$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/657ed07e-fe87-4071-8960-e0b18e49fe3c.roa File: 657ed07e-fe87-4071-8960-e0b18e49fe3c.roa (raw, json) Hash identifier: n701n5Sr1wVjL99bDefJ/MAfQEMIUtUfyOoMVHFWA8w= Subject key identifier: AF:67:0D:72:7A:52:91:E4:6A:37:EE:CA:DE:E1:70:CE:13:3F:E2:6C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 57D5D10E875288A608AB59A0F4F69A490DEE939E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/657ed07e-fe87-4071-8960-e0b18e49fe3c.roa Signing time: Wed 06 Aug 2025 00:40:21 +0000 ROA not before: Wed 06 Aug 2025 00:40:21 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f0:4100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d5:d1:0e:87:52:88:a6:08:ab:59:a0:f4:f6:9a:49:0d:ee:93:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 6 00:40:21 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=9cccd0e12128ab5477d9181c7b653fcd06584c0e6aee2b52628f6fd6caf83fa3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4e:ba:ec:f4:94:b9:9f:5d:c2:37:6e:26:26: fb:db:c5:09:82:ae:f1:97:c6:fd:43:fa:97:9d:67: 34:99:fa:a7:63:96:db:2d:3d:44:45:90:3f:ab:05: 0f:1b:d1:8f:1d:28:38:03:6c:c4:06:a5:60:54:41: 9e:1c:06:bd:c5:d8:ab:e4:94:49:fd:24:06:a8:b0: fd:c1:88:6b:03:37:8f:7e:b9:f7:4d:75:59:b6:3c: bb:e6:55:4e:ab:56:a1:94:b1:ca:c0:e3:31:60:b0: 96:7f:dd:0c:b3:98:13:a9:6f:d1:76:18:c0:9e:50: 81:d2:f6:f1:14:52:b4:4f:f3:0f:88:e5:67:bd:6a: 36:b6:0e:0e:33:97:87:60:5a:54:0c:6e:86:a0:fb: 6d:c0:4c:41:51:53:31:f6:a4:f8:4f:f6:59:ca:51: 00:9e:a4:da:82:3e:29:9a:c6:82:2f:4c:b8:fe:e0: ff:16:06:5d:c7:e7:04:9a:6f:c2:53:75:50:af:26: 91:f8:39:68:2f:21:46:4d:70:02:e5:ac:84:a0:09: 7b:54:6e:75:a9:4d:a0:79:1f:94:22:e5:34:c0:1d: 8d:af:9b:86:83:10:0e:71:05:e4:09:9a:86:a6:71: 0d:24:23:5e:b1:15:b4:e2:50:58:a4:92:a8:e0:1d: 76:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:67:0D:72:7A:52:91:E4:6A:37:EE:CA:DE:E1:70:CE:13:3F:E2:6C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/657ed07e-fe87-4071-8960-e0b18e49fe3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4100::/40 Signature Algorithm: sha256WithRSAEncryption 62:ab:d9:f2:7e:1c:d4:cb:0c:b0:1b:77:e2:9e:f0:58:8d:24: ab:b2:a9:fc:c2:80:6e:32:a9:5c:04:2f:d9:e1:25:a2:e1:58: 30:c5:d0:ba:a3:99:cb:cf:ec:98:19:16:79:99:30:f2:3e:ee: 35:b4:e7:98:01:92:c5:2b:ae:8f:da:7d:dc:14:24:bc:85:3c: f9:ba:02:9c:b8:7b:a6:14:c1:d1:2e:76:ed:52:39:96:ad:06: ee:d7:04:3c:81:c9:f5:39:d5:12:49:5b:d1:8a:92:fd:c2:33: 63:b9:9e:ce:e1:e7:16:8e:53:09:70:4a:75:c8:26:60:14:56: 8d:48:2b:a6:9f:55:ac:46:69:54:b5:01:e6:4a:9e:02:40:3c: 45:ce:3c:9e:1a:f8:6d:ab:a8:51:2c:d9:13:01:6c:42:af:cb: cb:81:80:b1:4d:96:01:94:62:b5:f7:11:54:b9:06:29:43:61: 8b:fb:3b:03:dd:0f:96:c4:4f:8e:49:5c:b4:1e:45:91:c9:0c: e3:70:d4:b4:24:44:60:01:56:28:05:f1:aa:52:b0:9d:63:25: 32:4c:7b:f4:c7:68:27:4a:49:3d:dc:59:b6:bc:b4:d1:54:f5: 17:ce:9f:20:c2:eb:bf:dd:e7:9f:b5:c4:4b:11:b8:75:16:16: 6d:26:ca:bc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUV9XRDodSiKYIq1mg9PaaSQ3uk54wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA2MDA0MDIxWhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5Y2NjZDBlMTIxMjhhYjU0NzdkOTE4MWM3YjY1M2ZjZDA2 NTg0YzBlNmFlZTJiNTI2MjhmNmZkNmNhZjgzZmEzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiTrrs9JS5n13CN24mJvvbxQmCrvGXxv1D+pedZzSZ+qdj ltstPURFkD+rBQ8b0Y8dKDgDbMQGpWBUQZ4cBr3F2KvklEn9JAaosP3BiGsDN49+ ufdNdVm2PLvmVU6rVqGUscrA4zFgsJZ/3QyzmBOpb9F2GMCeUIHS9vEUUrRP8w+I 5We9aja2Dg4zl4dgWlQMboag+23ATEFRUzH2pPhP9lnKUQCepNqCPimaxoIvTLj+ 4P8WBl3H5wSab8JTdVCvJpH4OWgvIUZNcALlrISgCXtUbnWpTaB5H5Qi5TTAHY2v m4aDEA5xBeQJmoamcQ0kI16xFbTiUFikkqjgHXY7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUr2cNcnpSkeRqN+7K3uFwzhM/4mwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY1N2VkMDdlLWZlODctNDA3MS04OTYwLWUwYjE4ZTQ5ZmUzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwQTANBgkqhkiG9w0BAQsFAAOCAQEAYqvZ8n4c1MsMsBt34p7wWI0k q7Kp/MKAbjKpXAQv2eElouFYMMXQuqOZy8/smBkWeZkw8j7uNbTnmAGSxSuuj9p9 3BQkvIU8+boCnLh7phTB0S527VI5lq0G7tcEPIHJ9TnVEklb0YqS/cIzY7mezuHn Fo5TCXBKdcgmYBRWjUgrpp9VrEZpVLUB5kqeAkA8Rc48nhr4bauoUSzZEwFsQq/L y4GAsU2WAZRitfcRVLkGKUNhi/s7A90PlsRPjklctB5FkckM43DUtCREYAFWKAXx qlKwnWMlMkx79MdoJ0pJPdxZtry00VT1F86fIMLrv93nn7XESxG4dRYWbSbKvA== -----END CERTIFICATE-----Generated at Fri Aug 8 20:51:13 2025 by rpki-client