$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa File: d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa (raw, json) Hash identifier: fxdZw99basmrT5StesRvDfmslW8J8dc9EgT3UFlOGNw= Subject key identifier: 48:20:B1:8D:8C:BF:6A:89:93:26:AD:58:52:E9:81:06:8A:7A:A7:C8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7A0C66F13A8B025C97FEBE09D51555A44E86196D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa Signing time: Fri 11 Jul 2025 18:40:09 +0000 ROA not before: Fri 11 Jul 2025 18:40:09 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ea00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0c:66:f1:3a:8b:02:5c:97:fe:be:09:d5:15:55:a4:4e:86:19:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 11 18:40:09 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=6453980e7eecaad09738cf7840a481b00fe8af37f3c7db4c89d92d1ee7c0d8d7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:5a:49:35:2f:4d:f8:1f:ad:55:0d:e8:48: b7:40:fb:59:18:a3:e6:ea:58:2f:6a:67:3d:14:50: a7:25:c7:35:ac:23:b2:de:5c:9d:a5:51:cc:20:86: f9:a8:f5:d2:43:89:ce:73:e0:4a:a5:7b:ea:11:74: ed:53:bc:e0:41:48:bf:a2:a2:93:31:f2:57:69:b1: ed:ff:1f:ee:98:99:b2:3d:a1:dd:23:c8:20:e4:6b: c5:eb:03:5a:f4:db:d7:21:26:3f:2c:f8:40:b8:82: bc:3d:d3:fb:e3:ba:6b:8e:ac:29:aa:a9:7e:37:1e: dd:96:b5:0e:fc:20:b9:25:d0:ea:3a:53:90:43:f2: c5:e1:4c:d6:d1:05:78:21:f1:a6:d3:57:11:46:fc: 39:97:99:65:82:b0:61:23:39:44:e9:ef:9b:9f:f2: f4:17:18:ca:98:ec:d3:0c:2b:c3:3c:e0:d0:59:2a: e2:1f:b0:0a:83:6f:18:34:8b:73:85:66:fa:d3:4d: 01:36:f3:d5:3f:2f:44:df:a2:08:12:14:85:39:89: 6d:72:07:b6:c3:a2:f7:e0:d7:4e:bc:8e:d8:82:6d: 50:b6:0e:a1:d8:37:11:f1:a9:36:05:0e:9c:85:9e: f3:ec:b0:b9:f6:2b:a1:ae:bc:29:5d:b9:34:1f:fa: 2e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:20:B1:8D:8C:BF:6A:89:93:26:AD:58:52:E9:81:06:8A:7A:A7:C8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/40 Signature Algorithm: sha256WithRSAEncryption 61:a3:71:14:dc:b3:b7:04:e2:fd:e1:4d:35:4d:f1:3c:3c:34: 61:9f:4a:79:aa:b6:e1:8a:62:41:75:63:11:15:a6:3e:86:98: 4e:88:5e:9e:b9:d7:de:93:58:d0:ff:c2:57:63:e8:e5:b8:9f: 63:05:e2:67:39:ad:86:f1:ee:82:7c:db:d9:52:21:93:8f:40: 38:61:32:8e:b1:10:0b:12:f7:27:03:02:d9:c5:cd:7b:c1:7e: 08:ac:2a:e7:36:f8:89:44:11:07:89:94:b9:69:66:72:5a:cd: 0f:9d:54:56:31:d7:8c:f2:b9:62:56:4f:12:a4:d2:fc:82:8d: 43:fc:9a:62:99:98:65:f5:58:bb:08:2f:ef:5d:1b:a3:40:0e: e8:a3:40:8a:5e:99:03:d2:7f:ac:bd:13:de:62:3a:02:3a:a4: fd:70:11:74:f3:ec:00:f6:ab:c9:fb:57:c4:7f:2c:ed:f7:d4: 7d:60:d0:d8:f9:81:4e:af:d1:75:c9:da:08:c5:3e:33:ed:73: f2:e7:0f:30:3a:4b:94:ef:9a:56:1d:b5:60:0b:e7:ba:7a:0f: 63:89:1a:f9:d7:81:af:f7:d3:37:3d:99:0a:55:4b:50:f1:fe: 9c:cf:3f:85:45:b7:d0:8e:d4:3a:9e:50:b5:23:d8:c5:00:01: 86:b6:8f:26 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUegxm8TqLAlyX/r4J1RVVpE6GGW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzExMTg0MDA5WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDUzOTgwZTdlZWNhYWQwOTczOGNmNzg0MGE0ODFiMDBm ZThhZjM3ZjNjN2RiNGM4OWQ5MmQxZWU3YzBkOGQ3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGmlpJNS9N+B+tVQ3oSLdA+1kYo+bqWC9qZz0UUKclxzWs I7LeXJ2lUcwghvmo9dJDic5z4Eqle+oRdO1TvOBBSL+iopMx8ldpse3/H+6YmbI9 od0jyCDka8XrA1r029chJj8s+EC4grw90/vjumuOrCmqqX43Ht2WtQ78ILkl0Oo6 U5BD8sXhTNbRBXgh8abTVxFG/DmXmWWCsGEjOUTp75uf8vQXGMqY7NMMK8M84NBZ KuIfsAqDbxg0i3OFZvrTTQE289U/L0TfoggSFIU5iW1yB7bDovfg1068jtiCbVC2 DqHYNxHxqTYFDpyFnvPssLn2K6GuvClduTQf+i6pAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSCCxjYy/aomTJq1YUumBBop6p8gwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyYjExZTBmLTAxMTItNGM0ZS04YWE0LTE2ODc4OGZkNmFhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76jANBgkqhkiG9w0BAQsFAAOCAQEAYaNxFNyztwTi/eFNNU3xPDw0 YZ9Keaq24YpiQXVjERWmPoaYTohenrnX3pNY0P/CV2Po5bifYwXiZzmthvHugnzb 2VIhk49AOGEyjrEQCxL3JwMC2cXNe8F+CKwq5zb4iUQRB4mUuWlmclrND51UVjHX jPK5YlZPEqTS/IKNQ/yaYpmYZfVYuwgv710bo0AO6KNAil6ZA9J/rL0T3mI6Ajqk /XARdPPsAParyftXxH8s7ffUfWDQ2PmBTq/RdcnaCMU+M+1z8ucPMDpLlO+aVh21 YAvnunoPY4ka+deBr/fTNz2ZClVLUPH+nM8/hUW30I7UOp5QtSPYxQABhraPJg== -----END CERTIFICATE-----Generated at Tue Aug 5 17:12:47 2025 by rpki-client