$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa File: f555d010-5e5e-4c02-8722-e69da1514f97.roa (raw, json) Hash identifier: McqBIgWFjhKGw7QDz+Y40OIxkdLg7VB/J93d1roH1iM= Subject key identifier: D8:42:5F:2E:91:7A:BA:95:44:81:0A:38:9D:47:C8:2E:D5:E3:3C:00 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0A206F5EA75071A51FB2B25196F548AB015D95A4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa Signing time: Tue 05 Aug 2025 18:30:50 +0000 ROA not before: Tue 05 Aug 2025 18:30:50 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:20:6f:5e:a7:50:71:a5:1f:b2:b2:51:96:f5:48:ab:01:5d:95:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 5 18:30:50 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=9169907d8cf54d25b8ce82f0cced3768db85579c3508f086408bfb40da547bff, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:f3:f9:74:4f:a3:7b:1c:e9:cf:4f:91:78: a4:f5:92:d5:b4:00:13:52:5c:67:1c:e7:61:60:dc: f5:8d:08:e4:7f:d4:ea:d2:77:33:61:0c:dd:64:81: 0a:79:48:f0:df:46:04:ff:be:ef:a4:4f:b1:55:0c: 32:8b:3b:fa:2e:50:68:c2:28:ff:dd:69:e5:f5:05: 26:2f:85:e9:22:07:37:e9:29:66:76:36:2d:a9:23: d7:cf:61:ce:0f:34:3b:fc:5c:d1:f5:5c:9b:a9:e8: 10:ca:1f:b9:08:fa:6e:cf:10:7b:74:3a:d1:fe:c3: 63:da:27:95:62:20:26:cd:8d:ed:b9:0a:01:40:34: de:49:2c:75:be:44:bb:3d:51:b1:ee:ed:d9:71:d5: d8:00:f9:11:ad:19:5d:06:5e:80:34:2c:11:79:85: 39:75:92:68:45:94:96:ed:2c:ee:94:cb:61:e2:30: e3:53:06:de:e3:b4:a5:3a:3e:4d:b7:93:3e:c8:53: 77:e7:69:b7:99:7b:31:6c:23:d0:e7:f3:e7:d4:73: 84:5f:13:7a:3d:5f:a1:53:50:ab:ac:e8:18:a4:f5: 05:bf:82:f7:f3:76:e1:11:1c:db:63:db:1a:88:90: 64:4f:e6:03:5b:91:dd:30:ae:e4:70:f9:29:c4:96: e0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:42:5F:2E:91:7A:BA:95:44:81:0A:38:9D:47:C8:2E:D5:E3:3C:00 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:8000::/34 Signature Algorithm: sha256WithRSAEncryption 49:2b:00:5b:d1:bb:fa:9b:d8:64:ac:fb:04:65:c9:9f:ed:f4: 19:b4:6f:b8:19:b0:29:96:b0:63:81:31:87:6b:87:47:aa:b7: 05:05:c3:2e:50:8f:52:e8:b5:91:f9:fd:1e:ae:74:c1:b9:f5: 9d:03:aa:00:bd:fa:80:24:b2:9e:e3:d8:a1:e7:f1:9e:87:16: f1:03:fe:c1:80:ae:06:5a:66:17:52:ee:72:9d:5a:61:6f:94: a9:60:37:67:ae:b6:ae:03:e9:5d:e5:42:09:08:70:5f:11:02: f2:ef:45:80:aa:29:e2:a1:fe:42:2e:16:68:02:5f:0c:bb:25: b0:55:fd:6e:4a:1f:2e:cf:0d:2a:33:a9:ad:0d:08:12:d5:45: 84:ae:97:a6:36:ea:c0:c3:ec:e3:10:07:3f:19:34:68:58:26: e4:ed:32:17:ed:05:e5:46:cf:7b:c3:f8:59:d1:45:0b:76:62: 13:8a:a0:ab:67:2f:98:b2:97:c4:b8:eb:7a:0d:43:b3:b5:77: 5f:db:a0:6a:6b:0b:33:3c:d9:aa:58:5f:bd:13:51:56:10:72: dc:3a:b9:c9:a3:90:30:9a:3d:2b:ed:5b:46:66:92:e0:b5:57: 37:b5:8d:ea:44:d2:38:3a:37:a3:39:54:8d:7e:41:85:72:49: a5:68:a9:0d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCiBvXqdQcaUfsrJRlvVIqwFdlaQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODA1MTgzMDUwWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTY5OTA3ZDhjZjU0ZDI1YjhjZTgyZjBjY2VkMzc2OGRi ODU1NzljMzUwOGYwODY0MDhiZmI0MGRhNTQ3YmZmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnM/P5dE+jexzpz0+ReKT1ktW0ABNSXGcc52Fg3PWNCOR/ 1OrSdzNhDN1kgQp5SPDfRgT/vu+kT7FVDDKLO/ouUGjCKP/daeX1BSYvhekiBzfp KWZ2Ni2pI9fPYc4PNDv8XNH1XJup6BDKH7kI+m7PEHt0OtH+w2PaJ5ViICbNje25 CgFANN5JLHW+RLs9UbHu7dlx1dgA+RGtGV0GXoA0LBF5hTl1kmhFlJbtLO6Uy2Hi MONTBt7jtKU6Pk23kz7IU3fnabeZezFsI9Dn8+fUc4RfE3o9X6FTUKus6Bik9QW/ gvfzduERHNtj2xqIkGRP5gNbkd0wruRw+SnEluCzAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2EJfLpF6upVEgQo4nUfILtXjPAAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y1NTVkMDEwLTVlNWUtNGMwMi04NzIyLWU2OWRhMTUxNGY5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgYmAPD7gDANBgkqhkiG9w0BAQsFAAOCAQEASSsAW9G7+pvYZKz7BGXJn+30 GbRvuBmwKZawY4Exh2uHR6q3BQXDLlCPUui1kfn9Hq50wbn1nQOqAL36gCSynuPY oefxnocW8QP+wYCuBlpmF1Lucp1aYW+UqWA3Z662rgPpXeVCCQhwXxEC8u9FgKop 4qH+Qi4WaAJfDLslsFX9bkofLs8NKjOprQ0IEtVFhK6XpjbqwMPs4xAHPxk0aFgm 5O0yF+0F5UbPe8P4WdFFC3ZiE4qgq2cvmLKXxLjreg1Ds7V3X9ugamsLMzzZqlhf vRNRVhBy3Dq5yaOQMJo9K+1bRmaS4LVXN7WN6kTSODo3ozlUjX5BhXJJpWipDQ== -----END CERTIFICATE-----Generated at Wed Aug 6 13:14:00 2025 by rpki-client