$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa File: 39b45593-f3f3-4a2e-aa3a-895815db366a.roa (raw, json) Hash identifier: +5XgAH1PYBGdWka0rZxa1WVW1bAVvltLRmiGROUvtaM= Subject key identifier: F9:0C:AD:54:E5:A8:0F:1F:EA:29:35:34:7D:C8:59:EE:55:52:15:79 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 52CFD2B2B8F224CEF64B7C132C7783F20642BF8C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa Signing time: Tue 20 May 2025 18:20:14 +0000 ROA not before: Tue 20 May 2025 18:20:14 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f000::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cf:d2:b2:b8:f2:24:ce:f6:4b:7c:13:2c:77:83:f2:06:42:bf:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 20 18:20:14 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=a3853f42d8666b8494f61ec9c6aed835df1e29a29dfb3495cdf1cd3729e76308, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:5b:f7:7f:b7:cd:b6:9b:8a:37:7b:23:65: 3a:24:db:9b:18:77:27:f4:1a:10:85:1d:47:29:a5: 1b:ac:01:9a:d0:25:6a:8d:76:e1:ee:a1:34:1b:18: 8f:64:62:3f:0d:14:e7:28:e7:6a:6c:db:e8:fa:d5: 5f:58:2d:70:73:5b:da:ae:18:c7:cf:c5:fa:69:38: 53:55:ad:07:11:8b:89:cb:ff:c5:75:6f:6d:bf:f9: d7:28:18:6f:06:07:e3:ae:83:0b:0b:18:35:89:5b: 4f:58:f6:7e:1f:0e:5d:72:73:8d:e5:bd:58:33:cd: d0:6d:6e:94:73:22:a8:85:ba:ea:06:36:b9:e8:35: 0d:49:76:5f:1a:f8:75:cc:68:67:e1:f7:38:7c:22: b8:64:7a:5b:19:7f:2c:a7:98:2e:93:69:a5:cd:d6: 5e:9e:a8:5b:c3:eb:85:10:37:04:96:7a:59:99:5f: 18:ae:76:7c:e3:86:95:23:c6:fb:cb:dd:4d:be:43: fd:fd:e3:3c:16:d6:0b:1d:c8:b8:7f:de:59:49:96: f7:91:99:6c:2e:3c:60:fa:ec:61:71:1d:90:d8:b1: 1f:07:d8:80:17:a1:1c:0c:2b:54:c1:cc:79:71:64: 8a:c2:6c:0a:42:66:40:4a:79:0f:74:8e:b8:4a:99: fd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0C:AD:54:E5:A8:0F:1F:EA:29:35:34:7D:C8:59:EE:55:52:15:79 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/39b45593-f3f3-4a2e-aa3a-895815db366a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f000::/39 Signature Algorithm: sha256WithRSAEncryption 22:3e:7c:07:12:83:09:db:57:25:c9:6b:8e:ec:cb:18:43:1b: 37:cf:bd:db:8d:9a:3e:80:e7:69:02:72:e6:c1:81:45:ef:da: 6b:80:4c:56:33:1d:d2:3c:65:2c:32:05:ce:8e:64:74:fa:14: cd:93:e2:22:98:75:45:93:b6:e7:e5:26:ec:2f:0a:ec:2e:2f: f8:71:93:79:64:28:e7:81:2d:a3:18:89:8f:64:26:b0:95:ad: 57:06:bc:36:eb:c2:f6:a3:b9:7a:af:20:7c:28:c6:66:f9:12: 17:01:16:75:a0:20:7d:4b:e1:53:7e:b5:85:67:be:44:70:73: f3:e1:ab:b5:15:0b:17:76:48:32:15:ef:a0:2b:a6:b3:30:4a: be:79:2e:9b:5e:4a:fe:a9:4e:3c:d6:62:bb:8e:0f:c1:3c:0d: 4b:7a:06:9a:48:fe:62:a6:d1:fe:f6:88:76:f7:8a:d5:32:2b: 81:18:e5:1a:49:04:d0:cb:05:0f:ec:a9:8b:46:4b:c3:4f:78: ce:4c:ff:d7:3f:4a:de:1d:62:23:6e:38:1c:46:cd:e9:ee:99: 2d:6c:56:30:6b:f8:7b:8d:01:a3:94:25:39:3e:48:c2:a4:85: 4e:b6:1f:d8:12:64:23:d6:44:1d:30:ef:a4:56:47:03:7a:bc: 6e:10:8d:4f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUUs/SsrjyJM72S3wTLHeD8gZCv4wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwNTIwMTgyMDE0WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzg1M2Y0MmQ4NjY2Yjg0OTRmNjFlYzljNmFlZDgzNWRm MWUyOWEyOWRmYjM0OTVjZGYxY2QzNzI5ZTc2MzA4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkmFv3f7fNtpuKN3sjZTok25sYdyf0GhCFHUcppRusAZrQ JWqNduHuoTQbGI9kYj8NFOco52ps2+j61V9YLXBzW9quGMfPxfppOFNVrQcRi4nL /8V1b22/+dcoGG8GB+OugwsLGDWJW09Y9n4fDl1yc43lvVgzzdBtbpRzIqiFuuoG NrnoNQ1Jdl8a+HXMaGfh9zh8IrhkelsZfyynmC6TaaXN1l6eqFvD64UQNwSWelmZ XxiudnzjhpUjxvvL3U2+Q/394zwW1gsdyLh/3llJlveRmWwuPGD67GFxHZDYsR8H 2IAXoRwMK1TBzHlxZIrCbApCZkBKeQ90jrhKmf21AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+QytVOWoDx/qKTU0fchZ7lVSFXkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM5YjQ1NTkzLWYzZjMtNGEyZS1hYTNhLTg5NTgxNWRiMzY2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAPAAADANBgkqhkiG9w0BAQsFAAOCAQEAIj58BxKDCdtXJclrjuzLGEMb N8+9242aPoDnaQJy5sGBRe/aa4BMVjMd0jxlLDIFzo5kdPoUzZPiIph1RZO25+Um 7C8K7C4v+HGTeWQo54EtoxiJj2QmsJWtVwa8NuvC9qO5eq8gfCjGZvkSFwEWdaAg fUvhU361hWe+RHBz8+GrtRULF3ZIMhXvoCumszBKvnkum15K/qlOPNZiu44PwTwN S3oGmkj+YqbR/vaIdveK1TIrgRjlGkkE0MsFD+ypi0ZLw094zkz/1z9K3h1iI244 HEbN6e6ZLWxWMGv4e40Bo5QlOT5IwqSFTrYf2BJkI9ZEHTDvpFZHA3q8bhCNTw== -----END CERTIFICATE-----Generated at Fri Jun 6 19:32:39 2025 by rpki-client