$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa File: bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa (raw, json) Hash identifier: z9FdlxpIftZbHUam2LKE1Eil/YEbXKylo4ejxTPBlig= Subject key identifier: 0C:CD:E6:50:14:4B:46:F3:64:E8:13:D1:A1:6B:5B:47:ED:5F:ED:A0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 34FDA0E1A5F825FED3DE5DBD89DE3BF595D63567 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa Signing time: Wed 06 Aug 2025 00:40:19 +0000 ROA not before: Wed 06 Aug 2025 00:40:19 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fd:a0:e1:a5:f8:25:fe:d3:de:5d:bd:89:de:3b:f5:95:d6:35:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 6 00:40:19 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=8c9383ebec812a3a9e68f61d592282a4a4cb126026cf1beebbfca7b76b9c8dab, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:d6:7a:db:08:dd:4d:f8:9a:9d:8d:00:cc: 78:70:e3:ca:06:2b:46:85:82:98:ee:1f:32:14:bf: 69:fd:7f:ab:14:ed:ba:72:99:80:44:3d:f5:02:a8: 95:aa:8f:1b:4f:a1:5b:7f:86:89:3d:4e:76:d1:fb: 22:d6:5d:e8:86:30:31:f8:bf:83:ad:d0:c3:9f:a8: 12:c5:e4:f1:8b:ef:b5:9e:fe:db:e6:57:e8:32:92: 6b:01:c2:b4:45:7a:62:43:2b:9c:2d:5a:21:7b:3b: 07:24:3b:a5:ff:b6:f7:86:4c:44:d5:ba:6a:7c:b2: 5c:e0:f2:f9:66:39:fa:11:97:5b:22:82:23:88:16: 9a:06:f3:8e:10:20:20:74:c2:72:a6:27:17:47:c4: 34:6d:48:6d:11:f1:64:92:8e:f9:66:e7:94:03:70: 58:29:3c:77:7c:f1:c7:d3:ea:4e:81:ec:73:6f:68: fc:bd:c9:0a:5a:16:c8:07:82:32:07:e6:4d:14:52: 14:42:df:c5:f7:87:9a:9a:84:c3:20:0a:17:62:3c: 8d:42:31:99:80:2f:a4:b5:8b:96:70:9e:82:29:42: 6f:32:d7:d2:58:8f:fc:1a:9d:b8:36:9a:e1:67:da: 25:f7:01:a4:5b:e5:52:38:bb:60:ff:e5:ec:5c:83: f5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CD:E6:50:14:4B:46:F3:64:E8:13:D1:A1:6B:5B:47:ED:5F:ED:A0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4100::/48 Signature Algorithm: sha256WithRSAEncryption 58:3b:0a:ad:f8:1c:56:44:be:40:87:7b:5a:6a:19:29:51:47: b6:95:39:65:cd:17:92:62:7c:d7:6a:f9:ee:28:71:fe:f7:6d: 72:ee:62:74:be:32:b3:b3:63:5f:b3:b3:02:32:29:33:cf:79: 13:90:43:ce:c0:30:41:49:64:65:98:6c:89:a7:eb:84:55:1c: 26:4c:63:92:5c:20:25:17:28:e3:b5:58:20:d2:f8:90:02:47: e4:b9:6b:ec:e6:88:aa:69:48:e6:05:54:3d:b7:7a:6e:d5:58: 1f:bc:55:e4:07:66:77:c3:9a:6b:dc:c8:8d:8b:47:d0:3b:90: 70:96:f6:8d:fc:e9:4f:e0:51:8a:25:fd:12:c4:ce:80:05:62: c6:4c:62:e2:54:c9:93:b6:9f:31:36:15:59:a4:da:ac:cc:28: e2:74:e2:37:69:38:24:1e:f0:bc:39:f3:75:c5:ff:1e:b8:80: d1:c3:29:13:fd:dd:83:bc:50:54:b3:1f:66:bd:51:a5:bb:79: e9:d3:78:6b:9e:67:9e:b5:b9:e4:a9:2e:af:22:82:e8:3d:b9: a4:a6:c3:eb:23:a2:85:49:23:61:de:a1:ba:f5:83:dd:d5:62: bc:86:25:c9:e4:78:62:06:19:37:11:90:e1:30:9a:39:2b:20: ca:41:0f:7f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNP2g4aX4Jf7T3l29id479ZXWNWcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA2MDA0MDE5WhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzkzODNlYmVjODEyYTNhOWU2OGY2MWQ1OTIyODJhNGE0 Y2IxMjYwMjZjZjFiZWViYmZjYTdiNzZiOWM4ZGFiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6k9Z62wjdTfianY0AzHhw48oGK0aFgpjuHzIUv2n9f6sU 7bpymYBEPfUCqJWqjxtPoVt/hok9TnbR+yLWXeiGMDH4v4Ot0MOfqBLF5PGL77We /tvmV+gykmsBwrRFemJDK5wtWiF7OwckO6X/tveGTETVump8slzg8vlmOfoRl1si giOIFpoG844QICB0wnKmJxdHxDRtSG0R8WSSjvlm55QDcFgpPHd88cfT6k6B7HNv aPy9yQpaFsgHgjIH5k0UUhRC38X3h5qahMMgChdiPI1CMZmAL6S1i5ZwnoIpQm8y 19JYj/wanbg2muFn2iX3AaRb5VI4u2D/5excg/WtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDM3mUBRLRvNk6BPRoWtbR+1f7aAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmOWE0NTMyLTMyNmUtNDVjOC1hMGQ3LWQ2MDA4YWEwZWQ4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwQQAwDQYJKoZIhvcNAQELBQADggEBAFg7Cq34HFZEvkCHe1pqGSlR R7aVOWXNF5JifNdq+e4ocf73bXLuYnS+MrOzY1+zswIyKTPPeROQQ87AMEFJZGWY bImn64RVHCZMY5JcICUXKOO1WCDS+JACR+S5a+zmiKppSOYFVD23em7VWB+8VeQH ZnfDmmvcyI2LR9A7kHCW9o386U/gUYol/RLEzoAFYsZMYuJUyZO2nzE2FVmk2qzM KOJ04jdpOCQe8Lw583XF/x64gNHDKRP93YO8UFSzH2a9UaW7eenTeGueZ561ueSp Lq8igug9uaSmw+sjooVJI2Heobr1g93VYryGJcnkeGIGGTcRkOEwmjkrIMpBD38= -----END CERTIFICATE-----Generated at Wed Aug 6 07:52:54 2025 by rpki-client