$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/344bc29d-01a1-4e8a-bded-f30ec2519804.roa File: 344bc29d-01a1-4e8a-bded-f30ec2519804.roa (raw, json) Hash identifier: AT/mMJ2CK953erOVJlzLjT+wyK/5u+VPMnzkI3KN2jA= Subject key identifier: 0E:EA:C8:A4:51:FE:33:10:E9:EA:5A:F9:0B:9E:A3:D1:12:78:B3:EE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4F54664F9CF306BCAEDAC77D9FBBD75AEF5C3BEF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/344bc29d-01a1-4e8a-bded-f30ec2519804.roa Signing time: Tue 05 Aug 2025 18:40:18 +0000 ROA not before: Tue 05 Aug 2025 18:40:18 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:54:66:4f:9c:f3:06:bc:ae:da:c7:7d:9f:bb:d7:5a:ef:5c:3b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 5 18:40:18 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=0dcb275461fff85b509760a771164feb4fecf68dc0cf41014426d6d6a37f509e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:de:34:a8:6b:94:39:24:36:27:32:9b:83:22: c0:a7:2b:d3:e8:80:11:28:a8:00:f9:2f:99:b2:fa: 61:08:68:14:68:59:e5:22:ac:91:69:15:cf:83:9a: 0d:e6:bc:a3:00:43:6a:6a:75:66:b5:96:04:10:96: 90:63:34:c8:fd:4a:33:2c:2e:e0:5c:e9:05:f4:2c: 0a:80:05:fc:c5:d5:2d:59:5f:60:36:12:ff:7f:93: f3:ee:ee:a7:4c:80:93:69:08:5f:2a:80:60:37:f7: 1e:cc:9c:44:37:12:26:01:fc:e1:01:a3:a9:dc:db: 0f:a6:59:52:f7:59:0f:66:93:8a:67:e5:91:6a:e0: d7:63:e3:1b:3d:2f:48:e0:30:11:d9:af:22:b5:a4: 49:41:ec:b4:26:76:a3:6a:21:12:dc:6d:9a:45:bb: 40:64:67:2f:f7:b8:f0:36:20:46:7d:53:4c:b9:9f: 0a:0a:0f:d6:75:e1:63:d2:be:44:5b:9d:31:06:d3: 5e:28:d0:2f:6f:1b:e5:90:a8:13:62:a6:97:41:5b: 35:31:ea:fb:4e:02:a7:40:cf:2e:2b:a2:3f:d0:83: bd:8e:6f:c2:3c:b4:8c:db:7b:19:e1:2c:cf:b8:d4: 6e:c9:ab:c8:84:50:f6:9f:51:8d:6c:b9:3c:b3:63: 3c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EA:C8:A4:51:FE:33:10:E9:EA:5A:F9:0B:9E:A3:D1:12:78:B3:EE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/344bc29d-01a1-4e8a-bded-f30ec2519804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:700::/40 Signature Algorithm: sha256WithRSAEncryption 83:a4:2c:b9:c5:42:68:d0:7d:89:1d:7b:46:04:0a:5d:45:46: 96:22:e9:4e:b7:28:b2:46:9f:4d:47:10:d3:07:30:45:3c:d4: e1:06:5e:8e:1d:99:57:cb:5f:ee:cf:06:6c:fa:5e:fc:5d:bc: ec:73:78:fe:12:c6:70:0c:69:46:12:fb:16:18:6e:0b:f2:5c: 3f:f1:e7:30:46:f4:73:bc:77:08:e8:70:10:25:c8:98:ee:21: f3:b5:2e:fa:33:5b:34:5e:8d:48:5a:7f:cf:38:dc:a3:06:c9: d2:3a:09:3e:42:1e:a6:cf:57:99:9d:32:01:a1:9d:4e:2a:e9: f4:15:92:a6:09:68:c2:87:24:d1:1a:60:06:2b:35:30:50:d7: 3a:10:e9:92:7a:e1:b7:67:99:32:0e:51:c9:89:6e:fe:47:83: d3:e0:3a:9e:82:32:25:23:e4:5a:76:7d:b2:43:d2:cf:70:18: d6:99:0d:9d:d6:22:23:8a:dd:49:99:e0:44:f5:4d:27:30:89: 03:e0:dc:62:e5:aa:8e:96:89:c6:4c:b9:a6:50:1d:af:2a:14: 76:70:0d:95:dc:75:ec:72:fc:43:e2:0f:68:90:9f:d1:7b:c5: 42:4d:b5:da:95:df:15:66:d9:7b:2b:ba:62:96:04:db:8b:51: 13:14:1b:08 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUT1RmT5zzBryu2sd9n7vXWu9cO+8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA1MTg0MDE4WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGNiMjc1NDYxZmZmODViNTA5NzYwYTc3MTE2NGZlYjRm ZWNmNjhkYzBjZjQxMDE0NDI2ZDZkNmEzN2Y1MDllMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi3jSoa5Q5JDYnMpuDIsCnK9PogBEoqAD5L5my+mEIaBRo WeUirJFpFc+Dmg3mvKMAQ2pqdWa1lgQQlpBjNMj9SjMsLuBc6QX0LAqABfzF1S1Z X2A2Ev9/k/Pu7qdMgJNpCF8qgGA39x7MnEQ3EiYB/OEBo6nc2w+mWVL3WQ9mk4pn 5ZFq4Ndj4xs9L0jgMBHZryK1pElB7LQmdqNqIRLcbZpFu0BkZy/3uPA2IEZ9U0y5 nwoKD9Z14WPSvkRbnTEG014o0C9vG+WQqBNippdBWzUx6vtOAqdAzy4roj/Qg72O b8I8tIzbexnhLM+41G7Jq8iEUPafUY1suTyzYzxjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUDurIpFH+MxDp6lr5C56j0RJ4s+4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM0NGJjMjlkLTAxYTEtNGU4YS1iZGVkLWYzMGVjMjUxOTgwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwBzANBgkqhkiG9w0BAQsFAAOCAQEAg6QsucVCaNB9iR17RgQKXUVG liLpTrcoskafTUcQ0wcwRTzU4QZejh2ZV8tf7s8GbPpe/F287HN4/hLGcAxpRhL7 FhhuC/JcP/HnMEb0c7x3COhwECXImO4h87Uu+jNbNF6NSFp/zzjcowbJ0joJPkIe ps9XmZ0yAaGdTirp9BWSpglowock0RpgBis1MFDXOhDpknrht2eZMg5RyYlu/keD 0+A6noIyJSPkWnZ9skPSz3AY1pkNndYiI4rdSZngRPVNJzCJA+DcYuWqjpaJxky5 plAdryoUdnANldx17HL8Q+IPaJCf0XvFQk212pXfFWbZeyu6YpYE24tRExQbCA== -----END CERTIFICATE-----Generated at Fri Aug 8 00:35:48 2025 by rpki-client