$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa File: a7be9120-e9b3-488c-b7e4-818fad18a69e.roa (raw, json) Hash identifier: icLTx/g7IrOo0z5h2dXMbtdVnW7ZrwM7kz7Kzy0kPn0= Subject key identifier: B2:A4:C2:B5:DC:22:35:1C:F1:10:77:9F:D7:D9:34:9D:BE:92:D2:DC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 046177B97018C9A31AB257FD89C3EA5FB6B47FDA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa Signing time: Fri 18 Jul 2025 15:00:19 +0000 ROA not before: Fri 18 Jul 2025 15:00:19 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:61:77:b9:70:18:c9:a3:1a:b2:57:fd:89:c3:ea:5f:b6:b4:7f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 18 15:00:19 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=7133ebde034b75a79ac4880842402a6c7099c12032b044435f84435ba403c27c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:01:93:20:c0:1c:ca:b2:ac:c0:f1:18:e7:ca: 62:78:d6:2a:51:f2:87:43:10:21:f0:9e:69:11:d8: b8:ae:a1:5e:b8:14:86:26:38:fb:ce:05:5b:6c:6d: 9a:ef:06:6c:fb:6a:6c:43:f3:c1:94:31:ea:ea:07: 8a:e6:b1:38:f9:66:d2:35:7f:e7:1e:6f:c1:ca:60: 73:16:48:5c:cd:c9:cc:30:3f:1c:43:79:18:ab:f3: e9:66:75:39:44:7f:bb:94:7b:45:8b:40:de:ba:7d: 99:f9:8e:a0:e4:19:65:b3:3e:b6:4a:3c:80:90:05: 67:89:07:fd:ac:2f:41:01:79:75:7c:81:41:fc:88: 10:be:24:ad:52:9f:e5:04:14:1d:1d:55:58:26:d1: e4:36:fd:f2:ed:98:f3:df:3d:7a:f9:34:50:32:b5: 22:b3:84:c0:d4:5f:91:c0:51:96:fe:93:21:cb:13: bd:fb:bd:16:31:01:d3:6d:a1:f0:27:1d:e0:42:ee: bf:b2:29:23:28:7b:d7:25:20:7b:8b:17:e1:84:c5: 4d:2e:3c:4d:7c:63:78:1e:00:89:04:c7:93:e8:41: 33:3d:16:11:ed:97:a3:81:9f:41:78:9b:7c:fa:28: 75:c4:71:de:a9:97:3c:6c:bc:d2:5c:0d:f8:4a:e6: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A4:C2:B5:DC:22:35:1C:F1:10:77:9F:D7:D9:34:9D:BE:92:D2:DC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7100::/40 Signature Algorithm: sha256WithRSAEncryption 51:d4:8a:0a:e9:47:01:e7:4e:53:b1:fa:0e:4e:8e:98:bf:7a: 7b:59:b9:70:2a:96:52:e9:2c:bc:a0:d6:de:4d:56:21:9f:f3: 99:ca:e9:92:e3:27:79:27:e5:ef:bd:4c:10:c0:ee:76:82:0e: 9c:27:d1:32:98:a0:5f:46:a3:49:94:54:6b:cb:78:3b:62:95: ad:24:2d:8a:66:dd:d2:ed:6c:b6:b1:9c:da:e5:e2:bc:de:8a: 5b:26:f0:ac:33:c8:24:7f:78:63:cc:b1:4e:2c:8c:8a:66:45: ab:c6:53:f3:17:83:35:ed:1a:09:01:73:10:89:d3:94:c4:aa: ff:32:07:58:bf:8d:a2:a9:3b:fa:f7:43:7c:4b:e5:24:f7:f3: be:56:d9:94:ae:9f:34:8f:1a:d4:08:fa:6d:b6:f3:3a:c0:62: 8a:dc:61:fd:68:23:73:71:f4:6f:fe:df:74:b6:8d:b4:f2:a2: d1:a6:9a:0e:57:0b:07:d3:26:47:ab:c8:31:14:3e:c9:e3:94: 90:a1:85:e7:8e:bc:7a:c9:9c:89:8b:b8:a4:57:72:8a:d4:8f: 9d:b6:b8:e0:af:ad:42:a3:65:10:86:d9:dc:ab:6e:71:d4:71: de:36:c5:98:11:49:5f:dd:9e:5a:83:69:02:0a:46:8e:8e:b2: 54:c0:ca:29 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBGF3uXAYyaMaslf9icPqX7a0f9owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzE4MTUwMDE5WhcNMjUwODIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTMzZWJkZTAzNGI3NWE3OWFjNDg4MDg0MjQwMmE2Yzcw OTljMTIwMzJiMDQ0NDM1Zjg0NDM1YmE0MDNjMjdjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtAZMgwBzKsqzA8RjnymJ41ipR8odDECHwnmkR2LiuoV64 FIYmOPvOBVtsbZrvBmz7amxD88GUMerqB4rmsTj5ZtI1f+ceb8HKYHMWSFzNycww PxxDeRir8+lmdTlEf7uUe0WLQN66fZn5jqDkGWWzPrZKPICQBWeJB/2sL0EBeXV8 gUH8iBC+JK1Sn+UEFB0dVVgm0eQ2/fLtmPPfPXr5NFAytSKzhMDUX5HAUZb+kyHL E737vRYxAdNtofAnHeBC7r+yKSMoe9clIHuLF+GExU0uPE18Y3geAIkEx5PoQTM9 FhHtl6OBn0F4m3z6KHXEcd6plzxsvNJcDfhK5tmnAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUsqTCtdwiNRzxEHef19k0nb6S0twwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E3YmU5MTIwLWU5YjMtNDg4Yy1iN2U0LTgxOGZhZDE4YTY5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDycTANBgkqhkiG9w0BAQsFAAOCAQEAUdSKCulHAedOU7H6Dk6OmL96 e1m5cCqWUuksvKDW3k1WIZ/zmcrpkuMneSfl771MEMDudoIOnCfRMpigX0ajSZRU a8t4O2KVrSQtimbd0u1strGc2uXivN6KWybwrDPIJH94Y8yxTiyMimZFq8ZT8xeD Ne0aCQFzEInTlMSq/zIHWL+Noqk7+vdDfEvlJPfzvlbZlK6fNI8a1Aj6bbbzOsBi itxh/Wgjc3H0b/7fdLaNtPKi0aaaDlcLB9MmR6vIMRQ+yeOUkKGF5468esmciYu4 pFdyitSPnba44K+tQqNlEIbZ3KtucdRx3jbFmBFJX92eWoNpAgpGjo6yVMDKKQ== -----END CERTIFICATE-----Generated at Mon Aug 4 22:20:10 2025 by rpki-client