$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa File: 8638aa88-01e8-41ec-a10e-f2452ac701be.roa (raw, json) Hash identifier: mT7r2rm39lyFaSxjgG1LGycSU+b9I11fdm8RfXWPVP8= Subject key identifier: 50:03:73:26:77:DE:78:AE:2A:A9:A7:94:13:50:A4:9D:DD:22:A1:1A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 35616EEFF2E1CDFEDC323BC9884BB0F048FD589C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa Signing time: Tue 05 Aug 2025 18:30:27 +0000 ROA not before: Tue 05 Aug 2025 18:30:27 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ed00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:61:6e:ef:f2:e1:cd:fe:dc:32:3b:c9:88:4b:b0:f0:48:fd:58:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 5 18:30:27 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=292fe80f0d0144b40e97be368a0a21cf0a0203e2dad3cf547653fd571dccac0c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:85:10:24:8c:ec:00:0b:07:b3:09:dd:56: a8:d5:6e:24:d8:97:25:85:dd:d5:22:0d:70:d9:ba: d4:dc:0b:bd:63:0f:51:a5:36:13:21:4b:80:38:82: d0:cf:44:f2:6d:dc:89:ed:c2:55:33:61:07:e0:2b: 3e:de:0b:bf:4c:1e:08:e8:ea:65:3b:3f:29:df:2e: 3e:77:64:67:7b:91:02:68:99:f9:95:7f:8c:18:67: 1c:b6:90:a2:6a:13:3f:75:d4:1e:00:0c:f8:d5:86: d2:a4:e0:e0:98:f0:79:c9:cc:0b:99:66:50:a4:be: 08:20:64:ba:99:39:34:fe:10:93:20:c4:d7:da:1f: f4:81:f9:7d:e9:7e:c7:1a:cb:58:3e:43:09:d7:9c: 75:82:47:3c:16:9f:24:a1:15:8f:3a:10:9d:31:72: 8d:21:d9:e3:c8:21:64:e0:16:a1:11:a4:1d:bd:5f: 58:91:6b:b3:95:be:21:de:23:27:a6:13:14:7c:5e: 49:0a:46:f0:6a:85:75:01:74:25:d2:a1:a7:23:87: 94:a1:e1:a3:8b:bf:23:17:0f:12:32:68:1a:d1:0b: b1:70:9f:e0:5c:5a:45:5e:0a:0a:10:36:5c:3d:ea: a4:82:84:07:0d:61:33:0a:b6:a4:58:10:40:1a:0a: 37:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:03:73:26:77:DE:78:AE:2A:A9:A7:94:13:50:A4:9D:DD:22:A1:1A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ed00::/42 Signature Algorithm: sha256WithRSAEncryption 77:26:5e:3f:4f:1f:0c:33:ed:41:67:70:64:db:d3:6a:44:fa: c4:c2:31:49:1d:e1:56:48:3c:3e:fc:a2:60:4a:6c:65:63:8c: fa:e9:b7:a1:40:0f:64:df:c0:94:25:87:82:a5:54:6e:41:a9: cf:76:8d:74:42:7a:af:49:fb:3d:ff:83:f1:ff:5a:77:75:0b: 46:60:25:fc:93:dd:48:54:e3:36:6e:cd:22:8a:47:a6:7c:2c: ea:63:77:82:ee:64:2d:d5:85:18:67:16:57:dc:2a:e3:6c:9d: c4:52:97:ab:64:f6:b2:52:1e:94:e1:3d:4f:42:95:8f:e4:80: 83:93:3b:c9:9c:ef:4f:76:fd:d6:63:b3:dd:a8:af:d3:76:c0: d3:37:b6:64:a0:bd:75:b5:ce:33:ef:a5:7e:f5:a5:97:0e:fe: 5b:dc:b9:dd:24:d2:61:84:84:7e:34:d6:e2:96:c1:0e:71:18: 2c:a7:56:57:2b:19:42:bb:fa:a7:bf:97:93:49:a0:ea:16:a4: 5c:34:ab:45:72:6a:7c:da:f2:89:9d:c7:e7:2c:29:d4:03:68: 45:3a:88:f9:01:b4:ea:a1:04:25:3a:41:31:af:41:3b:6a:e8: 89:82:bd:cd:a2:51:fa:94:c9:6c:46:b6:8a:d5:18:be:c8:f0: 01:fc:cc:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNWFu7/Lhzf7cMjvJiEuw8Ej9WJwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA1MTgzMDI3WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTJmZTgwZjBkMDE0NGI0MGU5N2JlMzY4YTBhMjFjZjBh MDIwM2UyZGFkM2NmNTQ3NjUzZmQ1NzFkY2NhYzBjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz4YUQJIzsAAsHswndVqjVbiTYlyWF3dUiDXDZutTcC71j D1GlNhMhS4A4gtDPRPJt3IntwlUzYQfgKz7eC79MHgjo6mU7PynfLj53ZGd7kQJo mfmVf4wYZxy2kKJqEz911B4ADPjVhtKk4OCY8HnJzAuZZlCkvgggZLqZOTT+EJMg xNfaH/SB+X3pfscay1g+QwnXnHWCRzwWnyShFY86EJ0xco0h2ePIIWTgFqERpB29 X1iRa7OVviHeIyemExR8XkkKRvBqhXUBdCXSoacjh5Sh4aOLvyMXDxIyaBrRC7Fw n+BcWkVeCgoQNlw96qSChAcNYTMKtqRYEEAaCjfbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUANzJnfeeK4qqaeUE1Cknd0ioRowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg2MzhhYTg4LTAxZTgtNDFlYy1hMTBlLWYyNDUyYWM3MDFiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77QAwDQYJKoZIhvcNAQELBQADggEBAHcmXj9PHwwz7UFncGTb02pE +sTCMUkd4VZIPD78omBKbGVjjPrpt6FAD2TfwJQlh4KlVG5Bqc92jXRCeq9J+z3/ g/H/Wnd1C0ZgJfyT3UhU4zZuzSKKR6Z8LOpjd4LuZC3VhRhnFlfcKuNsncRSl6tk 9rJSHpThPU9ClY/kgIOTO8mc7092/dZjs92or9N2wNM3tmSgvXW1zjPvpX71pZcO /lvcud0k0mGEhH401uKWwQ5xGCynVlcrGUK7+qe/l5NJoOoWpFw0q0Vyanza8omd x+csKdQDaEU6iPkBtOqhBCU6QTGvQTtq6ImCvc2iUfqUyWxGtorVGL7I8AH8zH0= -----END CERTIFICATE-----Generated at Sat Aug 9 01:09:41 2025 by rpki-client