$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16b22ea8-4a7c-431a-bd74-8a2cceaaaf4a.roa File: 16b22ea8-4a7c-431a-bd74-8a2cceaaaf4a.roa (raw, json) Hash identifier: 8xfBe5sdWE4TQkQyIg3l73r7DGwHym4A++GfFOJ1xME= Subject key identifier: 7E:8D:7E:D3:4F:4C:38:B2:47:CC:C0:89:F5:78:0B:4A:39:6A:18:DB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0E83B2EEE1A265CF800982D2559591D30DEC5661 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16b22ea8-4a7c-431a-bd74-8a2cceaaaf4a.roa Signing time: Mon 14 Jul 2025 15:30:48 +0000 ROA not before: Mon 14 Jul 2025 15:30:48 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f3:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:83:b2:ee:e1:a2:65:cf:80:09:82:d2:55:95:91:d3:0d:ec:56:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 14 15:30:48 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=4cd12fa7a27c7ceb3cbed746339148a32fed7397d1809af0aff2f7d0a49321bf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:b3:1f:7a:b0:f7:54:cf:49:fe:e8:6f:6a: f1:17:43:b6:c9:f5:8d:54:d7:7c:7b:64:8b:a3:3f: 1f:8d:76:b8:5d:bf:a5:8f:43:ef:cd:b8:eb:11:82: df:27:34:20:cd:cb:42:9b:68:3b:dd:50:38:6a:e6: af:f2:44:e7:ea:fd:a2:46:fa:c4:c7:05:f8:06:6a: 62:6f:67:f3:18:78:b8:22:3f:86:d7:1b:dd:df:06: 1b:92:cb:46:8f:8f:27:17:f5:25:3d:96:df:08:52: 3c:3c:3c:a9:d1:fd:08:11:2b:c8:1e:4c:09:56:ee: be:31:d6:c8:76:a9:f3:ee:6d:e1:8a:c2:e6:86:42: 55:08:89:a3:bb:94:ed:85:a7:8f:a5:98:2c:32:e0: ab:10:ea:51:43:3d:f3:e7:0e:ab:be:58:42:c8:15: a8:64:d6:23:5d:3f:96:69:94:0b:46:15:e5:0d:5e: 66:a2:82:55:3a:23:b9:d8:9e:82:81:25:b0:f2:38: 97:70:a1:70:9c:2f:ca:e4:88:fd:d6:59:e8:0b:57: e3:bd:0a:15:5d:e3:0e:af:62:76:58:31:2d:79:67: 56:e2:6d:10:42:3f:ee:0a:e8:fd:ce:d0:a1:7a:66: b5:18:50:b3:92:d3:fb:6b:17:1b:82:b3:48:80:66: e3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8D:7E:D3:4F:4C:38:B2:47:CC:C0:89:F5:78:0B:4A:39:6A:18:DB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16b22ea8-4a7c-431a-bd74-8a2cceaaaf4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f000::/44 Signature Algorithm: sha256WithRSAEncryption 1a:2f:95:28:86:2e:38:86:98:ce:e5:ce:19:ad:11:1a:e1:bd: 1d:0a:9d:c2:78:e6:5c:42:c3:e1:c1:3a:f5:54:7a:0c:b0:82: 2b:53:1d:34:1a:de:fa:e9:6d:e2:08:66:19:e6:0d:26:d2:f5: cf:5f:47:12:10:59:8a:22:00:9e:b7:11:f8:66:55:df:d4:2a: 1b:e6:8b:c6:42:d5:d8:78:70:55:10:03:e1:38:75:e3:96:35: ec:3b:3b:e9:9b:f7:0d:ba:50:66:98:59:b9:c1:eb:b9:9e:cc: 96:26:e1:ba:25:a8:81:5e:fe:13:bc:a9:d9:a2:d6:1a:41:ac: ba:26:3b:d7:cd:e9:b1:8c:ba:31:ac:5d:e2:83:b9:21:d9:f1: 46:8a:33:ac:99:01:4c:b8:5a:7e:a5:38:2d:fb:67:b7:40:74: 5f:a6:c2:da:d8:4f:d4:d9:6e:0b:45:9b:94:f0:e3:d9:77:4c: 0f:24:45:33:69:50:8c:15:03:54:64:d1:11:f3:5e:dd:a3:a1: 19:fd:72:d7:41:4e:6e:ac:51:60:7c:50:cd:8e:98:cb:b7:5e: 5b:37:12:43:d9:af:52:90:2d:6f:cb:c1:95:19:bf:f7:35:dd: cd:15:19:34:c0:d0:76:c2:88:41:45:15:02:6f:fe:de:da:aa: d4:17:bd:ad -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDoOy7uGiZc+ACYLSVZWR0w3sVmEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNzE0MTUzMDQ4WhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2QxMmZhN2EyN2M3Y2ViM2NiZWQ3NDYzMzkxNDhhMzJm ZWQ3Mzk3ZDE4MDlhZjBhZmYyZjdkMGE0OTMyMWJmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDavLMferD3VM9J/uhvavEXQ7bJ9Y1U13x7ZIujPx+Ndrhd v6WPQ+/NuOsRgt8nNCDNy0KbaDvdUDhq5q/yROfq/aJG+sTHBfgGamJvZ/MYeLgi P4bXG93fBhuSy0aPjycX9SU9lt8IUjw8PKnR/QgRK8geTAlW7r4x1sh2qfPubeGK wuaGQlUIiaO7lO2Fp4+lmCwy4KsQ6lFDPfPnDqu+WELIFahk1iNdP5ZplAtGFeUN XmaiglU6I7nYnoKBJbDyOJdwoXCcL8rkiP3WWegLV+O9ChVd4w6vYnZYMS15Z1bi bRBCP+4K6P3O0KF6ZrUYULOS0/trFxuCs0iAZuNjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfo1+009MOLJHzMCJ9XgLSjlqGNswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE2YjIyZWE4LTRhN2MtNDMxYS1iZDc0LThhMmNjZWFhYWY0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDz8AAwDQYJKoZIhvcNAQELBQADggEBABovlSiGLjiGmM7lzhmtERrh vR0KncJ45lxCw+HBOvVUegywgitTHTQa3vrpbeIIZhnmDSbS9c9fRxIQWYoiAJ63 EfhmVd/UKhvmi8ZC1dh4cFUQA+E4deOWNew7O+mb9w26UGaYWbnB67mezJYm4bol qIFe/hO8qdmi1hpBrLomO9fN6bGMujGsXeKDuSHZ8UaKM6yZAUy4Wn6lOC37Z7dA dF+mwtrYT9TZbgtFm5Tw49l3TA8kRTNpUIwVA1Rk0RHzXt2joRn9ctdBTm6sUWB8 UM2OmMu3Xls3EkPZr1KQLW/LwZUZv/c13c0VGTTA0HbCiEFFFQJv/t7aqtQXva0= -----END CERTIFICATE-----Generated at Mon Jul 21 23:22:52 2025 by rpki-client