$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa File: b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa (raw, json) Hash identifier: gpVmpEyuZ7I0UL8tS5LCnB9CS3lnhPVpZsXkHUaD3k4= Subject key identifier: 69:C8:FA:E6:F7:43:95:04:8F:C9:36:33:D3:25:CA:09:3F:6E:A0:3B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 78D7E459D22C7D608413888865A3321D02A2C366 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa Signing time: Mon 14 Jul 2025 15:30:57 +0000 ROA not before: Mon 14 Jul 2025 15:30:57 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d7:e4:59:d2:2c:7d:60:84:13:88:88:65:a3:32:1d:02:a2:c3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 14 15:30:57 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=e33d901e5f94b63ab012e1bdbd0bfbc192c8457c2eaa92e770109fe85d76f38a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:26:d3:04:be:f4:1b:52:82:dc:f3:ee:e9:3a: f7:25:ed:09:4a:01:7d:e4:ea:ff:d9:3b:5f:eb:48: 18:28:8f:f3:e6:05:6e:27:9b:33:48:7e:54:ba:9a: a4:bc:52:c5:84:15:56:af:ed:9b:c4:85:f3:77:a6: 84:f7:63:49:09:a4:32:2d:93:4b:56:12:2f:9d:f7: 33:9b:e2:77:a9:9a:71:8e:fa:d9:a6:b4:13:f5:f1: c8:93:83:92:14:50:1a:3a:a9:78:99:01:e6:e9:2b: 29:12:d8:be:c3:f0:81:4a:57:38:3b:8a:5a:80:41: a8:7a:59:d3:e0:e0:9a:57:8c:50:3a:98:7c:94:04: 5b:8f:9c:b5:0d:b3:db:a5:93:4a:58:d1:a4:c8:e8: d5:a0:e5:f2:28:77:6a:cf:06:8c:6b:91:86:38:e5: 41:b0:7b:45:c6:c0:3e:56:3c:7d:d9:94:eb:bd:14: 9f:5e:3f:40:9c:95:68:4e:f8:2b:ab:35:37:a4:14: fa:13:fd:b1:00:cf:3a:49:89:48:19:27:99:6a:a1: f5:80:72:a2:b7:0a:45:f8:88:6c:35:16:14:f1:6d: a5:65:29:9b:5f:f0:3a:bb:60:eb:37:9d:ad:a4:1a: f0:d6:17:3d:4f:74:94:45:6c:9d:ef:5b:1f:ec:91: 84:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C8:FA:E6:F7:43:95:04:8F:C9:36:33:D3:25:CA:09:3F:6E:A0:3B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:e00::/40 Signature Algorithm: sha256WithRSAEncryption 91:46:f0:63:e6:9c:58:ce:62:47:8d:a6:4a:77:d7:52:74:b3: 84:8b:ec:43:66:10:43:8f:a6:e7:cd:c2:67:6e:e7:0a:cf:f3: 4f:92:70:47:dc:1c:81:25:e9:8e:6e:46:7c:29:8b:98:0f:03: 3c:07:6f:44:85:96:ef:68:39:24:6e:85:ac:ee:7a:a7:e5:c0: d2:5d:0a:02:5f:10:9e:9b:0d:8c:f1:39:3c:e8:05:a9:b8:81: 8a:9c:f6:51:ad:14:c9:e6:14:67:dd:92:17:f3:7b:c7:61:a8: de:39:f3:38:d8:a4:d1:9d:98:ae:e6:ef:47:f2:c1:9a:8e:98: ae:8b:97:92:00:26:0c:aa:cc:14:e8:84:54:db:24:1c:db:ba: 19:1c:ae:80:7f:d9:9b:aa:19:f9:60:5d:f0:03:9d:62:e5:82: 32:42:3a:ca:68:12:da:21:42:b7:53:f5:4d:0e:0e:27:33:78: af:72:11:4c:a2:cb:ea:e5:e8:29:f6:24:27:79:8f:63:7e:d7: 96:95:96:b4:64:34:a2:2d:0a:77:89:5f:e9:48:cc:cf:e3:3a: 44:11:71:22:0a:97:42:8b:27:e8:cd:52:cb:8e:9a:48:d9:03: 9e:99:4b:a7:27:a9:f0:6c:39:f5:a9:3d:be:5e:be:3f:c2:7b: 58:68:ed:bb -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUeNfkWdIsfWCEE4iIZaMyHQKiw2YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzE0MTUzMDU3WhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzNkOTAxZTVmOTRiNjNhYjAxMmUxYmRiZDBiZmJjMTky Yzg0NTdjMmVhYTkyZTc3MDEwOWZlODVkNzZmMzhhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdJtMEvvQbUoLc8+7pOvcl7QlKAX3k6v/ZO1/rSBgoj/Pm BW4nmzNIflS6mqS8UsWEFVav7ZvEhfN3poT3Y0kJpDItk0tWEi+d9zOb4nepmnGO +tmmtBP18ciTg5IUUBo6qXiZAebpKykS2L7D8IFKVzg7ilqAQah6WdPg4JpXjFA6 mHyUBFuPnLUNs9ulk0pY0aTI6NWg5fIod2rPBoxrkYY45UGwe0XGwD5WPH3ZlOu9 FJ9eP0CclWhO+CurNTekFPoT/bEAzzpJiUgZJ5lqofWAcqK3CkX4iGw1FhTxbaVl KZtf8Dq7YOs3na2kGvDWFz1PdJRFbJ3vWx/skYThAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUacj65vdDlQSPyTYz0yXKCT9uoDswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I2ZjhjNzQ1LTg4MDctNDJiZC05MjRlLThhZmM1ZjY3Y2IwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwDjANBgkqhkiG9w0BAQsFAAOCAQEAkUbwY+acWM5iR42mSnfXUnSz hIvsQ2YQQ4+m583CZ27nCs/zT5JwR9wcgSXpjm5GfCmLmA8DPAdvRIWW72g5JG6F rO56p+XA0l0KAl8QnpsNjPE5POgFqbiBipz2Ua0UyeYUZ92SF/N7x2Go3jnzONik 0Z2YrubvR/LBmo6YrouXkgAmDKrMFOiEVNskHNu6GRyugH/Zm6oZ+WBd8AOdYuWC MkI6ymgS2iFCt1P1TQ4OJzN4r3IRTKLL6uXoKfYkJ3mPY37XlpWWtGQ0oi0Kd4lf 6UjMz+M6RBFxIgqXQosn6M1Sy46aSNkDnplLpyep8Gw59ak9vl6+P8J7WGjtuw== -----END CERTIFICATE-----Generated at Tue Aug 5 17:26:48 2025 by rpki-client