$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa File: 25c2cfc0-0999-4c50-a813-1379410017e8.roa (raw, json) Hash identifier: cqekGhxCnCTE5rHK4w9etAAFKxa3+JNDOJxSpJOh9vg= Subject key identifier: 15:67:3F:72:90:E4:F0:BB:4E:AE:36:F9:FB:DE:17:AB:A3:B6:31:1A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 04C21B3A2C2377F1D4F61A6D10240B243AD92D1B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa Signing time: Mon 16 Jun 2025 19:20:41 +0000 ROA not before: Mon 16 Jun 2025 19:20:41 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c2:1b:3a:2c:23:77:f1:d4:f6:1a:6d:10:24:0b:24:3a:d9:2d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 19:20:41 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=bccb1eaa67b94f624355384b779476db1d88ceea6465fcfba0a4fe64b15d3357, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:db:40:44:02:bd:b9:c8:07:7a:a4:5f:d7:a9: a9:94:52:7a:91:4d:75:fd:af:26:03:6b:1c:c2:e4: f8:d2:09:4e:9e:e1:0f:1b:d1:f4:6a:f1:6b:73:17: 41:ff:8d:e5:10:fd:ae:89:ea:63:3c:04:15:6f:b7: f1:b1:45:60:35:21:91:76:a5:54:f0:c9:26:e4:b3: d9:d2:c0:a2:88:68:d8:35:41:e4:1b:d9:d9:5b:93: 45:5f:78:e1:73:b7:8a:c1:dc:2a:78:a9:ce:30:12: b3:27:ea:89:17:09:8f:c0:e2:b4:ea:6c:27:ff:22: 6d:dc:c3:2c:1a:f1:bc:47:b2:c7:73:26:28:1c:b5: 31:fa:85:78:29:b7:7a:ee:dc:35:25:c0:db:e9:42: f5:e1:19:77:cd:17:98:0a:70:ef:6a:b1:58:03:a6: 47:20:99:28:cd:12:89:ef:b4:15:30:3e:ca:2a:db: e1:c5:40:4a:a9:3a:dc:77:27:ef:a3:5a:c4:b0:c7: b4:16:93:fd:df:35:51:c4:e7:e0:7c:12:ea:46:00: a4:99:45:c4:17:1c:40:64:c8:a1:ca:d0:7c:fb:80: 43:dc:24:20:f3:31:14:92:f2:78:c5:11:2a:7b:f0: 9f:b4:c7:51:78:5c:ca:ea:ea:50:f7:a8:8d:08:28: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:67:3F:72:90:E4:F0:BB:4E:AE:36:F9:FB:DE:17:AB:A3:B6:31:1A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e800::/40 Signature Algorithm: sha256WithRSAEncryption 45:e3:ed:ed:9f:27:fa:9a:0f:2b:8b:2b:2b:c5:50:5e:2e:32: 44:60:7e:47:42:1e:98:03:c8:c6:2a:32:5a:c2:87:49:58:ba: 97:6a:59:1c:ad:62:88:55:bb:a0:14:d8:ba:84:0f:7a:1e:26: 63:d4:ac:de:2c:68:e6:5b:0b:6e:63:1e:6d:05:92:42:8d:9f: 07:c3:b8:16:8a:ee:3a:f7:ab:4f:47:75:a6:9d:ae:1c:3c:1e: f0:8e:e8:fd:91:d8:37:08:f4:d7:8f:b2:ad:33:67:cc:99:6a: 32:53:3d:e3:b7:f7:02:13:42:d9:48:3d:a2:53:ea:9c:5a:89: f9:03:59:78:02:2f:54:4a:58:52:86:41:40:67:c1:3e:38:8d: cb:42:04:d0:a9:c5:c1:4e:11:d4:2c:48:81:b9:a3:b8:8d:85: 66:64:00:90:9d:51:28:3b:3f:61:e4:e2:1c:a6:53:a7:79:f8: 57:aa:83:66:8c:4b:da:66:07:98:47:49:1a:e4:b0:1a:95:ba: f5:8a:27:b4:dd:cd:d3:b9:cc:0e:7b:d5:8b:a9:cd:7c:af:8e: 5d:8b:c5:69:f3:89:db:20:b4:05:d1:89:87:bc:de:3b:dc:f7: cc:9e:41:7b:65:2d:55:56:bc:af:9b:c0:7b:34:7f:a7:d3:7a: ec:71:6b:ed -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBMIbOiwjd/HU9hptECQLJDrZLRswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MTkyMDQxWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiY2NiMWVhYTY3Yjk0ZjYyNDM1NTM4NGI3Nzk0NzZkYjFk ODhjZWVhNjQ2NWZjZmJhMGE0ZmU2NGIxNWQzMzU3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCG20BEAr25yAd6pF/XqamUUnqRTXX9ryYDaxzC5PjSCU6e 4Q8b0fRq8WtzF0H/jeUQ/a6J6mM8BBVvt/GxRWA1IZF2pVTwySbks9nSwKKIaNg1 QeQb2dlbk0VfeOFzt4rB3Cp4qc4wErMn6okXCY/A4rTqbCf/Im3cwywa8bxHssdz JigctTH6hXgpt3ru3DUlwNvpQvXhGXfNF5gKcO9qsVgDpkcgmSjNEonvtBUwPsoq 2+HFQEqpOtx3J++jWsSwx7QWk/3fNVHE5+B8EupGAKSZRcQXHEBkyKHK0Hz7gEPc JCDzMRSS8njFESp78J+0x1F4XMrq6lD3qI0IKNS7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUFWc/cpDk8LtOrjb5+94Xq6O2MRowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzI1YzJjZmMwLTA5OTktNGM1MC1hODEzLTEzNzk0MTAwMTdlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76DANBgkqhkiG9w0BAQsFAAOCAQEARePt7Z8n+poPK4srK8VQXi4y RGB+R0IemAPIxioyWsKHSVi6l2pZHK1iiFW7oBTYuoQPeh4mY9Ss3ixo5lsLbmMe bQWSQo2fB8O4ForuOverT0d1pp2uHDwe8I7o/ZHYNwj014+yrTNnzJlqMlM947f3 AhNC2Ug9olPqnFqJ+QNZeAIvVEpYUoZBQGfBPjiNy0IE0KnFwU4R1CxIgbmjuI2F ZmQAkJ1RKDs/YeTiHKZTp3n4V6qDZoxL2mYHmEdJGuSwGpW69YontN3N07nMDnvV i6nNfK+OXYvFafOJ2yC0BdGJh7zeO9z3zJ5Be2UtVVa8r5vAezR/p9N67HFr7Q== -----END CERTIFICATE-----Generated at Fri Jun 20 07:15:51 2025 by rpki-client