$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa File: 37cee73e-f60c-422c-8edf-fbb308bfb117.roa (raw, json) Hash identifier: reXVY55dXTK1q4HzTCeneA1i2MhwzZdHEg1WblPXQ7s= Subject key identifier: CC:DD:1F:8C:CA:EB:F0:5F:2D:B1:82:40:5C:C1:E4:11:29:CF:02:5F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3E01F25A0192F6406DA1C5AF923A145B13BB66B0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa Signing time: Tue 20 May 2025 18:10:54 +0000 ROA not before: Tue 20 May 2025 18:10:54 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:01:f2:5a:01:92:f6:40:6d:a1:c5:af:92:3a:14:5b:13:bb:66:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:10:54 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=427825d1b77b03dc068923c3bb727d0b498c88bbd69adcbc81f9968fc3c83c1a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:9c:1c:bb:ab:b4:59:fb:58:69:2b:6c:c8: 1e:20:7a:39:95:b6:12:60:3b:72:af:89:6a:70:c8: 5d:30:ae:a2:63:00:60:9f:56:94:8f:8c:85:c8:a7: 52:db:40:5a:b1:cc:06:a5:3a:d9:65:81:b7:e1:80: 4f:53:a8:f9:d5:7c:30:5e:e7:fc:84:b6:6f:4b:03: 22:a6:ae:e9:e8:19:f4:e8:77:87:ce:8b:bf:cc:19: d6:89:35:72:7d:a7:56:23:cb:b2:eb:8b:56:a0:62: 61:3f:d1:6f:f6:2b:d3:cb:0b:9a:e5:84:d1:4e:4d: 48:b0:6b:f0:bd:2f:1b:90:b7:b4:27:cf:62:10:e1: ef:c7:04:4c:ba:d3:0f:80:ec:c2:93:32:d6:0d:ee: 5b:9a:79:32:34:2a:f3:32:78:ee:43:bb:ae:e7:08: 52:ac:de:c8:2f:7f:00:ee:7b:80:ff:f2:d1:c3:10: 58:92:0b:82:38:d6:90:a9:8f:68:24:78:ba:03:b3: 02:43:30:9d:e5:18:98:de:3c:3e:17:95:d7:fb:b5: d0:1c:79:a1:a8:3e:c0:af:31:8f:ba:36:1d:96:1c: 38:c1:8a:d4:7d:44:ae:f1:df:b7:de:31:b4:d3:d4: 58:d0:f9:25:62:13:57:9e:9b:96:af:3c:28:a8:df: 82:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DD:1F:8C:CA:EB:F0:5F:2D:B1:82:40:5C:C1:E4:11:29:CF:02:5F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e000::/40 Signature Algorithm: sha256WithRSAEncryption 7e:55:81:de:88:e5:b1:fd:1a:0a:c4:3d:6b:71:da:fe:22:fd: 79:86:b3:bb:63:9f:a5:62:6d:a7:34:9f:c2:0d:38:4a:c9:01: 4b:e5:43:71:ed:8e:a7:ff:44:a3:62:f2:75:02:9a:6a:f7:0f: a4:21:79:22:bd:93:f8:d2:e9:2f:dd:08:b9:97:c7:24:08:54: 0d:26:3a:a9:6a:06:9a:ee:ae:dd:ed:dd:25:b3:ad:98:92:cb: 66:6d:6d:5b:69:10:d0:d5:c3:40:76:e8:30:46:dd:90:55:ac: 8c:f2:26:49:11:b2:04:41:40:e4:c2:ad:30:ea:5d:26:33:db: b7:08:36:96:22:2a:13:19:f6:39:62:5b:22:0e:8f:c7:1d:89: 3c:8b:5e:e2:e2:27:bd:51:ee:d7:f6:74:ce:63:38:18:94:9c: 11:30:12:c7:e8:50:e1:6b:19:7e:97:dd:6f:94:67:44:f9:4e: 82:b8:75:7b:95:45:94:df:30:d6:16:1e:94:2f:7d:0c:e4:f3: 3f:24:e2:77:9f:3c:a0:94:14:b2:61:6e:05:6b:f4:4a:b0:e8: 8e:6a:42:87:24:49:c0:fc:ed:95:e7:3e:a3:00:fa:c7:3a:c4: 97:04:ab:2b:a7:49:3a:91:b3:a3:77:83:b3:63:4a:52:e5:69: 7f:e8:1e:be -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPgHyWgGS9kBtocWvkjoUWxO7ZrAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgxMDU0WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Mjc4MjVkMWI3N2IwM2RjMDY4OTIzYzNiYjcyN2QwYjQ5 OGM4OGJiZDY5YWRjYmM4MWY5OTY4ZmMzYzgzYzFhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrDZwcu6u0WftYaStsyB4gejmVthJgO3KviWpwyF0wrqJj AGCfVpSPjIXIp1LbQFqxzAalOtllgbfhgE9TqPnVfDBe5/yEtm9LAyKmrunoGfTo d4fOi7/MGdaJNXJ9p1Yjy7Lri1agYmE/0W/2K9PLC5rlhNFOTUiwa/C9LxuQt7Qn z2IQ4e/HBEy60w+A7MKTMtYN7luaeTI0KvMyeO5Du67nCFKs3sgvfwDue4D/8tHD EFiSC4I41pCpj2gkeLoDswJDMJ3lGJjePD4Xldf7tdAceaGoPsCvMY+6Nh2WHDjB itR9RK7x37feMbTT1FjQ+SViE1eem5avPCio34LjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUzN0fjMrr8F8tsYJAXMHkESnPAl8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM3Y2VlNzNlLWY2MGMtNDIyYy04ZWRmLWZiYjMwOGJmYjExNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74DANBgkqhkiG9w0BAQsFAAOCAQEAflWB3ojlsf0aCsQ9a3Ha/iL9 eYazu2OfpWJtpzSfwg04SskBS+VDce2Op/9Eo2LydQKaavcPpCF5Ir2T+NLpL90I uZfHJAhUDSY6qWoGmu6u3e3dJbOtmJLLZm1tW2kQ0NXDQHboMEbdkFWsjPImSRGy BEFA5MKtMOpdJjPbtwg2liIqExn2OWJbIg6Pxx2JPIte4uInvVHu1/Z0zmM4GJSc ETASx+hQ4WsZfpfdb5RnRPlOgrh1e5VFlN8w1hYelC99DOTzPyTid588oJQUsmFu BWv0SrDojmpChyRJwPztlec+owD6xzrElwSrK6dJOpGzo3eDs2NKUuVpf+gevg== -----END CERTIFICATE-----Generated at Fri Jun 6 03:53:37 2025 by rpki-client