$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa File: f555d010-5e5e-4c02-8722-e69da1514f97.roa (raw, json) Hash identifier: vD6mRspr/Em0Zj8iFw8lsF3fjc8dMGFJY7+/yQPZ0/0= Subject key identifier: 0D:26:51:B8:F8:92:5C:F5:DC:98:56:E6:D9:C4:9D:AB:61:DC:3C:26 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1C6726BAD5273CE1416C5D658A3B6E889911DB94 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa Signing time: Tue 20 May 2025 18:10:10 +0000 ROA not before: Tue 20 May 2025 18:10:10 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:67:26:ba:d5:27:3c:e1:41:6c:5d:65:8a:3b:6e:88:99:11:db:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:10:10 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=d40c1df816e31fc9543671fea36a6e16424b67bb4aa6168ab1351baf55533387, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:71:7e:64:51:6a:84:ab:cb:ab:a5:31:3c:7f: 96:31:48:2a:45:c9:86:64:47:06:2f:63:8e:a0:2e: 69:79:fc:9b:d0:4c:c3:a6:18:34:d5:cb:f9:25:4b: f3:e5:18:82:77:83:c2:84:99:b9:cf:e1:3b:b8:46: b4:1f:2b:96:ab:1d:a8:58:3e:a4:89:61:bd:e8:8b: e2:a0:d3:4f:c0:82:b4:91:15:c5:21:19:af:d8:2c: d6:be:4f:7c:11:a5:2d:8f:51:d6:ad:48:cd:14:dd: 41:88:c0:fe:92:97:84:8a:e8:af:c6:25:b3:dc:b2: 41:53:fc:07:55:0a:ad:91:cb:84:5d:81:7a:08:1d: dd:14:9f:d7:48:15:b4:82:d7:7b:36:92:02:cd:90: 55:a2:34:1d:84:be:fb:05:f7:6c:72:54:34:31:96: 9d:6a:79:81:f7:a9:90:ee:8a:5d:ce:9f:62:72:ae: 33:bb:2c:2f:3e:68:0e:3c:2b:5c:4f:39:57:4b:e7: 25:fc:fa:05:bf:ca:59:37:1f:83:37:41:98:a2:71: a8:f4:92:69:6d:e8:cd:2d:21:de:75:03:42:51:3f: 19:6e:13:13:b7:bf:4a:c3:99:3f:fd:a7:11:14:8c: 35:ec:ef:2a:40:0b:20:9e:78:45:ba:05:33:09:76: b6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:26:51:B8:F8:92:5C:F5:DC:98:56:E6:D9:C4:9D:AB:61:DC:3C:26 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:8000::/34 Signature Algorithm: sha256WithRSAEncryption 0f:51:1e:9b:17:ee:84:d3:56:72:0f:06:92:13:48:4a:b7:a1: c5:45:f0:5a:f4:bc:0a:5a:32:05:3f:7f:b5:b6:94:9a:54:ed: 70:4d:b8:e2:ee:1d:a2:14:f8:5a:79:88:df:fb:f5:b4:4b:50: 5d:6b:a4:e4:e5:da:6b:c5:bd:32:fb:79:fc:4e:e6:ec:cf:56: fb:33:c8:85:04:71:58:2b:09:20:ab:70:f1:76:bf:ba:9a:dc: 5d:be:48:f0:85:9f:95:bb:6f:97:00:3c:3e:6b:a8:bd:9a:66: eb:88:c9:d6:27:d0:78:b8:29:21:c5:4e:12:8b:d9:82:69:ed: 62:f1:86:1b:2d:b2:e1:6a:bd:a4:03:2f:22:ae:77:5f:d6:6b: 78:41:6e:fb:30:6a:21:53:02:45:40:f3:17:fa:c1:d4:d2:55: 5e:30:56:c0:55:18:4f:6b:4a:70:23:34:fb:ec:54:f4:4f:9a: bf:e7:a4:33:5d:b6:7a:27:5f:87:da:80:51:1f:c7:5b:81:dc: e4:78:21:20:44:e1:a5:b2:e8:5c:cd:dd:f8:97:29:97:9b:48: ce:4a:1d:69:8b:f6:fb:d4:c7:05:ee:03:c0:70:f6:ac:7d:05: df:ca:1c:bc:3a:14:69:fa:f8:34:d1:63:d3:64:c2:bd:4f:27: de:ef:df:5c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHGcmutUnPOFBbF1lijtuiJkR25QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgxMDEwWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDBjMWRmODE2ZTMxZmM5NTQzNjcxZmVhMzZhNmUxNjQy NGI2N2JiNGFhNjE2OGFiMTM1MWJhZjU1NTMzMzg3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTcX5kUWqEq8urpTE8f5YxSCpFyYZkRwYvY46gLml5/JvQ TMOmGDTVy/klS/PlGIJ3g8KEmbnP4Tu4RrQfK5arHahYPqSJYb3oi+Kg00/AgrSR FcUhGa/YLNa+T3wRpS2PUdatSM0U3UGIwP6Sl4SK6K/GJbPcskFT/AdVCq2Ry4Rd gXoIHd0Un9dIFbSC13s2kgLNkFWiNB2EvvsF92xyVDQxlp1qeYH3qZDuil3On2Jy rjO7LC8+aA48K1xPOVdL5yX8+gW/ylk3H4M3QZiicaj0kmlt6M0tId51A0JRPxlu ExO3v0rDmT/9pxEUjDXs7ypACyCeeEW6BTMJdrbjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUDSZRuPiSXPXcmFbm2cSdq2HcPCYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y1NTVkMDEwLTVlNWUtNGMwMi04NzIyLWU2OWRhMTUxNGY5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgYmAPD7gDANBgkqhkiG9w0BAQsFAAOCAQEAD1EemxfuhNNWcg8GkhNISreh xUXwWvS8CloyBT9/tbaUmlTtcE244u4dohT4WnmI3/v1tEtQXWuk5OXaa8W9Mvt5 /E7m7M9W+zPIhQRxWCsJIKtw8Xa/uprcXb5I8IWflbtvlwA8PmuovZpm64jJ1ifQ eLgpIcVOEovZgmntYvGGGy2y4Wq9pAMvIq53X9ZreEFu+zBqIVMCRUDzF/rB1NJV XjBWwFUYT2tKcCM0++xU9E+av+ekM122eidfh9qAUR/HW4Hc5HghIEThpbLoXM3d +Jcpl5tIzkodaYv2+9THBe4DwHD2rH0F38ocvDoUafr4NNFj02TCvU8n3u/fXA== -----END CERTIFICATE-----Generated at Sat Jun 14 06:53:24 2025 by rpki-client