$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa File: c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa (raw, json) Hash identifier: Ctsj6WhJy/CkeVYdy54dfwuppFvVici7LnA2/U6BMKw= Subject key identifier: 20:95:6E:63:3E:9A:B1:66:FA:41:E0:F1:18:A0:59:D4:06:0C:B3:F3 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 03245BE023081AECF771B4B5A0EB5F4E4E3759BB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa Signing time: Mon 14 Jul 2025 15:30:39 +0000 ROA not before: Mon 14 Jul 2025 15:30:39 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8801::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:24:5b:e0:23:08:1a:ec:f7:71:b4:b5:a0:eb:5f:4e:4e:37:59:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 14 15:30:39 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=824f3d5546193f7f308f6cdd99ed977d36c90f1c04623310f8298aca7d1b232f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:85:db:9b:8a:fd:36:3c:d7:19:6b:7e:cd: 9e:60:d7:8d:04:94:91:09:da:5c:b1:93:43:3c:00: 38:6d:2f:66:34:51:3b:96:4f:a6:0c:3d:a9:74:0b: 60:e8:56:06:e8:cd:1e:c8:ff:d3:a5:66:3d:47:5a: 55:de:99:68:c5:0d:da:59:ca:21:6e:0a:ec:66:9b: 5b:5f:00:5c:b6:43:a7:08:f2:6a:8b:99:bf:ee:ac: de:c7:1f:3b:f1:03:34:ce:68:c9:dc:0e:ec:3a:9a: 4e:5e:76:66:cc:75:51:a9:de:b7:a5:06:12:05:69: 45:6d:ad:f2:d7:b6:96:cd:b7:69:4e:3f:f5:f8:eb: aa:17:8d:14:d6:89:aa:7c:80:30:14:3c:78:60:82: 19:e8:e4:c2:ac:4b:e0:8a:22:c0:c7:32:99:da:94: 5a:e8:27:e0:cf:c6:eb:e0:d8:02:c5:9f:81:41:47: bd:31:2a:13:5a:9e:85:eb:da:c6:f2:ea:29:07:2e: e4:21:3f:46:ae:f0:ab:52:02:2d:81:0c:c5:4d:98: 5e:63:8c:55:b7:ce:a8:03:9a:8f:c9:c9:c6:48:e5: 03:45:27:82:c2:e7:0f:4e:fe:1e:9d:d1:54:73:4b: 29:d9:b4:72:0f:f9:d0:d2:a7:68:12:09:48:74:a0: 83:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:95:6E:63:3E:9A:B1:66:FA:41:E0:F1:18:A0:59:D4:06:0C:B3:F3 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8801::/48 Signature Algorithm: sha256WithRSAEncryption 36:f3:1f:96:09:a7:e3:0a:23:79:9d:be:aa:ea:2b:12:31:06: 2b:b3:5b:48:62:2d:7f:c8:61:98:fd:e5:6f:8c:a7:85:d1:72: a2:cb:a1:a6:f8:18:7b:b8:6d:35:c2:47:4e:97:7b:0d:f5:8b: 50:ad:54:34:85:ab:f5:c5:ca:7e:f2:04:3d:bb:b9:90:df:6c: 1f:13:b8:27:4c:b3:4b:69:be:34:05:d5:d6:79:ee:33:c4:96: d9:76:f2:01:14:a8:e0:0b:b7:96:60:6e:b2:b4:3f:05:c2:6e: a4:05:fa:6f:85:5f:9f:9c:86:8b:a0:4f:c1:56:ec:19:72:4c: e0:30:32:4f:58:71:9e:c1:94:f8:a3:ac:62:34:64:65:8e:fe: 20:4f:98:b1:b7:01:62:bc:5d:5b:75:a1:2b:3f:98:af:8a:d2: d3:15:52:1a:0d:75:fd:39:d9:43:52:4c:17:6c:06:b1:2a:2f: a3:03:62:2e:d2:1f:dd:9c:7c:68:b0:69:62:44:f4:81:58:a7: f6:67:29:c7:43:b2:b0:d6:d8:19:82:ff:ab:06:b6:61:18:22: e5:52:d0:43:b5:43:a2:22:31:3d:6f:d8:da:88:1e:2d:59:93: 86:8c:ec:76:d9:3a:c8:fb:0a:88:38:e4:b0:e8:f7:fa:20:cd: 1b:56:5a:60 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAyRb4CMIGuz3cbS1oOtfTk43WbswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzE0MTUzMDM5WhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MjRmM2Q1NTQ2MTkzZjdmMzA4ZjZjZGQ5OWVkOTc3ZDM2 YzkwZjFjMDQ2MjMzMTBmODI5OGFjYTdkMWIyMzJmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCobYXbm4r9NjzXGWt+zZ5g140ElJEJ2lyxk0M8ADhtL2Y0 UTuWT6YMPal0C2DoVgbozR7I/9OlZj1HWlXemWjFDdpZyiFuCuxmm1tfAFy2Q6cI 8mqLmb/urN7HHzvxAzTOaMncDuw6mk5edmbMdVGp3relBhIFaUVtrfLXtpbNt2lO P/X466oXjRTWiap8gDAUPHhgghno5MKsS+CKIsDHMpnalFroJ+DPxuvg2ALFn4FB R70xKhNanoXr2sby6ikHLuQhP0au8KtSAi2BDMVNmF5jjFW3zqgDmo/JycZI5QNF J4LC5w9O/h6d0VRzSynZtHIP+dDSp2gSCUh0oIMbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIJVuYz6asWb6QeDxGKBZ1AYMs/MwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M0OTc0OWM1LTQyNjMtNDQzZi1hNWQxLWYwZmMxYTI3ZWRjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiAEwDQYJKoZIhvcNAQELBQADggEBADbzH5YJp+MKI3mdvqrqKxIx BiuzW0hiLX/IYZj95W+Mp4XRcqLLoab4GHu4bTXCR06Xew31i1CtVDSFq/XFyn7y BD27uZDfbB8TuCdMs0tpvjQF1dZ57jPEltl28gEUqOALt5ZgbrK0PwXCbqQF+m+F X5+chougT8FW7BlyTOAwMk9YcZ7BlPijrGI0ZGWO/iBPmLG3AWK8XVt1oSs/mK+K 0tMVUhoNdf052UNSTBdsBrEqL6MDYi7SH92cfGiwaWJE9IFYp/ZnKcdDsrDW2BmC /6sGtmEYIuVS0EO1Q6IiMT1v2NqIHi1Zk4aM7HbZOsj7Cog45LDo9/ogzRtWWmA= -----END CERTIFICATE-----Generated at Tue Aug 5 17:27:52 2025 by rpki-client