$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4c062590-8f7f-4f01-9123-64634a17a4cd.roa File: 4c062590-8f7f-4f01-9123-64634a17a4cd.roa (raw, json) Hash identifier: Gx/s/UMWDCSLcLWhksCM8s0Vk4iIz9+Zk49FlCRepFM= Subject key identifier: 66:4C:CB:E4:56:56:0A:77:BC:E9:77:34:56:14:A0:E2:F3:E3:0F:E2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 25F1504024568CEAB0C9051791262242B9446288 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4c062590-8f7f-4f01-9123-64634a17a4cd.roa Signing time: Tue 05 Aug 2025 18:30:30 +0000 ROA not before: Tue 05 Aug 2025 18:30:30 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f1:50:40:24:56:8c:ea:b0:c9:05:17:91:26:22:42:b9:44:62:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 5 18:30:30 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=ea6c7abe5c45d8a4650206a552cbf0c2cb188c29155e70d86d8920f2834a82c9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0f:b7:03:4a:f4:45:27:36:87:f4:eb:07:75: 3b:34:2d:ae:9f:b9:6c:11:e5:6d:dd:23:a8:db:2f: 35:4f:2c:21:34:06:86:27:fb:65:da:ce:b4:49:d1: 11:2d:98:f9:d2:38:a9:02:3c:d6:e0:9f:46:da:7c: 73:0b:74:66:a9:b2:4e:64:1d:35:38:fc:69:10:b0: f9:c4:1f:9e:9f:ec:e0:5d:9e:f2:ea:34:be:02:96: 28:7e:03:36:df:1c:fb:4e:d0:b5:cb:75:9d:59:23: 30:82:bc:22:b9:a4:47:62:9d:05:fc:5e:75:57:73: 1b:7d:00:05:1f:43:e3:92:7a:91:23:a0:80:6f:8e: 73:50:34:ea:81:67:84:5c:db:94:58:f1:9b:d2:f0: 06:43:1f:6a:cd:f6:e3:24:7e:a6:d2:8e:b8:89:4a: 94:3f:a9:b3:75:c1:21:f4:db:3f:96:8d:94:95:a1: 27:6d:5a:50:6d:73:57:7d:65:d9:07:8e:19:7e:0c: 96:1d:5e:a7:28:5d:f7:44:5e:bf:2d:74:ff:fa:dc: 77:5e:41:e9:db:4b:5a:c4:0c:ae:69:e5:7d:be:2e: f3:8c:2c:e6:73:e6:e1:ef:86:33:24:a7:62:d4:74: 62:07:18:e8:a4:e3:87:fb:ce:e9:8c:de:86:60:77: 8b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4C:CB:E4:56:56:0A:77:BC:E9:77:34:56:14:A0:E2:F3:E3:0F:E2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4c062590-8f7f-4f01-9123-64634a17a4cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e900::/40 Signature Algorithm: sha256WithRSAEncryption 02:df:b5:1c:c9:4c:bb:ad:d7:d9:8d:96:e2:93:12:32:7e:33: 44:d5:cc:06:ac:3c:bd:a3:69:ab:d9:24:42:25:51:f8:d4:6d: 47:c8:d6:40:76:64:d6:c0:d4:bd:83:e4:8c:8f:17:6c:27:b3: 04:31:09:aa:a5:c2:9b:12:74:2c:13:02:63:75:4f:61:b1:91: f1:fe:b5:7a:f8:c0:18:10:21:18:b2:8f:3c:4c:a5:d1:23:f7: e7:c8:98:ac:a7:c4:5b:f9:b2:14:6c:39:bd:97:f0:89:64:93: d7:14:09:45:31:00:1f:19:0a:b0:fa:e5:eb:50:a0:5c:86:16: 58:c5:a4:1b:a8:9d:33:e3:86:01:a9:33:83:d4:6c:fc:03:e0: 80:f8:81:b1:00:b6:57:12:51:ea:d6:0d:1b:e6:d0:09:9e:3d: 67:47:d2:1b:e6:54:41:f3:ee:8a:ad:72:d0:f8:e4:6c:bc:2c: 6e:f9:6b:4e:90:da:a9:18:2e:e4:2f:42:42:46:c4:ef:4e:20: 10:84:ff:d1:ff:ed:19:cd:70:42:58:96:e6:f0:95:4e:10:b5: cb:ff:26:ee:82:2b:be:61:97:17:c9:17:df:c5:66:21:bc:c9: 08:3b:34:65:06:7a:04:c7:19:13:8b:e0:c2:4c:66:39:58:52: b8:35:e4:ce -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJfFQQCRWjOqwyQUXkSYiQrlEYogwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA1MTgzMDMwWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTZjN2FiZTVjNDVkOGE0NjUwMjA2YTU1MmNiZjBjMmNi MTg4YzI5MTU1ZTcwZDg2ZDg5MjBmMjgzNGE4MmM5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiD7cDSvRFJzaH9OsHdTs0La6fuWwR5W3dI6jbLzVPLCE0 BoYn+2XazrRJ0REtmPnSOKkCPNbgn0bafHMLdGapsk5kHTU4/GkQsPnEH56f7OBd nvLqNL4Clih+AzbfHPtO0LXLdZ1ZIzCCvCK5pEdinQX8XnVXcxt9AAUfQ+OSepEj oIBvjnNQNOqBZ4Rc25RY8ZvS8AZDH2rN9uMkfqbSjriJSpQ/qbN1wSH02z+WjZSV oSdtWlBtc1d9ZdkHjhl+DJYdXqcoXfdEXr8tdP/63HdeQenbS1rEDK5p5X2+LvOM LOZz5uHvhjMkp2LUdGIHGOik44f7zumM3oZgd4vZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUZkzL5FZWCne86Xc0VhSg4vPjD+IwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRjMDYyNTkwLThmN2YtNGYwMS05MTIzLTY0NjM0YTE3YTRjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76TANBgkqhkiG9w0BAQsFAAOCAQEAAt+1HMlMu63X2Y2W4pMSMn4z RNXMBqw8vaNpq9kkQiVR+NRtR8jWQHZk1sDUvYPkjI8XbCezBDEJqqXCmxJ0LBMC Y3VPYbGR8f61evjAGBAhGLKPPEyl0SP358iYrKfEW/myFGw5vZfwiWST1xQJRTEA HxkKsPrl61CgXIYWWMWkG6idM+OGAakzg9Rs/APggPiBsQC2VxJR6tYNG+bQCZ49 Z0fSG+ZUQfPuiq1y0PjkbLwsbvlrTpDaqRgu5C9CQkbE704gEIT/0f/tGc1wQliW 5vCVThC1y/8m7oIrvmGXF8kX38VmIbzJCDs0ZQZ6BMcZE4vgwkxmOVhSuDXkzg== -----END CERTIFICATE-----Generated at Sat Aug 9 01:15:32 2025 by rpki-client