$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/02705a78-c949-405b-9b73-0ec922410e1e.roa File: 02705a78-c949-405b-9b73-0ec922410e1e.roa (raw, json) Hash identifier: eCUc1h08IxBX2tnp/itNuTQF1+tDHm7QnV3+ikR04/E= Subject key identifier: C4:07:E2:07:03:D8:3A:64:CF:72:62:7A:03:3C:84:AC:61:5F:F8:13 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7C5F89B73D3C513E72C44F840619EB32C26E5B12 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/02705a78-c949-405b-9b73-0ec922410e1e.roa Signing time: Mon 19 May 2025 19:30:08 +0000 ROA not before: Mon 19 May 2025 19:30:08 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f3:f100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5f:89:b7:3d:3c:51:3e:72:c4:4f:84:06:19:eb:32:c2:6e:5b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 19 19:30:08 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=1a6c241c83e6c4050213afcd60f24ff20b307b154d8cbec89037d7a903229fe9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:bf:ce:0f:c1:11:67:26:20:25:3f:09:74: ed:e2:a3:ce:1e:70:f7:32:04:51:d8:95:df:3a:1f: 0e:de:0c:aa:9e:5c:44:48:a3:4f:4d:50:a7:b9:47: 66:ef:d8:f2:33:89:6c:15:c4:3b:05:15:aa:d8:bd: 30:38:92:ff:a6:88:44:60:10:48:41:f3:30:9c:57: af:58:04:85:4d:eb:fe:71:83:f9:c2:4c:2e:af:75: d4:5b:6f:79:fe:31:25:d8:e0:0e:0f:b6:1f:5a:86: cb:b8:9d:3f:1d:67:db:fb:da:28:ce:37:e4:5d:d9: 07:c1:3d:45:64:cf:7a:54:ec:08:5c:af:ba:cf:bd: c0:22:a8:81:82:bd:14:14:7b:1c:ba:fe:98:a3:65: 19:30:d5:50:0b:ee:2d:8e:9b:bc:64:4b:1b:c0:38: 22:79:20:b7:b0:1d:29:8c:2d:09:b4:21:fb:bc:33: 9f:b8:cb:4c:9e:fd:45:f9:93:92:32:bf:e8:eb:ef: ce:fa:82:2f:2c:ed:47:c0:22:11:0a:ad:33:d3:0b: 2d:8b:45:b6:ca:35:62:39:fd:0f:08:f0:91:28:25: 07:45:32:e8:f7:b2:38:80:44:4c:02:38:d8:71:eb: cd:ea:58:f4:5d:af:ec:81:2a:10:40:95:4c:0a:05: 0f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:07:E2:07:03:D8:3A:64:CF:72:62:7A:03:3C:84:AC:61:5F:F8:13 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/02705a78-c949-405b-9b73-0ec922410e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f100::/40 Signature Algorithm: sha256WithRSAEncryption 64:13:69:98:ee:ad:a2:53:39:b4:04:a9:cd:59:b3:bc:c8:f4: 36:78:9e:e2:55:a3:aa:fe:b8:fd:1c:7a:2b:47:3a:66:50:c7: f6:72:6e:2a:cb:62:de:e3:34:f0:70:60:c0:89:c0:20:bc:81: 55:9f:28:1b:56:e6:d3:d3:42:19:9b:2d:b3:a5:53:71:21:55: d0:35:4a:c2:b1:4c:c6:46:dc:b0:9a:f6:b1:c0:c3:ed:fd:8c: 78:a9:b5:db:cd:2f:a9:51:af:8a:6c:60:13:cc:1e:db:3a:7d: a2:19:61:0a:3e:c5:d0:67:43:1b:54:91:aa:db:38:72:7e:5b: c1:36:79:34:8d:8d:f8:9d:2c:70:5e:ac:19:97:1c:b7:a5:8d: 37:71:84:f8:17:4c:45:74:4d:ef:e4:94:10:c5:2b:c1:97:08: d2:aa:98:16:10:32:9f:95:1c:6a:cf:4a:fe:ca:61:26:13:27: 67:14:b7:a3:f0:c3:15:1e:90:89:1b:83:6e:67:e8:05:a8:2c: 5e:9f:5f:97:7b:3e:d4:79:20:57:28:1b:f1:47:52:71:34:3e: 0d:86:8d:04:5a:8f:c1:b4:76:12:3e:24:fc:f1:e7:0d:7b:3f: 90:77:64:77:1f:0b:e2:63:e0:2d:4d:2d:3f:c2:0a:ee:26:49: 35:46:44:e3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfF+Jtz08UT5yxE+EBhnrMsJuWxIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTE5MTkzMDA4WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTZjMjQxYzgzZTZjNDA1MDIxM2FmY2Q2MGYyNGZmMjBi MzA3YjE1NGQ4Y2JlYzg5MDM3ZDdhOTAzMjI5ZmU5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4D7/OD8ERZyYgJT8JdO3io84ecPcyBFHYld86Hw7eDKqe XERIo09NUKe5R2bv2PIziWwVxDsFFarYvTA4kv+miERgEEhB8zCcV69YBIVN6/5x g/nCTC6vddRbb3n+MSXY4A4Pth9ahsu4nT8dZ9v72ijON+Rd2QfBPUVkz3pU7Ahc r7rPvcAiqIGCvRQUexy6/pijZRkw1VAL7i2Om7xkSxvAOCJ5ILewHSmMLQm0Ifu8 M5+4y0ye/UX5k5Iyv+jr7876gi8s7UfAIhEKrTPTCy2LRbbKNWI5/Q8I8JEoJQdF Muj3sjiAREwCONhx683qWPRdr+yBKhBAlUwKBQ/TAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUxAfiBwPYOmTPcmJ6AzyErGFf+BMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzAyNzA1YTc4LWM5NDktNDA1Yi05YjczLTBlYzkyMjQxMGUxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDz8TANBgkqhkiG9w0BAQsFAAOCAQEAZBNpmO6tolM5tASpzVmzvMj0 Nnie4lWjqv64/Rx6K0c6ZlDH9nJuKsti3uM08HBgwInAILyBVZ8oG1bm09NCGZst s6VTcSFV0DVKwrFMxkbcsJr2scDD7f2MeKm1280vqVGvimxgE8we2zp9ohlhCj7F 0GdDG1SRqts4cn5bwTZ5NI2N+J0scF6sGZcct6WNN3GE+BdMRXRN7+SUEMUrwZcI 0qqYFhAyn5Ucas9K/sphJhMnZxS3o/DDFR6QiRuDbmfoBagsXp9fl3s+1HkgVygb 8UdScTQ+DYaNBFqPwbR2Ej4k/PHnDXs/kHdkdx8L4mPgLU0tP8IK7iZJNUZE4w== -----END CERTIFICATE-----Generated at Mon Jun 2 16:52:27 2025 by rpki-client