$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa File: e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa (raw, json) Hash identifier: KpBcSk6wTXrVCy2beUNx8vnEldr/p5JFONoklSYKhl4= Subject key identifier: 8A:04:55:C8:7A:78:F5:BA:D8:14:EA:21:BC:45:E0:C8:58:FE:C2:E3 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 682724D90967006B522E01C7FA4DD9C099DBD816 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa Signing time: Mon 16 Jun 2025 21:07:00 +0000 ROA not before: Mon 16 Jun 2025 21:07:00 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f2:7100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:27:24:d9:09:67:00:6b:52:2e:01:c7:fa:4d:d9:c0:99:db:d8:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jun 16 21:07:00 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=73f88a8b7fc58166e76e41ed61e7c472adf66dca6f4699b1c57c7e862e6cb3dc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:75:db:02:aa:34:01:d0:fe:d1:75:7c:c4: 52:d7:1d:44:e5:b2:ff:20:05:c0:e8:2f:09:e6:84: 7d:cd:31:81:60:32:3b:e2:69:fe:4e:f9:2d:d9:9e: 36:ec:1d:f0:ba:8d:c2:d8:3e:2a:ec:c5:71:6f:c1: 5f:99:cf:fd:2f:f0:94:2e:64:63:c1:66:64:b3:e5: 90:42:4f:00:d8:ec:c2:35:52:f3:3d:bc:dc:1c:21: e0:cf:e7:de:cf:72:ed:e7:82:47:98:87:fe:5b:dd: 37:d3:5a:6e:7d:b6:56:85:cb:04:aa:54:dd:db:b0: ec:c6:ed:5d:98:57:c5:15:cc:3d:9d:c5:75:ea:11: d1:49:48:82:9a:de:42:d5:f6:be:e9:d4:fa:f0:68: 31:8a:39:aa:e3:a6:36:0f:1e:80:01:e1:e6:8c:10: d7:db:5b:b3:ba:15:4b:e3:64:7f:ac:59:6b:2e:e5: 4f:84:f7:f0:c0:8b:35:47:19:4f:58:6d:f1:e1:a0: f1:c6:12:71:a7:ee:5e:66:3a:6a:ff:ca:79:64:55: 81:c3:6e:c8:01:4d:68:29:82:8a:bb:57:80:f4:53: 89:9e:a2:69:b5:78:f3:71:2c:38:cd:e5:b3:ea:3c: ad:8b:f1:17:12:6d:1a:1f:59:0f:db:ef:0d:03:db: 84:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:04:55:C8:7A:78:F5:BA:D8:14:EA:21:BC:45:E0:C8:58:FE:C2:E3 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7100::/40 Signature Algorithm: sha256WithRSAEncryption 2a:90:50:f5:b9:c7:68:88:8f:83:65:8a:a3:ce:6e:b5:93:ee: d3:84:13:69:43:27:99:30:6e:f0:8a:58:be:c3:6e:86:0c:2d: be:2a:6c:f7:7a:86:2a:c5:29:da:fc:ba:8f:f0:12:98:fb:4e: 5f:c9:60:90:ff:6f:cc:fd:6c:3a:85:24:57:31:9a:53:41:b6: 55:a4:53:1e:8b:43:c7:93:f5:8a:a5:d1:94:56:19:64:21:4f: 1b:d0:12:3f:75:72:fe:2e:15:3c:eb:a1:21:6c:98:5e:98:dd: 44:5a:7b:10:c1:72:50:90:b1:91:c2:df:42:bd:1a:ca:ea:78: 3b:c6:c7:c1:f6:de:8d:14:e6:6e:3e:f7:18:b1:a0:bb:74:b8: a5:e2:5e:8c:cc:99:d8:2a:56:7c:7c:c1:20:cb:be:90:70:ae: 65:f2:59:02:b1:cd:82:30:dd:e1:af:17:a2:89:5d:7c:09:c6: a2:f3:6f:f6:8e:75:ff:02:32:0a:ce:6c:94:ff:18:3d:18:cc: 2b:ce:19:a2:d9:e6:d6:72:e8:e6:7e:79:d7:17:3c:fa:96:c1: dc:73:67:6a:87:6a:6c:79:57:d7:39:b5:12:8d:6c:96:16:00: 8d:ae:3c:e3:4c:5b:08:5a:0c:92:df:16:eb:ab:5c:06:84:83: 43:8e:41:26 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUaCck2QlnAGtSLgHH+k3ZwJnb2BYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNjE2MjEwNzAwWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3M2Y4OGE4YjdmYzU4MTY2ZTc2ZTQxZWQ2MWU3YzQ3MmFk ZjY2ZGNhNmY0Njk5YjFjNTdjN2U4NjJlNmNiM2RjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS1nXbAqo0AdD+0XV8xFLXHUTlsv8gBcDoLwnmhH3NMYFg Mjviaf5O+S3ZnjbsHfC6jcLYPirsxXFvwV+Zz/0v8JQuZGPBZmSz5ZBCTwDY7MI1 UvM9vNwcIeDP597Pcu3ngkeYh/5b3TfTWm59tlaFywSqVN3bsOzG7V2YV8UVzD2d xXXqEdFJSIKa3kLV9r7p1PrwaDGKOarjpjYPHoAB4eaMENfbW7O6FUvjZH+sWWsu 5U+E9/DAizVHGU9YbfHhoPHGEnGn7l5mOmr/ynlkVYHDbsgBTWgpgoq7V4D0U4me omm1ePNxLDjN5bPqPK2L8RcSbRofWQ/b7w0D24RXAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUigRVyHp49brYFOohvEXgyFj+wuMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2UzY2U1YWVmLTcxM2ItNGFlOS04MDM2LWVmNGI2ZDE3ODcxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDycTANBgkqhkiG9w0BAQsFAAOCAQEAKpBQ9bnHaIiPg2WKo85utZPu 04QTaUMnmTBu8IpYvsNuhgwtvips93qGKsUp2vy6j/ASmPtOX8lgkP9vzP1sOoUk VzGaU0G2VaRTHotDx5P1iqXRlFYZZCFPG9ASP3Vy/i4VPOuhIWyYXpjdRFp7EMFy UJCxkcLfQr0ayup4O8bHwfbejRTmbj73GLGgu3S4peJejMyZ2CpWfHzBIMu+kHCu ZfJZArHNgjDd4a8XooldfAnGovNv9o51/wIyCs5slP8YPRjMK84Zotnm1nLo5n55 1xc8+pbB3HNnaodqbHlX1zm1Eo1slhYAja4840xbCFoMkt8W66tcBoSDQ45BJg== -----END CERTIFICATE-----Generated at Fri Jun 20 05:55:48 2025 by rpki-client