$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e601690-d98c-4d0d-8f50-2f457decb102.roa File: 1e601690-d98c-4d0d-8f50-2f457decb102.roa (raw, json) Hash identifier: uPb7xHY31NWqYBDdfk32g/sN+Sdw10D3Y/rl3DHbvs4= Subject key identifier: 77:61:F9:89:AF:E9:AC:79:DA:DD:40:DC:B2:AD:37:32:7A:4E:60:FF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4FAD75F3CD5600BE6A74A77832E423F06D7C734B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e601690-d98c-4d0d-8f50-2f457decb102.roa Signing time: Tue 20 May 2025 18:00:21 +0000 ROA not before: Tue 20 May 2025 18:00:21 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ad:75:f3:cd:56:00:be:6a:74:a7:78:32:e4:23:f0:6d:7c:73:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:00:21 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=8c77cdf20d2980c3abb05932abf5b0383746b645de227b6b6add17489377d07a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bd:bd:0b:f0:ea:67:10:9d:cb:4b:2b:2f:66: a8:22:94:f5:01:13:84:6f:6d:b5:e9:42:af:80:b3: f7:d1:92:46:2b:c5:75:da:59:51:99:ab:48:58:83: b1:81:9c:87:4b:58:7e:89:1b:1c:c0:b9:e8:c0:f9: 8b:07:70:e5:8e:33:c7:e8:20:f2:24:d1:7a:7d:81: e0:d5:d2:61:16:61:1a:8f:21:5e:eb:f7:f9:12:1f: 2f:5c:84:c0:ce:ab:30:9e:c1:40:d1:91:b8:90:c9: 3a:be:e1:04:91:49:46:b7:93:bf:21:0c:2f:30:ba: 64:d0:03:6d:cc:09:32:f1:da:bf:9a:0c:e0:c1:f8: cb:b1:3c:3b:8c:c1:63:d4:68:88:bd:b8:3f:b2:34: 36:f0:42:5e:0d:cb:70:dc:87:2d:1a:2b:73:6f:fa: fc:9d:01:b6:ac:e7:d8:fa:b6:5b:3f:d3:15:21:ab: 1a:3c:fd:29:34:51:ef:79:44:5b:45:d8:d3:b6:06: 74:fc:6c:4c:96:51:94:f8:ef:7e:46:d5:b0:ca:16: 23:02:7d:70:63:8a:3f:46:94:90:fd:fe:6f:98:5f: 77:e6:b7:a7:25:85:70:93:ac:82:7a:57:75:ed:05: 73:8d:aa:f8:c9:fd:eb:e7:61:8a:03:8b:d2:7f:4d: 45:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:61:F9:89:AF:E9:AC:79:DA:DD:40:DC:B2:AD:37:32:7A:4E:60:FF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e601690-d98c-4d0d-8f50-2f457decb102.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1000::/48 Signature Algorithm: sha256WithRSAEncryption 60:fb:c4:f2:3b:24:37:8d:a4:41:bc:97:29:3c:28:07:42:07: 5b:bf:82:bd:52:98:88:3a:dc:e2:de:79:81:80:ab:e2:cc:5b: f9:00:15:32:2d:1f:30:b9:2a:52:13:f6:87:1d:81:27:a0:a4: 3e:82:5f:0e:8e:53:70:ce:74:16:f9:86:0a:bd:0b:73:1b:5c: 67:58:57:ed:de:f4:70:d7:19:16:c3:d7:ab:23:38:9f:83:91: 23:80:b7:8c:96:ac:1b:61:b2:80:c5:b9:79:71:3c:a1:c4:32: 90:a4:43:e7:cd:9a:07:12:57:19:03:0a:7f:d1:e4:7a:73:37: dd:c9:ab:2b:35:5e:91:f0:3c:ba:45:b9:40:ce:54:70:93:20: fd:64:6a:43:8e:33:fd:8b:d2:cf:c6:68:09:d4:db:2d:bd:dd: be:34:46:78:27:9d:a4:b0:d2:76:c1:b2:fb:99:39:e0:47:e6: 79:82:17:15:30:2f:88:cf:0b:84:b0:eb:cd:0f:a0:78:7c:ef: d2:ab:14:d8:e1:6e:91:a2:f2:2d:a8:3e:ce:97:28:df:ce:84: 60:a0:e4:a9:f7:f2:e1:fc:79:eb:82:52:5c:65:78:a8:5b:43: a2:64:44:e4:9e:cb:5f:81:eb:64:87:3e:45:e8:0a:27:13:6e: 87:e9:72:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT611881WAL5qdKd4MuQj8G18c0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgwMDIxWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Yzc3Y2RmMjBkMjk4MGMzYWJiMDU5MzJhYmY1YjAzODM3 NDZiNjQ1ZGUyMjdiNmI2YWRkMTc0ODkzNzdkMDdhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNvb0L8OpnEJ3LSysvZqgilPUBE4RvbbXpQq+As/fRkkYr xXXaWVGZq0hYg7GBnIdLWH6JGxzAuejA+YsHcOWOM8foIPIk0Xp9geDV0mEWYRqP IV7r9/kSHy9chMDOqzCewUDRkbiQyTq+4QSRSUa3k78hDC8wumTQA23MCTLx2r+a DODB+MuxPDuMwWPUaIi9uD+yNDbwQl4Ny3Dchy0aK3Nv+vydAbas59j6tls/0xUh qxo8/Sk0Ue95RFtF2NO2BnT8bEyWUZT4735G1bDKFiMCfXBjij9GlJD9/m+YX3fm t6clhXCTrIJ6V3XtBXONqvjJ/evnYYoDi9J/TUWrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUd2H5ia/prHna3UDcsq03MnpOYP8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFlNjAxNjkwLWQ5OGMtNGQwZC04ZjUwLTJmNDU3ZGVjYjEwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwEAAwDQYJKoZIhvcNAQELBQADggEBAGD7xPI7JDeNpEG8lyk8KAdC B1u/gr1SmIg63OLeeYGAq+LMW/kAFTItHzC5KlIT9ocdgSegpD6CXw6OU3DOdBb5 hgq9C3MbXGdYV+3e9HDXGRbD16sjOJ+DkSOAt4yWrBthsoDFuXlxPKHEMpCkQ+fN mgcSVxkDCn/R5HpzN93Jqys1XpHwPLpFuUDOVHCTIP1kakOOM/2L0s/GaAnU2y29 3b40RngnnaSw0nbBsvuZOeBH5nmCFxUwL4jPC4Sw680PoHh879KrFNjhbpGi8i2o Ps6XKN/OhGCg5Kn38uH8eeuCUlxleKhbQ6JkROSey1+B62SHPkXoCicTbofpcso= -----END CERTIFICATE-----Generated at Sat Jun 7 11:54:19 2025 by rpki-client