c9:81: fa:72:fd:b6:1b:25:a1:55:d1:c7:31:34:75:76:b6: 45:ad:94:17:db:d2:e2:cf:87:31:1d:5a:3a:f5:11: 53:03:ab:5e:bf:42:c4:e7:08:d3:a7:7e:b4:d9:97: 2d:0d:bf:11:91:4c:aa:c6:30:ad:9d:61:6a:04:6d: 05:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5F:9D:58:B6:56:BA:01:3F:64:24:85:B0:67:E1:60:28:2B:2F:FD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e800::/40 Signature Algorithm: sha256WithRSAEncryption 90:34:0a:18:28:eb:e1:ce:0d:95:11:2d:54:b6:bb:68:6d:2d: a0:f5:55:cf:2b:99:c4:59:22:a3:23:7b:2d:64:0c:78:6e:99: 84:07:31:51:54:2f:97:6f:e0:09:f6:cf:e1:a4:27:69:50:0d: b1:6b:a2:75:f8:9d:41:5a:c2:ad:6f:63:bc:f5:35:78:c8:bc: b7:30:a7:8b:9b:2e:44:90:6e:be:40:f6:a3:dc:ef:4d:27:b1: a0:a1:76:2a:90:11:d8:b9:1a:de:21:43:67:e7:89:32:86:fc: 7b:dd:5e:20:8a:71:d9:27:03:2a:83:41:6c:d9:16:40:89:db: 35:0a:84:7a:1e:65:bd:64:3d:72:40:98:a5:b0:d8:0a:c2:19: e3:79:18:08:46:9b:fa:79:ee:8f:ac:3b:39:37:8c:5d:3e:15: 25:a4:66:1d:84:1a:57:d7:df:bd:85:c8:34:42:c2:d9:f6:6a: 4e:59:6f:cc:67:b9:97:4b:aa:ee:fa:d5:02:18:c0:fb:dc:c0: ce:28:fb:f5:78:7a:ab:bb:c4:95:35:17:fb:c2:12:40:4a:2f: fd:a8:f1:70:f3:4e:d7:84:af:c3:9b:c7:9e:ee:2f:a2:fe:07: 94:79:8c:85:8b:79:8a:30:40:3c:b8:e2:1f:a6:fb:8f:fd:6f: a9:d8:3c:99 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKUEsJZVHBLdv+ztnu+nKReaB64kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA1MTgzMDU1WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjQ0MWI1YzQ2NDdiNDViMTEwZWQ3YzJmODUzNjM3MDRj MjVlMmE1MzA0OTIzN2YwOTIwNjdlMDQ5NWYzNTk1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkPo8BKmfqKgL59x8WCk7PpFANMXAv0ZMsF31zCSM/F9Xt 5pK3Z/lhsl60/a25Uy3rC0WrQOtpx/wxRJVlgRJK7cSkF9tjgk4dKe0Ce3MBPy1d Fwz4LXRa3iSrb1B6pxjaarZf8EaDFnfWsINxIIQPVJNc5JazEu2jbjdA1Z4pE20U JTEeUmyATu4ThAOpa6C3dh6SZ55fvvCu7QqDb1yHxOiy9tchrMgUhmDvc/QaM2S/ p+BhQRpzZQEJtZodkmfJgfpy/bYbJaFV0ccxNHV2tkWtlBfb0uLPhzEdWjr1EVMD q16/QsTnCNOnfrTZly0NvxGRTKrGMK2dYWoEbQXBAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUQF+dWLZWugE/ZCSFsGfhYCgrL/0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzI1YzJjZmMwLTA5OTktNGM1MC1hODEzLTEzNzk0MTAwMTdlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76DANBgkqhkiG9w0BAQsFAAOCAQEAkDQKGCjr4c4NlREtVLa7aG0t oPVVzyuZxFkioyN7LWQMeG6ZhAcxUVQvl2/gCfbP4aQnaVANsWuidfidQVrCrW9j vPU1eMi8tzCni5suRJBuvkD2o9zvTSexoKF2KpAR2Lka3iFDZ+eJMob8e91eIIpx 2ScDKoNBbNkWQInbNQqEeh5lvWQ9ckCYpbDYCsIZ43kYCEab+nnuj6w7OTeMXT4V JaRmHYQaV9ffvYXINELC2fZqTllvzGe5l0uq7vrVAhjA+9zAzij79Xh6q7vElTUX +8ISQEov/ajxcPNO14Svw5vHnu4vov4HlHmMhYt5ijBAPLjiH6b7j/1vqdg8mQ== -----END CERTIFICATE-----Generated at Sat Aug 9 14:30:59 2025 by rpki-client