$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c005aeb-f132-4bb2-a865-90077d8d5e49.roa File: 2c005aeb-f132-4bb2-a865-90077d8d5e49.roa (raw, json) Hash identifier: ob5EPCEFFLJ/BaoGeagB32sirPnxV52cYHfgoqfV9kc= Subject key identifier: 82:8B:6E:04:84:7C:90:38:E2:E2:F3:77:F6:73:83:3F:C6:47:73:68 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 45AACF85A7266224BFD6DC1E1BAAFFE21EA119B6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c005aeb-f132-4bb2-a865-90077d8d5e49.roa Signing time: Sat 31 May 2025 01:06:55 +0000 ROA not before: Sat 31 May 2025 01:06:55 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:10a::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:aa:cf:85:a7:26:62:24:bf:d6:dc:1e:1b:aa:ff:e2:1e:a1:19:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 31 01:06:55 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=3848bbe5580bd48ebb012cb4502801cc71bf5d2db459f4fb11263f0284910610, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:d5:ea:63:e1:6a:c3:ad:3e:49:49:a7:d9: 3f:e1:04:43:a4:64:23:5c:57:55:64:fb:e6:b7:64: 77:9f:77:fa:d1:2e:bb:fb:d5:23:aa:03:f2:16:04: 42:0a:11:03:60:e6:6f:b3:51:8d:9a:98:c4:d7:cc: e0:b5:88:50:be:35:4b:97:5c:1a:2c:c6:1b:57:b9: a5:e6:47:de:29:48:eb:95:ec:6c:ae:50:5a:11:32: 5d:4e:02:be:94:7c:cd:f8:38:c9:7e:7d:6e:40:dd: d6:ed:76:38:22:6e:9f:5a:68:13:b6:15:a0:38:57: fb:e4:74:39:90:da:8f:87:37:52:17:94:55:e4:46: 30:ba:df:9c:a0:4c:9f:6f:66:7f:c6:a5:48:9a:71: b7:dd:de:2b:1f:c2:64:36:3c:47:e6:6c:49:96:f2: ab:83:64:7b:66:cc:6c:df:62:3b:f1:54:00:ab:c6: 6f:dc:04:90:88:c2:88:ce:8b:b4:41:a6:a3:be:99: ee:f8:7f:3f:e3:86:0a:94:1a:88:3a:72:f2:01:61: 50:36:d3:9d:7a:a0:33:8d:90:fc:97:7a:58:f3:a2: f5:0f:43:5c:3f:9b:2a:72:eb:7f:63:0c:c6:1e:bb: c7:8d:01:ac:14:6a:8c:52:df:b6:a0:ca:de:68:bc: 29:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8B:6E:04:84:7C:90:38:E2:E2:F3:77:F6:73:83:3F:C6:47:73:68 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c005aeb-f132-4bb2-a865-90077d8d5e49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:10a::/47 Signature Algorithm: sha256WithRSAEncryption a6:67:8f:ed:07:5e:53:cd:eb:6c:93:aa:1f:cb:7c:4b:2c:52: f3:85:4b:ad:e9:9c:92:2d:1b:89:5d:61:c4:e4:82:64:9e:9a: e6:92:48:c1:4f:29:75:e5:ed:4a:32:4d:16:2b:8f:24:6d:81: c8:5c:69:a0:bd:e4:ec:6a:4d:c8:a5:bd:1d:23:bb:53:f9:ce: 64:8a:ec:b3:7d:f2:4a:7c:74:1c:78:a5:f7:d6:de:11:a7:ca: 65:f3:f5:4f:0c:2e:e6:a2:2d:15:79:c7:f5:aa:51:ac:8e:5f: e4:70:e4:4a:da:6b:3c:41:d4:ca:11:99:e1:29:82:44:a8:81: 5a:cf:1b:11:4e:50:52:52:3e:ef:98:c9:42:d9:2d:d8:54:29: e0:20:f1:2f:89:cf:94:21:ea:fa:38:a2:13:a7:e4:be:b6:ca: 4d:25:5e:cb:b2:de:c2:52:4f:c7:59:91:0f:c3:ff:49:09:42: b7:41:c8:0d:2a:c1:19:44:44:1a:6c:b3:d8:40:b9:6b:60:ed: 17:d1:a1:e2:bd:ae:69:59:f8:3b:72:3c:ae:bf:b8:ff:8d:ea: 4c:ea:a6:78:64:7a:a6:01:88:8b:06:5b:a5:a4:9a:cd:3a:ae: 1f:1b:e6:cf:82:4a:67:aa:10:c2:02:80:cc:45:a3:80:91:ef: 22:d8:25:45 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURarPhacmYiS/1tweG6r/4h6hGbYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTMxMDEwNjU1WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzODQ4YmJlNTU4MGJkNDhlYmIwMTJjYjQ1MDI4MDFjYzcx YmY1ZDJkYjQ1OWY0ZmIxMTI2M2YwMjg0OTEwNjEwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsdNXqY+Fqw60+SUmn2T/hBEOkZCNcV1Vk++a3ZHefd/rR Lrv71SOqA/IWBEIKEQNg5m+zUY2amMTXzOC1iFC+NUuXXBosxhtXuaXmR94pSOuV 7GyuUFoRMl1OAr6UfM34OMl+fW5A3dbtdjgibp9aaBO2FaA4V/vkdDmQ2o+HN1IX lFXkRjC635ygTJ9vZn/GpUiacbfd3isfwmQ2PEfmbEmW8quDZHtmzGzfYjvxVACr xm/cBJCIwojOi7RBpqO+me74fz/jhgqUGog6cvIBYVA20516oDONkPyXeljzovUP Q1w/mypy639jDMYeu8eNAawUaoxS37agyt5ovCnHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgotuBIR8kDji4vN39nODP8ZHc2gwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzJjMDA1YWViLWYxMzItNGJiMi1hODY1LTkwMDc3ZDhkNWU0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDwAQowDQYJKoZIhvcNAQELBQADggEBAKZnj+0HXlPN62yTqh/LfEss UvOFS63pnJItG4ldYcTkgmSemuaSSMFPKXXl7UoyTRYrjyRtgchcaaC95OxqTcil vR0ju1P5zmSK7LN98kp8dBx4pffW3hGnymXz9U8MLuaiLRV5x/WqUayOX+Rw5Era azxB1MoRmeEpgkSogVrPGxFOUFJSPu+YyULZLdhUKeAg8S+Jz5Qh6vo4ohOn5L62 yk0lXsuy3sJST8dZkQ/D/0kJQrdByA0qwRlERBpss9hAuWtg7RfRoeK9rmlZ+Dty PK6/uP+N6kzqpnhkeqYBiIsGW6Wkms06rh8b5s+CSmeqEMICgMxFo4CR7yLYJUU= -----END CERTIFICATE-----Generated at Mon Jun 2 16:47:29 2025 by rpki-client