$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa File: 720f42c5-101d-41af-abc8-bd64d6f08fe0.roa (raw, json) Hash identifier: fVCnYEmsOVjXaNbHNsGigRVp8AWMa4OIbi/Bv5uBHvw= Subject key identifier: B9:CC:7E:50:5E:05:C2:BF:BE:FF:06:25:27:C8:53:E2:73:5B:44:CD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1E747AA174250275E5C621B3061FD0CD7506D740 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa Signing time: Mon 28 Jul 2025 16:00:54 +0000 ROA not before: Mon 28 Jul 2025 16:00:54 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f2:7011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:74:7a:a1:74:25:02:75:e5:c6:21:b3:06:1f:d0:cd:75:06:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 28 16:00:54 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=208266c69144ad8a70d25ae185a342e126faf81eaada09aebe1ee19ae061ee32, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:82:62:78:d6:2a:38:39:21:aa:e8:99:bb: f3:5a:0b:e1:a9:8c:3f:bf:c9:02:05:2d:3b:5e:32: 9a:a2:90:bb:d9:97:c8:61:5b:b9:8e:17:01:c8:25: 13:15:02:49:ee:8f:57:db:46:0a:cc:2e:6c:1e:14: b5:c8:91:9c:f6:2d:49:0b:53:25:9e:07:8c:10:2f: 8a:5c:9d:c2:82:ca:b6:44:fa:fc:7c:87:5a:d4:ca: ec:c2:58:20:1a:1a:85:98:b9:cd:40:54:20:1c:85: 0b:9e:55:59:f2:6d:3e:9d:a9:f9:eb:24:76:6e:41: f9:6f:c2:4d:1a:95:b2:ed:62:ce:b8:27:2a:ca:2c: 2f:a7:17:8b:11:81:b1:ca:06:10:71:2a:27:b9:94: fe:91:44:10:25:79:af:34:2e:29:47:27:ae:54:91: 2c:91:b3:91:5b:ed:9b:9c:c5:cc:9a:0e:8c:6e:c3: 6d:38:14:8e:88:86:27:e7:38:04:c3:6c:ec:96:55: f0:13:88:e5:68:da:da:0e:92:b8:5f:61:33:17:db: 0e:4f:9e:07:45:08:71:42:f1:9b:91:15:79:87:60: 99:b6:27:f4:4e:41:12:a9:50:b8:25:96:9a:fb:4a: 0e:8f:0c:ad:4e:4c:74:92:2d:5c:b0:41:8a:9c:90: 1a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CC:7E:50:5E:05:C2:BF:BE:FF:06:25:27:C8:53:E2:73:5B:44:CD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7011::/48 Signature Algorithm: sha256WithRSAEncryption 4e:d3:36:73:e0:6a:b0:25:32:18:7f:f7:3d:c3:eb:cd:78:84: ad:85:3d:c3:36:72:75:ec:0c:37:fb:5e:bc:07:0e:d1:4b:74: aa:54:2d:37:b1:8b:45:e6:8a:d6:3b:05:7b:93:a6:13:d3:9f: 17:9e:d5:d2:3c:ea:15:73:5a:5a:b6:0a:0e:86:8e:aa:d0:62: e2:dc:99:1a:79:12:53:c5:7c:93:a7:ea:b3:11:29:5a:74:7c: a7:23:05:cb:60:53:aa:f0:2d:41:06:3f:0f:a5:e0:91:da:d8: 8a:96:13:93:0a:f4:c3:4b:8a:0c:c9:fe:66:ef:56:91:76:31: e9:f8:c0:b4:12:39:22:80:a1:cb:d8:b7:12:6d:03:b2:64:76: 6c:cf:5d:6c:ef:ab:0b:bd:0e:23:fd:48:96:6d:ba:22:f7:39: b0:f5:48:ac:06:9a:23:1f:c1:72:73:cc:b5:b1:4f:fa:0d:2e: b9:70:6c:67:d7:28:a6:e8:20:46:c9:2c:9b:1e:e4:e4:ba:4e: 3d:12:9c:32:8f:dd:e5:89:08:18:9d:a1:1e:57:db:c7:0a:89: 7d:e3:ec:af:8e:f4:70:13:c4:73:94:c1:6a:a4:ae:81:c9:bb: 01:18:eb:01:5c:f1:1a:9c:1c:ff:21:ad:d0:6d:97:16:43:ff: a9:ed:b3:4e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHnR6oXQlAnXlxiGzBh/QzXUG10AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzI4MTYwMDU0WhcNMjUwOTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDgyNjZjNjkxNDRhZDhhNzBkMjVhZTE4NWEzNDJlMTI2 ZmFmODFlYWFkYTA5YWViZTFlZTE5YWUwNjFlZTMyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+p4JieNYqODkhquiZu/NaC+GpjD+/yQIFLTteMpqikLvZ l8hhW7mOFwHIJRMVAknuj1fbRgrMLmweFLXIkZz2LUkLUyWeB4wQL4pcncKCyrZE +vx8h1rUyuzCWCAaGoWYuc1AVCAchQueVVnybT6dqfnrJHZuQflvwk0albLtYs64 JyrKLC+nF4sRgbHKBhBxKie5lP6RRBAlea80LilHJ65UkSyRs5Fb7ZucxcyaDoxu w204FI6IhifnOATDbOyWVfATiOVo2toOkrhfYTMX2w5PngdFCHFC8ZuRFXmHYJm2 J/ROQRKpULgllpr7Sg6PDK1OTHSSLVywQYqckBoRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUucx+UF4Fwr++/wYlJ8hT4nNbRM0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcyMGY0MmM1LTEwMWQtNDFhZi1hYmM4LWJkNjRkNmYwOGZlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBEwDQYJKoZIhvcNAQELBQADggEBAE7TNnPgarAlMhh/9z3D6814 hK2FPcM2cnXsDDf7XrwHDtFLdKpULTexi0XmitY7BXuTphPTnxee1dI86hVzWlq2 Cg6GjqrQYuLcmRp5ElPFfJOn6rMRKVp0fKcjBctgU6rwLUEGPw+l4JHa2IqWE5MK 9MNLigzJ/mbvVpF2Men4wLQSOSKAocvYtxJtA7JkdmzPXWzvqwu9DiP9SJZtuiL3 ObD1SKwGmiMfwXJzzLWxT/oNLrlwbGfXKKboIEbJLJse5OS6Tj0SnDKP3eWJCBid oR5X28cKiX3j7K+O9HATxHOUwWqkroHJuwEY6wFc8RqcHP8hrdBtlxZD/6nts04= -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:14 2025 by rpki-client