$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa File: bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa (raw, json) Hash identifier: PWq22iYurP85RacmWFszSjVpQS1yfUG5aBKp4/zHYwY= Subject key identifier: DF:4E:A0:47:DD:71:3E:C8:6C:11:9B:80:A2:E9:FB:F6:EA:D0:C1:B6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 162D0F68DD6EFBE161D50B432A28565102DAEE9C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa Signing time: Tue 05 Aug 2025 18:30:19 +0000 ROA not before: Tue 05 Aug 2025 18:30:19 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e700::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:2d:0f:68:dd:6e:fb:e1:61:d5:0b:43:2a:28:56:51:02:da:ee:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 5 18:30:19 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=99954d0c44e9a1ca359e2b349575b448c35fedee741ec15ce17e11c2578d6484, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0d:dd:c4:a7:6e:8b:b8:d8:62:f0:68:01:f3: f6:7b:f3:79:6b:5e:44:6a:5a:87:07:b1:46:75:c1: c3:a7:7d:28:85:32:b8:dd:0a:af:34:03:50:9a:da: 18:70:2a:8a:35:52:d2:3d:04:b6:b4:c0:84:be:95: 94:43:39:7b:3a:54:c5:c4:c9:bb:10:be:01:e2:b1: b1:2f:d1:bb:10:f5:b0:60:e4:63:c2:47:1f:ad:28: 61:78:7c:84:b6:76:b4:76:a4:5c:0f:e1:a2:13:d7: fd:9b:5c:be:a9:04:68:b3:9b:61:2d:98:04:4e:fb: db:93:be:a8:fd:11:fc:e9:0b:5c:3c:e0:e3:30:31: 07:d2:9f:c0:14:2d:fb:ed:ad:1e:82:3d:d7:48:12: a2:ee:21:72:f7:9d:48:15:54:f1:54:08:00:fe:1e: 49:a7:cf:ec:c1:37:23:0f:70:42:73:7c:60:d4:f3: 33:f8:9b:0d:75:53:fe:e4:0f:78:46:c6:8b:37:ad: b3:56:ee:89:97:82:a8:3a:be:bf:fa:99:af:41:f8: 91:6d:55:17:8d:88:ab:da:99:5c:1a:c4:05:e6:40: 72:4a:b9:1f:b4:e2:bf:2f:b5:9e:e1:51:d2:65:26: 3d:1e:54:6d:80:c2:df:0e:70:ae:2e:e0:8f:34:99: a3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4E:A0:47:DD:71:3E:C8:6C:11:9B:80:A2:E9:FB:F6:EA:D0:C1:B6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf3aefd7-144a-4210-8532-a7b6e0533dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e700::/42 Signature Algorithm: sha256WithRSAEncryption 6e:04:5f:75:6d:87:75:6f:b9:db:9c:23:d4:73:b5:af:f2:53: 52:a7:7b:fc:c0:21:a8:ad:cc:c8:f2:75:2c:52:b2:45:6a:94: 00:c4:73:07:12:8f:87:fc:c1:60:fc:fd:cb:99:ec:35:e7:76: 38:ff:f9:a5:f8:9f:a3:ef:cd:62:99:18:dc:5c:77:31:35:96: 97:65:8d:70:e0:0b:a3:1b:66:3c:71:dd:81:a0:30:59:72:fd: d3:f3:51:16:ee:8b:1e:6e:b1:97:99:7a:a5:59:4e:9e:0e:c1: 32:1b:45:b8:55:97:b5:75:da:d4:89:c9:05:1c:76:a1:0c:ea: 06:19:3f:8c:1c:6e:b2:9f:0c:b5:38:81:ac:c0:b9:e8:72:dc: 86:b2:74:08:c0:c6:33:c6:41:60:73:a0:6b:47:a5:df:da:8b: 36:fa:b7:0d:d2:8a:fd:77:09:09:b2:12:58:ca:f9:4c:97:0b: 93:60:31:94:56:88:7b:30:26:77:2f:55:b2:5a:c8:15:a5:e3: 60:e2:03:86:44:14:32:73:e4:60:84:78:05:47:d5:77:62:e7: ad:42:85:21:9e:12:16:fc:fe:a7:14:d9:da:4a:a5:d1:cf:0c: 1e:7a:c0:e1:87:73:24:79:58:bd:99:b0:90:ce:d7:df:88:49: 9e:6d:17:eb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFi0PaN1u++Fh1QtDKihWUQLa7pwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA1MTgzMDE5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OTk1NGQwYzQ0ZTlhMWNhMzU5ZTJiMzQ5NTc1YjQ0OGMz NWZlZGVlNzQxZWMxNWNlMTdlMTFjMjU3OGQ2NDg0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0Dd3Ep26LuNhi8GgB8/Z783lrXkRqWocHsUZ1wcOnfSiF MrjdCq80A1Ca2hhwKoo1UtI9BLa0wIS+lZRDOXs6VMXEybsQvgHisbEv0bsQ9bBg 5GPCRx+tKGF4fIS2drR2pFwP4aIT1/2bXL6pBGizm2EtmARO+9uTvqj9EfzpC1w8 4OMwMQfSn8AULfvtrR6CPddIEqLuIXL3nUgVVPFUCAD+Hkmnz+zBNyMPcEJzfGDU 8zP4mw11U/7kD3hGxos3rbNW7omXgqg6vr/6ma9B+JFtVReNiKvamVwaxAXmQHJK uR+04r8vtZ7hUdJlJj0eVG2Awt8OcK4u4I80maPRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU306gR91xPshsEZuAoun79urQwbYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmM2FlZmQ3LTE0NGEtNDIxMC04NTMyLWE3YjZlMDUzM2RkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75wAwDQYJKoZIhvcNAQELBQADggEBAG4EX3Vth3VvuducI9Rzta/y U1Kne/zAIaitzMjydSxSskVqlADEcwcSj4f8wWD8/cuZ7DXndjj/+aX4n6PvzWKZ GNxcdzE1lpdljXDgC6MbZjxx3YGgMFly/dPzURbuix5usZeZeqVZTp4OwTIbRbhV l7V12tSJyQUcdqEM6gYZP4wcbrKfDLU4gazAuehy3IaydAjAxjPGQWBzoGtHpd/a izb6tw3Siv13CQmyEljK+UyXC5NgMZRWiHswJncvVbJayBWl42DiA4ZEFDJz5GCE eAVH1Xdi561ChSGeEhb8/qcU2dpKpdHPDB56wOGHcyR5WL2ZsJDO19+ISZ5tF+s= -----END CERTIFICATE-----Generated at Wed Aug 6 19:37:07 2025 by rpki-client