$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa File: adb258f2-061e-4e94-b6ee-d4de9405ec61.roa (raw, json) Hash identifier: XMOAmGgwNvETbJ8Z/UAt1nCnkEJB2Qs9ckh61gE+ZLo= Subject key identifier: 87:40:54:B1:D5:91:0E:24:61:4B:62:B8:CA:1D:B2:DA:73:4A:0D:9A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0AC0FB83DEBD7BE0460D771820C9791394D4D146 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa Signing time: Fri 11 Jul 2025 18:40:11 +0000 ROA not before: Fri 11 Jul 2025 18:40:11 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c0:fb:83:de:bd:7b:e0:46:0d:77:18:20:c9:79:13:94:d4:d1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 11 18:40:11 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=d53add27fd647a8e121a4121197f3f426d6b0b567c0c9dd8b821d6f9d5148b79, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:ee:3f:ec:66:79:20:5c:3b:55:9e:cb:65: aa:54:f4:db:63:ff:47:fe:f9:9d:19:54:59:e7:06: f6:c6:43:70:40:ff:2b:06:c1:3a:bf:8c:41:de:b1: 97:a8:6d:21:fb:f5:55:5f:ab:17:09:46:91:ae:83: cb:cf:87:a1:43:95:3e:74:0f:f2:33:89:98:79:f8: 06:e9:36:d5:11:0e:94:43:6b:b3:03:a7:2c:4d:21: f1:d0:81:60:ec:82:df:5d:39:de:45:5a:8d:86:58: 52:d8:a8:7c:ee:4b:e4:a0:74:35:36:13:49:5c:82: a1:3d:2e:1d:b5:57:7a:a3:b6:1e:31:ec:d4:8c:63: 8b:28:e9:fa:2e:d1:fe:fe:11:50:9b:0a:93:f9:49: 62:24:a4:c5:37:b7:63:73:85:7f:40:ce:37:9f:ff: f8:4f:ff:c0:c3:4d:9a:db:e5:91:ad:44:f7:72:3a: 0b:33:7f:fa:15:9b:2d:4b:bc:21:3e:c5:e1:71:6f: 3d:4f:94:8c:0d:1f:66:f1:be:74:c2:6c:b3:41:c0: ed:67:03:4d:34:9f:f8:be:7d:c1:9e:d3:a9:c2:2c: 3b:20:a4:4e:c5:0b:b0:3d:0e:70:1d:47:2c:ff:47: 8a:64:06:12:4e:0b:c3:ff:31:89:44:d6:1c:cc:91: 63:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:40:54:B1:D5:91:0E:24:61:4B:62:B8:CA:1D:B2:DA:73:4A:0D:9A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:8000::/40 Signature Algorithm: sha256WithRSAEncryption 91:cc:16:86:80:f0:1f:d5:e6:31:7c:dd:05:5a:4b:99:9c:89: 4c:d0:6d:c4:53:8d:b0:48:8a:d7:81:b1:ef:c4:2d:7a:2c:8d: 58:ae:6f:4a:b7:52:d1:da:1e:c9:5b:a0:67:0b:47:aa:d2:aa: ff:b8:ac:4e:c2:af:50:8d:13:00:05:69:58:2d:26:b4:2e:e2: 6e:b2:12:27:d1:da:8c:fe:52:b1:93:44:0e:4b:47:5c:22:62: 1f:6a:30:ef:44:da:57:b6:40:6d:1a:10:a4:23:e2:9f:ba:97: 33:27:eb:34:11:a5:91:66:6d:fe:40:a9:59:b9:77:a9:15:50: c6:f7:f5:e3:fc:8f:06:1f:68:11:1b:1a:77:2f:97:28:31:64: d3:e0:37:56:ec:4e:4f:69:71:79:e1:d8:10:54:eb:09:1f:34: f6:ff:e0:eb:e0:85:00:6f:8d:6c:42:5b:3a:d5:32:5b:57:45: 82:54:02:9d:50:70:2f:cf:a3:b5:00:82:43:c8:27:ab:00:ea: aa:6b:8e:24:d2:cc:eb:30:c6:ca:47:5d:54:5f:4a:b7:9d:84: 5b:75:6b:48:6c:50:00:51:9c:8d:3f:27:d3:87:bf:fb:3e:dc: f0:6e:61:54:42:7b:30:ed:00:be:09:5d:56:24:59:f7:c0:8e: 97:ac:2d:c3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCsD7g969e+BGDXcYIMl5E5TU0UYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzExMTg0MDExWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTNhZGQyN2ZkNjQ3YThlMTIxYTQxMjExOTdmM2Y0MjZk NmIwYjU2N2MwYzlkZDhiODIxZDZmOWQ1MTQ4Yjc5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvDu4/7GZ5IFw7VZ7LZapU9Ntj/0f++Z0ZVFnnBvbGQ3BA /ysGwTq/jEHesZeobSH79VVfqxcJRpGug8vPh6FDlT50D/IziZh5+AbpNtURDpRD a7MDpyxNIfHQgWDsgt9dOd5FWo2GWFLYqHzuS+SgdDU2E0lcgqE9Lh21V3qjth4x 7NSMY4so6fou0f7+EVCbCpP5SWIkpMU3t2NzhX9Azjef//hP/8DDTZrb5ZGtRPdy Ogszf/oVmy1LvCE+xeFxbz1PlIwNH2bxvnTCbLNBwO1nA000n/i+fcGe06nCLDsg pE7FC7A9DnAdRyz/R4pkBhJOC8P/MYlE1hzMkWMdAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUh0BUsdWRDiRhS2K4yh2y2nNKDZowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FkYjI1OGYyLTA2MWUtNGU5NC1iNmVlLWQ0ZGU5NDA1ZWM2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwgDANBgkqhkiG9w0BAQsFAAOCAQEAkcwWhoDwH9XmMXzdBVpLmZyJ TNBtxFONsEiK14Gx78QteiyNWK5vSrdS0doeyVugZwtHqtKq/7isTsKvUI0TAAVp WC0mtC7ibrISJ9HajP5SsZNEDktHXCJiH2ow70TaV7ZAbRoQpCPin7qXMyfrNBGl kWZt/kCpWbl3qRVQxvf14/yPBh9oERsady+XKDFk0+A3VuxOT2lxeeHYEFTrCR80 9v/g6+CFAG+NbEJbOtUyW1dFglQCnVBwL8+jtQCCQ8gnqwDqqmuOJNLM6zDGykdd VF9Kt52EW3VrSGxQAFGcjT8n04e/+z7c8G5hVEJ7MO0AvgldViRZ98COl6wtww== -----END CERTIFICATE-----Generated at Tue Aug 5 16:44:47 2025 by rpki-client