$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa File: d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa (raw, json) Hash identifier: QCPu6TYyffTgrqGJCsN3YzzXlunJPR+BF3RfIeUzy+w= Subject key identifier: FF:9B:4B:64:51:FC:A7:54:30:3D:E0:73:3C:A9:B8:FA:A5:0A:3E:57 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4703CAE59382D820F9252F5A753A2DE887F320A4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa Signing time: Tue 20 May 2025 18:20:08 +0000 ROA not before: Tue 20 May 2025 18:20:08 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ea00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:03:ca:e5:93:82:d8:20:f9:25:2f:5a:75:3a:2d:e8:87:f3:20:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:20:08 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=82ec42ae0676a3e17d3fa114bb8abf6de15a546f338e5f7b6764f7f3cd899c45, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:85:43:a0:c9:b9:32:8d:26:c9:02:22:5b: 29:67:bc:f4:24:de:57:1d:84:92:9a:18:39:97:fd: d8:f8:fa:59:6e:dd:45:f9:2f:e0:11:d3:c6:4b:b7: 08:63:d2:ad:6d:48:c7:1f:cd:3f:7f:00:f0:30:92: 58:a5:9f:4b:1b:15:fe:eb:40:70:fc:91:22:3d:e0: 0f:19:c5:f7:02:af:37:5b:c2:93:a1:55:13:bc:52: b3:a4:61:aa:2a:3c:92:c2:ad:bb:9e:9c:df:6c:cd: 4a:9b:76:ca:1a:b1:86:bd:f2:6f:d3:21:8a:ab:6e: 1a:b7:8f:19:de:26:84:4c:a7:31:d2:6b:f2:00:9b: 8f:af:4d:c8:71:b6:b0:e4:93:42:5b:1c:85:c6:58: 6c:c6:96:d6:18:96:31:9d:79:15:0a:2a:26:cb:7e: c3:b3:2c:dd:1e:6f:67:d2:da:90:b5:3c:19:60:36: 07:97:82:e2:ca:94:e4:bd:2c:ab:d6:f3:e7:d8:71: 95:e4:64:b9:ea:c2:ec:d3:d6:16:45:bd:d8:59:9f: 12:6f:b9:d7:1c:66:26:74:ac:f4:ab:66:c8:89:8a: 4a:62:f7:f4:ee:c0:9a:19:9d:6b:38:37:00:87:76: 66:74:ac:62:9d:12:0c:fc:be:11:48:c5:75:2c:a5: c1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9B:4B:64:51:FC:A7:54:30:3D:E0:73:3C:A9:B8:FA:A5:0A:3E:57 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/40 Signature Algorithm: sha256WithRSAEncryption 03:c3:aa:a0:02:aa:98:24:23:76:b0:d1:1b:52:42:91:51:3e: 52:dd:9a:86:d5:86:b4:63:19:ef:a9:07:ae:53:a2:e0:d0:66: df:cf:4b:ee:d0:ca:eb:58:d7:51:f2:eb:f5:07:b5:a6:d2:74: 3a:ac:4c:68:81:06:eb:41:20:96:34:77:af:c9:96:c2:49:a6: e0:df:e8:6c:fb:06:db:88:77:5a:3e:b4:30:72:11:44:cf:5b: 96:e0:a2:22:b3:2e:b9:4e:1b:c4:02:bf:41:57:13:e7:b7:ed: fc:29:b0:ee:f2:38:5f:ad:85:5d:b8:c5:58:b4:79:46:a1:48: 25:06:d7:6f:da:70:ff:63:c1:8c:c7:0f:53:4c:08:64:c9:a4: a3:45:9d:fe:30:d4:ce:d8:cb:60:67:3a:ee:9d:bb:79:9f:9e: 3e:2a:65:3b:5f:68:3c:55:3e:30:a5:eb:5a:54:e7:d7:a1:a8: 28:c9:2a:94:0c:63:f2:f3:d1:4d:16:fd:99:e9:da:15:06:3f: 4b:64:df:6b:d9:5f:b5:51:73:c5:ea:80:f4:ef:ea:8f:de:14: 39:b2:fc:fa:cc:d4:4d:ea:54:12:df:04:45:e5:36:5a:99:27: d7:2f:02:5d:16:be:ae:7f:67:fd:cd:62:bc:9c:b3:95:cf:04: 6d:4d:9c:c2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIURwPK5ZOC2CD5JS9adTot6IfzIKQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgyMDA4WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MmVjNDJhZTA2NzZhM2UxN2QzZmExMTRiYjhhYmY2ZGUx NWE1NDZmMzM4ZTVmN2I2NzY0ZjdmM2NkODk5YzQ1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK7YVDoMm5Mo0myQIiWylnvPQk3lcdhJKaGDmX/dj4+llu 3UX5L+AR08ZLtwhj0q1tSMcfzT9/APAwkliln0sbFf7rQHD8kSI94A8ZxfcCrzdb wpOhVRO8UrOkYaoqPJLCrbuenN9szUqbdsoasYa98m/TIYqrbhq3jxneJoRMpzHS a/IAm4+vTchxtrDkk0JbHIXGWGzGltYYljGdeRUKKibLfsOzLN0eb2fS2pC1PBlg NgeXguLKlOS9LKvW8+fYcZXkZLnqwuzT1hZFvdhZnxJvudccZiZ0rPSrZsiJikpi 9/TuwJoZnWs4NwCHdmZ0rGKdEgz8vhFIxXUspcEZAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU/5tLZFH8p1QwPeBzPKm4+qUKPlcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyYjExZTBmLTAxMTItNGM0ZS04YWE0LTE2ODc4OGZkNmFhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76jANBgkqhkiG9w0BAQsFAAOCAQEAA8OqoAKqmCQjdrDRG1JCkVE+ Ut2ahtWGtGMZ76kHrlOi4NBm389L7tDK61jXUfLr9Qe1ptJ0OqxMaIEG60EgljR3 r8mWwkmm4N/obPsG24h3Wj60MHIRRM9bluCiIrMuuU4bxAK/QVcT57ft/Cmw7vI4 X62FXbjFWLR5RqFIJQbXb9pw/2PBjMcPU0wIZMmko0Wd/jDUztjLYGc67p27eZ+e PiplO19oPFU+MKXrWlTn16GoKMkqlAxj8vPRTRb9menaFQY/S2Tfa9lftVFzxeqA 9O/qj94UObL8+szUTepUEt8EReU2Wpkn1y8CXRa+rn9n/c1ivJyzlc8EbU2cwg== -----END CERTIFICATE-----Generated at Sat Jun 14 06:28:20 2025 by rpki-client