$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ecd4e407-1eb0-44f2-a3a7-d4714ca63aea.roa File: ecd4e407-1eb0-44f2-a3a7-d4714ca63aea.roa (raw, json) Hash identifier: 0ZY11oJK5P2UqYXoNldF1mwnGMrgPPb0cu9XW/xh/Ls= Subject key identifier: 34:8A:00:57:C9:B8:9D:6C:E1:5F:B2:4F:0A:38:0F:9E:A9:E9:4E:50 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 138269B20CB4F3EE7279565E688BCADC303185F6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ecd4e407-1eb0-44f2-a3a7-d4714ca63aea.roa Signing time: Mon 21 Jul 2025 16:40:12 +0000 ROA not before: Mon 21 Jul 2025 16:40:12 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:108::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:82:69:b2:0c:b4:f3:ee:72:79:56:5e:68:8b:ca:dc:30:31:85:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 21 16:40:12 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=8d4af9e4c620b68451094d9117906f344289f30d90df837c30c29afd609566a9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:97:1a:a0:ef:de:bf:b7:07:62:63:31:90: 22:97:ab:ae:28:eb:03:3d:cd:aa:8b:56:2e:ed:f2: 4d:1b:0a:51:6d:29:de:ca:da:d4:53:6b:8a:55:ca: 05:7e:2b:2e:03:62:62:fd:69:95:4f:66:58:73:f2: 3b:fc:1f:26:e7:a6:02:4f:89:dc:aa:88:54:4b:9a: 46:54:40:f4:83:ed:e9:94:d3:03:1a:32:10:c9:3d: c2:2a:43:be:6f:da:b1:db:be:c1:b3:9a:45:09:5a: 98:ea:89:0f:1e:e3:e1:9b:8e:43:16:86:3c:be:03: 23:47:9a:0f:b2:01:30:75:a4:4d:bb:6d:a4:1d:ed: 5a:92:63:d3:ac:b3:35:aa:a7:40:f3:b8:f7:b2:6a: be:e6:b1:a2:5e:db:f4:b9:7a:22:b3:7c:8a:fe:bc: 33:58:0f:ea:56:12:01:d5:22:5e:0b:ad:30:14:3b: 20:59:d4:9e:6a:84:79:ac:ca:40:e1:f0:bf:64:33: a4:b2:52:42:c6:6f:24:91:04:e9:51:dd:ec:86:d3: 7d:d1:c7:52:17:71:8a:71:b0:d1:fd:91:62:8d:92: 16:cd:ad:8e:d1:6e:36:1a:58:d4:fa:9c:bd:cc:3b: 5a:2a:07:74:f3:67:80:40:53:20:55:39:85:6c:4f: e8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8A:00:57:C9:B8:9D:6C:E1:5F:B2:4F:0A:38:0F:9E:A9:E9:4E:50 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ecd4e407-1eb0-44f2-a3a7-d4714ca63aea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:108::/47 Signature Algorithm: sha256WithRSAEncryption 4a:37:35:60:fb:8b:9d:b9:f9:e5:09:e9:17:32:da:42:7f:e3: 5a:bf:08:f0:d6:e4:22:8b:15:dc:e1:6f:8c:67:81:0d:af:0e: 22:5e:51:b2:99:14:8f:ad:6e:cf:95:ac:00:04:ea:e0:a9:69: 2e:5c:fb:d5:40:b4:6e:ab:26:94:c2:b9:da:3e:19:9b:3b:0c: 19:c1:ac:83:2b:61:5d:93:ee:e8:a6:30:65:28:0e:5e:ec:96: f1:4d:40:93:c4:0c:42:d5:b1:91:2d:10:c8:0b:a1:44:81:38: a4:06:a3:b6:ff:78:6b:a4:63:fb:df:50:57:89:11:c7:c4:90: 38:2d:5c:f9:5b:d2:8b:8e:16:f4:8e:e6:55:0d:b7:60:55:ab: 69:e1:62:a2:2c:8d:b5:7d:19:37:64:a1:7a:41:d7:55:82:d1: 30:ce:bd:cb:e5:13:60:ac:1a:a5:e9:66:3b:ba:92:a0:49:29: 9b:3d:25:06:57:a1:3e:5d:00:16:97:66:2a:f0:dc:de:e7:44: e4:09:61:c4:e8:d1:db:a8:71:5c:ec:64:79:a4:fe:4d:ee:53: 3c:ed:6f:85:8e:3c:4c:ed:00:98:2a:52:11:30:c3:57:e1:0a: 49:75:48:56:49:fc:1e:64:65:17:dd:28:6f:d2:81:dc:7f:14: ac:91:bf:81 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE4Jpsgy08+5yeVZeaIvK3DAxhfYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzIxMTY0MDEyWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDRhZjllNGM2MjBiNjg0NTEwOTRkOTExNzkwNmYzNDQy ODlmMzBkOTBkZjgzN2MzMGMyOWFmZDYwOTU2NmE5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8x5caoO/ev7cHYmMxkCKXq64o6wM9zaqLVi7t8k0bClFt Kd7K2tRTa4pVygV+Ky4DYmL9aZVPZlhz8jv8HybnpgJPidyqiFRLmkZUQPSD7emU 0wMaMhDJPcIqQ75v2rHbvsGzmkUJWpjqiQ8e4+GbjkMWhjy+AyNHmg+yATB1pE27 baQd7VqSY9OsszWqp0DzuPeyar7msaJe2/S5eiKzfIr+vDNYD+pWEgHVIl4LrTAU OyBZ1J5qhHmsykDh8L9kM6SyUkLGbySRBOlR3eyG033Rx1IXcYpxsNH9kWKNkhbN rY7RbjYaWNT6nL3MO1oqB3TzZ4BAUyBVOYVsT+jVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNIoAV8m4nWzhX7JPCjgPnqnpTlAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VjZDRlNDA3LTFlYjAtNDRmMi1hM2E3LWQ0NzE0Y2E2M2FlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDwAQgwDQYJKoZIhvcNAQELBQADggEBAEo3NWD7i525+eUJ6Rcy2kJ/ 41q/CPDW5CKLFdzhb4xngQ2vDiJeUbKZFI+tbs+VrAAE6uCpaS5c+9VAtG6rJpTC udo+GZs7DBnBrIMrYV2T7uimMGUoDl7slvFNQJPEDELVsZEtEMgLoUSBOKQGo7b/ eGukY/vfUFeJEcfEkDgtXPlb0ouOFvSO5lUNt2BVq2nhYqIsjbV9GTdkoXpB11WC 0TDOvcvlE2CsGqXpZju6kqBJKZs9JQZXoT5dABaXZirw3N7nROQJYcTo0duocVzs ZHmk/k3uUzztb4WOPEztAJgqUhEww1fhCkl1SFZJ/B5kZRfdKG/Sgdx/FKyRv4E= -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:58 2025 by rpki-client